​​

Senskam Ltd, trading as K-pop Korner, operates the website at kpopkorner.com, our four UK stores, and the K-pop Korner – Official Store mobile app on the App Store and Google Play (together, the "Service").

This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It applies to the app, the website, and our in-store operations.

Effective date: 3 Sept, 2026
Last updated: 3 Sept, 2026
 

1. Who we are

Senskam Ltd is the data controller responsible for your personal data.

Company Senskam Ltd

Trading as K-pop Korner

Company number 14035140 (registered in England and Wales)

Registered office139 Appledore Avenue, Nottingham, England, NG8 2RW

Privacy contact hello@kpopkorner.com

App name K-pop Korner – Official Store

ICO registration number ZC018771

Our stores are located in Nottingham, London Euston, Leeds, and Birmingham.

 

2. What personal data we collect
 

2.1 Information you give us

Account and profile

• Name and email address

• Password (stored encrypted — we never see it in plain text)

• Profile photo and display name, if you add one

• Date of birth, where you provide it for age-restricted products or events

Orders and payments

• Billing name and address

• Delivery address

• Phone number

• Order history, including pre-orders and gift card purchases

• Partial payment card details (card type and last four digits) — we do not store full card numbers

Loyalty programme

• Korner Klub Points balance

• Points earned, redeemed, and expired

• Rewards claimed and challenge participation

• Giveaway and competition entries

Events and in-store

• Event and pop-up ticket bookings

• Attendance records

• Any accessibility requirements you tell us about, so we can accommodate you

Community features

• Posts, comments, images, and reactions you submit in the app's community areas

• Reports you submit about other users' content

Communications

• Messages sent through our contact form, live chat, email, or social media

• Customer support history, including returns and refund enquiries

• Reviews you leave on Trustpilot or in-app

Marketing

• Your email and push notification preferences

• Which campaigns you have opened or clicked

2.2 Information collected automatically

Device and technical data

• Device model, operating system and version, screen size, language, time zone

• App version and unique app instance identifier

• Advertising identifier (Apple IDFA on iOS, Advertising ID on Android)

• IP address

Usage data

• Screens and pages viewed, products browsed, searches performed

• Session length and frequency of use

• Basket and wishlist activity

• Push notification opens

• The page or link that brought you to us

Location

• Approximate location, derived from your IP address, used to show relevant store information, shipping options, and pricing

• Precise location, only if you grant location permission on your device, and only to show your nearest K-pop Korner store or event. You can withdraw this permission at any time in your device settings without losing access to the rest of the app.

2.3 Data we do not collect

We do not collect or store full payment card numbers, CVV codes, or bank credentials. All card payments are handled directly by our payment providers on their own secure systems.

We do not collect special category data such as health, religious, or political information.

3. Why we use your data, and our lawful basis

What we use it forLawful basis under UK GDPR

Creating and managing your accountPerformance of a contract

Taking payment, fulfilling orders, handling pre-ordersPerformance of a contract

Processing returns, refunds, and exchanges Performance of a contract / Legal obligation

Managing event bookings and in-store collections Performance of a contract

Running the Korner Klub Points loyalty programme Performance of a contract

Hosting community features and moderating contentLegitimate interests — keeping the community safe

Answering customer support enquiriesPerformance of a contract

Sending marketing emails and push notificationsConsent

Analysing how the app and site are used, to improve themLegitimate interests — improving our Service

Detecting and preventing fraud, abuse, and unauthorised accessLegitimate interests — protecting our business and customers

Keeping accounting and tax recordsLegal obligation

Establishing or defending legal claimsLegitimate interests

Where we rely on consent — marketing emails, push notifications, precise location, and non-essential cookies — you can withdraw it at any time. Withdrawing consent does not affect anything we did lawfully before you withdrew it.

Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights and concluded that it is not. You can object at any time using the contact details in Section 13.

4. Who we share your data with

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

We share data with the following categories of service providers, who process it only on our instructions:
 

Website and app platform
Wix.com Ltd. — hosts the website and app and stores account, order, booking, loyalty, and community data.
 

Payment processing
Wix Payments — processes online credit and debit card payments, including payments made through Apple Pay and Google Pay. Wix Payments works with its own underlying card processors to complete these transactions.
PayPal (Europe) S.à r.l. et Cie, S.C.A. — processes payments where you choose to pay by PayPal.

These providers receive your payment and billing details directly. We do not receive or store your full card details.
 

Delivery and fulfilment
Royal Mail — receives your name, delivery address, and phone number.
 

Email marketing
Wix Email Marketing — used to send marketing communications where you have provided consent.
 

Analytics
Google Analytics — helps us understand website and app usage and improve our services.
 

Push notifications
Wix, Apple Push Notification Service, and Firebase Cloud Messaging — used to deliver push notifications.
 

Reviews
Trustpilot — if you choose to leave a review.
 

Advertising
Meta Platforms Ireland Ltd — used for advertising and promotional activities.
 

We may also disclose your data:

• Where required by law, court order, or a regulator.

• To our professional advisers, such as accountants, lawyers, and insurers, where necessary.

• To a buyer or successor if we sell or restructure the business, subject to the same data protection safeguards.

International transfers

Some providers process data outside the UK. Where that happens we rely on UK adequacy regulations, or on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, so your data keeps the same protection it has in the UK.

5. How long we keep your data

Account data
While your account is active, then 12 months after closure or after 3 years of inactivity.

Order, payment, and refund records
6 years from the end of the relevant tax year, to meet HMRC requirements.

Event bookings and attendance
12 months after the event.

Korner Klub Points and rewards history
While your account is active.

Community posts and comments
Until you delete them, or until your account is deleted.

Customer support correspondence
3 years from last contact.

Marketing consent records
Until you withdraw consent, plus a suppression record kept indefinitely so we do not contact you again by mistake.

Analytics and usage data
26 months.
 

CCTV in our stores, where operated
30 days.
 

When a retention period ends, we securely delete the data or anonymise it so it can no longer identify you.
 

6. Deleting your account and your data

You can ask us to delete your account and personal data at any time.

In the app Open the app, go to your profile, then Settings, then Delete Account.

By email Email hello@kpopkorner.com from the address registered to your account, with the subject line "Data deletion request".

We will confirm receipt and complete your request within 30 days.

What gets deleted: your account, profile, community posts, loyalty points balance, marketing preferences, saved addresses, and analytics data linked to your account.

What we must keep: records of completed orders, payments, and refunds, for 6 years, because UK tax and accounting law requires it. These records are restricted so they are used only for that legal purpose, and are deleted once the period ends.

Deleting your account permanently forfeits any unspent Korner Klub Points and unused store credit.

7. Your rights

Under UK data protection law you have the right to:

• Be informed about how we use your data — this policy

• Access a copy of the personal data we hold about you

• Rectification of data that is inaccurate or incomplete

• Erasure of your data, subject to the legal retention limits in Section 6

• Restrict processing while a concern is being resolved

• Object to processing based on legitimate interests, and to direct marketing at any time and for any reason

• Data portability — receive your data in a structured, commonly used, machine-readable format

• Withdraw consent at any time, where consent is our lawful basis

To exercise any of these, email hello@kpopkorner.com. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you are not satisfied with how we have handled your data, you can complain to the Information Commissioner's Office:

• ico.org.uk/make-a-complaint

• 0303 123 1113

• Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the chance to resolve it with you first.

8. Cookies, tracking, and advertising

On the website

We use cookies and similar technologies for three purposes:

• Essential — keeping you logged in, remembering your basket, securing the site. These cannot be switched off.

• Analytics — understanding which pages and products are popular, so we can improve the site.

• Marketing — showing you relevant adverts and measuring whether they work.

You can accept or reject non-essential cookies through the banner shown on your first visit, and change your choice at any time in your browser settings.

In the app

The app uses your device's advertising identifier for analytics and, where you have consented, personalised marketing.

• On iOS, we ask permission through Apple's App Tracking Transparency prompt. Change your answer in Settings → Privacy & Security → Tracking.

• On Android, you can delete or opt out of your Advertising ID in Settings → Privacy → Ads.

Declining tracking does not restrict any feature of the app.

9. Marketing

If you opt in, we may send you emails and push notifications about new releases, pre-orders, restocks, events, and Korner Klub rewards.

You can opt out at any time by:

• Clicking unsubscribe in any marketing email

• Turning off notifications for the app in your device settings

• Updating your preferences in your account

• Emailing hello@kpopkorner.com

We will still send service messages you cannot opt out of, such as order confirmations, dispatch notices, pre-order updates, and refund confirmations. These are necessary to fulfil your order.

​

10. How we protect your data

• All traffic between your device and our Service is encrypted using TLS

• Passwords are stored using industry-standard hashing, never in readable form

• Access to customer data is limited to staff who need it, protected by multi-factor authentication

• Our platform provider, Wix, maintains ISO 27001 certification and PCI DSS compliance for payment handling

• We review our security practices regularly

No system can be guaranteed completely secure. If a breach occurs that is likely to result in a risk to your rights, we will notify the ICO within 72 hours and tell you directly where required.

11. Third-party links and services

The Service contains links to third-party sites and platforms, including TikTok, Instagram, X, Trustpilot, and artist or label websites. We are not responsible for their content or privacy practices. Please read their own policies before providing them with personal data.

Our Nottingham and London Euston stores host PHOTOISM photo booths. Any data you provide to those booths is handled by their operator under their own privacy policy, not ours.

12. Changes to this policy

We may update this policy from time to time to reflect changes to our Service or the law. The current version is always available at kpopkorner.com/privacy-policy, and the "Last updated" date at the top will change.

Where a change materially affects your rights, we will tell you by email or through a notice in the app before it takes effect.

13. Contact us

Senskam Ltd (trading as K-pop Korner) 139 Appledore Avenue, Nottingham, England, NG8 2RW Company number 14035140

Email: hello@kpopkorner.com