Privacy Policy
Last Updated: March 9, 2026
At JM Shinhwa Hub ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard information when you visit hub.jmshinhwa.org (the "Site") and purchase our digital products.
1. Information We Collect
1.1 Information You Provide
- Newsletter Subscription: Email address when you sign up for our newsletter.
- Contact Form: Name, email address, and message content when you reach out to us.
- Purchase Information: Purchases are processed through third-party payment platforms (e.g., Gumroad). We do not collect or store payment card details directly.
1.2 Information Collected Automatically
- Usage Data: Pages visited, time spent, click patterns, and referring URLs.
- Device Information: Browser type, operating system, screen resolution, and language preference.
- IP Address: Used for approximate geographic location and security purposes.
- Cookies: Small data files stored on your device (see Section 4 below).
1.3 Information We Do NOT Collect
- We do not collect Social Security numbers, government IDs, or financial account numbers.
- We do not collect sensitive personal data such as racial or ethnic origin, political opinions, or health data.
- We do not knowingly collect data from children under 16.
2. How We Use Your Information
We use collected information for the following purposes:
- Service Delivery: To provide, maintain, and improve our Site and digital products.
- Communication: To send newsletters, product updates, and respond to inquiries (only with your consent).
- Analytics: To understand how visitors use our Site and improve user experience.
- Security: To detect and prevent fraud, abuse, and unauthorized access.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
We will never sell, rent, or trade your personal information to third parties for marketing purposes.
3. Third-Party Services
We use the following third-party services that may collect data according to their own privacy policies:
- Gumroad / Lemon Squeezy: Payment processing for digital product purchases. They collect payment and transaction data under their own privacy policies.
- Cloudflare: Website hosting, CDN, and security services. They may process IP addresses and usage data.
- Google Fonts: Font delivery service. Google may collect usage data per their privacy policy.
We encourage you to review the privacy policies of these services. We are not responsible for their data practices.
4. Cookies & Tracking Technologies
4.1 Types of Cookies We Use
- Essential Cookies: Required for Site functionality (e.g., language preference, session management). Cannot be disabled.
- Analytics Cookies: Help us understand how visitors interact with our Site. Can be declined.
- Preference Cookies: Remember your settings and choices (e.g., dark/light theme, currency). Can be declined.
4.2 Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling essential cookies may affect Site functionality.
4.3 Do Not Track
We respect "Do Not Track" browser signals. When detected, we limit data collection to essential cookies only.
5. Data Retention
- Newsletter Data: Retained until you unsubscribe. You can unsubscribe at any time via the link in every email.
- Contact Form Data: Retained for up to 12 months after the inquiry is resolved.
- Analytics Data: Aggregated and anonymized after 26 months.
- Purchase Records: Retained as required by tax and accounting laws (typically 7 years).
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- SSL/TLS encryption for all data transmission.
- Cloudflare DDoS protection and Web Application Firewall.
- Regular security assessments and updates.
- Limited access to personal data on a need-to-know basis.
While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data ("right to be forgotten").
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to processing of your personal data for certain purposes.
- Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. International Data Transfers
Our Site is hosted on Cloudflare's global CDN network. Your data may be processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers, including:
- Using service providers that comply with applicable data protection frameworks.
- Implementing standard contractual clauses where required.
9. GDPR Compliance (EU/EEA Users)
If you are located in the European Union or European Economic Area:
- We process your data based on: consent, legitimate interest, or contractual necessity.
- You have the right to lodge a complaint with your local Data Protection Authority.
- We will not process your data for purposes incompatible with those for which it was collected.
10. CCPA Compliance (California Residents)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to Know: What personal information we collect, use, and disclose.
- Right to Delete: Request deletion of your personal information.
- Right to Opt-Out: We do not sell personal information. No opt-out is necessary.
- Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
11. Children's Privacy
Our Site and products are not directed to children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal data, please contact us immediately.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. For significant changes, we will notify newsletter subscribers via email. Your continued use of the Site after changes constitutes acceptance of the updated policy.
13. Contact Us
For privacy-related questions, concerns, or to exercise your rights, contact us: