Privacy policy

Last updated September 19, 2022

This Privacy Policy describes how Korean Red Ginseng Corp, Inc., along with our subsidiaries and affiliates (collectively referred to as “KRG”, “we”, “us” or “our”), processes Personal Information when you interact with us, when we manage our business and other relationships, when you visit our offices, or when you use our websites or otherwise communicate or interact with us (collectively, the “Services”). We are committed to ensuring the privacy and integrity of the Personal Information you share with us or we otherwise collect as we provide these Services.

Throughout this Privacy Policy, “Personal Information” means any information relating to an identified or identifiable individual.

Information We Collect

In most cases, we collect Personal Information directly from you. However, we may also obtain Personal Information about you from third parties or automatically when you interact with our Services.

Where applicable, we indicate whether and why you must provide us with your Personal Information. If you do not provide Personal Information when requested, you may not be able to benefit from the Services if that information is necessary to provide such Services or if we are legally required to collect it.

Below is a description of the different types of Personal Information we process and the sources from which we obtain them:

Customers. If you are our customer, we collect your name, contact details, payment information and any other information you provide to us. The type of information we collect depends on the type of transaction we have with you.
Office Visitors. If you visit one of our offices, we may ask you to register for your visit and ask you to provide your name, title, company, email, type of visitor, and the name of whom you are visiting.
Events and Surveys. We collect Personal Information about you if you choose to register for an event sponsored by us or respond to a survey. This Personal Information may include your name, address, title, company, phone number, and email address, as well as specific information relevant to the event for which you are registering or survey you are responding to.
Communications. If you choose to contact us for any purpose, we will collect your contact details, your name, and the content, date and time of your message, as well as our reply and any follow up action we take in relation to your inquiry.
Business Partners and Vendors. We may receive contact details and payment information from business partners’ and vendors’ employees in furtherance of the relevant partner or vendor relationship.
Other Sources. We may receive Personal Information about you from other sources, including third parties that help us update, expand, and analyze our records, identify new customers, or prevent or detect fraud. We may also receive information about you from social media platforms, for example when you interact with us on those platforms or access our social media content. The information we may receive is governed by the privacy settings, policies, and/or procedures of the relevant social media platform, and we encourage you to review them.

Cookies and Similar Technologies

We collect Personal Information via cookies, pixel tags, or similar technologies on our Services. Cookies are small pieces of data that may be stored in and retrieved from your web browser while you browse a website. Through the use of cookies, we may collect your device IP address, unique device ID, hardware and software type, Internet service provider, serving domain, geographical area, location data, browser type and settings data (such as screen resolution, color depth, time zone settings, browser extension and plugins) operating system, referring URLs, search history, information on actions taken or interaction with our digital assets (e.g., page views) and dates and times of actions.

Where required by applicable law, we obtain your consent to use cookies. You can customize your preferences regarding the use of cookies on our websites via our cookie preferences panel.

The type of cookies we may use include:

Strictly Necessary Cookies. These cookies are strictly necessary to make our Services available to you.
Marketing Cookies. These are used to provide customized content and information to you on the Services. We use third-party service providers to personalize website content based on visitors’ actions and browsing history, to measure campaign effectiveness, and to improve our Services.
Performance Cookies. We use cookies for analytics purposes in order to improve our Services. We use third party analytics providers, including Google Analytics, to help us understand how users engage with the Services. Google Analytics uses first-party cookies to track user interactions and understand how users use our Services. This information is used to compile reports and to help us improve our Services.

Most web browsers allow you to manage cookies through the browser settings. Be aware that, if you do not agree to certain cookies, your experience on our Services may be diminished and some features may not work as intended depending on the cookie. To find out more about cookies, you can visit www.aboutcookies.org or www.allaboutcookies.org.

Use of Personal Information

We may use your Personal Information for the follow purposes:

To manage our business relationships with customers, vendors and suppliers, business partners, office visitors, and other contractors
To provide Services to you, including facilitating purchases of our products
To communicate with you and respond to your inquiries
For marketing purposes
For other business purposes necessary to comply with laws, improve our services, and otherwise provide services to you.

Disclosure of Personal Information

We may disclose Personal Information about you as described below:

With vendors and service providers who perform services on our behalf, including dealers, distributors, marketing and research agencies, with whom KRG has a direct contractual relationship.
With KRG affiliates, subsidiaries, offices and representatives around the world as needed to provide our Services.
With third party contractors engaged by KRG in the course of business (e.g., accountants, insurance companies, banks, auditors, and other consultants).
With social networks when you use your credentials to log in to our Services.
In case of merger, sale, or other asset transfers. If we are involved in a merger, acquisition, financing, due diligence, reorganization, bankruptcy or liquidation where the business will not continue as a going concern, receivership, sale of KRG assets, or transition of our products or services to another person or entity, then your Personal Information may be transferred as part of such a transaction as permitted by law and/or contract.
If you gave us your permission, or if we believe doing so is required or appropriate to (i) comply with laws, law enforcement requests, and legal process, such as a court order or subpoena; (ii) respond to your requests; or (iii) protect your, our or others’ rights, property, or safety.
With government agencies, regulators or courts, as required by applicable law.
As necessary to provide Services to you.
With event partners or co-sponsors.

Your Rights and Choices

Depending on applicable law, you may have some rights and choices with respect to your Personal Information. Those rights may be limited by local law requirements. You may exercise these rights by contacting us as specified below.

Events. To update or correct the information you provide to us via our website for an event sponsored by us, you may contact us at contact@kgcus.com.
Marketing. We allow you to opt out of future communications at any time by following the opt-out instructions contained in such communications.
California Privacy Rights. If you are a Consumer receiving products or services for which we are a Business, as those terms and any other capitalized terms in this section are defined under the California Consumer Privacy Act of 2018 (California Civil Code §§ 1798.100 to 1798.199) and its implementing regulations, as amended or superseded from time to time (the “CCPA”), California law may permit you to request information regarding the:

Categories of Personal Information (as defined by applicable California law) Collected, Sold or Disclosed by us;
Purposes for which categories of Personal Information Collected by us are used;
Sources of information from which we Collect Personal Information; and
Specific pieces of Personal Information we have Collected about you.

In addition, if you are a Consumer you may:

Opt-out of the Sale or Disclosure of your Personal Information, in some circumstances;
Opt-out of receiving marketing communications from us; however, you may still receive administrative communications regarding the Services; and
Request deletion of your Personal Information by us and our Service Providers, in some circumstances.

The CCPA also provides Consumers with the right not to receive discriminatory treatment by a Business for the exercise of these rights regarding Personal Information.

Personal Information Collection, Disclosure, Use and Sale

Category of Personal Information Collected

Categories of Sources of Collection

Business or Commercial Purpose for Use

Categories of Third Parties (If Any) With Whom Personal Information is Shared

A. Identifiers

Examples: Name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.

· Directly from you, e.g., forms you complete or products and services you purchase.

· Indirectly from you, e.g., from observing your actions on our Website or from your Devices.

· Directly or indirectly from others including our affiliates, business partners and data resellers.

· Public records from government entities.

· Our business purposes, including specifically:

(1) Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.

(2) Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.

(3) Debugging to identify and repair errors that impair existing intended functionality.

(4) Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.

(5) Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.

(6) Undertaking internal research for technological development and demonstration.

(7) Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.

· Disclosure to a Third Party, bound not to further disclose such information and prohibited from selling such information.

· Our commercial purposes, including specifically a sale of personal information in the context of events that we may sponsor with others.

· Internet service providers.

· Data analytics providers.

· Government entities.

· Operating systems and platform.

· Social networks.

· Affiliates.

· Vendors and service providers.

· Third parties integrated into our services.

· Third parties as required by law and similar disclosures.

· Other third parties for whom we have obtained your permission to disclose your Personal Information.

B. Categories of Personal Information in Cal. Civ. Code Section 1798.80(e)

Examples: Name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.

· Directly from you, e.g., forms you complete or products and services you purchase.

· Indirectly from you, e.g., from observing your actions on our Website or from your Devices.

· Directly or indirectly from others including our affiliates, business partners and data resellers.

· Public records from government entities.

· Our business purposes, including specifically:

(2) Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.

(3) Debugging to identify and repair errors that impair existing intended functionality.

(6) Undertaking internal research for technological development and demonstration.

· Disclosure to a Third Party, bound not to further disclose such information and prohibited from selling such information.

· Our commercial purposes, including specifically a sale of personal information in the context of events that we may sponsor with others.

· Internet service providers.

· Data analytics providers.

· Government entities.

· Operating systems and platform.

· Social networks.

· Affiliates.

· Vendors and service providers.

· Third parties integrated into our services.

· Third parties as required by law and similar disclosures.

· Other third parties for whom we have obtained your permission to disclose your Personal Information.

C. Characteristics of Protected Classifications under California or Federal Law

Examples: Race or color, ancestry or national origin, religion or creed, age (over 40), mental or physical disability, sex (including gender and pregnancy, childbirth, breastfeeding or related medical conditions), sexual orientation, gender identity or expression, medical condition, genetic information, marital status, military and veteran status.

· Directly from you, e.g., forms you complete or products and services you purchase.

· Directly or indirectly from others, including our affiliates, business partners and data resellers.

· Public records from government entities.

· Our business purposes, including specifically:

· Disclosure to a Third Party, bound not to further disclose such information and prohibited from selling such information.

· Affiliates.

· Third parties as required by law and similar disclosures.

· Other third parties for whom we have obtained your permission to disclose your Personal Information.

D. Commercial Information

Examples: Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

· Directly from you, e.g., forms you complete or products and services you purchase.

· Directly or indirectly from others including our affiliates, business partners and data resellers.

· Public records from government entities.

· Our business purposes, including specifically:

· Disclosure to a Third Party, bound not to further disclose such information and prohibited from selling such information.

· Government entities.

· Affiliates.

· Vendors and service providers.

· Third parties integrated into our services.

· Third parties as required by law and similar disclosures.

· Other third parties for whom we have obtained your permission to disclose your Personal Information.

E. Biometric Information

Examples: Physiological, biological, or behavioral characteristics, including DNA, that can be used, singly or in combination with each other or with other identifying data, to establish individual identity, such as imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.

· Directly from you, e.g., forms you complete or products and services you purchase.

· Directly or indirectly from others, including our affiliates, business partners and data resellers.

· Public records from government entities.

· Our business purposes, including specifically:

(2) Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.

(3) Debugging to identify and repair errors that impair existing intended functionality.

· Disclosure to a Third Party, bound not to further disclose such information and prohibited from selling such information.

· Government entities.

· Operating systems and platforms.

· Affiliates.

· Vendors and service providers.

· Third parties integrated into our services.

· Third parties as required by law and similar disclosures.

· Other third parties for whom we have obtained your permission to disclose your Personal Information.

F. Internet or Other Electronic Network Activity Information

Examples: Browsing history, search history, and information regarding a consumer’s interaction with an internet website, application or advertisement.

· Directly from you, e.g., forms you complete or products and services you purchase.

· Indirectly from you, e.g., from observing your actions on our Website or from your Devices.

· Directly or indirectly from others including our affiliates, business partners and data resellers.

· Public records from government entities.

· Our business purposes, including specifically:

(2) Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.

(3) Debugging to identify and repair errors that impair existing intended functionality.

(6) Undertaking internal research for technological development and demonstration.

· Disclosure to a Third Party, bound not to further disclose such information and prohibited from selling such information.

· Internet service providers.

· Data analytics providers.

· Government entities.

· Operating systems and platforms.

· Social networks.

· Affiliates.

· Vendors and service providers.

· Third parties integrated into our services.

· Third parties as required by law and similar disclosures.

· Other third parties for whom we have obtained your permission to disclose your Personal Information.

G. Geolocation Data

Example: Precise physical location.

· Directly from you, e.g., forms you complete or products and services you purchase.

· Indirectly from you, e.g., from observing your actions on our Website or from your Devices.

· Our business purposes, including specifically:

(2) Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.

(3) Debugging to identify and repair errors that impair existing intended functionality.

(6) Undertaking internal research for technological development and demonstration.

· Disclosure to a Third Party, bound not to further disclose such information and prohibited from selling such information.

· Internet service providers.

· Data analytics providers.

· Government entities.

· Operating systems and platforms.

· Social Networks.

· Affiliates.

· Vendors and service providers.

· Third parties integrated into our services.

· Third parties as required by law and similar disclosures.

· Other third parties for whom we have obtained your permission to disclose your Personal Information.

H. Sensory Information

Examples: Audio, electronic, visual, thermal, olfactory, or similar information.

· Directly from you, e.g., forms you complete or products and services you purchase.

· Our business purposes, including specifically:

(3) Debugging to identify and repair errors that impair existing intended functionality.

· Disclosure to a Third Party, bound not to further disclose such information and prohibited from selling such information.

· Government entities.

· Operating systems and platforms.

· Affiliates.

· Vendors and service providers.

· Third parties integrated into our services.

· Third parties as required by law and similar disclosures.

· Other third parties for whom we have obtained your permission to disclose your Personal Information.

I. Professional or employment- related information

Examples: Job application or resume information, past and current job history, and job performance information, unless exempt.

· Directly from you, e.g., forms you complete or products and services you purchase.

· Indirectly from you, e.g., from observing your actions on our Website or from your Devices.

· Directly or indirectly from others including our affiliates, business partners and data resellers.

· Public records from government entities.

· Our business purposes, including specifically:

(2) Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.

(3) Debugging to identify and repair errors that impair existing intended functionality.

· Disclosure to a Third Party, bound not to further disclose such information and prohibited from selling such information.

· Government entities.

· Operating systems and platforms

· Affiliates.

· Vendors and service providers.

· Third parties integrated into our services.

· Third parties as required by law and similar disclosures.

· Other third parties for whom we have obtained your permission to disclose your Personal Information.

J. Non-Public Education Information (as defined in 20 U.S.C. 1232g; 34 C.F.R. Part 99)

Examples: Records that are directly related to a student maintained by an educational agency or institution or by a party acting for the agency or institution.

· Directly from you, e.g., forms you complete or products and services you purchase.

· Indirectly from you, e.g., from observing your actions on our Website or from your Devices.

· Directly or indirectly from others including our affiliates, business partners and data resellers.

· Public records from government entities.

· Our business purposes, including specifically:

(2) Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.

· Disclosure to a Third Party, bound not to further disclose such information and prohibited from selling such information.

· Government entities.

· Operating systems and platforms

· Affiliates.

· Vendors and service providers.

· Third parties integrated into our services.

· Third parties as required by law and similar disclosures.

· Other third parties for whom we have obtained your permission to disclose your Personal Information.

K. Inferences Drawn from Personal Information

Examples: Consumer profiles reflecting a consumer’s preferences, characteristics, psychological trends, preferences, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

· Directly from you, e.g., forms you complete or products and services you purchase.

· Indirectly from you, e.g., from observing your actions on our Website or from your Devices.

· Directly or indirectly from others including our affiliates, business partners and data resellers.

· Public records from government entities.

· Our business purposes, including specifically:

(3) Debugging to identify and repair errors that impair existing intended functionality.

· Disclosure to a Third Party, bound not to further disclose such information and prohibited from selling such information.

· Government entities.

· Operating systems and platforms

· Affiliates.

· Vendors and service providers.

· Third parties integrated into our services.

· Third parties as required by law and similar disclosures.

· Other third parties for whom we have obtained your permission to disclose your Personal Information.

Such information may be used for the purposes for which it was collected or as otherwise permitted or required by applicable law. We do not offer financial incentives to consumers based upon the retention or sale of a consumer’s personal information. As of the date of last update and review of this Privacy Policy, we have no reason to believe that we have collected, disclosed, sold or otherwise processed the Personal Information of more than 10 million California Consumers.

You can make requests related to your California privacy rights by email to contact@kgcus.com or in writing to Korean Red Ginseng Corp, Inc., 12750 Center Court Dr. S, Ste 100, Cerritos CA 90703.

We will review the information provided and may request additional information to ensure we are interacting with the correct individual. If you have an online account with us, you may be required to log-in to your account for identity verification. If you do not have an account with us, additional information to verify your identity may be required by law before we may take action upon such a request. This additional information may vary depending on the nature of your request and/or the nature of the information about which your request relates. In some cases, we may also be required by law to obtain a signed declaration under penalty of perjury from you that you are the subject of the request being made. If we suspect fraudulent or malicious activity on or from your account, we will delay taking action on your request until we can appropriately verify your identity and the request as authentic.

By law, we are not required to collect personal information that we otherwise would not collect in the ordinary course of our business, retain personal information for longer than we would otherwise retain such information in the ordinary course of our business, or reidentify or otherwise link information that is not maintained in a manner that would be considered personal information. If we have not requested specific additional information from you to verify your request, please do not send such information.

We generally will aim to avoid requesting additional information from you for the purposes of verification. However, if we cannot reasonably verify your identity or more information is needed for security or fraud-prevention purposes, we may consider any of the following factors, alone or in combination, in requesting additional information:

The risk of harm to the consumer posed by any unauthorized access or deletion;
Available technology for verification;
The likelihood that fraudulent or malicious actors would seek the personal information;
Whether the personal information to be provided by the consumer to verify their identity is sufficiently robust to protect against fraudulent requests or being spoofed or fabricated;
The manner in which the business interacts with the consumer;
The type, sensitivity, and value of the personal information collected and maintained about the consumer, as applicable law requires a more stringent verification process for sensitive or valuable personal information; and
Other factors that may be reasonable in the circumstances, are consistent with industry practice, are recommended by California government officials, or which may be required by law or regulation following the effective date of this Privacy Policy.

If your request is regarding household information, the same verification steps above are required before we can provide you with aggregate household information. For us to process a request for access to or deletion of specific pieces of information regarding your household, all members of the household must make the request, and we must be able to verify each household member.

In some cases, we may not have sufficient information about you or your household to be able to verify your identity or sufficiently differentiate you from another consumer or household to the degree of certainty required by law, in which case, we will not be able to act upon your request. In such cases, it may be unlikely that we would be able to identify you or your household in the future without collecting significantly more information or seeking to reidentify deidentified information. At this time, we do not intend to take such steps in response to a request made pursuant to this Privacy Policy and applicable law does not require that we do so. If, in the future, we determine a reasonable method to identify you or your household absent such steps, we will provide an update to you through this Privacy Policy and in response to any such request at that time.

Information that you submit for the purpose of allowing us to verify your identity in furtherance of a consumer-related or household-related request pursuant to California law will only be used by us, and our service providers if any, for that purpose and no other. Except where we are required by law to maintain such information for record-keeping purposes, we will take steps to delete any new personal information collected for the purpose of verification as soon as practical after processing your request.

Please also be aware that making any such request does not ensure complete or comprehensive removal or deletion of Personal Information or content you may have posted, and there may be circumstances in which the law does not require or allow us to fulfill your request, including, for example, where fulfilling your request may infringe upon the rights and freedoms of other consumers. We reserve the right to charge a reasonable fee or take other appropriate action in response to requests from a consumer or household that are manifestly unfounded or excessive, in particular because of their repetitive character.

You may designate an authorized agent to make a request on your behalf pursuant to applicable law. We accept documentation of your designation in the form of a valid power of attorney and/or a notarized statement. You must submit evidence of your designation of an authorized agent in writing to: Korean Red Ginseng Corp, Inc., 12750 Center Ct Dr S, Ste 100, Cerritos CA 90703.. We may require verification of your authorized agent in addition to the information for verification above for consumers and households.

Data Retention

We take measures to delete your Personal Information or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period. When determining the retention period, we take into account various criteria, such as mandatory retention periods provided by law and the statute of limitations, the type of Services requested by or provided to you, the possible re-enrolment by you with our Services, and the impact on our Services if we delete some information from or about you.

Security

We maintain administrative, technical and physical safeguards that are intended to appropriately protect Personal Information against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the Personal Information in our possession. However, because no information system can be 100% secure, we cannot guarantee the absolute security of your information.

International Data Transfers

KRG is an international organization with offices worldwide. Your Personal Information may be transferred to countries that do not have the same data protection laws as the country in which you initially provided the information.

If you are located in the European Economic Area, we rely on contracts approved by the European Commission to transfer your Personal Information to our offices around the globe. In addition, we may transfer your Personal Information:

To countries that have been deemed to provide an adequate level of protection of Personal Information by the European Commission
To partners and vendors by relying on contracts approved by the European Commission
To U.S. based partners and vendors certified under the EU-U.S. Privacy Shield framework

You may contact us to obtain a copy of the safeguards we use to transfer Personal Information outside the European Economic Area.

Links to Other Websites

Our Services may link to websites maintained by outside organizations. Please be aware that these third-party websites are governed by their own privacy policies. KRG is not responsible for the content or policies maintained by these websites. Please familiarize yourself with the privacy policy of any third-party website you visit, as it will govern any information you submit through that website.

Changes to This Policy

We may make changes to this Privacy Policy. The “Last updated” date at the top of this page indicates when this Privacy Policy was last revised. If we make material changes, we may notify you via a notice posted on our website or other method. We encourage you to read this Privacy Policy periodically to stay up-to-date about our privacy practices.

Contact Us

If you have any questions about this Privacy Policy, you may contact us at: Korean Red Ginseng Corp, Inc., 12750 Center Court Dr. S, Ste 100, Cerritos CA 90703 or email us at contact@kgcus.com.

If you are located in the European Economic Area, the entity responsible for the processing of your Personal Information is Korean Red Ginseng Corp, Inc. If you have any questions about this Privacy Policy, or if you would like to exercise your rights to your Personal Information, you may contact us at: Korean Red Ginseng Corp, Inc., 12750 Center Court Dr. S, Ste 100, Cerritos CA 90703 or email us at contact@kgcus.com.