Introduction & scope
This Privacy Policy describes how MJS (“we”, “us”, or “our”) collects, uses, shares, and protects your personal information when you visit www.mjsbeautys.com (the “Website”), purchase through our online store, apply to or participate in our Partner Program, contact us, or otherwise interact with our services.
MJS is a Hong Kong–incorporated company that supplies Korean aesthetic medical products on a wholesale basis to licensed medical professionals, clinics, and authorised distributors in the United States, Australia, the European Union, the United Kingdom, and other regions of Asia.
By using the Website or providing us with personal information, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please do not use our services.
Information we collect
Information you provide directly
When you interact with us, you may give us:
- When you make a purchase: name, billing and shipping addresses, email address, telephone or WhatsApp number, business name, professional credentials (e.g. licence number where required), and order details. Payment card numbers are processed by our payment provider — we do not store full card numbers on our servers.
- When you apply to the Partner Program: name, email, WhatsApp number, country, business entity, role or title, MJS customer email (if you are applying via the customer path), monthly volume estimate, social media handles and audience metrics (if you are applying via the influencer path), payout method preference (Wise or bank transfer), and any voluntary information you include.
- When you contact us: the name, email, phone number, and the contents of your communication.
Information we collect automatically
- Technical data: IP address, browser type and version, device type, operating system, and referring URL.
- Usage data: pages visited, time spent on pages, clicks, search terms, and scroll behaviour.
- Order data: for customers, your order history, purchase patterns, and shipping events.
- Referral attribution: for Partner Program, the partner referral link clicked, the cookie associated with that click, and downstream order outcomes.
Information from third parties
- Logistics providers: shipment tracking events from carriers integrated via 17track.
- Payment processors: transaction confirmations and dispute notices.
- Public social media profiles: when influencer applicants share their handles, we may review the publicly available information on those profiles to verify audience size and content fit. We do not access private messages or non-public data.
How we use your information
We use your personal information to:
- Process and fulfil your orders, including shipping, customs documentation, and delivery tracking
- Verify Partner Program eligibility (purchase history, business credentials, influencer audience)
- Calculate and pay commissions to approved partners via Wise or bank transfer
- Communicate with you about orders, accounts, applications, commissions, and program updates
- Provide customer support and respond to your inquiries
- Detect, investigate, and prevent fraudulent activity (including self-referral, related-account fraud, and chargeback abuse)
- Comply with tax, customs, anti-money laundering, and other legal obligations
- Improve our Website, services, and product offerings
- Send marketing communications, only where you have given consent or the messages are about products and services you have purchased
Legal basis for processing
For users in the European Union, the United Kingdom, and similar jurisdictions, we rely on the following legal bases under the GDPR and UK GDPR:
- Contract performance: processing your orders, delivering products, paying partner commissions, and providing customer support
- Legitimate interests: fraud prevention, account security, business analytics, and improving our services — provided these interests are not overridden by your rights
- Consent: for marketing communications, optional analytics cookies, and other voluntary features. You may withdraw consent at any time.
- Legal obligation: tax records, accounting requirements, customs declarations, and anti-money laundering compliance
Sharing your information
Service providers (data processors)
We share information with trusted service providers who help us operate the Website, fulfil orders, run the Partner Program, and deliver communications. We require each provider to handle your data only as instructed and to protect it appropriately.
Legal disclosures
We may disclose your information where required by law, court order, or governmental request, or where necessary to protect our rights, property, or the safety of others.
Business transfers
If MJS is involved in a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of that transaction. We will give you notice if your data becomes subject to a different privacy policy.
International data transfers
MJS is incorporated and operates from Hong Kong. Because our customers, partners, and service providers are located worldwide, your personal information may be transferred to, stored in, and processed in countries other than your own — including Hong Kong, the United States, the European Union, the United Kingdom, and other regions where our service providers operate.
The data-protection laws of these countries may differ from those of your home country. Where we transfer personal data of EU, UK, or Swiss residents to a country that has not been recognised as providing adequate protection, we rely on appropriate safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms.
By using our services or providing us with your information, you understand and accept that your information may be transferred to and processed in jurisdictions outside your home country.
Cookies & tracking technologies
We use cookies and similar technologies (web beacons, local storage) for the following purposes:
- Strictly necessary cookies: login state, shopping cart contents, security tokens, and other functions that the Website cannot operate without. These cannot be disabled.
- Functional cookies: remember your language and currency preferences and similar settings.
- Analytics cookies (with consent): collect anonymous statistics about how visitors use the Website to help us improve.
- Affiliate-tracking cookies: record partner-referral attribution. The Partner Program uses a 90-day first-click cookie, meaning a partner is credited for a referral if the referred customer’s first qualifying click on a partner link occurred within 90 days of their order.
You can control cookies through your browser settings. Disabling certain cookies may affect Website functionality, including the ability to log in, complete purchases, or attribute partner referrals.
Data security
We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include:
- Encrypted data transmission via HTTPS/TLS for all Website traffic
- Cloudflare edge protection against common attacks
- Restricted internal access to personal data on a need-to-know basis
- Regular software and security updates to our platform and plugins
- Authenticated email infrastructure (SPF, DKIM, DMARC) to reduce phishing risk
No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant supervisory authorities as required by applicable law.
Data retention
We retain personal information only for as long as necessary for the purposes for which it was collected and to comply with our legal, accounting, and reporting obligations. Typical retention periods are:
- Order and customer records: seven (7) years following the last order, for tax and accounting compliance
- Partner Program records: for the duration of the partnership and seven (7) years following its termination
- Marketing data: until you unsubscribe, plus a brief reasonable period to action your request
- Support inquiries: two (2) years from the date the matter was resolved
- Cookies: until they reach their natural expiration or you clear them via your browser
Where retention is no longer required, we will delete or anonymise the data.
Your privacy rights
Rights available to all users
- Access: request a copy of the personal data we hold about you
- Correction: request correction of inaccurate or incomplete data
- Deletion: request deletion of your personal data, subject to legal retention obligations
- Portability: receive your data in a machine-readable format and transmit it to another controller
- Restriction: ask us to limit how we process your data
- Objection: object to processing based on legitimate interests, including marketing communications
- Withdrawal of consent: withdraw any consent you have previously given, at any time
To exercise any of these rights, email [email protected]. We will respond within thirty (30) days. We may need to verify your identity before acting on your request.
EU, UK, and Swiss residents (GDPR, UK GDPR, FADP)
California residents (CCPA / CPRA)
You have the right to:
- Know what categories of personal information we collect, use, and share
- Request deletion of your personal information
- Opt out of the “sale” or “sharing” of personal information (we do not sell or share your data for cross-context behavioural advertising)
- Limit the use of sensitive personal information (we do not knowingly collect sensitive PI)
- Be free from discrimination for exercising your rights
Australian residents (Privacy Act 1988)
If you are unsatisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
Canadian residents (PIPEDA)
You may lodge a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca if your concerns are not resolved by us.
Hong Kong residents (PDPO)
You may lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD) at www.pcpd.org.hk.
Children’s privacy
Our products and services are intended exclusively for licensed medical professionals, clinics, distributors, and qualified business entities — all of whom must be at least eighteen (18) years of age, or such higher age as required to be a licensed practitioner in the relevant jurisdiction.
We do not knowingly collect personal information from anyone under the age of eighteen. If we discover that we have inadvertently collected such information, we will delete it promptly. If you believe a minor has provided us with personal data, please contact [email protected].
Third-party links
The Website may contain links to external websites — for example our Instagram profiles, payment processor pages, manufacturer brand sites, and authority resources. This Privacy Policy does not apply to those websites. We encourage you to review the privacy practices of any third-party site before providing them with personal information.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will:
- Update the “Last Updated” date at the top of this Policy
- Post the revised version on this page
- For material changes, notify active partners and customers via email or an in-product notice
We encourage you to review this Policy periodically. Your continued use of our services after changes have been published constitutes acceptance of the revised Policy.
Contact us
If you have any questions about this Privacy Policy, wish to exercise any of your rights, or want to report a concern, please contact us:
MJS
Privacy & data-protection inquiries