Privacy policy

Last Updated: 1 October 2025

1. Purpose of Processing Personal Data

Evlo Company (“we”, “our”, “us”) processes personal data for the following purposes:

  • Managing membership registration, identity verification, prevention of fraudulent use, customer inquiries, notifications, and customer support.

  • Providing products and services, including order processing, payment, delivery, exchanges, refunds, and personalized services.

  • Using information provided during customer inquiries for customer support, service improvement, operations, and analysis.

  • Ensuring service stability, security enhancement, error handling, internal testing, quality improvement, and analytics.

  • Providing marketing communications and personalized offers (with prior consent).

  • Fulfilling legal obligations and responding to complaints or disputes.


2. Categories of Personal Data & Collection Methods

We process the following categories of personal data:

  • User Identification Data: name, date of birth, ID information, images provided by users

  • Contact Information: email address, phone number, shipping/billing address

  • Purchase & Service Data: order history, payment records, delivery information, refund/return history, service usage

  • Online Activity & Device Data: IP address, log data, cookies, device/technical information

  • Other Information Provided by Users: inquiry details, information necessary to provide personalized services

Data is collected through our website, customer support channels, email, phone, third-party login (e.g., Kakao Login), and automated tools such as cookies.

3. Retention of Personal Data

  • Membership data: retained until account deletion.

  • Order, payment, and delivery data: retained until completion of transaction and settlement.

  • Records required by law:

    • Contract, payment, and withdrawal records: 5 years

    • Complaint and dispute records: 3 years

    • Log records: 3 months

Data is deleted without delay once retention periods expire.


4. Children’s Data

We do not knowingly collect personal data from children under 14.
 If such data is collected inadvertently, it will be deleted immediately.


5. Cross-Border Transfer of Personal Data

We transfer personal data overseas for service operation as follows:

Shopify Inc.

  • Countries: Canada, United States

  • Data Transferred: membership information, order data, payment records, service usage

  • Timing & Method: transferred upon account creation or order placement via encrypted transmission

  • Purpose: website hosting, order processing, payment management, customer support

  • Retention: until account deletion or termination of outsourcing agreement

  • Contact: privacy@shopify.com

  • Legal Basis: Article 28-8(1)(3) of the Personal Information Protection Act of Korea

PayPal Holdings, Inc.

  • Countries: United States and other regions

  • Data Transferred: order number, purchased items, customer name, email, country code, payment amount, payment method

  • Timing & Method: transferred securely when customers attempt international payments

  • Purpose: payment authorization and settlement

  • Retention: statutory retention period for financial records

  • Contact: dpo@paypal.com

  • Legal Basis: Article 28-8(1)(1) of the Personal Information Protection Act (consent)

International Logistics Providers

(e.g., UPS, YunExpress, SF Express, Aramex, Sagawa)

• Countries: destination country of shipment
• Data Transferred: order number, purchased items, recipient name, address, phone number
• Timing & Method: transferred when international shipping is requested
• Purpose: international delivery and shipment tracking
• Retention: until completion of delivery and expiration of internal retention periods
• Legal Basis: Article 28-8(1)(1) (consent)

Right to Refuse Transfer

Users may refuse consent for cross-border data transfer.
 However, international payment and delivery services may not be available if consent is withdrawn.
 For withdrawal of consent or inquiries, contact: support@evloseoul.com.

6. Outsourced Processing

We outsource certain operations to:

• WiseCommerce Co., Ltd.: order information management and delivery support
• CJ Logistics: domestic delivery and returns
• Eximbay Co., Ltd.: payment processing and settlement


All processors must handle data safely in accordance with law.

7. Data Destruction

Data is destroyed without delay once retention periods expire.
 Electronic data is permanently deleted; paper documents are shredded or incinerated.

8. User Rights

Users may request access, correction, deletion, or suspension of processing of their personal data.
 Requests may be submitted to support@evloseoul.com.


9. Cookies

We use cookies to provide personalized services.
 Users may refuse cookies through browser settings, but some features may be limited.

10. Data Protection Officer

DPO: Sujeong Nam
Email: crystalnam@evloseoul.com
Phone: +82 70-7954-3175

11. Changes to This Policy

This policy takes effect on the date indicated above.
 Updates will be posted on our website.