Privacy Policy

How BuyBotoxs collects, uses, and protects your information.

Last Updated: January 2025

Table of Contents

  1. Who We Are
  2. Data We Collect
  3. How We Use Your Data
  4. Legal Basis for Processing
  5. Sharing Your Data
  6. International Transfers
  7. Data Retention
  8. Your Rights
  9. Cookies
  10. Security
  11. Children’s Privacy
  12. Changes to This Policy
  13. Contact Us

1. Who We Are

BuyBotoxs (“we”, “us”, “our”) operates the website onlinebotoxshop.com and related services. We are a wholesale distributor of medical-grade injectable treatments, operating from Suite 1502, G Tower, 24-5 Yeouido-dong, Yeongdeungpo-gu, Seoul, South Korea.

We act as the data controller for personal data collected through our website and business operations. If you have questions about how we handle your data, contact us via our contact page.

2. Data We Collect

Account and Identity Data

  • Full name, job title, and professional role
  • Email address, phone number, and postal address
  • Medical licence number or clinic registration details
  • Copies of professional licences submitted for verification

Order and Transaction Data

  • Products ordered, quantities, and order history
  • Billing and delivery addresses
  • Payment method type (we do not store full card numbers)
  • Invoice and receipt information

Technical and Usage Data

  • IP address, browser type, and operating system
  • Pages visited, time on site, and referring URLs
  • Cookie identifiers and session data

Communications Data

  • Messages sent via contact forms, email, or WhatsApp
  • Customer service correspondence

3. How We Use Your Data

  • Verify professional credentials before authorising account access
  • Process and fulfil orders including shipping, customs documentation, and tracking
  • Manage your account and provide customer support
  • Comply with legal and regulatory obligations related to medical device distribution
  • Prevent fraud and ensure platform security
  • Send transactional communications such as order confirmations and shipping updates
  • Send marketing communications (only with your explicit consent, which you may withdraw at any time)
  • Improve our website using aggregated analytics data

5. Sharing Your Data

We do not sell your personal data. We share data only where necessary:

  • Logistics and shipping partners — to process and deliver your orders (including temperature-monitored couriers)
  • Payment processors — to securely process payments
  • Compliance and licence verification services — to verify your professional credentials
  • IT service providers — including hosting, email, and security platforms operating under data processing agreements
  • Regulatory and law enforcement authorities — where required by applicable law
All third-party service providers are contractually required to process your data only for the specified purpose and in compliance with applicable data protection laws.

6. International Data Transfers

As a global business operating from South Korea with customers worldwide, your data may be transferred to and processed in countries outside your country of residence. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) for transfers from the EEA, or equivalent mechanisms.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law. Key retention periods:

  • Account and licence data: Duration of account relationship plus 7 years (for regulatory compliance)
  • Order and transaction records: 7 years (tax and financial record requirements)
  • Marketing consent records: Until consent is withdrawn plus 2 years
  • Technical/log data: Up to 12 months

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access — request a copy of data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data (subject to legal obligations)
  • Restriction — request we limit processing of your data
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interests
  • Withdraw consent — withdraw marketing consent at any time without affecting prior processing

To exercise any of these rights, contact us via our contact page. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. Cookies

Our website uses cookies and similar tracking technologies. We use:

  • Essential cookies — required for site functionality, shopping cart, and login sessions
  • Analytics cookies — to understand how visitors use our site (e.g. Google Analytics, with IP anonymisation)
  • Marketing cookies — only with your explicit consent via our cookie banner

You can manage cookie preferences via our cookie consent tool or your browser settings. Disabling non-essential cookies will not affect your ability to use our site.

10. Security

We implement appropriate technical and organisational security measures including SSL/TLS encryption, access controls, regular security audits, and staff training. While no system is fully secure, we take all reasonable steps to protect your personal data from unauthorised access, loss, or disclosure.

If you suspect a security incident affecting your account, contact us immediately at our contact page.

11. Children’s Privacy

Our services are intended exclusively for licensed medical professionals and are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data, we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered account holders and/or a prominent notice on our website. The “Last Updated” date at the top of this page reflects the most recent revision. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related queries, requests, or complaints, please contact us: