LEGAL

Privacy Policy

Effective: May 20, 2026

This Privacy Policy explains what personal information CLAPPIT Inc. ("HEYUNNIE") collects when you use www.heyunnie.com, how we use it, and what rights you have.

01 · WHAT WE COLLECT

Information you provide

Category	Items
Account	Email, username, password (hashed)
Profile	Age range, skin type, skin concerns, profile photo (optional)
Order	Order history (linked from Shopify). Name, address, and phone are handled by Shopify and not stored by HEYUNNIE.
Payment	Handled by Eximbay. We do not store card information.
Reviews	Star rating, text, photo, video link, usage details you submit

We also collect technical data automatically: device type, browser, IP address, pages visited, and timestamps.

02 · WHY WE COLLECT IT

How we use your information

· To create and operate your account
· To process orders, payments, and shipping
· To deliver coupons and rewards based on your reviews
· To display your reviews (with your chosen username) to other users
· To share aggregated review insights with brand partners (your name is never included)
· To send order updates, review reminders, and important service announcements
· To analyze and improve our service
· To prevent fraud and abuse

03 · WHO WE SHARE WITH

Third-party processors

We share only what is necessary, only with trusted partners:

· Shopify — e-commerce platform (account, order processing)
· Eximbay — payment processing
· Shipping carriers — your shipping address only
· Email service — order confirmations and notifications
· Brand partners — aggregated review insights (your identity is never shared)

We do not sell your personal information.

04 · INTERNATIONAL TRANSFER

Cross-border data flow

HEYUNNIE operates from Korea and serves users in Malaysia. Your information may be transferred to and processed in Korea and other countries where our service providers operate. We use industry-standard safeguards to protect your data during transfer.

05 · HOW LONG WE KEEP IT

Retention periods

Data	Retained for
Account	Until account deletion + 30 days
Order records	5 years (Korean Commercial Act)
Payment records	5 years (Korean tax law)
Reviews	Until you request removal

06 · YOUR RIGHTS

What you can do

You have the right to:

· Access the personal information we hold about you
· Correct inaccurate information
· Delete your account and personal data (except records we must keep by law)
· Withdraw consent for marketing communications
· Request a copy of your data in a portable format

To exercise any of these rights, email clapitmy@gmail.com. We respond within 14 days.

07 · COOKIES

Tracking technologies

We use cookies and similar technologies to keep you logged in, remember your preferences, and analyze how our service is used. You can disable cookies in your browser settings, but some features of our service may not work without them.

08 · CHILDREN

Age restrictions

HEYUNNIE is intended for users aged 14 and above. We do not knowingly collect personal information from children under 14. If you believe a child under 14 has provided us with personal information, please contact us and we will delete it.

09 · SECURITY

How we protect your data

We use industry-standard security measures including encrypted connections (HTTPS), encrypted password storage, and access controls. However, no system is 100% secure. If a data breach occurs, we will notify affected users within 72 hours.

10 · CHANGES TO THIS POLICY

Updates

We may update this Privacy Policy from time to time. Significant changes will be notified by email. The most recent version is always available at www.heyunnie.com/privacy.

11 · DATA PROTECTION OFFICER

Contact for privacy matters

Data Protection Officer

Woomin Kim, CEO

CLAPPIT Inc.

Email: clapitmy@gmail.com

Malaysian users may also contact the Personal Data Protection Department (PDPD) for complaints not resolved with us.

← Back to HEYUNNIE