BANILA CO Pink House

Pink House · Legal

Pink House Privacy Policy

Effective Date: September 14, 2026 Last Updated: September 14, 2026

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.banilausa.com (the "Site"), participate in our Affiliate Program (the “Affiliate Program”), or create an account and use the BANILA CO:PINK HOUSE mobile/web application (the "App").

DATA CONTROLLER

The data controller responsible for your personal information collected through the Site, the Affiliate Program, and the App is: F&CO Co., Ltd., 8, Teheran-ro 8-gil, Gangnam-gu, Seoul, Republic of Korea 06233 (email: hello@banilausa.com).

Privacy Officer: hello@banilausa.com

PERSONAL INFORMATION WE COLLECT

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device . Additionally, we collect information about the pages or products you view, referring websites or search terms and how you interact with the Site (collectively “Device Information”).

We collect Device Information using the following technologies:

  • "Cookies" are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
  • "Log files" track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
  • "Web beacons," "tags," and "pixels" are electronic files used to record information about how you browse the Site.

When you make or attempt to make a purchase through the Site, we collect certain information, including your name, billing address, shipping address, payment information, email address, and phone number (“Order Information”).

If you apply for or participate in our Affiliate Program, we may collect additional personal information ("Affiliate Information"), including:

  • Social media account information (e.g., profile URL, username, engagement metrics)
  • Country of residence, language, and audience demographics
  • Contact details (e.g., email, messaging handles)
  • Shipping information for product seeding
  • Content such as images, videos, captions, and posts ("User Content")

User Content may contain personal information but is also subject to separate contractual terms governing intellectual property and content usage.

App Account & Third-Party Account Connections

If you create a BANILA CO:PINK HOUSE App account, we collect information about your in-App activity, such as loyalty points/coins earned, tier status (FAN, PRO, Elite or AFFILIATE), badges and missions completed, virtual "fairy" companion progress, and reward redemption history ("App Information").

The App allows you to sign in and voluntarily connect one or more third-party accounts (TikTok, Instagram, Discord, Shopify, and/or Sign in with Apple or Google). Each connection is made through that platform's own official login/consent screen, which discloses the specific permissions we are requesting (see the platform-specific sections below); you may then choose to approve the connection, granting those permissions, or decline it. We only receive the categories of information covered by the permissions we requested and that you approved — we do not receive, and cannot expand our access to, any additional information without a new request and your separate approval. Below, "accessed only" means information we retrieve from the platform's API to perform a specific check but do not store in our database; "stored" means information we retain in our database. All connected-account access tokens are stored in encrypted form and are permanently deleted when you disconnect the account. You may disconnect any linked account at any time in the App's account settings, as further described below. If you participate in the App's point ranking (leaderboard) features, your in-App nickname (not your real name) and ranking position are displayed to other App users. Capitalized terms such as "Challenge" and "Ranking Program" that are used in this Privacy Policy but not defined here have the meanings given to them in our Terms of Service.

TikTok (Login Kit + Display API)

Permissions requested: user.info.basic, user.info.profile, user.info.stats, video.list.

  • Stored (profile): TikTok open_id, union_id, display name, username, avatar URL, the list of permissions you granted, connection/disconnection timestamps, and your access token (encrypted).
  • Stored (daily snapshot): follower count, following count, total likes, and video count.
  • Accessed only, not stored: verified-account status (is_verified).
  • Stored (hourly snapshot, for videos you submit): video ID, title, URL, cover image, duration, view/like/comment/share counts, whether the video is linked to a UGC submission, and the timestamp if we detect it was deleted or hidden.
  • Accessed only, not stored: video creation time (create_time).

Purpose: to confirm you own a submitted video, to determine your Creator tier/Affiliate eligibility, and to calculate Challenge/campaign scores.

We do not connect to the TikTok Shop Partner API. We do not collect TikTok Shop order or commission data.

Instagram (Instagram API with Instagram Login)

Permission requested: instagram_business_basic.

  • Stored (profile): Instagram user ID, username, account type, follower count, the list of permissions you granted, connection/disconnection timestamps, and your access token (encrypted).
  • Accessed only, not stored: a submitted post's ID and permalink, to confirm you own the URL you submitted.
  • Stored (for posts you submit): the URL you submitted, its shortcode, the author's username, an excerpt of the caption entered at submission, and the media type.

We do not currently collect post like, view, or comment counts, as we have not requested Instagram's "insights" permission.

Discord

Permissions requested: identify, guilds.join.

  • Stored: your Discord user ID, username, global name, access token (encrypted), and the timestamps you connected and joined the server.

Connecting Discord automatically adds you to the official BANILA CO:PINK HOUSE Discord server; to do this, we share your Discord user ID with Discord for that purpose.

Shopify (banilausa.com customer account)

Direct account connection — permissions requested: openid, email, customer-account-api.

  • Stored: your Shopify customer ID, email address, name, and access token (encrypted).
  • Received from our Shopify partner app: order ID, order amount, product information, order status, and review events.
  • Affiliate tracking: order data attributed to your tracking link or discount code, per our existing policy.

We do not collect card numbers, CVV codes, or billing addresses through the App.

Signing in with Apple or Google

The App sends only the provider name and an identity token to our servers; our servers verify the token's signature and read only the claims we need. We do not store the Apple or Google sign-in token itself.

  • Google — permissions requested: email, profile. Accessed only, not stored: your unique ID (sub), email, whether your email is verified, and your name. Stored: your email, display (Google) name, and a linking identifier (provider, sub, and the email address at the time of linking). We do not access or store your Google profile photo.
  • Apple — permissions requested: email, fullName. Accessed only, not stored: your unique ID (sub), email, and whether your email is verified (if you choose to hide your email, we receive and use the Apple private relay address instead). Stored: your email and a linking identifier. Apple does not include your name in the token and the App does not send it to us, so we do not collect your name through Sign in with Apple — you may enter it directly in your profile afterward.

Sign-In, Session & Device Information (common to all sign-in methods)

  • Session records: device ID, IP address, user agent, and the timestamps your session was issued, expired, or revoked.
  • Device information (for push notifications): device ID, platform, Firebase Cloud Messaging (FCM) push token, app version, OS version, last-access time, and whether you have enabled push notifications. The device ID is a random UUID generated by the App itself and is used consistently for both your session and device records; we do not use advertising identifiers, IDFV, or Android ID.
  • Consent records: the type of consent, whether consent was given, the policy version in effect, and the timestamp of your consent.
  • Profile information you provide: display name, country, language, time zone, date of birth (used to verify your age), and your marketing-communications preference.

When we refer to "Personal Information," we include Device Information, Order Information, Affiliate Information, and App Information (including the third-party account and sign-in information described above).

HOW DO WE USE YOUR PERSONAL INFORMATION?

We use your Personal Information for business and commercial purposes, including to operate our Site, fulfill transactions, communicate with you, and manage our Affiliate Program.

Business purposes include:

  • Order fulfillment
  • Customer communication
  • Security and fraud prevention

Commercial purposes include:

  • Marketing and advertising
  • Affiliate Program management
  • Campaign performance analysis
  • Operating the BANILA CO:PINK HOUSE App, including calculating and awarding loyalty points/coins, badges, missions, and virtual companion progress; administering the FAN/PRO/ELITE/AFFILIATE tier structure; issuing reward coupons through our Shopify store; and tracking Affiliate/Creator Challenge performance

We use Order Information to process transactions, fulfill orders, and communicate with you regarding your purchases.

We use Device Information to help screen for potential risk and fraud, and to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site).

We use Affiliate Information and User Content to:

  • Administer and operate our Affiliate Program
  • Provide products, rewards, or other benefits
  • Communicate campaigns, opportunities, and updates
  • Evaluate performance, engagement, and audience metrics

We use App Information, including information received from your connected TikTok, Instagram, Discord, and Shopify accounts and your Apple/Google sign-in, to verify purchases and eligibility, calculate and award points/coins and badges, rank and evaluate Affiliate/Creator Challenge performance, prevent fraud (e.g., duplicate accounts, fake engagement), operate App sign-in and push notifications, and issue rewards and coupons.

Subject to applicable agreements and permissions, we may use User Content for advertising, marketing, promotional, and commercial purposes across any media now known or later developed.

Where required by applicable law, we rely on your consent or our legitimate interests to collect, use, and process your Personal Information. We may also rely on your consent or applicable agreements to use User Content for marketing and promotional purposes.

For individuals located in the EEA or the United Kingdom, we process your Personal Information on the following legal bases, as applicable:

  • To perform a contract with you (e.g., processing orders or managing your participation in the Affiliate Program)
  • Based on your consent (e.g., for marketing communications, connecting a third-party account, or use of User Content where required)
  • For our legitimate interests (e.g., improving our Site and App, fraud prevention, and analytics), provided such interests are not overridden by your rights
  • To comply with legal obligations

SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties to operate our business, including:

  • Service providers (e.g., hosting, logistics, payment processing)
  • Advertising and marketing partners
  • Social media platforms
  • Analytics providers
  • Other App users, through in-App leaderboard or point ranking features (see below)

For example, we use Shopify to power our online store and the App's rewards system--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site--you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Where you choose to connect a TikTok, Instagram, or Discord account, or sign in with Apple or Google, we share the minimum information necessary with that platform (TikTok Pte. Ltd. / ByteDance; Instagram, operated by Meta Platforms, Inc.; Discord Inc.; Apple Inc.; or Google LLC, as applicable) to authenticate the connection, and we receive information back from that platform in accordance with the permissions you grant. Where you connect Discord, we also share your Discord user ID with Discord in order to add you to the official BANILA CO:PINK HOUSE Discord server.

If you participate in the App's point ranking program, your in-App nickname (not your real name) and ranking position are displayed to other App users through in-App leaderboard features. This is separate from, and in addition to, the platform-to-platform sharing described above.

We may also disclose your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

SALE OR SHARING OF PERSONAL INFORMATION

We do not sell Personal Information for monetary consideration. However, certain disclosures of Personal Information for cross-context behavioral advertising or marketing purposes may constitute "sharing" under applicable U.S. privacy laws.

TARGETED ADVERTISING

We may use your Personal Information to provide targeted advertisements or marketing communications. For more information about how targeted advertising works, you can visit the Network Advertising Initiative's ("NAI") educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out via:

  • Facebook: https://www.facebook.com/settings/?tab=ads
  • Google: https://www.google.com/settings/ads/anonymous
  • Digital Advertising Alliance: http://optout.aboutads.info/

THIRD-PARTY PLATFORM CONNECTIONS (TikTok, Instagram, Discord, Shopify, Apple, Google)

The App lets you sign in with, and voluntarily connect, TikTok, Instagram, Discord, and/or Shopify accounts, and offers Sign in with Apple or Google as sign-in methods. Each of these platforms is operated by an independent third party with its own terms of service and privacy policy, which govern how that platform handles your information:

  • TikTok Privacy Policy: https://www.tiktok.com/legal/page/us/privacy-policy/en
  • Instagram / Meta Privacy Policy: https://privacycenter.instagram.com/policy/
  • Discord Privacy Policy: https://discord.com/privacy
  • Shopify Privacy Policy: https://www.shopify.com/legal/privacy
  • Apple Privacy Policy: https://www.apple.com/legal/privacy/
  • Google Privacy Policy: https://policies.google.com/privacy

We are not responsible for the privacy or data practices of these third-party platforms. You can review or revoke the App's access to a connected account at any time, either within the App (Settings > Connected Accounts) or directly through the relevant platform's own account/app-permissions settings. Revoking a connection may limit or disable features that rely on that connection, such as points calculation, Challenge tracking, or reward issuance.

CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you may have the right to:

  • Know the categories and specific pieces of personal information we collect, use, disclose, or share
  • Request deletion of your personal information
  • Request correction of inaccurate personal information
  • Access your personal information in a portable format
  • Opt out of the "sale" or "sharing" of personal information, as such terms are defined under California law
  • Limit the use of sensitive personal information, if applicable
  • Not to be discriminated against for exercising your rights

You may exercise these rights by contacting us. You may also designate an authorized agent to make a request on your behalf, subject to verification requirements. Authorized agents must provide proof of authorization, and we may require verification of your identity prior to processing such requests.

You may also exercise your right to opt out of the "sale" or "sharing" of Personal Information by contacting us or by using a "Do Not Sell or Share My Personal Information" link available on our website, where applicable.

Residents of certain U.S. states may have additional rights under applicable privacy laws, including the right to opt out of targeted advertising or certain data processing activities. You may exercise such rights by contacting us.

INTERNATIONAL PRIVACY RIGHTS

This section applies to your use of the Site and the Affiliate Program. The App is offered only to individuals located in the United States, and we do not knowingly offer or make the App available to individuals located outside the United States.

If you are located in the European Economic Area (EEA), the United Kingdom, the Republic of Korea, Singapore, the Philippines, or Malaysia, you may have the right to access, correct, delete, restrict, or port your personal information, and to object to or withdraw consent from its processing, under applicable data protection laws. To exercise these rights, please contact us using the contact details below. You also have the right to lodge a complaint with the relevant supervisory authority in your country of residence.

If you are located in the Republic of Korea, where we provide your personal information to third parties, we will notify you of the recipient, purpose, items provided, and retention period, and obtain your separate consent prior to such provision, except as permitted by applicable law.

If you are located in Singapore and registered on the Do Not Call (DNC) Registry, we will not contact you for marketing purposes via voice call, text message, or fax unless you have provided clear and unambiguous consent.

If you are located in the Philippines, you may also lodge a complaint with the National Privacy Commission (NPC) at www.privacy.gov.ph.

SENSITIVE PERSONAL INFORMATION

We do not use or disclose sensitive personal information for purposes other than those permitted under applicable law.

DO NOT TRACK

We do not alter our Site's data collection practices in response to Do Not Track signals.

CHILDREN

Our Affiliate Program is intended for individuals who are 18 years of age or older. We do not knowingly permit individuals under the age of 18 to participate in the Affiliate Program. If we become aware that a minor has registered for the Affiliate Program, we will terminate their participation and delete their Personal Information promptly.

Creating a BANILA CO:PINK HOUSE App account and connecting a TikTok, Instagram, Discord, or Shopify account (or signing in with Apple or Google) is likewise intended for individuals who are 18 years of age or older. During profile setup, we ask for your date of birth to verify your age. We do not knowingly permit individuals under the age of 18 to create an App account or connect a third-party account. If we become aware that a minor has done so, we will terminate the account and delete the associated Personal Information promptly.

With respect to general use of the Site, we do not knowingly collect Personal Information from children under the age of 13 without verifiable parental consent. If you have reason to believe that a child under the age of 13 has provided Personal Information to us without parental consent, please contact us and we will endeavor to delete that information from our databases.

For users between the ages of 13 and 15 located in the EEA or the United Kingdom, we will process their Personal Information only with the consent of a parent or legal guardian, in accordance with GDPR Article 8 and applicable member state laws.

DATA RETENTION

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information. We retain Personal Information for as long as necessary to fulfill the purposes described in this Privacy Policy.

Retention is based on:

  • Duration of Program participation
  • Business needs (e.g., marketing, analytics)
  • Legal obligations (e.g., tax, compliance)
  • Duration of your BANILA CO:PINK HOUSE App account and any connected TikTok, Instagram, Discord, or Shopify account — App Information and data received from connected accounts is retained for as long as your App account remains active, and is deleted or anonymized within a reasonable period after account deletion, except where we must retain records for legal, tax, or fraud-prevention purposes. Connected-account access tokens are stored in encrypted form and are permanently deleted immediately upon disconnection, rather than at account deletion

Shipping information collected for product seeding is retained only as necessary to fulfill delivery and resolve related issues and is deleted or anonymized thereafter where feasible.

We determine retention periods based on the nature of the information, the purposes for which it is processed, and applicable legal requirements.

INTERNATIONAL DATA TRANSFERS

We store and process your Personal Information on servers we control in the United States, using Amazon Web Services ("AWS") as our cloud hosting provider. Personnel of F&CO Co., Ltd. who are based in the Republic of Korea access this information remotely, through secure network connections and on an ongoing basis, in connection with operating and providing the Site, the Affiliate Program, and the App. This remote access covers all categories of Personal Information described in this Privacy Policy; is carried out by F&CO Co., Ltd. (8, Teheran-ro 8-gil, Gangnam-gu, Seoul, Republic of Korea 06233; email: hello@banilausa.com) for the purposes described in this Privacy Policy; and continues for the retention periods described in the DATA RETENTION section above. Because this remote access is necessary for us to operate and provide the Site, the Affiliate Program, and the App, you may decline it only by not creating an account, not otherwise using, or discontinuing your use of, these services — we are unable to provide the Services without it. Where you choose to connect a third-party account (TikTok, Instagram, Discord, Shopify, Apple, or Google) or where we use the analytics or advertising service providers described in this Privacy Policy, the operator of that platform or service may store or process your information outside the United States in accordance with its own privacy policy; we do not control, and are not responsible for, those third parties' data storage locations.

DATA BREACH NOTIFICATION

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within the timeframe required by applicable law and, where required, notify affected individuals without undue delay.

Where required, we will also notify affected individuals and/or state regulators in accordance with applicable U.S. state data breach notification laws.

CHANGES

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

CONTACT US

For more information about our privacy practices, please contact us by e-mail at hello@banilausa.com or by mail using the details provided below:

F&CO Co., Ltd., 8, Teheran-ro 8-gil, Gangnam-gu, Seoul, Republic of Korea 06233.

Back to Pink House