Effective Date: July 15, 2026
This Privacy Policy explains how Wanton Sale (“Wanton Sale,” “we,” “us,” or “our”), the mail-order business operating the wan-ton.com marketplace and its associated seller and administrative applications (together, the “Service”), collects, uses, stores, and protects the personal information of members, buyers, and sellers (“you”) who use the Service, and describes the rights you may exercise in relation to that information.
Information you provide directly
Information generated through your use of the Service
Information we do not collect
With your permission, on your first visit we request your device's precise location (GPS/Wi-Fi) solely to infer your country and set a default currency and language; these coordinates are processed transiently by our own server and are not stored, and are never shared with any third party. Aside from this, we do not access your device camera or photo library except when you actively choose to upload an image, and the Service does not currently use advertising cookies, analytics trackers, or similar tracking technologies.
We process your personal information to: (a) create and authenticate your account; (b) process, fulfil, and ship your orders and handle related customer service; (c) review, verify, and onboard marketplace sellers; (d) display product reviews to other users; and (e) send you transactional communications about your account, an order, or the status of a seller application. We do not send marketing or promotional communications, and the Service currently has no function to do so.
We share limited personal information with the following providers strictly to operate the Service:
We do not sell your personal information to any third party, and we do not share it for third-party marketing purposes.
We retain your account information for as long as your account remains open, and delete it upon a verified deletion request, subject to the legal retention periods below. In accordance with Korean consumer-protection and e-commerce recordkeeping requirements, we retain: records of contract or subscription withdrawal for 5 years; records of payment and supply of goods for 5 years; and records of consumer complaints or dispute resolution for 3 years. Authentication session tokens are stored only temporarily and expire automatically after 7 days. Seller verification documents are retained for the duration of the seller relationship and any additional period required for legal or audit purposes.
When the purpose of collection has been achieved and no legal retention period applies, we destroy your personal information without delay. Electronic files are deleted using methods that prevent recovery; documents are shredded or otherwise irreversibly destroyed.
You may, at any time, request to access, correct, or delete your personal information, or withdraw any consent you have given, by contacting us using the details in Article 13. We will respond within a reasonable time in accordance with applicable law. If you believe your rights have been infringed, you may also contact the Korea Personal Information Protection Commission (privacy.go.kr, or dial 118) or another competent authority.
We protect your personal information by storing passwords as irreversible hashes, encrypting data in transit using HTTPS/TLS, restricting administrative access to verification documents to authorized personnel only, and using direct, time-limited upload links so that uploaded files pass straight to secure cloud storage rather than through intermediate systems.
The Service does not currently use advertising cookies, third-party analytics trackers, or similar tracking technologies. Authentication tokens necessary to keep you logged in are stored securely on your device. If this changes, we will update this Policy in advance.
The Service is not directed at children under the age of 14, and we do not knowingly collect personal information from children under 14 without verified parental or guardian consent. If we become aware that we have done so, we will delete that information promptly.
Your personal information is stored on servers operated by Amazon Web Services in the Seoul (ap-northeast-2), South Korea region.
We may revise this Privacy Policy from time to time to reflect changes in the Service or applicable law. We will post any material changes on this page at least 7 days before they take effect, together with an updated effective date.
