Privacy Policy

We collect the following categories of information in connection with your use of the Service. [Provided directly by you]

• Email address and password (stored encrypted)
• Name, country, and birth year, where you choose to provide them
• Correspondence you send us, such as support requests

[Collected automatically]

• Service usage records, including pages viewed, searches performed, and Images purchased or downloaded
• Access logs, device and browser information, and IP address
• Payment method details received from our payment processor (for example, card type and last 4 digits) — we do not receive or store your full card number

We use the information we collect for the following purposes:

• To create and manage your account and authenticate your access to the Service
• To process purchases, deliver download links, and manage your purchase history
• To respond to customer inquiries and resolve disputes
• To secure the Service, detect fraud, and enforce our Terms of Service
• To understand usage trends and improve the Service
• To comply with our legal obligations

Where applicable data protection law (including the EU/UK General Data Protection Regulation) requires a legal basis for processing, we rely on the following:

1. A.Performance of a contract — to create your account, process purchases, and deliver Images and download links you have requested;
2. B.Legitimate interests — to secure the Service, prevent fraud and abuse, analyze and improve the Service, and communicate with you about your account, where these interests are not overridden by your data protection rights;
3. C.Consent — for optional information you choose to provide, and for any marketing communications, where required;
4. D.Legal obligation — to comply with applicable tax, accounting, consumer protection, and other legal requirements.

We process only the personal information reasonably necessary for these purposes, and we do not sell your personal information to third parties.

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. As a general guide:

• Account information: retained while your account is active, and for 30 days after deletion (your email address may be retained for up to 1 year to prevent fraudulent re-registration)
• Purchase and payment records: retained for 5 years, in line with applicable consumer and e-commerce record-keeping requirements
• Access logs: retained for 3 months
• Complaint and dispute records: retained for 3 years

We do not sell your personal information. We disclose personal information only in the following circumstances:

1. A.Service providers — with vendors who perform services on our behalf, such as payment processing (PayPal) and cloud hosting and storage (Amazon Web Services). These providers may access only the information necessary to perform their function and are contractually restricted from using it for any other purpose;
2. B.Legal requirements — where required to comply with applicable law, a valid legal process, or a lawful request from a public authority;
3. C.Protection of rights — where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Jiangs, our users, or the public, or to investigate fraud or a violation of our Terms of Service;
4. D.Business transfers — in connection with a merger, acquisition, reorganization, or sale of assets, subject to the transferee’s agreement to handle your information consistently with this Privacy Policy;
5. E.With your consent — for any other purpose disclosed to you at the time of collection, with your consent.

Jiangs is based in the Republic of Korea, and the information we collect is generally stored and processed on servers located in South Korea (via our hosting provider, Amazon Web Services). If you access the Service from outside South Korea, your information will be transferred to, and processed in, South Korea, which may have data protection laws that differ from those of your country of residence. Where we transfer personal information internationally, we take reasonable steps to ensure it continues to be protected in accordance with this Privacy Policy and applicable law.

We use cookies and similar technologies to keep you signed in, remember your preferences (such as currency and language), and understand how the Service is used. Some cookies are strictly necessary for the Service to function (for example, maintaining your login session and shopping cart) and cannot be disabled. Most browsers let you block or delete cookies through their settings. If you block strictly necessary cookies, some features of the Service — such as staying signed in or completing a purchase — may not work correctly.

We use reasonable administrative, technical, and physical safeguards designed to protect your personal information, including encrypting passwords and sensitive data, restricting internal access on a need-to-know basis, and using secure connections (TLS/SSL) for data in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you have reason to believe your interaction with us is no longer secure, please contact us immediately at privacy@jiangsgallery.com.

Subject to applicable law, you have the following rights regarding your personal information:

1. A.Access — request confirmation of, and access to, the personal information we hold about you;
2. B.Correction — request that we correct inaccurate or incomplete information;
3. C.Erasure — request that we delete your personal information, subject to exceptions where retention is required by law or necessary to resolve disputes;
4. D.Restriction — request that we limit how we process your information in certain circumstances;
5. E.Portability — request a copy of certain information you provided to us, in a structured, commonly used format;
6. F.Objection — object to our processing of your information based on legitimate interests;
7. G.Withdraw consent — where processing is based on consent, withdraw that consent at any time, without affecting processing carried out before the withdrawal.

You can access and update most of your information directly from My Page > Profile. To exercise any other right, contact us using the details in Section 11. We will respond to verified requests within the timeframe required by applicable law.

The Service is not directed to, and we do not knowingly collect personal information from, children under the age of 16. If we become aware that we have collected personal information from a child without appropriate consent, we will take reasonable steps to delete that information. If you believe a child has provided us with personal information, please contact us at privacy@jiangsgallery.com.

For questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact:

• Jiangsgallery Operations Team
• Email: privacy@jiangsgallery.com
• Hours: Weekdays, 09:00–18:00 (KST)

If you are located in South Korea, you may also contact the Personal Information Protection Commission (privacy.go.kr) or the Privacy Violation Report Center (118). If you are located in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with your local data protection supervisory authority.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. If we make a material change, we will provide notice by posting an update on the Service or, where appropriate, by emailing the address associated with your account, before the change takes effect.