Privacy policy

This policy explains how Fillx Aesthetics ("Fillx", "we", "us"), based in Guro-gu, Seoul, Republic of Korea, handles personal information when you browse fillxaesthetics.com, create an account or place an order. Questions or requests go to contact@fillxaesthetics.com.

1. What we collect

• Account details: your name, email address and password (stored only as a one-way hash, never in readable form), and when you confirmed you are 18 or older and accepted our terms and this policy. Professional accounts also give a company name and a license or registration number so we can verify eligibility for professional-use products.
• Order details: billing and delivery names, addresses and phone numbers, the products and quantities ordered, any coupon used, your order notes, and when you accepted our terms.
• Messages: what you send through our contact form, product requests, or on WhatsApp.
• Fillx Rewards: the points you earn and spend and why, your share code, who referred you (if anyone), and your birthday if you choose to add it to your profile. To stop people referring themselves, we also keep a one-way coded version (a keyed hash, which can't be turned back into the original) of the internet connection and browser you sign up, sign in and order from. We only compare these codes with each other.
• Reviews: the rating and text you submit after an order, shown with your first name only.
• Technical data: your IP address, used briefly to protect sign-in, checkout and forms from abuse, and anonymous, aggregated visit statistics.

We do not receive or store your card or bank details. Payment is made through a secure payment link.

2. Why we use it

• To take, prepare, ship and support your orders, and send order and payment emails (contract).
• To run your account and, for professional products, check that you are eligible (legal obligation and contract).
• To run Fillx Rewards: your wallet, birthday points and referral credits (contract).
• To answer your messages and requests (legitimate interest).
• To keep the site secure and prevent fraud and spam (legitimate interest).
• To keep records that tax and trade law require (legal obligation).

We do not sell your personal information, and we do not use it for advertising profiles.

3. Who processes it for us

We share only what each service needs to do its job:

• Vercel hosts the website and provides cookie-free visit statistics.
• Neon hosts our database.
• Cloudflare stores product images and order invoices.
• Resend delivers our emails.
• WhatsApp (Meta) carries the conversation if you choose to continue your order there.
• Couriers such as FedEx receive your name, delivery address and phone number to deliver your parcel.

Some of these providers store data outside your country, including in the United States. Where the law requires it, transfers are covered by the providers' standard contractual safeguards.

4. Cookies and storage

We use only what the site needs to work: a sign-in cookie when you log in, a cookie that lets a guest see the order they just placed, a cookie that remembers a friend's share link for 30 days so your first order can be credited to both of you, and storage in your browser for your bag and recent searches. We do not use advertising or cross-site tracking cookies, so we don't show a cookie banner.

5. How long we keep it

• Order and invoice records: as long as tax and trade law requires, usually five to seven years.
• Accounts: until you close yours. You can delete your account yourself under Account, Profile; the personal details on it are erased straight away, and past orders are kept without them for as long as tax law requires.
• Contact messages: up to two years.
• Rewards history: while your account is open. When you delete your account the wallet is closed; the points records stay only as anonymous entries linked to past orders.
• Abuse-protection records (IP counters): about one day.
• Coded connection and browser records for Fillx Rewards: while your account is open; deleted with it.

6. Your rights

Wherever you live, you can ask us to show you the information we hold about you, correct it, delete it, export it, or stop or limit how we use it. If you have an account you can do the main ones yourself: edit your details, download a copy of your data and delete your account under Account, Profile. For anything else, write to contact@fillxaesthetics.com and we will reply within one month. We may need to keep order records the law requires even after you close your account.

These rights come from the law where you live, including:

• United Kingdom and France (EU): the UK GDPR and the EU GDPR.
• Canada: PIPEDA and provincial privacy laws.
• Australia: the Privacy Act 1988 and the Australian Privacy Principles.
• United Arab Emirates: the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).
• United States: state privacy laws such as the California Consumer Privacy Act.
• Republic of Korea, where we are based: the Personal Information Protection Act.

You can also complain to your local data protection authority, for example the ICO in the UK, the CNIL in France or the Office of the Privacy Commissioner in Canada or Australia.

7. Security

Connections to the site are encrypted, passwords are hashed, admin access is restricted and checked on every action, and sign-in and forms are protected against automated attacks. No system is perfectly secure, so please use a password you don't use elsewhere.

8. Age

The site is for adults. Creating an account or placing an order requires confirming you are 18 or older, and we do not knowingly collect information from anyone under 18. If you believe a minor has given us their details, tell us and we will delete them.

9. Changes

If we change this policy we will update the date above, and tell account holders by email about any significant change.

10. Contact

Email contact@fillxaesthetics.com, message us on WhatsApp at +82 10 8113 3835, or see our terms & conditions.