Version date: 21 October 2026
This notice explains how personal information is handled through medicube-global.com, referred to here as Medicube Global, when you browse, shop or contact the store. The company responsible for the website’s handling of personal information is APR Co., Ltd. (주식회사 에이피알), registered in South Korea. For a privacy question or request, email info@medicube-global.com.
1. Information you provide
- Shopping and checkout: your email, billing and delivery name and address, country, postcode, selected products, quantities, cart totals and order details. Phone details are optional where indicated. If a payment is processed, the order record may also contain its status or transaction reference.
- Customer accounts: information used to register and sign in, including your email address and login details, plus information associated with your account, such as saved addresses and order history.
- Contact enquiries: name, email, enquiry topic, message and any optional order reference. Contact-form enquiries are collected in the website’s submissions system and routed to the support mailbox. Technical submission details, such as IP address, browser information, time and originating page, may accompany the enquiry.
Provide information needed for your enquiry or purchase. Please do not send passwords, full payment-card details or unnecessary health information in a contact message.
2. Information collected while you browse
The website and the services used to deliver it receive connection information such as IP address, browser and device details, requested pages and request times. Cookies and browser storage support shopping sessions, account functions and referral attribution. Attribution information can include the referring website or campaign and visit/session details. Section 5 explains these functions and your browser controls.
3. Checkout information before an order is placed
Cart-recovery tracking is enabled at checkout. After you enter a valid email address, the website can automatically save that address, cart contents and totals, and other checkout details as you enter them, including names, addresses and phone details where provided. This can happen before you press the final order button, even if you leave without completing the purchase.
These records support the store’s cart-recovery function. Where follow-up is enabled and permitted by applicable law, cart-recovery records may be used to follow up about an unfinished purchase. A reminder is not necessarily sent for every unfinished checkout. Contact the privacy email above about information saved from an unfinished checkout or to ask the store not to use it for follow-up.
4. Why information is used and who receives it
Information is used to operate the shop and cart, handle requested purchases and delivery arrangements, maintain existing accounts, answer enquiries, troubleshoot problems, protect the website, understand referral sources and retain records needed for transactions, disputes or legal obligations.
Information needed to run these functions may be handled by authorized store staff and service providers for website hosting and storage, email delivery, technical maintenance and security. When used for an order, payment and delivery services receive the information needed for their part of the transaction. Information may also need to be provided to professional advisers or public authorities when a relevant legal obligation or claim requires it.
Hosting and email: Cloudways provides the website hosting, with website data stored in the United States. Zoho provides the store’s email service. Hosting providers process website data to operate and store the site; the email provider handles messages and associated contact and delivery information needed for support and transactional email.
Payments: the store offers payment services through Stripe and PayPal. When you select an available payment option, the relevant provider receives the information needed to process your payment. The store may receive payment status and transaction references. The options available can depend on your country, currency and device. See Stripe’s privacy notice and PayPal’s privacy notice.
Delivery: the shipping carriers selected for the store include FedEx and DHL. When one is used for your order, it receives the name, delivery address, contact and shipment information needed for delivery. See the privacy notices of FedEx and DHL.
Analytics and marketing: we do not use a separate third-party analytics or advertising platform. Customer contact details are intended for requested orders and support, rather than general promotional messages. WooCommerce’s internal order reporting and referral/order attribution remain enabled. The cart-recovery function described in section 3 is also enabled.
Separate external services include Google Fonts for typefaces and Gravatar for comment avatars, as explained below. Their privacy notices also apply to the information those services receive directly from your browser.
5. Cookies and browser storage
- Shopping sessions: WooCommerce uses cookies such as
woocommerce_items_in_cart,woocommerce_cart_hashandwp_woocommerce_session_*when you use a cart. The first two are session cookies; the shop-session cookie currently lasts approximately 48 hours and can be renewed through use. - Referral and order attribution: cookies beginning
sbjs_record visit and referral information. They are currently set automatically during browsing. They serve attribution rather than the basic ability to place an item in the cart. These cookies are session-based, withsbjs_sessionlasting approximately 30 minutes. - Local and session storage: the shop stores cart state, cart fragments and request/session information in the browser. WordPress also stores a browser-feature support result. Local storage can remain between visits until it is replaced or cleared; session storage is generally limited to the browser tab’s session.
- Login and saved comment details: WordPress uses cookies for an existing account’s login session and the remember-me choice. If you choose the comment form’s option to remember your name, email and website, these details are stored in browser cookies for later comments.
A general cookie-preferences panel is not currently provided. You can inspect, block or delete cookies and website storage through your browser settings. Blocking shopping or login storage may prevent the cart, checkout or account functions from working properly. Clearing browser data does not itself delete records already saved on the website or in email.
6. Public comments and external services
Where a public blog comment form is available, it collects your comment, name, email and optional website, together with technical information such as IP address and browser details for administration and spam prevention. A published comment and display name, and any displayed website link or avatar, are public. Your email is not displayed as part of the comment.
Gravatar may receive a hashed identifier derived from the comment email to look up an avatar. A hash is not the same as anonymous information. Avatar requests also disclose browser-connection information to that service. See Automattic’s privacy notice.
Google Fonts is loaded from Google’s servers. Font requests disclose connection information such as your IP address and browser request details to Google. See Google’s privacy notice. If you follow another external link, review the destination’s privacy notice before providing information there.
7. How long information is kept
Our standard retention policy is to keep routine personal information for one month after the purpose for keeping it has ended, then delete or anonymize it, unless a longer period is required by law or for a continuing lawful need. For example, the period begins after an enquiry is resolved or an account is closed. Information needed for an open order, support issue, warranty request or dispute remains necessary until that matter is resolved.
Order, payment, accounting and other records that must be retained by law are kept for the applicable mandatory period. Browser-cookie expiry is separate from deletion of website, mailbox or backup records; browser-storage lifetimes are described in section 5. External payment and delivery services may have their own retention obligations. Contact us about the retention or deletion of a particular record.
8. Processing in other countries
The website serves visitors internationally. Website data is stored in the United States through Cloudways hosting, and the company responsible for the website is registered in South Korea. Zoho email, external font/avatar services and other providers involved in a requested service may also process information outside your country. The website hosting location does not establish the storage location of every external provider, email record or backup. Applicable protections and disclosure requirements depend on the locations and services involved. Contact us for information about the handling of your particular enquiry or order.
9. Your requests and choices
Depending on the law that applies to you, you may have rights to access or receive a copy of your personal information, correct it, request deletion, restrict or object to certain uses, or receive eligible information in a portable format. Where processing relies on consent, you may withdraw it without changing the lawfulness of processing carried out before withdrawal. You may also have a right to complain to the relevant data-protection authority.
Email info@medicube-global.com with your request and enough information to locate the relevant enquiry, account or order. We may need proportionate information to verify that the request concerns you. Do not email passwords or full payment-card details. Some requests may be limited by legal recordkeeping, another person’s rights or other applicable exceptions; deleting an account does not necessarily delete transaction records that must be retained.
10. Keeping information safe
Website, account and email security require ongoing technical and organizational care. No method of transmission or storage can guarantee complete security. Keep your account credentials private and contact us if you suspect unauthorized use of information associated with this store.
11. Audience aged 18 or older
This store is intended for people aged 18 or older. If you are under 18, do not place an order or submit personal information through the website. If you believe information about someone under 18 has been provided, contact us so we can review it and take appropriate action under applicable law. Do not include unnecessary sensitive information in that message.
12. Updates and contact
This notice may be revised when the website’s services, information handling or applicable requirements change. The version date at the top identifies this text. Privacy questions and requests can be sent to info@medicube-global.com.
Privacy contact: APR Co., Ltd. (주식회사 에이피알)
300 Olympic-ro, Songpa-gu, Seoul, South Korea
서울특별시 송파구 올림픽로 300