Privacy policy

Last updated: 6 October 2026

This Privacy Policy explains how HANSOL BIO Co., Ltd. ("Hansolbio", "we", "us") collects, uses, shares and protects personal information when you use this website (lab.hansolbio.com), request samples or quotations, book meetings, take part in our event programmes or otherwise contact us. The website is intended for business buyers.

1. Who we are

Hansolbio is the controller of the personal information described in this policy.

Legal name HANSOL BIO Co., Ltd. (한솔생명과학 주식회사)
Business registration number (Republic of Korea) 129-86-75617
Address Halla SigmaValley 911, 910, 102, 545 Dunchon-daero, Jungwon-gu, Seongnam-si, Gyeonggi-do 13215, Republic of Korea
Email sales@hansolbio.com
Phone +82 70 7774 0702
Fax +82 31 701 9603

2. Information we collect

Information you give us

  • Business contact details: name, company, job title, email address, phone number and country.
  • Enquiry and project details: the products and formulas you are interested in, target markets, volumes, packaging, timing, files you send and your messages to us.
  • Sample orders: billing and shipping addresses, the items ordered, order and payment status and, where the destination country requires it, the importer's tax or customs identification number.
  • Event and meeting details: your event shortlist, the date and time of a meeting you book and the answers you give when booking.
  • Communications: emails, calls and chat messages, including support requests, complaints and reports about product quality or skin reactions.
  • Account details: if you create a customer account, your login email address and account settings.
  • Marketing preferences: whether you have agreed to receive news from us.

Information collected automatically

  • Device and usage information: IP address, browser and device type, language, pages viewed, the referring page and the date and time of your visit.
  • Cookies and local storage: your cookie choices and the information kept in your browser, as described in our Cookie Notice.
  • Event-page activity: when you scan an event QR code, or add or submit an item on the event shortlist, a random session identifier, the action, the page and the time.

Payment information

Payments are processed by the payment provider shown at checkout (PayPal for international orders). Hansolbio does not receive or store your card number. We receive the payment result, the amount and a transaction reference. If you pay by bank transfer where that option is offered to buyers in Korea, we receive the depositor's name, the amount and the date of the transfer.

Health-related information

We do not ask for health information. If you report a skin reaction to a product, please give only the details needed to investigate it. We process such information only with your separate consent or where the law permits it, and only to investigate the report and meet our product-safety obligations.

3. How we use it and our legal bases

Purpose Legal basis
Answering enquiries, preparing quotations and arranging meetings Steps taken at your request before a contract; our legitimate interest in business communication
Processing sample orders: payment, packing, shipping and customs clearance Performance of a contract; legal obligations
Running the website, keeping your cart and settings, securing the website and preventing fraud Performance of a contract; legitimate interests
Measuring activity at our event booth (QR scans and shortlist actions) Legitimate interests
Keeping accounting, tax and customs records; handling complaints and product-safety matters Legal obligations
Analytics and marketing cookies; marketing emails Consent, which you can withdraw at any time
Establishing, exercising or defending legal claims Legitimate interests

For data subjects in Korea, we rely on the corresponding grounds of the Personal Information Protection Act: contract, legal obligation, legitimate interest that clearly overrides the data subject's rights, and consent. We do not use personal information for other purposes without telling you first and, where required, asking for your consent.

4. How long we keep it

  • Enquiries, quotation requests, event shortlists and meeting records: 3 years from our last contact with you, unless they become part of an order or agreement.
  • Contract, order, payment and delivery records: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.).
  • Complaint and dispute records: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.).
  • Accounting and tax books and supporting documents: 5 years (Framework Act on National Taxes).
  • Website access logs: 3 months (Protection of Communications Secrets Act).
  • Event-page activity records: until the follow-up work for the event is complete, then deleted.
  • Marketing preferences: until you withdraw consent. After that we keep only what we need to respect your choice.
  • Cookies and local storage: as described in the Cookie Notice.

If another law or an ongoing legal claim requires a longer period, we keep the information for that period only and store it separately from other data.

5. How we delete it

When a retention period ends or the purpose has been achieved, we delete personal information without delay. Electronic files are deleted using methods that prevent recovery. Paper records are shredded or incinerated.

6. Who we share it with

Service providers

We use the following service providers to run the website and our sample programme. They process personal information on our behalf and only for the services listed.

Provider Service Information
Shopify Website hosting, cart, checkout, order management and cookie consent Contact details, order details, device and usage information, cookie choices
PayPal Payment processing Name, email address, billing address, amount, order reference, payment result
DHL Express (including the DHL Express Commerce app) Shipping labels, international transport and customs clearance Recipient's name, company, address, phone number and email address; contents and declared value; importer's tax or customs ID where required
Courier in Korea Delivery within Korea Recipient's name, address and phone number; items shipped
HubSpot Contact, quotation and event-shortlist forms; meeting scheduling; customer records Contact details, enquiry details, event shortlist, meeting details
Calendly Meeting booking Name, email address, meeting time, booking answers
Supabase Measuring event-page activity Random session identifier, action, page, time, IP address
Cloudflare (cdnjs.cloudflare.com) Delivering website script files IP address, browser information

PayPal and DHL Express also process some information as independent controllers under their own privacy policies, for example to meet their own legal obligations.

Our contracts with service providers prohibit processing for any purpose other than the agreed service and cover security measures, limits on sub-processing, our supervision of the provider and liability. We supervise how providers handle personal information. If a provider or the service it performs changes, we will update this policy without delay.

Other recipients

  • Customs and other public authorities: export and import declarations that the law of Korea or of the destination country requires, and information that a court or authority lawfully demands.
  • A buyer or successor of our business: if all or part of our business is merged or transferred, we will tell you in advance as the law requires.

Apart from these cases, we share personal information with others only with your consent. We do not sell personal information for money.

7. Relationship with Shopify

The website is hosted by Shopify, which collects and processes personal information about your access to and use of the website in order to provide and improve its services. Information you submit to the website is transmitted to and shared with Shopify and may be processed in countries other than where you live. Where Shopify uses information about your interactions with our store, together with information from other merchants and from Shopify, to provide its own features (for example, fraud prevention), Shopify is responsible for that processing and for answering your requests about it. To learn more, read the Shopify Consumer Privacy Policy. You can exercise your rights over data processed by Shopify through the Shopify Privacy Portal.

8. International transfers

Hansolbio is based in the Republic of Korea. The service providers below process personal information outside Korea. Information is sent over the internet when you use the website, submit a form, or place, pay for or ship an order.

Recipient Country Information Purpose Retention
Shopify Canada Contact details, order details, device and usage information, cookie choices Hosting, checkout, order management Until the contract with the provider ends or the period in section 4 expires
PayPal United States Name, email address, billing address, amount, order reference Payment processing Until the contract with the provider ends or the period in section 4 expires
DHL Express Germany, and the transit and destination countries of the shipment Recipient details, contents and declared value, importer's tax or customs ID International transport and customs clearance Until the contract with the provider ends or the period in section 4 expires
HubSpot United States Contact details, enquiry details, event shortlist, meeting details Forms, meeting scheduling, customer records Until the contract with the provider ends or the period in section 4 expires
Calendly United States Name, email address, meeting time, booking answers Meeting booking Until the contract with the provider ends or the period in section 4 expires
Supabase United States Random session identifier, action, page, time, IP address Measuring event-page activity Until the follow-up work for the event is complete
Cloudflare United States IP address, browser information Delivering website script files Processed at the time of delivery; any further retention follows the provider's own policy

The country shown is where each provider has its head office. Depending on how the provider runs its servers, information may also be processed in other countries.

Under Korea's Personal Information Protection Act, these transfers are made because they are needed to enter into and perform our contract with you, and they are disclosed in this policy (Article 28-8(1)(3)). If you do not want your information transferred, you can contact us by email or phone instead of using the website's forms, checkout or booking tools. Without these transfers we cannot process online orders or form submissions.

For information we receive from the European Economic Area (EEA) or the United Kingdom, we rely on the adequacy decisions that the European Commission and the United Kingdom have adopted for the Republic of Korea. For onward transfers to other countries, we rely on an adequacy decision where one applies, or on standard contractual clauses or equivalent safeguards.

9. Cookies and similar technologies

We use cookies that are necessary to run the store, such as those for the cart, checkout, security and your consent choice. Analytics and marketing cookies are used only after you accept them in the cookie banner. The website also keeps some information in your browser's local storage, such as your event shortlist and formula composer selections. Details and choices are in our Cookie Notice.

10. Your rights

Depending on where you live, you have some or all of the following rights. They may be limited where the law allows, for example when we must keep records by law. If we refuse or limit a request, we will tell you why.

  • Access: to ask for a copy of the personal information we hold about you.
  • Correction: to ask us to correct inaccurate or incomplete information.
  • Deletion: to ask us to delete your information.
  • Suspension or restriction: to ask us to stop or restrict processing.
  • Withdrawal of consent: to withdraw consent at any time. This does not affect processing carried out before the withdrawal.
  • Portability: to receive your information in a commonly used format or have it sent to another company, where the law provides this right.
  • Opting out of targeted advertising: to direct us not to share or sell information for targeted advertising. Use Your privacy choices. If your browser sends a Global Privacy Control (GPC) signal, it is treated as an opt-out request for that browser and device, depending on where you are. Learn more at globalprivacycontrol.org. We do not respond to other "Do Not Track" signals.
  • Marketing emails: to unsubscribe at any time using the link in each email or by contacting us. We may still send you messages about your orders.

Additional rights in the EEA and the United Kingdom

How to make a request

Email sales@hansolbio.com or call +82 70 7774 0702. A legal representative or an agent you have authorised in writing may make a request for you. We will verify the identity of the requester before acting. We reply within 10 days for requests from data subjects in Korea and within one month for requests under the GDPR or UK GDPR (extendable where that law allows), or sooner if another applicable law requires. We will not treat you differently because you exercise your rights. For data processed by Shopify, you can also use the Shopify Privacy Portal.

11. Security

  • Organisational measures: access to personal information is limited to the staff who need it for their work, and they are trained on handling it.
  • Technical measures: access rights and administrator accounts are controlled, data sent through the website is encrypted in transit (HTTPS), and we do not store card numbers.
  • Physical measures: paper records and storage media that contain personal information are kept locked.

No method of transmission or storage is completely secure. Please do not send sensitive or confidential information through unsecured channels.

12. Third-party services and links

If you choose to chat with us on KakaoTalk, LINE or WhatsApp, open a map link (Naver Map, Kakao Map, Google Maps or TMAP), or play an embedded YouTube or Vimeo video, the provider of that service processes your information under its own terms and privacy policy. We receive only the messages you send us. We are not responsible for the privacy practices of third-party websites.

13. Children

The website is for business buyers and is not directed at children. We do not knowingly collect personal information from children under 14 or from anyone under the age of majority where they live. If you believe a child has given us personal information, contact us and we will delete it.

14. Privacy Officer and contact

Our Privacy Officer is Representative Director KIM YongLe. Questions, requests and complaints about personal information are handled through the contact points below, and we will answer without delay.

  • Privacy Officer: Representative Director KIM YongLe
  • Email: sales@hansolbio.com
  • Phone: +82 70 7774 0702
  • Post: Privacy Officer, HANSOL BIO Co., Ltd., Halla SigmaValley 911, 910, 102, 545 Dunchon-daero, Jungwon-gu, Seongnam-si, Gyeonggi-do 13215, Republic of Korea

15. Remedies in Korea

If you need further help with a privacy complaint, you can contact the following bodies:

16. Changes to this policy

We will post any change on this page and update the "Last updated" date. We will announce changes on the website at least 7 days before they take effect, or at least 30 days before for changes that materially affect your rights, and give additional notice where the law requires.

This policy takes effect on 6 October 2026.