Privacy Policy

Last updated: 17 August 2026

SEOUL BY RUBY PTY LTD, trading as Seoul by Ruby (“Seoul by Ruby”, “we”, “us” or “our”), respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, use, store and disclose personal information when you visit our website, purchase our products, create an account, subscribe to our communications, contact us or otherwise interact with Seoul by Ruby (collectively, the “Services”).

Our online store is powered by Shopify.

By using our Services, you acknowledge that you have read this Privacy Policy.

Nothing in this Privacy Policy limits any rights available to you under applicable privacy or data protection laws.

1. Personal Information We Collect

The personal information we collect depends on how you interact with us.

It may include:

Contact information, such as your name, email address, telephone number, billing address and shipping address.

Order and transaction information, including products purchased, products viewed, items added to your cart, discounts used, returns, refunds and order history.

Payment information, including information required to process your payment. Payment information is generally processed securely by Shopify and our payment providers, and we do not necessarily receive or store complete payment card details ourselves.

Account information, including account credentials, preferences and settings where you create an account.

Customer service information, including information you provide when contacting us about an order, product, return, complaint or other enquiry.

Marketing information, including your email marketing preferences, subscriptions and interactions with marketing communications.

Device and technical information, which may include your IP address, browser type, device type, operating system, network information and other technical identifiers.

Website activity, including pages and products viewed, interactions with our website, referring websites, cart activity and other information about how you use our Services.

Reviews and content, including product reviews, photographs, comments or other content you choose to submit.

We aim to collect only information reasonably necessary for our business activities and the provision of our Services.

2. How We Collect Personal Information

We may collect personal information:

• directly from you when you place an order, create an account, contact us, subscribe to marketing or otherwise provide information;
• automatically when you use our website, including through cookies and similar technologies;
• from Shopify and other service providers that support our online store;
• from payment, fulfilment, shipping, analytics, marketing and customer service providers;
• from social media platforms where you choose to interact with us; and
• from other third parties where permitted by applicable law.

3. How We Use Personal Information

We may use personal information to:

• process and fulfil orders;
• process payments;
• arrange shipping and delivery;
• provide order confirmations and tracking information;
• manage returns, refunds and customer enquiries;
• create and manage customer accounts;
• provide customer support;
• communicate with you about your purchases;
• operate, maintain and improve our website;
• understand how customers interact with our products and website;
• personalise aspects of your shopping experience;
• provide product recommendations where appropriate;
• administer discounts, promotions and loyalty or customer programs;
• collect and display product reviews;
• send marketing communications where permitted;
• measure and improve advertising and marketing;
• detect, investigate and prevent fraud, misuse and security incidents;
• maintain business and transaction records;
• comply with legal, regulatory, taxation and accounting requirements;
• enforce our Terms of Service and other policies; and
• establish, exercise or defend legal claims.

We may also use information for other purposes that are disclosed to you at the time of collection or that you otherwise authorise.

4. Marketing Communications

If you subscribe to Seoul by Ruby marketing, we may send you information about products, launches, offers, skincare content and other news.

You can unsubscribe from promotional emails at any time using the unsubscribe link contained in our emails.

Unsubscribing from marketing does not prevent us from sending necessary transactional or service communications, such as order confirmations, shipping notifications, refund information or responses to customer service enquiries.

Where applicable law requires consent for particular forms of electronic marketing, we will seek that consent.

5. Cookies and Similar Technologies

Our website and the services that support it may use cookies, pixels, tags and similar technologies.

These technologies may be used to:

• keep the website functioning;
• remember your preferences;
• maintain your shopping cart;
• understand website usage;
• measure website performance;
• prevent fraud;
• provide analytics;
• measure advertising effectiveness; and
• personalise content or advertising where permitted.

Depending on your location, you may be provided with options to manage non-essential cookies or similar technologies.

You can also control certain cookies through your browser settings, although disabling cookies may affect some website functionality.

6. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to operate our business and provide our Services.

Recipients may include:

Shopify, which provides the ecommerce platform used to operate our store.

Payment providers, which process payments and help prevent fraudulent transactions.

Shipping and logistics providers, which require relevant information to deliver your order.

Technology and hosting providers, which help us operate and secure our systems.

Analytics providers, which help us understand how customers interact with our website.

Marketing and advertising providers, where permitted by applicable law.

Customer service and communications providers, which help us communicate with customers.

Professional advisers, including accountants, lawyers, insurers and other advisers where reasonably necessary.

Government, regulatory and law enforcement authorities, where disclosure is required or authorised by law.

We may also disclose information in connection with a proposed or completed merger, acquisition, restructuring, financing or sale of all or part of our business, subject to applicable legal requirements.

We do not disclose personal information merely because another party requests it. Any disclosure must have an appropriate business, legal or authorised basis.

7. Shopify

Our online store is hosted and powered by Shopify.

Shopify collects and processes personal information relating to your access to and use of our store in order to provide its ecommerce services.

Information you provide through our store may therefore be transmitted to and processed by Shopify and its service providers.

Shopify may also process certain customer information for its own purposes in connection with features and services it provides across the Shopify platform.

You can learn more by reviewing Shopify’s Consumer Privacy Policy and privacy controls.

8. Personalised Advertising

Depending on the services enabled on our store and your location, Shopify and other advertising or marketing providers may use information about your interactions with our website to help measure or personalise advertising.

Some privacy laws provide rights to opt out of certain uses or disclosures of personal information for targeted or personalised advertising.

Where these rights apply, appropriate controls may be provided through our website, Shopify or the relevant service provider.

We will honour legally recognised opt-out mechanisms where required by applicable law.

9. International Processing and Overseas Disclosure

Seoul by Ruby is based in Australia and sells products internationally.

Some of the companies that provide services to us operate globally. As a result, personal information may be processed, stored or accessed outside Australia or outside the country in which you live.

These providers may include Shopify, payment providers, technology providers, analytics services, marketing platforms, communications providers and shipping or logistics partners.

The countries involved may vary depending on the services we use, your location and the location of the relevant service provider.

Where required by applicable law, we take reasonable steps or rely on appropriate contractual or legal mechanisms when personal information is transferred internationally.

10. Security

We take reasonable steps appropriate to our business to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

We also use reputable service providers, including Shopify and payment providers, to support the security of our ecommerce operations.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping any account credentials associated with our Services confidential.

If you believe your account or personal information has been compromised, please contact us promptly.

11. How Long We Keep Personal Information

We retain personal information for as long as reasonably necessary for the purposes for which it was collected and for legitimate business and legal requirements.

The appropriate retention period may depend on factors including:

• whether you maintain a customer account;
• our relationship with you;
• transaction and order history;
• taxation and accounting requirements;
• fraud prevention;
• dispute resolution;
• legal obligations; and
• the establishment, exercise or defence of legal claims.

When information is no longer reasonably required, we may delete or de-identify it, subject to applicable legal requirements.

12. Your Privacy Rights

Depending on where you live and the laws that apply to you, you may have rights relating to your personal information.

These may include the right to:

• request access to personal information held about you;
• request correction of inaccurate or incomplete information;
• request deletion of certain personal information;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• receive certain information in a portable format;
• opt out of certain targeted advertising or data-sharing activities; and
• complain about how your personal information has been handled.

These rights are not absolute and may be subject to legal exceptions.

To make a privacy request, contact us at support@seoulbyruby.com.

We may need to verify your identity before completing a request.

We will not discriminate against you for exercising a privacy right available to you under applicable law.

13. Australian Customers

Where the Privacy Act 1988 (Cth) and Australian Privacy Principles apply to us, we will handle personal information in accordance with those requirements.

You may request access to or correction of personal information we hold about you by contacting us.

If you have a privacy complaint, please contact us first so we can investigate and respond.

If you are not satisfied with our response and the Privacy Act provides you with the relevant right, you may be able to make a complaint to the Office of the Australian Information Commissioner (OAIC).

Nothing in this Privacy Policy is intended to provide fewer protections than those required by applicable Australian privacy law.

14. European Economic Area and United Kingdom

If you are located in the European Economic Area or United Kingdom, applicable data protection law may provide additional rights.

Depending on the circumstances, these may include rights of:

• access;
• correction;
• erasure;
• restriction;
• objection;
• data portability; and
• withdrawal of consent.

Where applicable, we process personal information using an appropriate legal basis, which may include:

• performing a contract with you, such as fulfilling an order;
• complying with legal obligations;
• our legitimate interests or those of another party where those interests are not overridden by your rights; and
• your consent where consent is required.

Where personal information is transferred internationally, applicable safeguards may include recognised contractual mechanisms such as standard contractual clauses where required.

You may also have the right to lodge a complaint with the data protection authority responsible for your jurisdiction.

15. Other International Privacy Rights

Because we sell internationally, customers in certain countries or states may have additional privacy rights under their local laws.

These may include rights to access, correct or delete information or opt out of certain forms of targeted advertising, sale or sharing as those concepts are defined under applicable law.

Where applicable law grants you such a right, you may contact us at support@seoulbyruby.com to exercise it.

16. Children’s Privacy

Our Services are intended for a general adult shopping audience and are not directed toward children.

We do not knowingly seek to collect personal information directly from children where parental or guardian consent would be required by applicable law.

If you are a parent or guardian and believe a child has provided personal information to us inappropriately, please contact us at support@seoulbyruby.com.

Where required, we will take reasonable steps to delete the information.

17. Third-Party Websites

Our website may contain links to websites, social media platforms or services operated by third parties.

Once you leave our website, the collection and use of your information by those third parties is governed by their own privacy policies and practices.

We are not responsible for the privacy practices of independent third-party websites or services.

We recommend reviewing their privacy policies before providing personal information.

18. Reviews and User-Generated Content

If you voluntarily submit a product review, photograph, comment or other content for public display, information you choose to include may become publicly visible.

Please avoid including sensitive or unnecessary personal information in public reviews.

Our use of reviews and other submitted content is also subject to our Terms of Service.

19. Privacy Complaints

If you have a question or complaint regarding our handling of your personal information, please contact:

support@seoulbyruby.com

Please provide enough information for us to understand and investigate your concern.

We will review privacy complaints and respond within a reasonable period, having regard to any timeframe required by applicable law.

Depending on your location, you may also have a right to complain to the relevant privacy or data protection regulator.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, technology, service providers, legal obligations or privacy practices.

When we update the policy, we will publish the revised version on our website and update the Last updated date.

Where required by law, we will provide additional notice of material changes.

21. Contact Us

For questions, requests or complaints concerning privacy, please contact:

SEOUL BY RUBY PTY LTD
Trading as Seoul by Ruby

Email: support@seoulbyruby.com
Business address: 342/1 Airlie Street, Claremont WA 6010, Australia
ABN: 65 699 802 474
ACN: 699 802 474

For applicable privacy and data protection laws, SEOUL BY RUBY PTY LTD is responsible for the personal information it controls.