Datenschutzerklärung
Last updated: October 22, 2026
HANAVALLE is owned and operated by TIANMU LLC ("HANAVALLE", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit www.hanavalle.com , purchase products, create an account, subscribe to marketing communications, or contact our customer support team.
Our online store is powered by Shopify. We use technology and service providers to operate our business, process orders, provide customer service, and support permitted marketing activities.
Please review this policy to understand our data practices and the privacy choices available to you.
1. Information We Collect
We may collect personal information directly from you, automatically through your use of our website, and from service providers involved in operating our store.
1.1 Contact and Account Information
- Full name.
- Email address.
- Telephone number.
- Billing and shipping addresses.
- Customer account identifiers, preferences, and account activity.
1.2 Order and Transaction Information
- Products ordered and purchase history.
- Shopping cart and checkout information.
- Order numbers and transaction records.
- Payment status and payment references.
- Shipping and tracking details.
- Returns, refunds, and customer inquiries.
Payments are handled through payment service providers. We generally receive transaction details such as payment status and limited payment references rather than full card credentials.
1.3 Device and Usage Information
When you access our website, we and our technology partners may automatically collect:
- IP address.
- Browser type and device information.
- Operating system.
- Approximate geographic location.
- Pages viewed and browsing activity.
- Referring websites and search information.
- Session identifiers and cookie information.
- Product interactions and shopping preferences.
1.4 Customer Communications
We collect information you provide when contacting us about orders, products, deliveries, returns, refunds, or other requests.
This may include email correspondence, customer service records, and photographs voluntarily submitted for product or delivery verification.
1.5 Marketing Information
If you subscribe to our newsletter or otherwise agree to receive promotional communications, we may collect your email address, communication preferences, and relevant engagement information.
We may also receive information from advertising and analytics partners as permitted by applicable law.
2. How We Use Personal Information
We process personal information for legitimate business purposes and where permitted by applicable law.
These purposes include:
- Processing payments and completing orders.
- Preparing, packaging, and shipping products.
- Providing order confirmations, shipping updates, and tracking information.
- Managing customer accounts and preferences.
- Responding to inquiries and providing customer support.
- Processing returns, refunds, and exchanges.
- Detecting fraud and preventing unauthorized transactions.
- Maintaining website functionality, security, and performance.
- Understanding website usage and improving our products and services.
- Sending marketing communications where permitted by law.
- Measuring and improving advertising effectiveness where permitted.
- Complying with applicable tax, accounting, customs, and legal obligations.
We do not require customers to provide personal information unrelated to a legitimate transaction or service unless required by applicable law.
3. Legal Bases for Processing
Where the General Data Protection Regulation (GDPR), UK GDPR, or similar laws apply, we process personal data on one or more applicable legal bases.
3.1 Contractual Necessity
We process personal information necessary to fulfill orders, arrange delivery, process payments, and provide requested customer services.
3.2 Legal Obligations
We process and retain certain information to comply with tax, accounting, customs, consumer protection, and other applicable legal requirements.
3.3 Legitimate Interests
Where permitted by law, we may process information for legitimate interests, including fraud prevention, business security, customer support, and service improvement, provided these interests are not overridden by applicable individual rights.
3.4 Consent
Where required, we seek consent before using non-essential cookies, certain analytics or advertising technologies, and electronic marketing communications.
You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
4. Cookies, Analytics & Advertising
Our website uses cookies and similar technologies to support essential shopping functions, analyze website performance, and provide advertising services where permitted.
4.1 Essential Cookies
Essential cookies support functions such as shopping carts, customer accounts, checkout, security, and session management.
4.2 Analytics Cookies
Analytics technologies help us understand website performance, visitor interactions, and areas for improvement.
We may use services such as Google Analytics and Shopify analytics for these purposes.
4.3 Advertising Technologies
Where enabled, we may use advertising platforms such as Google Ads and their associated tracking technologies to measure conversions, understand campaign performance, and provide relevant advertising.
These technologies may process identifiers, browsing activity, and purchase-related events according to applicable privacy laws and your privacy preferences.
4.4 Managing Cookies
Where available, you can manage your non-essential cookie preferences through the privacy or cookie controls displayed on our website.
You can also manage cookies through your browser settings. Disabling certain cookies may affect some website functions.
For information about Google Analytics opt-out options, visit: Google Analytics Opt-out Browser Add-on .
Where required by applicable law, we obtain the appropriate consent before activating non-essential tracking technologies.
5. Marketing Communications
If you subscribe to our newsletter or provide valid marketing consent, we may send information about:
- New product arrivals.
- Korean beauty trends and product updates.
- Special promotions and discount offers.
- Relevant store news and announcements.
You may unsubscribe from promotional emails at any time using the unsubscribe link included in the relevant communication.
You may also contact info@hanavalle.com to request removal from our marketing mailing list.
Transactional messages, including order confirmations, shipping updates, and important account notices, may continue where necessary to provide services or comply with law.
6. How We Share Personal Information
We disclose personal information only where reasonably necessary for the purposes described in this policy or as permitted or required by applicable law.
6.1 E-Commerce Service Providers
Our online store is powered by Shopify, which provides e-commerce infrastructure, hosting, checkout services, and related technology.
6.2 Payment Service Providers
Transaction information may be shared with applicable payment processors, card networks, and fraud prevention providers to process and secure payments.
6.3 Fulfillment & Shipping Partners
We share necessary delivery information with our fulfillment operations in South Korea and applicable shipping carriers, customs service providers, and delivery partners.
Information shared may include recipient names, delivery addresses, telephone numbers, and shipment details.
6.4 Analytics & Advertising Partners
Where enabled and legally permitted, certain website and transaction data may be processed by analytics and advertising technology providers.
This processing may involve cookies, device identifiers, browsing activity, and advertising measurement data.
6.5 Legal and Regulatory Disclosures
We may disclose information when reasonably necessary to comply with applicable laws, lawful government requests, legal proceedings, or regulatory obligations.
6.6 Business Transactions
Information may be transferred as part of a legitimate business restructuring, acquisition, merger, or asset transaction, subject to applicable law and appropriate safeguards.
7. Sale, Sharing & Targeted Advertising
HANAVALLE does not operate a business that sells customer contact lists to data brokers.
However, certain disclosures of personal information to advertising partners may be classified as "sharing", "sale", or "targeted advertising" under some privacy laws, even where no money is exchanged.
Where applicable law grants customers the right to opt out of such processing, we will honor valid requests through available privacy controls and applicable request procedures.
To submit a privacy request, email info@hanavalle.com with the subject "Privacy Rights Request".
Where a dedicated data sharing opt-out mechanism is provided on our website, customers may also use that mechanism.
8. International Data Transfers
HANAVALLE is operated by TIANMU LLC, a United States business, with fulfillment operations located in South Korea.
Personal information may be processed in the United States, South Korea, and other countries where our authorized service providers maintain operations.
Privacy and data protection laws may differ between countries.
Where required by applicable law, international transfers are supported by recognized transfer mechanisms and appropriate safeguards, which may include Standard Contractual Clauses, adequacy decisions, or other lawful transfer arrangements.
Additional information about applicable international transfer safeguards may be requested through our privacy contact email.
9. Data Retention
We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this policy, unless a longer period is required or permitted by law.
Retention periods depend on the type of information and its processing purpose.
- Order and Transaction Records: Retained as necessary for accounting, tax, payment disputes, fraud prevention, and legal compliance.
- Customer Accounts: Retained while accounts remain active and as otherwise necessary for lawful purposes.
- Support Records: Retained as necessary to resolve inquiries, disputes, and customer service issues.
- Marketing Records: Retained while relevant consent or another lawful basis applies, subject to withdrawal and legal obligations.
- Technical Information: Retained according to operational, security, legal, and applicable service provider requirements.
When information is no longer required, we take reasonable steps to delete, anonymize, or securely dispose of it, subject to legal retention requirements.
10. Data Security
We take reasonable technical and organizational measures designed to protect personal information from unauthorized access, disclosure, alteration, loss, and misuse.
Such measures may include encrypted data transmission, access controls, authentication, secure payment processing, and monitoring for suspicious activity.
Payment card information is handled by applicable payment service providers and checkout infrastructure.
We do not intentionally store complete payment card security codes on our own customer service systems.
No internet transmission or electronic storage system can be guaranteed completely secure. Customers should also protect their account credentials and contact us if they suspect unauthorized account activity.
11. Your Privacy Rights
Depending on your location and applicable privacy law, you may have rights regarding your personal information.
These may include:
- Right of Access: Request information about personal data we process.
- Right to Correction: Request correction of inaccurate or incomplete personal information.
- Right to Deletion: Request deletion of eligible personal information.
- Right to Data Portability: Request certain personal data in a commonly used format.
- Right to Restrict Processing: Request limitations on processing in qualifying circumstances.
- Right to Object: Object to certain types of personal data processing.
- Right to Withdraw Consent: Withdraw consent where processing relies on consent.
- Right to Opt Out: Opt out of qualifying targeted advertising, sale, or sharing of personal information.
- Right to Appeal: Appeal certain privacy request decisions where applicable law provides this right.
We may need to verify your identity before fulfilling a request.
Some requests may be limited by applicable legal obligations, fraud prevention requirements, or other lawful exceptions.
We will respond within the timeframes required by applicable law.
How to Exercise Your Rights
Email: info@hanavalle.com
Subject: Privacy Rights Request
Please describe the right you wish to exercise and provide sufficient information to identify your customer account or relevant transaction.
We will not discriminate against customers for exercising protected privacy rights, except as otherwise permitted by applicable law.
12. European Economic Area, United Kingdom & Switzerland
If you are located in the European Economic Area, United Kingdom, or Switzerland, additional data protection rights may apply.
TIANMU LLC acts as a data controller for personal information processed for its own business purposes.
You may have the right to lodge a complaint with the competent data protection supervisory authority in your jurisdiction.
Where applicable law requires the appointment of a local data protection representative or other designated contact, the relevant information will be provided through the appropriate notice or communication channel.
13. United States Privacy Rights
Residents of California and certain other US states may have additional rights under applicable state privacy legislation.
Depending on the law, these may include rights to know, access, correct, delete, and obtain copies of personal information, or to opt out of qualifying targeted advertising, sale, or sharing.
We will honor applicable rights and legally recognized privacy preference signals to the extent required by applicable law.
Privacy requests may be submitted to: info@hanavalle.com .
14. Children's Privacy
Our online store is intended for adult purchasers and is not designed to collect personal information knowingly from children below the age at which valid consent may be given under applicable law.
We do not knowingly solicit personal information directly from children for marketing or account registration.
Some products sold on our website may be intended for use by children, but purchases must be made by an eligible adult.
If you believe a child has provided personal information inappropriately, please contact info@hanavalle.com so we can review the situation and take appropriate action.
15. Third-Party Websites & Services
Our website may contain links to third-party websites, payment providers, social platforms, and external services.
Those services may maintain separate privacy policies and data processing practices.
We encourage customers to review the applicable privacy information before submitting personal information to third parties.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business operations, technology providers, applicable laws, or privacy practices.
The latest version will be published on this page with a revised "Last updated" date.
Where legally required, we will provide additional notice or obtain consent before implementing material changes to relevant data processing activities.
17. Data Controller & Contact Information
Store Name:
HANAVALLE
Legal Business Entity:
TIANMU LLC
Website:
www.hanavalle.com
Registered Business Address:
8 The Grn, Ste R,
Dover, DE 19901,
United States
International Fulfillment Location:
N029, 602, Yeongdong-daero,
Gangnam-gu, Seoul, 06083,
Republic of Korea
Privacy & Support Email:
info@hanavalle.com
Customer Support Phone:
+1 (332) 355-7653
Business Hours:
Monday–Friday, 10:00 AM–6:00 PM Eastern Time (ET), excluding applicable holidays.
Contact Page:
Contact HANAVALLE
Terms of Service:
View Terms of Service
Shipping Policy:
View Shipping Policy
Refund Policy:
View Refund Policy
HANAVALLE is operated by TIANMU LLC. We are committed to transparent personal information practices, responsible data processing, and respecting applicable customer privacy rights.