Privacy Policy

1. Who We Are

CYAN PMU ("CYAN", "we", "us") is a semi-permanent makeup studio and online PMU education provider based in Seoul, Korea. This Privacy Policy explains what personal information we collect through this website, how we use it, and the choices you have. For privacy questions, contact us at cyanbycyan@gmail.com.

2. Information We Collect

Contact & enquiry data: when you submit our contact form or message us via messenger (e.g., LINE), we collect your name, contact details, and the contents of your message.

Account data (CYAN ACADEMY): if you register for a course, we collect your email address, a hashed password, and your purchase/enrollment history.

Payment data: course and report purchases are processed by Stripe. We do not store your full card number; Stripe processes payment details under its own privacy policy and provides us with a transaction reference and payment status.

Face-reading photos: the AI face-reading feature analyzes a photo you provide. The image is processed to generate your result and is not used for any other purpose. Where analysis runs on your device it is not uploaded; where server-side analysis is used, the image is sent only to our analysis provider to produce your result and is not retained longer than needed to deliver it.

Usage data: standard server and analytics data such as IP address, browser type, pages viewed, and approximate region, used to operate and secure the site.

3. How We Use Your Information

To respond to enquiries and schedule consultations; to provide, deliver, and support paid products (academy video courses and face-reading reports); to process payments and prevent fraud; to operate, secure, and improve the website; and to comply with legal obligations.

4. Third Parties We Share Data With

We share data only with service providers that help us run the site, under appropriate safeguards: Stripe (payment processing), our video platform provider (secure course-video delivery), our hosting and database providers (site operation and data storage), and our AI analysis provider (face-reading results). We do not sell your personal information.

5. International Transfers

We operate internationally and serve clients across Asia, Europe, and the Americas. Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

6. Data Retention

We keep personal information only for as long as necessary for the purposes described above or as required by law (for example, payment and tax records). Enquiry messages and account data are retained while your relationship with us is active and deleted or anonymized thereafter on request, subject to legal retention requirements.

7. Your Rights

Depending on your location (including under the EU/UK GDPR and Korea's PIPA), you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at cyanbycyan@gmail.com. You may also have the right to lodge a complaint with your local data protection authority.

8. Cookies

We use strictly necessary cookies to operate the site (such as session and security cookies). We do not use advertising cookies. You can control cookies through your browser settings.

9. Security

We use reasonable technical and organizational measures to protect personal information, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure.

10. Children's Privacy

Our services are intended for adults. We do not knowingly collect personal information from children. PMU procedures are provided only to adults in accordance with applicable law.

11. Changes & Contact

We may update this policy from time to time; the "last updated" date reflects the latest version. Questions or requests: cyanbycyan@gmail.com. For Japanese consumers, see also our Specified Commercial Transactions Act disclosure (特定商取引法に基づく表記).