Privacy Policy

This Privacy Policy describes how Maytraders (사업자등록번호: 522-11-02673), located at #J174 3FL, 408-1, Bongcheon-ro, Gwanak-gu, Seoul, Republic of Korea ("May Traders", "we", "us"), collects, uses, and protects personal information when you use our wholesale platform at koreangoodswholesale.com ("Platform"). May Traders is the data controller responsible for your personal information. This policy is written in compliance with Korea's Personal Information Protection Act (PIPA, 개인정보 보호법) and, to the extent applicable, the EU General Data Protection Regulation (GDPR) for users located in the European Economic Area.

We collect the following categories of personal information: Account Registration • Company name, contact name, email address, phone number, country • Business registration number (if provided) • Password (stored in hashed, non-reversible form — we cannot see your password) • Account status (pending, approved, or rejected) Orders • Shipping address (street, city, postal code, country) • Order contents, quantities, and value • Incoterms and shipping notes • Payment reference information Contact Form Submissions • Name, email address, company name, and message content Usage Data • We do not currently use analytics tracking cookies or third-party behaviour tracking tools.

We use your personal information for the following purposes: • To evaluate your reseller application and manage your account • To process and fulfil your orders and communicate order status • To send payment instructions and confirm receipt of payment • To generate trade documents (purchase confirmations, export declarations) • To respond to enquiries submitted through our contact form • To notify you of changes to our services, pricing, or these policies • To comply with legal obligations under Korean law and applicable international regulations We do not use your personal information for automated decision-making or profiling beyond the account approval process, which is reviewed by a human.

For users in the European Economic Area, we process your personal information under the following legal bases: • Contract performance: processing necessary to fulfil your orders and manage your account (Article 6(1)(b) GDPR) • Legitimate interests: account security, fraud prevention, and business communications (Article 6(1)(f) GDPR) • Legal obligation: retention of transaction records as required by Korean tax and commercial law (Article 6(1)(c) GDPR) • Consent: where we obtain your explicit consent for a specific purpose (Article 6(1)(a) GDPR) For users in Korea, processing is conducted in accordance with Article 15 of PIPA.

We do not sell or rent your personal information to third parties. We may share your information in the following limited circumstances: • Shipping carriers (e.g. FedEx, DHL): where May Traders arranges shipping on your behalf, your delivery address and contact details are shared with the carrier solely for the purpose of delivery • Legal compliance: where required by Korean law, court order, or a competent regulatory authority • Business transfer: in the event of a merger, acquisition, or sale of business assets, personal information may be transferred as part of that transaction, subject to equivalent privacy protections All third parties who receive your data are required to process it only for the specified purpose and in accordance with applicable data protection law.

We retain your personal information for as long as necessary to provide our services and comply with legal obligations: • Account data: retained for the duration of your account and for 5 years after closure, in accordance with Korean commercial record-keeping requirements • Order records: retained for 5 years from the date of the transaction, as required by the Korean Value Added Tax Act and related regulations • Contact form submissions: retained for 2 years, then permanently deleted • Rejected application data: deleted within 6 months of rejection When data is no longer required, it is securely deleted or anonymised.

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure, including: • Passwords are stored using industry-standard one-way hashing (bcrypt) • All data is transmitted over encrypted HTTPS connections • Access to personal data is restricted to authorised personnel on a need-to-know basis • Our platform infrastructure is hosted on secure cloud services No method of transmission or storage is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify affected individuals and the relevant authority as required by law.

Depending on your location, you may have the following rights regarding your personal information: Under Korean PIPA • Right to access your personal information we hold • Right to correction of inaccurate information • Right to deletion of your personal information • Right to suspension of processing Under GDPR (EEA users) • Right of access (Article 15) • Right to rectification (Article 16) • Right to erasure / "right to be forgotten" (Article 17) • Right to restriction of processing (Article 18) • Right to data portability (Article 20) • Right to object to processing (Article 21) • Right to withdraw consent at any time (where processing is based on consent) To exercise any of these rights, contact us at jason@maytraders.com. We will respond within 10 business days. We may need to verify your identity before processing your request. If you are located in the EEA and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local supervisory authority.

The Platform uses a single session cookie ("kgoods_session") solely to maintain your login state. This cookie is strictly necessary for the Platform to function and does not track you across other websites. We do not use advertising cookies, analytics cookies, or any third-party tracking technologies. Your browser settings allow you to delete or block cookies at any time. Blocking the session cookie will prevent you from logging in.

Your data is stored on servers located in South Korea. If you are accessing the Platform from outside Korea, your data may be transferred to and processed in Korea. For EEA users, Korea has been assessed under EU data protection standards. We take steps to ensure adequate protections are in place for any international transfers, including reliance on Standard Contractual Clauses where required.

The Platform is intended solely for business use by adults. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has submitted information to us, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised effective date. For material changes, we will notify account holders by email.

For any questions about this Privacy Policy, to exercise your rights, or to raise a privacy concern, please contact: Maytraders — Privacy #J174 3FL, 408-1, Bongcheon-ro, Gwanak-gu, Seoul, Republic of Korea Email: jason@maytraders.com Phone: +82-10-8630-1221 We aim to respond to all privacy-related enquiries within 10 business days.