Your privacy matters.

Effective date: 1 January 2026 | Last reviewed: April 2026

Who we are

Qobey ("we", "us", "our") is a UK-based Korean skincare editorial website. Our registered address and data controller details are available on request at privacy@qobey.com.

What data we collect

Data you provide to us:

• Email address (if you subscribe to our newsletter)
• Name (if you contact us directly)
• Any information you include in contact form submissions

Data collected automatically when you visit our site:

• IP address (anonymised after 90 days)
• Browser type and version
• Pages visited and time on site
• Referring URL
• Device type and operating system

This data is collected via cookies and analytics tools. See our Cookie Policy for full details.

How we use your data

We use the data we collect to:

• Send newsletter emails (only if you have subscribed and provided consent)
• Respond to your enquiries
• Improve our website content and user experience
• Understand which content our readers find most useful
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

Our lawful basis for processing

We process your personal data on the following legal bases under UK GDPR:

• Consent — for newsletter email marketing. You can withdraw consent at any time by clicking "Unsubscribe" in any email.
• Legitimate interests — for analytics data, to improve our website.
• Contract performance — to fulfil requests you have made of us.

Cookies and third-party services

Our site uses cookies for analytics (Google Analytics 4) and affiliate tracking. You can manage cookie preferences through our Cookie Policy and consent tool. See our Affiliate Disclosure for details of affiliate tracking cookies.

Data sharing

We share data only with:

• Email service provider — to send newsletters (your email address)
• Analytics provider — Google Analytics 4, with data anonymisation enabled
• Hosting provider — Hostinger, who process server logs
• Law enforcement — only if legally required

All third parties we use are GDPR-compliant and have appropriate data processing agreements in place.

International transfers

Google Analytics data may be transferred to the United States. Google operates under the EU-US Data Privacy Framework. We use IP anonymisation to limit the personal data transferred.

How long we keep your data

• Newsletter subscribers: Until you unsubscribe, plus 30 days
• Contact form data: 12 months from last contact
• Analytics data: 14 months (Google Analytics default)
• Server logs: 90 days

Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Erase your personal data ("right to be forgotten")
• Restrict how we use your data
• Object to processing based on legitimate interests
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time (for processing based on consent)

To exercise any of these rights, contact us at privacy@qobey.com. We will respond within 30 days.

Complaints

If you believe we have not handled your personal data appropriately, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

We would always prefer to resolve any issues directly — please contact us first at privacy@qobey.com.

Changes to this policy

We will update this policy when our data practices change. Material changes will be flagged on the site and, where possible, notified to newsletter subscribers. The "last reviewed" date at the top of this page is updated with each revision.