Privacy, clearly.

Korean Hairstyle is operated by Kohwoon & Company Co., Ltd., Republic of Korea. This notice describes Google account sign-in and our consultation pilot and stylist waitlist. A waitlist stores your verified account, selected stylist, original work reference (if selected), service preference, travel month and contact consent. It is not a reservation and does not subscribe you to general marketing. Public profiles are reference previews, not partner listings. Official Instagram embeds contact Instagram and are subject to its privacy practices; you may block them or use their original post links.

What you share

We use your email to sign you in and contact you about your consultation. If you submit a request, we also use your preferred name, requested service, hair treatment history, travel dates, budget preference and any notes or messages you choose to send. Photo uploads are not offered in this pilot. Please do not submit medical records, passport details or payment information.

How we use it

We use consultation information to respond, assess possible service options and keep the conversation in your account. With your consultation consent, relevant information may be shared with a salon to explore your request. Sending a request does not enroll you in marketing.

Sign-in and email

We use a session cookie to keep you signed in. Email verification and consultation messages are delivered through Resend when enabled. Google sign-in requests your verified email, basic profile and unique Google account identifier. We store your email, Google identifier, preferred display name and account creation time to identify your account and let you return. Google access and ID tokens are used during sign-in and are not retained as account credentials. We do not request Gmail, Drive, contacts or calendar access. Your session cookie expires after 30 days and signing out revokes the current session. Account data is accessible to you and the authorized company operator; we do not sell Google account data or use it for advertising. Authentication codes are not saved in your browser’s local storage.

Operator alerts

A newly verified account creates one internal signup alert for our operator. When Slack is connected, the alert contains an opaque account reference and timestamp; your name, email and consultation content are not included. Account details are visible only in the protected operator workspace.

Your draft

On this device, we may save your selected service, travel dates and budget range so you can restore a draft. We do not save your email, name, hair history, notes or verification code in local storage. You can clear a draft in the consultation form.

Optional analytics

Choose Allow analytics to help us understand referral domains, campaign labels, pages and public styles explored, and interest and sign-in clicks. We strip URL query strings and do not include your email, name, consultation text or Google account identifier in analytics events. We do not use advertising tags. Google Tag Manager and Google Analytics load only after you choose Allow analytics. Google Analytics receives these minimized events together with technical browser/device information and a pseudonymous browser identifier in first-party _ga cookies configured for the browser session. We disable enhanced measurement, Google signals and advertising personalization. We do not send account identifiers or form contents to Google Analytics. See how Google uses information from sites that use its services. Google may process this information on servers outside your country. Withdrawing stops further collection on this page and clears the Analytics cookies; it does not erase reports already collected. Global Privacy Control is treated as a decline. You can change your choice using Analytics preferences in the footer.

Your choice and a random visit-session reference are kept in this browser tab. First and latest referral/campaign information for the current journey may be kept for up to two hours, including an HttpOnly cookie. If you create an account during that consented journey, those minimized sources are linked to the new account for signup reporting; returning sign-ins do not overwrite them. Behavior reports otherwise use daily aggregated counts. Temporary hashed event/session deduplication entries expire after two days and are cleared when collection next runs. This cache expiry is not a statement of account or aggregate-report retention.

Your choices and questions

For questions about stored information, retention, access, correction or deletion, contact kohjunsung@kohwoonc.com. We may need to verify your identity before acting on an account request. Our registered address is 7F, 110-1 Bucheon-ro, Wonmi-gu, Bucheon-si, Gyeonggi-do 14563, Republic of Korea.