Privacy Policy

Last updated: 28 August 2026

SECTION 1 — Who we are

KPOP HOUSE (kpophouse.eu) is operated by KPOP HOUSE OÜ, a company registered in Estonia. For any privacy question or request, contact us at info@kpophouse.eu.

SECTION 2 — What we collect

When you place an order, we collect the information needed to fulfil it: your name, shipping address, email address and phone number.

When you create an account, we store your email address, your name and your order history, including your cashback balance.

If you sign in through a social login (Google, Facebook, Apple, Discord or TikTok), we receive only your email address and profile name from that provider — nothing else. We never post to your accounts.

SECTION 3 — How we use your information

We use your data solely to process and deliver your orders, run your account and cashback rewards, and send transactional emails such as order confirmations, shipping updates and sign-in codes. We send marketing emails only if you have explicitly agreed to receive them, and every such email contains an unsubscribe link.

SECTION 4 — Payments

All payments are processed by Stripe (cards, Apple Pay, Google Pay, Link, PayPal, Klarna and other methods). Your card details are entered directly into Stripe's secure fields and never reach our servers. Stripe is certified under the PCI DSS security standard.

SECTION 5 — Analytics

We use a self-hosted, cookie-free analytics tool (Umami) running on our own server. It does not use advertising identifiers, does not build personal profiles, and its data never leaves our infrastructure or gets shared with anyone.

SECTION 6 — Cookies

We use only functional cookies, never advertising or cross-site tracking ones:

• _medusa_jwt — keeps you signed in to your account.

• _medusa_cart_id — remembers your shopping cart.

• cookie_consent — stores your cookie choice.

• preference cookies — remember your language, region and theme.

SECTION 7 — Hosting and security

Our website and database are hosted by HomeNet OÜ in Estonia, so your data is stored inside the European Union. All traffic between your browser and our site is encrypted (TLS/HTTPS).

SECTION 8 — Sharing

We never sell your personal data. We share it only where necessary to serve you:

• delivery carriers (such as Omniva, DPD, Itella/Smartpost and postal operators) receive your name, address, phone and email to deliver your parcel;

• Stripe processes your payment;

• authorities, if the law requires it.

SECTION 9 — Retention

Order and invoice data is kept for as long as Estonian accounting law requires (seven years). Account data is kept until you ask us to delete it.

SECTION 10 — Your rights (GDPR)

You may request access to, correction of, deletion of, or a copy of your personal data, restrict or object to its processing, and withdraw any consent at any time — just email info@kpophouse.eu. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

SECTION 11 — Data deletion

To delete your personal data, including data received through Facebook Login, Google or any other social sign-in, send an email to info@kpophouse.eu with the subject "Data Deletion Request" from the address linked to your account. We will delete your data and confirm within 30 days, keeping only what accounting law obliges us to retain.

SECTION 12 — Age of consent

By using this site, you confirm that you are at least the age of majority in your country of residence, or that you use it with the consent of a parent or guardian.

SECTION 13 — Changes

We may update this policy as the store evolves. The current version is always published on this page with its date. If we ever make material changes, we will announce them on the site.