Privacy Policy

The data controller is the seller named below. There is no separate privacy team; the representative handles these requests personally.

• Mariel Atelier (“Mariel Veil”, “we”, “us”)
• Representative: Hyewon Kang
• Address: 1177-12 Gangnam-ro, Gangsang-myeon, Yangpyeong-gun, Gyeonggi-do 12572, Republic of Korea
• Business registration number: 529-04-03374
• Mail-order sales registration: 2026-Gyeonggi Yangpyeong-0940
• Email: marielatelier@naver.com · Telephone: +82 70-8064-2749
• Privacy officer: Hyewon Kang

To fulfil an order

Your name, email address, shipping address, telephone number if you give one, the items ordered, the amount paid and any gift message.

From the payment provider

A transaction reference, the amount, the result, and the card brand and last four digits or the PayPal account email. We never receive your full card number or CVC.

Automatically

A cart identifier stored in a cookie so your bag survives a page reload, a random visit identifier and the record of what you opened here described in section 4, the server logs our host keeps — IP address, user agent and the page requested — for security and debugging, and the advertising measurement also described in section 4.

If you write to us

Your email address and whatever is in your message.

We do not ask for a date of birth, a national identification number, or anything about your religion. Buying a chapel veil implies something about your beliefs, so we deliberately keep no profile beyond the order itself.

Performing our contract with you

Taking payment, making up the parcel, arranging the customs declaration, shipping it, and answering questions about the order.

Legal obligation

Keeping transaction and payment records as Korean commercial and tax law requires, and giving customs the declaration each export needs.

Legitimate interests

Preventing fraudulent orders and chargebacks, keeping the site secure, and keeping our own accounts.

Consent

Only if you ask us to email you about new veils. There is no marketing list at present, and none of the emails we send now are marketing.

We use a small number of service providers, each of which handles only the part it needs. None of them may use your data for their own purposes.

Vercel Inc. (United States)

Hosting for this site and its server logs, and a visitor count that records the page, country, browser and device type without cookies and without identifying you.

Neon Inc. (United States)

The database holding orders, shipping addresses and the visit records described below.

Eximbay Co., Ltd. (Korea)

Card payment processing and fraud screening.

PayPal (Europe) S.à r.l. et Cie, S.C.A. and its affiliates

Payment processing when you choose PayPal.

Resend Inc. (United States)

Sending order and shipping emails.

Meta Platforms Ireland Ltd.

Measuring which of our advertisements lead to a sale. See the paragraph below for exactly what is sent.

Korea Post and the delivery carrier in your country

The name, address and telephone number on the parcel, and the customs declaration.

We advertise on Facebook and Instagram, and this site carries the Meta pixel so that we can see which advertisements actually lead to a sale. It reports to Meta the pages you open here, the veils you add to your bag, and the order number and amount when a payment completes, along with your IP address and any Meta cookie already in your browser. We do not pass Meta your name, your email address or your shipping address. You can restrict what Meta does with it in your Facebook or Instagram ad preferences, or stop it here by blocking third-party cookies or scripts in your browser — the shop works either way.

We also keep our own record of the visit, in our own database, so that we can see whether the shop is understandable: a random identifier held in a cookie in your browser, the pages and veils you opened and how long you stayed, the country and city our host reports, your browser and device type, and the campaign parameters on the link you arrived through. It carries no name, no email address and no IP address, we never sell or share it, and it cannot follow you to another site.

Beyond Meta we use no other advertising network, and beyond the two measurements above there is no other tracking on this site.

This is the part worth reading twice. We are in Korea, so ordering from us necessarily moves your data there.

What is transferred

Your name, email address, shipping address, telephone number, order contents and payment reference.

Where it goes

The Republic of Korea, where we operate; and the United States, where our hosting, database and email providers run their services.

Who receives it

Mariel Atelier as controller, and the providers listed in section 4 as processors.

Why

To perform the purchase contract you entered into. Without the transfer we cannot take the payment or ship the parcel.

How long

For the periods in section 6.

Safeguards

Transfers rest on the necessity of performing your contract. Where a provider is in a third country we have Standard Contractual Clauses in place with it. Korea has held an adequacy decision from the European Commission since December 2021, so transfers from the EEA to Korea need no additional mechanism.

You may object to the transfer, but we would then have to cancel your order and refund it, because there is no way to ship a parcel from Korea without it.

Contract, payment and settlement records

Five years, as required by the Korean Act on Consumer Protection in Electronic Commerce.

Records of complaints and dispute handling

Three years, under the same Act.

Customs and export records

Five years, under Korean customs law.

Email correspondence

Three years from the last message, then deleted.

Server logs

Up to 30 days at our hosting provider.

Abandoned carts

Deleted automatically 30 days after the last change.

Visit records

Twelve months from the visit, then deleted automatically.

When a period ends the record is deleted. Where the law requires us to keep an order record we keep only that record, separated from anything else.

Two of our own cookies are strictly necessary: one identifies your shopping bag so it survives a page reload, and one keeps the shop owner signed in to the admin area. Two more are ours but are not necessary, and exist only for the measurement in section 4: a random visit identifier that lasts 30 days, and a note of the campaign parameters on the link you arrived through. The Meta pixel described in section 4 sets its own cookies, which exist only to measure our advertising. None of ours is read by anyone else, and clearing your cookies or blocking scripts in your browser stops all of them without affecting your order.

Wherever you live, you may ask us to show you the data we hold about you, correct it, delete it, restrict what we do with it, send it to you in a portable form, or object to a particular use. Email the address below and we will answer within 30 days. We will not charge you or treat you differently for asking.

We may have to keep the parts of an order record that Korean law obliges us to retain, in which case we will tell you exactly what was kept and why.

If you are unhappy with how we have handled it you can complain to your own data protection authority, or in Korea to the Personal Information Protection Commission (privacy.go.kr) or the Korea Internet & Security Agency's report centre (privacy.kisa.or.kr, 118).

This shop is not intended for children under 14, and we do not knowingly collect their data. If a child has ordered without a parent's involvement, write to us and we will cancel it and delete the record.

The site is served over HTTPS only. Card data is entered on the payment provider's own page and never reaches us. Access to the order database is limited to the shop owner, protected by a hashed password and a signed session. Administrative access is logged.

If a breach ever affects your data we will notify you and the relevant authority without undue delay, and tell you plainly what happened.

If we change this policy in a way that affects you we will email everyone with an order in the past year. Smaller corrections are made here with a new effective date.

Privacy questions: marielatelier@naver.com.