Privacy policy

WESTORYST — Privacy Policy

Last Updated: September 21, 2026

WESTORYST (“WESTORYST,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit or use our website, https://westoryst.com, purchase products from us, create an account, contact us, or otherwise interact with our services.

WESTORYST operates an e-commerce store from the Republic of Korea. We process personal information in accordance with applicable privacy and data-protection laws, including the Personal Information Protection Act of the Republic of Korea (“PIPA”), applicable e-commerce laws, and other laws that may apply to customers depending on their location.

By using our website or services, you acknowledge the practices described in this Privacy Policy.

1. Personal Information We Collect

Depending on how you interact with WESTORYST, we may collect the following categories of personal information:

Information You Provide Directly

We may collect information you provide when you:

  • Create an account;

  • Place an order;

  • Enter billing or shipping information;

  • Subscribe to our newsletter or marketing communications;

  • Contact customer support;

  • Submit a product review or other feedback;

  • Participate in promotions, surveys, or other activities;

  • Request a return, refund, exchange, or cancellation.

This information may include:

  • Full name;

  • Email address;

  • Telephone number;

  • Shipping and billing address;

  • Account login information;

  • Order and purchase information;

  • Customer-service communications;

  • Reviews, comments, photographs, or other content you voluntarily submit;

  • Marketing preferences.

Payment Information

Payments may be processed through third-party payment service providers.

Depending on the payment method you select, payment providers may collect and process payment information such as card details, payment credentials, transaction information, and other information necessary to authorize and complete a payment.

WESTORYSTY does not intentionally store complete payment-card numbers or security codes on our own systems unless specifically required and lawfully permitted.

Information Collected Automatically

When you visit our website, certain information may be collected automatically, including:

  • IP address;

  • Browser type and device information;

  • Operating system;

  • Language and general location information;

  • Pages viewed and links clicked;

  • Referring website;

  • Date and time of access;

  • Website usage and interaction information;

  • Cookies and similar technologies.

We use this information to operate, secure, analyze, and improve our website and services.

2. Sources of Personal Information

We may obtain personal information from:

  1. You, when you provide information directly to us;

  2. Shopify, which provides the e-commerce platform used to operate our online store;

  3. Payment service providers, when you make a purchase;

  4. Shipping and delivery providers, when an order is fulfilled;

  5. Analytics, advertising, marketing, and technology providers, where applicable;

  6. Fraud-prevention and security providers, where applicable;

  7. Publicly available sources, where legally permitted; and

  8. Other service providers or business partners when necessary to provide our services.

3. How We Use Personal Information

We may process personal information for the following purposes:

  • To provide, operate, and maintain our website;

  • To process and fulfill orders;

  • To process payments;

  • To arrange shipping and delivery;

  • To provide customer support;

  • To communicate with customers about orders, returns, refunds, and other transactions;

  • To create and manage customer accounts;

  • To provide products and services requested by customers;

  • To process cancellations, returns, exchanges, and refunds;

  • To prevent fraud, abuse, unauthorized transactions, and security incidents;

  • To maintain website and information-security measures;

  • To improve our products, website, services, and customer experience;

  • To analyze website usage and business performance;

  • To send marketing communications where permitted by applicable law and, where required, with your consent;

  • To manage reviews, feedback, surveys, and promotions;

  • To comply with legal and regulatory obligations;

  • To establish, exercise, or defend legal claims; and

  • For other purposes disclosed to you at the time the information is collected or otherwise permitted by applicable law.

4. Legal Bases and Consent

Depending on the circumstances and applicable law, we may process personal information based on:

  • Your consent;

  • The performance of a contract or steps taken at your request before entering into a contract;

  • Compliance with legal obligations;

  • Our legitimate business purposes where permitted by applicable law; or

  • Another lawful basis permitted under applicable law.

Where consent is required, you may generally withdraw your consent by contacting us or using the relevant unsubscribe or preference-management mechanism.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Cookies and Similar Technologies

WESTORYST and our service providers may use cookies, pixels, tags, scripts, local storage, and similar technologies.

These technologies may be used for:

  • Essential website functions;

  • Shopping-cart and checkout functionality;

  • Login and account functionality;

  • Security and fraud prevention;

  • Remembering preferences;

  • Website analytics;

  • Performance measurement;

  • Advertising and marketing, where applicable;

  • Understanding how visitors use our website.

Some cookies are necessary for the website to function and cannot be disabled through ordinary website settings.

Where required by applicable law, we will request consent before using non-essential cookies or similar technologies.

You may be able to control cookies through your browser settings or through cookie-management tools made available on our website.

Disabling certain cookies may affect the functionality of the website.

6. How We Disclose Personal Information

We may disclose personal information to third parties when necessary to operate our business and provide our services.

These third parties may include:

Shopify

Our online store is operated using Shopify. Shopify may process personal information on our behalf or independently as described in its applicable privacy documentation.

Payment Service Providers

We may share information necessary to process payments, verify transactions, prevent fraud, and complete purchases with payment service providers.

Shipping and Delivery Providers

We may provide customer name, address, telephone number, order information, and other necessary information to shipping or delivery providers so that orders can be delivered.

Technology and Service Providers

We may use third-party providers for:

  • Website hosting and technology;

  • Analytics;

  • Customer support;

  • Email and communications;

  • Marketing;

  • Fraud prevention;

  • Security;

  • Data storage;

  • Order fulfillment; and

  • Other business operations.

Legal and Regulatory Authorities

We may disclose personal information where reasonably necessary to:

  • Comply with applicable laws;

  • Respond to lawful requests;

  • Protect our rights or property;

  • Protect customers or others;

  • Investigate fraud or security incidents; or

  • Establish, exercise, or defend legal claims.

We do not sell personal information for money in the ordinary operation of our business.

7. Personal Information Processing by Service Providers

We may entrust or delegate certain personal-information processing activities to service providers that assist us in operating WESTORYST.

Depending on the services we use, these providers may assist with:

  • E-commerce operations;

  • Payment processing;

  • Shipping;

  • Website hosting;

  • Cloud services;

  • Customer service;

  • Analytics;

  • Marketing communications;

  • Security and fraud prevention.

We require service providers to handle personal information appropriately and only for authorized purposes, subject to applicable law and contractual requirements.

8. International Transfers

Because WESTORYST uses international technology, payment, e-commerce, shipping, analytics, and other service providers, personal information may be processed or stored in countries outside the Republic of Korea.

Where personal information is transferred internationally, we will take measures required by applicable law, which may include obtaining consent where required, providing required notices, using contractual safeguards, and taking appropriate security measures.

Depending on the services used by WESTORYST and your location, personal information may be processed in countries such as the United States or other jurisdictions where our service providers operate.

The privacy protections and laws in those countries may differ from those in your country of residence.

9. Personal Information Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Certain transaction records must be retained under applicable Korean e-commerce laws.

For example, WESTORYST may retain:

  • Records relating to contracts and cancellations/withdrawals: 5 years;

  • Records relating to payments and supply/delivery of goods: 5 years;

  • Records relating to consumer complaints and dispute resolution: 3 years;

  • Records relating to advertising and promotional activities: 6 months.

These retention periods may apply even after you request deletion where applicable law requires or permits us to retain the information.

When the applicable retention period expires and the information is no longer necessary, we will securely delete or destroy it in accordance with applicable law.

10. Deletion and Destruction of Personal Information

When personal information is no longer required for the purpose for which it was collected, and there is no legal obligation requiring further retention, WESTORYST will take reasonable steps to delete or destroy it.

Electronic personal information may be securely deleted using methods designed to prevent recovery.

Physical documents containing personal information may be destroyed through methods appropriate to prevent reconstruction or recovery.

Where applicable law requires us to retain certain information, that information will be stored separately or otherwise protected and will only be used for the legally permitted purpose.

11. Information Security

WESTORYST takes reasonable administrative, technical, and organizational measures to protect personal information against:

  • Unauthorized access;

  • Loss;

  • Misuse;

  • Disclosure;

  • Alteration;

  • Destruction; and

  • Other unauthorized processing.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of any account credentials and for notifying us if you believe your account or personal information has been compromised.

12. Your Privacy Rights

Depending on your location and applicable law, you may have rights regarding your personal information, including the right to:

  • Request access to your personal information;

  • Request correction of inaccurate or incomplete information;

  • Request deletion of personal information where legally permitted;

  • Request suspension or restriction of processing where legally permitted;

  • Withdraw consent where processing is based on consent;

  • Object to certain processing;

  • Request information about how your personal information is processed;

  • Request data portability where applicable;

  • Opt out of certain marketing communications;

  • Exercise other rights provided by applicable privacy laws.

Rights and procedures may vary depending on your country or jurisdiction.

To exercise a privacy right, contact us using the information in the “Contact Us” section below.

We may need to verify your identity before completing certain requests in order to protect your information and prevent unauthorized access.

13. Marketing Communications

If you subscribe to marketing communications, we may send you information about:

  • New products;

  • Promotions;

  • Discounts;

  • Special offers;

  • Store updates;

  • Other marketing communications.

Where required by applicable law, we will obtain the appropriate consent before sending marketing communications.

You may unsubscribe from marketing emails by using the unsubscribe link included in the message.

Unsubscribing from marketing communications does not prevent us from sending necessary transactional or service-related communications, such as order confirmations, shipping updates, refund information, or important account notices.

14. Third-Party Websites and Links

Our website may contain links to websites, applications, services, or platforms operated by third parties.

WESTORYST is not responsible for the privacy practices, security, or content of third-party websites.

We encourage you to review the privacy policies of third-party services before providing personal information to them.

15. Children's Privacy

WESTORYST does not knowingly collect personal information from children in circumstances where such collection is prohibited by applicable law.

If you believe that a child has provided personal information to us in violation of applicable law, please contact us.

If we become aware that we have collected personal information from a child when we were not legally permitted to do so, we will take reasonable steps to delete the information.

16. Reviews, Feedback, and User Content

If you voluntarily submit a review, photograph, comment, testimonial, or other content to WESTORYST, we may process the information contained in that submission for purposes such as displaying reviews, improving our services, responding to customers, and promoting our products, subject to applicable law and any permissions or terms that apply.

Please do not submit sensitive personal information or information belonging to another person without appropriate authorization.

17. United States Privacy Rights

If you are located in a U.S. state that provides specific privacy rights, you may have additional rights under applicable state privacy laws.

Depending on the applicable law, these rights may include rights concerning access, correction, deletion, portability, opting out of certain targeted advertising or certain data-sharing activities, and other rights.

The specific rights available to you depend on the state in which you reside and the circumstances of the processing.

If applicable, you may contact us to exercise your rights.

We will not discriminate against you for exercising privacy rights granted by applicable law.

18. European Economic Area, United Kingdom, and Switzerland

If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have additional rights under applicable data-protection laws.

Depending on applicable law, these rights may include:

  • Access to personal information;

  • Correction;

  • Deletion;

  • Restriction of processing;

  • Objection to processing;

  • Data portability;

  • Withdrawal of consent;

  • The right to lodge a complaint with a relevant data-protection authority.

Where required, we will provide additional information regarding the legal basis for processing and applicable international-transfer safeguards.

19. California and Other U.S. State Opt-Out Rights

Certain U.S. state laws may provide consumers with rights relating to targeted advertising, sale or sharing of personal information, or other forms of data processing.

Where applicable, WESTORYST will provide legally required methods for exercising these rights.

If an applicable opt-out mechanism is available on our website, it may be accessed through our Data Sharing / Privacy Choices page.

20. Automated Decision-Making and Profiling

WESTORYST does not intend to make decisions producing legal or similarly significant effects on individuals solely through automated processing unless permitted by applicable law and appropriately disclosed.

Third-party services used by our store may use automated systems for purposes such as fraud detection, payment authorization, security, analytics, advertising, or personalization.

21. Complaints and Privacy Inquiries

If you have a question, concern, or complaint regarding how WESTORYST handles personal information, please contact us first using the information below.

We will review and respond to privacy inquiries in accordance with applicable law.

You may also have the right to contact a relevant privacy or data-protection authority in your jurisdiction.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • Our business;

  • Our website;

  • Our services;

  • Technology;

  • Applicable laws;

  • Privacy practices; or

  • Service providers.

When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy.

Where required by applicable law, we will provide additional notice or obtain consent before implementing material changes.

23. Contact Us

If you have questions about this Privacy Policy, want to exercise a privacy right, or have a privacy-related concern, please contact us:

WESTORYST

Email: contact@westoryst.com

Phone: +82 10-3734-8412

Business Address:
53 Beopwon-ro 15beon-gil
Osan-si, Gyeonggi-do 18123
Republic of Korea

Website: https://westoryst.com

When contacting us regarding personal information, please provide enough information for us to understand and process your request. We may request reasonable information to verify your identity where required for security or legal purposes.

24. Important Notice

This Privacy Policy is intended to explain WESTORYST's general privacy practices and is designed for an international e-commerce business operating from the Republic of Korea.

Applicable privacy and consumer-protection requirements may differ depending on your location and the services you use.

Nothing in this Privacy Policy limits any mandatory rights or protections that cannot lawfully be excluded under applicable law.