Information we process
- Order and delivery: name, email, telephone number, country, postal address, order items, and delivery instructions
- Payment record: payment-provider transaction identifiers, amount, currency, and payment status; CELORA does not store full card details
- Support and security: messages, order references, IP address, device and access records
- First-party traffic statistics: exact visit time, full IP address and approximate country/region/city inferred from it, page path, referring domain and UTM attribution, country code, broad device/browser/operating-system category, screen width, bag and checkout-step events, and irreversible visitor and session hashes created from network and browser signals; full user-agent strings are not retained in the analytics table
Purposes and legal basis
We process information to perform the sales contract, collect payment, prevent fraud, deliver goods, provide support, comply with tax and recordkeeping duties, and establish or defend legal claims. Where consent is required for a non-essential purpose, we request it separately.
Service providers
Necessary information may be shared with the payment provider selected at checkout, including PayPal or Eximbay, as well as international and local carriers, hosting and security providers, professional advisers, and authorities where legally required. Each provider receives only the information needed for its role.
International processing
CELORA is established in South Korea, so information submitted by customers in the United States, Europe, or other supported destinations is processed in South Korea for order fulfillment and support. Payment and delivery providers may also process information in countries described in their own privacy notices.
Retention and security
We retain order, payment, delivery, and complaint records only for the period needed for fulfillment, legal obligations, disputes, and fraud prevention, and then delete or anonymize them. Full IP addresses in first-party analytics are retained for 30 days; other cookie-free traffic records are automatically deleted after 90 days. Access is restricted and payment secrets are stored only in protected server configuration.
Your choices and rights
Depending on your location, you may request access, correction, deletion, restriction, portability, or objection, and may complain to a competent data protection authority. Some records may be retained where the law requires it. Send requests to support@celora.live.
Controller contact
CELORA Co., Ltd. · Privacy contact: GUO YIXI · support@celora.live · +82-70-8018-6781