Privacy policy

Privacy Policy

Last Updated: December 19, 2025

At Bomul (operated by Lussona), we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and make purchases.

By using our website, you consent to the data practices described in this policy.

1. Information We Collect

We collect information that you provide directly to us and information that is automatically collected when you use our website.

Personal Information You Provide:

  • Name and contact information (email address, phone number, shipping address, billing address)

  • Payment information (credit card details, billing information)

  • Account credentials (username, password)

  • Order history and purchase information

  • Communication preferences

  • Any other information you choose to provide (customer service inquiries, product reviews, etc.)

Information Automatically Collected:

  • IP address and device information

  • Browser type and version

  • Operating system

  • Pages visited and time spent on our website

  • Referring website addresses

  • Cookies and similar tracking technologies

  • Shopping behavior and preferences

2. How We Use Your Information

We use the information we collect for the following purposes:

Order Processing and Fulfillment:

  • Process and fulfill your orders

  • Communicate with you about your orders (confirmations, shipping updates, delivery notifications)

  • Handle returns, refunds, and customer service requests

  • Verify your identity and prevent fraud

Website Improvement:

  • Improve our website functionality and user experience

  • Analyze website traffic and usage patterns

  • Conduct market research and analytics

  • Personalize your shopping experience

Marketing and Communications:

  • Send promotional emails about new products, special offers, and sales (with your consent)

  • Provide customer support and respond to your inquiries

  • Send administrative information (policy updates, account notifications)

Legal and Security:

  • Comply with legal obligations and regulations

  • Protect against fraud, unauthorized transactions, and other illegal activities

  • Enforce our Terms of Service and other policies

  • Resolve disputes and troubleshoot problems

3. How We Share Your Information

We do not sell your personal information to third parties. However, we may share your information with the following parties:

Service Providers:

  • Payment processors (to process your transactions securely)

  • Shipping carriers and fulfillment partners (to deliver your orders)

  • Third-party suppliers (to fulfill product orders)

  • Email service providers (to send communications)

  • Website hosting and analytics providers

  • Customer service platforms

Legal Requirements:

  • When required by law, court order, or government regulation

  • To protect our rights, property, or safety, or that of our users

  • In connection with legal proceedings or investigations

  • To enforce our Terms of Service

Business Transfers:

  • In the event of a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity

With Your Consent:

  • We may share your information with other parties when you have given us explicit consent to do so

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and collect information about how you use our website.

Types of Cookies We Use:

  • Essential Cookies: Required for website functionality (shopping cart, checkout process)

  • Analytics Cookies: Help us understand how visitors use our website (Google Analytics)

  • Marketing Cookies: Track your browsing habits to show relevant advertisements

  • Preference Cookies: Remember your settings and preferences

Managing Cookies: You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our website.

5. Data Security

We implement reasonable security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

  • Secure Socket Layer (SSL) encryption for payment transactions

  • Secure servers and data storage

  • Regular security assessments

  • Access controls and authentication procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Order and transaction data: Retained for accounting and legal compliance purposes (typically 7 years)

  • Account information: Retained until you request deletion or close your account

  • Marketing communications: Retained until you unsubscribe

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

Access and Correction:

  • Request access to the personal information we hold about you

  • Request correction of inaccurate or incomplete information

Deletion:

  • Request deletion of your personal information (subject to legal retention requirements)

Opt-Out:

  • Unsubscribe from marketing emails by clicking the "unsubscribe" link in our emails

  • Opt out of cookies through your browser settings

Data Portability:

  • Request a copy of your personal information in a portable format

Withdraw Consent:

  • Withdraw your consent to data processing at any time (where consent is the legal basis)

To exercise these rights, please contact us at jsonegp101@gmail.com.

8. International Data Transfers

Our business is based in the Republic of Korea, but we serve customers worldwide. Your information may be transferred to and processed in countries other than your country of residence, including Korea and countries where our service providers operate.

By using our website, you consent to the transfer of your information to countries that may have different data protection laws than your country.

9. Children's Privacy

Our website is not intended for children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.

10. Third-Party Links

Our website may contain links to third-party websites (payment processors, social media platforms, etc.). We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Posting the updated policy on our website with a new "Last Updated" date

  • Sending an email notification (for significant changes)

Your continued use of our website after changes are posted constitutes your acceptance of the updated Privacy Policy.

12. Regional-Specific Information

For European Union (EU) Customers: Under the General Data Protection Regulation (GDPR), you have additional rights including the right to lodge a complaint with a supervisory authority. Our legal basis for processing your data includes contract performance, legal obligations, and legitimate interests.

For California Customers: Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, request deletion, and opt out of the sale of your information (we do not sell personal information).

For Korean Customers: Under the Personal Information Protection Act (PIPA), we comply with Korean data protection requirements for the collection, use, and storage of personal information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Lussona (Bomul)
Email: jsonegp101@gmail.com
Phone: +82 10 4386 3378

We will respond to your inquiry within a reasonable timeframe.

14. Consent

By using our website and providing your personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.