Kurly Global Privacy Notice ver2 – 컬리프라이버시센터

Kurly Global Privacy Notice

Effective Date: October 13, 2025
Last Updated: June 18, 2026

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND OUR POLICIES AND PRACTICES REGARDING YOUR INFORMATION AND HOW WE WILL TREAT IT. IF YOU DO NOT AGREE WITH OUR POLICIES AND PRACTICES, DO NOT ACCESS OR USE THE SERVICES. BY ACCESSING OR USING THE SERVICES, YOU AGREE TO THIS PRIVACY POLICY.

Kurly Co., Ltd. and its subsidiary Kurly Global, Inc. (collectively, “Kurly“) hereby establish and disclose the following privacy policy (this “Privacy Notice“) to inform Users of the processes for the collection, use, disclosure, and retention of the personal information that Kurly collects through Kurly’s website at www.kurlyglobal.com, our mobile application, and related services we provide to Users (collectively, the “Services”).

The Services are for Users residing in the United States. If you live in a U.S. state in which a comprehensive consumer data privacy law has been enacted, such as California, please see the Additional Notice for Users of Certain U.S. States regarding additional rights available to you under your state’s privacy law.

Additional Notice for Users of Certain U.S. States

We may update this Privacy Notice from time to time and will notify you of any changes by updating the “Last Updated” date above. Any changes will be effective immediately. Your continued use of the Services after we revise this Privacy Notice means that you accept those changes, so please check this Privacy Notice periodically for updates.

For purposes of this Privacy Notice, “Platform” means a virtual place of business operated by Kurly Co., Ltd. at, www.kurlyglobal.com through which Kurly offers products and related Services to Users; “User” means any individual who accesses the Platform or otherwise uses the Services provided by Kurly under this Privacy Notice.

CHAPTER 1. INFORMATION WE COLLECT AND HOW WE COLLECT IT

Kurly collects the following personal information in the U.S. and processes it in the U.S. and Korea. For more information about data processing outside of U.S., see Transfers of Personal Information Outside United States.

① Personal information collected directly from Users
Kurly collects the following personal information directly from Users.

a. Account Information. When you sign up for membership, we collect your contact information (name, phone number, email address), online account password, and date of birth (age verification).
b. Order Details. When you place an order with us, we collect your name, phone number, email address, purchase information, payment information (date and time of payment, payment method, payment amount, payment status), billing information (name, address, phone number), and delivery receipient’s name, phone number, address, and information to be delivered.
c. Requests, Correspondence, Reviews, and Feedback. We collect information you may include in help requests, customer service correspondence, product ratings or reviews, and/or in any feedback, you send to us.
d. Marketing Contact. We may also collect your name, User account ID (including identification number), phone number, and email address for marketing communication.

② Personal information collected automatically from Users

Our Services automatically track and collect information such as your browser type, IP address, MAC address, and history of Services usage and visits, including product searches, clicks, shopping cart activity, purchases, and page visit history. We use this information to make our Services better and more relevant for you. We collect this information through cookies, pixels, and other tags, identifiers, or technologies, which may change over time.

③ Personal information collected from third parties

We may also collect personal information from third-party service providers and business partners, including delivery and payment service providers, public databases, or third parties such as analytics or advertising and marketing providers, where permitted under applicable law.

CHAPTER 2. HOW WE USE YOUR INFORMATION

We use this information to:

④ Provide you with our Services and establish and manage your account.

⑤ Process your orders and keep you informed about the status of your order.

⑥ Perform contractual obligations between you and us, to ensure the functions and safety of our Services, to verify your identity, to prevent and trace fraudulent or inappropriate usage.

⑦ Develop and enhance our Services and perform analytics.

⑧ Communicate with you, including providing you with notifications on Services that are updated or launched.

⑨ Provide marketing and promotional materials to you on our Services. You may unsubscribe anytime as provided in Your Choices.

⑩ Personalize service design and to provide you with Services tailored for you, for example, recommending and displaying information and advertisements regarding Services suited to you, and to invite you to participate in surveys relating to your use of our Services.

⑪ Provide maintenance services, monitor software licenses, to improve our Services or analyze the efficiency of our operations.

⑫ Increase and maintain the safety and security of our products and Services and prevent misuse.

⑬ Comply with and enforce applicable legal requirements, relevant industry standards and policies, including this privacy Policy and the Kurly Global Terms of Services.

CHAPTER 3. DISCLOSURE OF PERSONAL INFORMATION

Kurly may disclose personal information we collect from or about you to third parties as described below.

① To service providers and business partners who support our business, including but not limited to in connection with verifying payment methods and processing payments, logistics and delivery, communication, analytics, marketing and advertising.

② To comply with any court order, law, or legal process, including to respond to any government or regulatory request.

③ To enforce our rights arising from any contracts entered into between you and us, including this Privacy Notice and the Kurly Global Terms of Service and for billing and collection.

④ To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Kurly’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Kurly about our Users is among the assets transferred.

⑤ For any other purpose disclosed by us when you provide the information.

⑥ With your consent.

⑦ If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Kurly, our customers, or others.

Kurly may use or disclose aggregated information or deidentified information from our Services, without restriction, including using analytical data that does not specifically identify you to support our operations, improve our Services, and provide a better user experience. Kurly will not attempt to reidentify the information, except for the sole purpose of determining whether our deidentification processes satisfy requirements under applicable law.

CHAPTER 4. RETENTION

Kurly does not retain personal information longer than is reasonably necessary to provide Services to you, comply with our legal obligations, resolve disputes, and enforce our agreements. The criteria we use to determine retention periods include: (a) the length of time we have an ongoing relationship with our customers; (b) our legal obligations; and (c) the need to retain information to support our legal position (for example, for applicable statutes of limitations, litigation, or regulatory investigations).

CHAPTER 5. YOUR CHOICES

① Users may, at any time, request access to, correction of, or deletion of their personal information.

② Users may exercise these rights by email at global@kurlycorp.com. Additionally, Users may directly access and modify their personal information at any time on the Platform under “My Page > Account.“

③ These rights may be subject to certain exceptions as permitted by applicable law. For example, if personal information is required to be retained under applicable laws and regulations (such as for transaction records, tax compliance, or legal claims), Kurly may not delete such information but will inform the User of the applicable exception.

④ You may also contact us at global@kurlycorp.com to request the removal of publicly posted content on our Platform. All information posted in the public posting area is available to everyone who can access the internet. For example, if you do not want someone else to know your email address, do not include it in any message you post. Plesae be very careful when disclosing information in the public post area. We are not responsible for the use by others of any information disclosed by Users in the public post area.

⑤ Text Messages. Certain Kurly Services utilize short code programs (SMS or MMS text messaging). For example, we may use text messaging for marketing. Before we initiate sending any text messages to you, you will be notified about our use of text messaging and asked for your consent. You can opt out of text messages, including marketing-related texts by replying STOP from the mobile device that received the message or as otherwise provided in the message. We do not share mobile numbers, text message content, or text message opt-in status information with third parties for marketing or promotional purposes except with third parties who perform services on our behalf. Message frequency may vary, and message and data rates may apply.

CHAPTER 6. COOKIES

① Cookies are small data files placed and stored on your computer (or any other internet-accessing device) when you visit websites. Kurly or our third-party service providers may use cookies to store and retrieve usage information from internet browsers or devices to provide personalized services to Users.

② Purpose of use of cookies. We use cookies that are necessary for our Services to work properly and to enable certain features, to understand how you use our Services so that we can improve content and performance, to better understand your interests so that we can provide a more personalized experience, and to provide ads that are more relevant to you. We may also use cookies to create a User “session,” track a User as the User moves among pages of the Platform, or identify a User in a database.

③ Cookie choices. Users can adjust their browser settings to accept or reject certain cookies. If you decide not to accept certain cookies from our Services, you may not be able to take advantage of all available features.

CHAPTER 7. BEHAVIORAL ADVERTISING

Kurly may use third-party network advertisers to serve advertisements on our Platform, based on your visits to the Platform and your online activities over time and across different websites and other online services, and may use a traffic measurement service to analyze traffic on our Platform. Third-party ad serving enables network advertisers to provide you with advertisements for products and services in which you might be interested. The Platform’s third-party ad network providers, advertisers, and/or traffic measurement services may set and access third-party cookies on your computer, alone or in conjunction with web beacons or other tracking technologies, if you have those cookies enabled in your browser. These cookies are set to, among other things, help deliver advertisements to you that you might be interested in, to prevent you from seeing the same advertisements too many times, and to conduct research regarding the usefulness of certain advertisements to you. See https://optout.networkadvertising.org/ and https://optout.aboutads.info/ for information regarding the “opt-out” procedures of certain third-party network advertisers.

CHAPTER 8. SECURITY

Kurly uses reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction. These safeguards include measures such as access controls, employee training, encryption where appropriate, security monitoring, vulnerability management, physical security controls, and disaster recovery procedures.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to our Platform, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. If you suspect any security issue with your account (including but not limited to a compromised password), notify Kurly at support@kurlyglobal.com promptly so we can assist you.

The transmission of information via the internet and mobile platforms is not completely secure. Although we have implemented measures designed to protect your personal information, we cannot guarantee the security of your personal information transmitted through our Platform. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures included through the Platform.

CHAPTER 9. CHILDREN’S PRIVACY

The Services are not intended for individuals under age 18. If Kurly becomes aware that it has collected personal information from an individual under 18, we will promptly delete such information. If you believe anyone under 18 has provided personal information to us, please contact us at global@kurlycorp.com, and we will work to delete it.

CHAPTER 10. RELATIONSHIP WITH SHOPIFY

In order to provide and improve the Services to Users, Kurly uses Shopify as a hosting provider, which collects and processes personal data about access to and use of the Services. The information you submit to the Services is transmitted to and shared with Shopify, as well as with third parties that may be located outsite of the U.S., in order to provide and improve the Services to you. In addition, to protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information from Users’ interactions with Kurly Platform with other merchants and with Shopify. In such cases, Shopify is responsible for processing Users’ personal information, including in response to Users’ requests to exercise their rights with respect to personal information used for this purpose. To learn more about how Shopify uses personal information and the rights your may have, visit: Shopify Consumer Privacy Notice. Depending on where you live, you may exercise certain rights here in relation to your personal information: Shopify Privacy Portal Link.

CHAPTER 11. THIRD PARTY CONTENT AND LINKS TO OTHER WEBSITES

When you are on the Platform, you may be directed to other websites that are operated and controlled by third parties that are beyond our control such as our social media sites. This Privacy Notice does not apply to the privacy practices of these third-party websites. These other websites may send their own cookies to you, may independently collect data or solicit personal information and may or may not have their own published privacy policies. If you visit a website that is linked from our Platform, you should review that website’s privacy policy before providing any personal information.

CHAPTER 12. TRANSFERS OF PERSONAL INFORMATION OUTSIDE UNITED STATES

① Please be aware that your personal information will be transferred to, stored or processed by us or our service providers outside the U.S. (including Korea), where our servers are located and our central database is operated, or where our service providers are located for the purposes set out in this Privacy Notice.

② While your personal information is outside of the U.S., it is subject to the laws of the country in which it is located, which may have different data protection laws than in the U.S. Those laws may require disclosure of your personal information to authorities in that country. Your use of Kurly’s Services or otherwise providing information to Kurly constitutes acknowledgment that your personal information may be processed, transferred, and stored in the U.S. and other countries as described in this Privacy Notice. If you refuse such transfer, you may be restricted from using Services that require processing of personal information outside of the U.S.

CHAPTER 13. CONTACT US

If you have any questions or complaints about this Privacy Notice or how we or our service providers collect, use, disclose or retain your personal information, please contact us at support@kurlyglobal.com.