Privacy policy

Who handles your information

The personal information controller is MIKISM PTY LTD. We operate from Australia and are preparing services for consumers in South Korea. Privacy enquiries: support@quokkamall.com.

This document is a draft under review. Registration will not open until the privacy contact, overseas processing details and final retention periods have been confirmed.

Membership and sign-in information

We process email addresses, member identifiers, sign-in providers and linked identifiers, and authentication and session records for account access and security. A social sign-in provider may supply additional information such as an email address, name or profile image depending on its configuration. We will confirm the actual scope when each provider is connected.

A profile display name is optional. Gender, full date of birth, mobile number, delivery address and Korean personal customs clearance code are not mandatory registration fields. Information required for orders will be explained when ordering is introduced.

Carts and consent records

Guest carts are stored in the current browser. Member carts are saved to an account so they can be accessed on other devices. Adding an item does not reserve it or create a purchase.

When collecting actual consent, we retain the member identifier, document version, items reviewed and consented to, selection values, record time and submission source. Registration is prepared to show consent choices before requesting an email code and save them to the account after email verification. Selections in a draft consent preview are not saved.

Marketing is optional

Use of personal information for marketing and receipt of promotional emails are separate optional choices. Declining them does not change registration or purchase conditions.

Promotional emails will be sent only after both consents are valid and sending and unsubscribe processes are ready. Service messages such as sign-in codes are separate from advertising consent.

Retention and deletion

Profiles and carts needed for member services are retained while you use the service. Under the current process, they are deleted from the operational database when account deletion completes. Marketing use ends when you withdraw consent or delete your account.

Access and security logs, provider operational records and backups are stored differently from operational data. We will confirm and explain their retention periods and deletion processes before publication. We do not state that every copy is deleted immediately when an account is deleted.

If order and payment records are created, we will separately explain the applicable legal retention grounds and periods. Registration does not obtain blanket consent to retention of future transaction records.

External providers and overseas processing

We use Supabase Pte. Ltd. for authentication and the database. This project’s primary data region is Sydney, Australia. Additional processing countries and subprocessor arrangements for support and security operations are still being checked. This does not mean all information stays exclusively in Australia.

The current sandbox website uses a Hostinger VPS. The production hosting provider has not yet been chosen. Request processing and access/security logs may include IP addresses, requested URLs and device/browser information. We will confirm the production provider, contracting entity, server country, retention and backup arrangements before customer registration opens.

The webfont files used for headings and body text are served by this store. Loading these fonts does not require separate requests to an external font provider.

iCloud Mail is being prepared for email verification delivery. Provider details, processing countries and retention will be confirmed and explained before customer email delivery begins. Social sign-in, payment, delivery and customs providers are not currently connected as recipients of customer registration information.

The applicable grounds and notices for overseas processing are being reviewed for each data flow. Where separate consent is required, we will first explain the transferred items, country, recipient and contact details, timing and method, purpose, retention, and the method and effects of declining. This draft is not blanket consent to overseas transfers.

Browser storage and security

We use session cookies and temporary authentication information for sign-in, and browser storage for cart persistence and synchronisation. You can remove cart items or clear browser data.

Restricting cookies or storage may prevent persistent sign-in or saved carts. Advertising pixels and separate visitor analytics are not currently connected.

We use encrypted transport, account-scoped access and access limited to service needs. Security measures are not described as removing every risk.

Access, correction, deletion and enquiries

You can change your display name and delete your account through the member menu. We are preparing a contact channel for access, correction, deletion, restriction of processing, withdrawal of consent and privacy enquiries. Contact: support@quokkamall.com.

Identity verification may be required. We will explain any restrictions under applicable law. Confirmed contact details and rights request procedures will be published before this policy takes effect.