Privacy Policy

Last updated: 12 September 2026

Pick From Korea ("we") sells sealed trading cards from South Korea to customers worldwide. This policy explains what we collect, why, and who else sees it.

What we collect

To fulfil an order we collect your name, email address, and shipping address (country, address, city, postal code). We also collect your phone number, state or province, and a VAT or tax ID where your destination requires them for customs.

We store the order itself: order number, items, amounts, currency and exchange rate, the shipping option you chose, payment method, the payment transaction ID returned by PayPal, and the tracking number once your parcel ships.

We never see or store your card details. Payment is handled entirely by PayPal; we receive only a transaction reference confirming payment.

If you tick the optional marketing box at checkout, we also record that you opted in: whether you consented, when you did so, where you did so (for example, the order you were placing at the time), and the version of the wording you agreed to.

If you sign up for a stock alert — for example, to hear when single cards go on sale — we collect your email address, any note you leave about the cards or sets you are interested in, the time and place of your request, and the time you confirmed it by clicking the link in our email. A request that is not confirmed within 7 days is deleted.

If you ask us to tell you when a specific sold-out item is back in stock, we collect your email address, the item you asked about, and the time you asked and confirmed. This is a one-time alert for that item only and does not sign you up for any other email.

If you create an account, we collect your email address, a password, and your name if you choose to give one. We never store your password itself. It is put through a one-way cryptographic function (scrypt) and only the result is kept, so nobody — including us — can read it back.

We also record when you agreed to each of the terms shown at sign-up, when you last signed in, and a log of sign-in, sign-up and password-reset attempts on the account: the time, whether it succeeded, and a one-way hash of the IP address and the email address used. We keep those attempt records for 30 days to block password guessing. The hashes cannot be reversed to recover the original address.

Why we collect it

To process and ship your order, to send you order confirmations and status updates, to handle returns, damage and loss claims, and to keep the accounting and transaction records required of us by Korean law.

Only if you have opted in, we also use your email address to tell you about new arrivals, restocks and special offers. Every such email carries an unsubscribe link, and choosing not to opt in — or opting out later — does not affect your order in any way.

If you have signed up for a stock alert, we use your email address to tell you when the items in that topic go on sale, and we use your note only to decide what to source. We do not send you other marketing unless you have separately opted in to it.

If you have asked for a back-in-stock alert for a specific item, we use your email address to send you a single email when that item is available again. We also count how many people are waiting for each item to decide what to restock first; we do not share who they are.

If you have an account, we use it to show your past orders in one place and to fill in your details at checkout so that you do not have to retype them, and — once combined shipping launches — to group several of your orders into a single parcel. Sign-in attempt records are used only to detect and block password guessing; we do not use them to profile you.

Who else sees it

We use the following services to run the store. Each receives only what it needs to do its job, and none of them may use your order data for their own purposes. How the analytics services handle usage data is described under "Cookies and analytics" below.

We pass your name, address and phone number to the carrier handling your parcel — DHL, FedEx or Korea Post — because international shipping and customs clearance require them.

We do not sell your data. We do not use it for advertising to you on other websites. We send marketing email only to people who have explicitly opted in, and every such email carries a one-click unsubscribe link.

Where your data goes

We are based in South Korea. All five services above are located in the United States, so placing an order means your data is transferred to and stored there.

Korean law requires us to ask for your explicit consent to this transfer, which is why there is a separate checkbox for it at checkout. The details we must disclose — who receives your data, in which country, what is sent, why, and for how long — are in the table above and in the checkout notice. If you do not consent we cannot process an international order, because every part of the service depends on these providers.

How long we keep it

Korean commerce law requires us to retain certain records: contract and order withdrawal records for 5 years, payment records for 5 years, and consumer complaint or dispute records for 3 years. We delete personal data that is no longer needed for those purposes.

If you opt in to marketing email, we keep your opt-in record for as long as you stay subscribed. After you unsubscribe we keep a record of both your opt-in and your opt-out for a limited period, so that we can show your consent history if asked and make sure we do not email you again. Stock-alert requests that you never confirm are deleted after 7 days.

Back-in-stock alerts are deleted 7 days after the request if you never confirm them, and 90 days after the alert email is sent. You can cancel one at any time from the link in the email.

Account data is kept until you close your account. If you sign up but never verify your email address, the account is deleted after 30 days. Sign-in attempt records are deleted after 30 days, and email-verification and password-reset links expire within 24 hours and 1 hour respectively and are deleted 7 days after they are used or expire.

Closing your account does not delete orders you have already placed — Korean commerce law requires us to keep those records for the periods above — but they stop being linked to an account.

Your rights

You can ask us what we hold about you, ask for it to be corrected, ask for it to be deleted, or ask us to stop processing it. Email support@pickfromkorea.com and we will respond within one business day. Where a legal retention period applies we will tell you which record we must keep and why.

If you have an account, you can change your password from the "Forgot your password?" link on the sign-in page, which sends a reset link to your email address. To close your account, email support@pickfromkorea.com and we will do it for you.

If you are in the EU or UK, you also have the rights given to you by your local data protection law, including the right to complain to your national authority.

Cookies and analytics

We use Vercel Analytics and Speed Insights to measure how the site performs, and Google Analytics 4 to understand how visitors use it.

Google Analytics 4 sets first-party cookies (_ga and _ga_<measurement id>) holding a randomly generated identifier for your browser. Through it we see which pages you viewed, how long you stayed, scrolling and outbound clicks, how you reached the site, your browser and device type, and an approximate location — country and city — that Google derives from your IP address. Google states that it does not log or store IP addresses in Google Analytics 4. We keep this data for 14 months.

None of it is linked to your name, email or shipping address, and we do not use it for advertising. We run no advertising trackers, and Google Signals and Google Ads linking are switched off.

You can opt out by blocking cookies in your browser, or by installing Google's Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout). Blocking these cookies does not affect browsing or ordering.

Contact

Privacy officer: Dongju Lee
support@pickfromkorea.com
Pick From Korea, 45 Maesan-ro, Paldal-gu, Suwon-si, Gyeonggi-do 16456, Republic of Korea

If this policy changes we will update the date at the top of this page.