Privacy Policy

We accept all major credit cards and payments made through PayPal. Payment must be made in full before shipment. Our products are customized and handmade according to your specific design and request. We will begin production of your order upon payment confirmation.

Payment Received

We request customers to pay 100% of the order amount in advance, including any applicable shipping fees.

Payment Methods

Credit Card (Stripe)

We offer several payment methods. Customers can pay directly with a credit/debit card through the Stripe payment gateway. We accept credit/debit cards (Visa, American Express, MasterCard, Discover, and JCB).

Your credit card information is neither processed nor stored on MFCK servers, and no information is ever disclosed to a third party. Our privacy policy is part of the website's terms and conditions and should be read in conjunction with them. We reserve the right to modify this privacy policy at any time.

We respect the privacy of our users and everyone who visits our website Here, XOXO Inc refers to ("we," "our," or "ours"). We are committed to protecting your personal information and your right to privacy under this privacy policy. If you have any questions or concerns about our policy or practices regarding your personal information, please contact us at

When you visit our website ("Site") and use our services, you entrust us with your personal information. We take your privacy very seriously. In this privacy notice, we describe our privacy policy. We seek to explain to you as clearly as possible what information we collect, how we use it, and what rights you have regarding it. We hope you will take the time to read it carefully as it is important. If there are terms in this privacy policy that you do not agree with, please stop using our site and services.


At, we offer a meticulously curated online marketplace specializing in the sale of lingerie and related products.

We have the perfect combination of high-quality lingerie that caters to your needs through our standard purchasing practices.

Our products comply with various international certifications, including ANSI, FDA, and CE.

With all our products, we prioritize quality by subjecting them to rigorous quality checks before they reach you.

We are based in South Korea.

Please read this privacy policy carefully as it will help you make informed decisions about sharing your personal information with us.


Personal information you provide to us

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products, when you engage in activities on the Site, or when you otherwise contact us.

The personal information we collect depends on the context of your interactions with us and the Site, the choices you make, and the products and features you use. The personal information we collect may include the following:

Name and contact information. We collect your first and last name, email address, mailing address, phone number, and similar contact data.

Credentials. We collect passwords, password hints, and similar security information used for authentication and account access.

Automatically Collected Information

We automatically collect certain information when you visit, use, or browse the Site. This information does not reveal your specific identity (such as your name or contact details), but may include information about your device and usage, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our site, and other technical information. If you access our site using your mobile device, we may automatically collect information about your device (such as the ID, model, and manufacturer of your mobile device), operating system, version information, and IP address. This information is primarily needed to maintain the security and operation of our site, as well as for internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies. You can learn more about this in our cookie policy.

Information Collected from Other Sources

We may obtain information about you from other sources, such as public databases, joint marketing partners, social media platforms (such as Facebook, Instagram, TikTok, Twitter), as well as other third parties.

If you have chosen to subscribe to our newsletter, your first name, last name, and email address will be shared with our newsletter provider. This is to keep you informed about information and offers for marketing purposes. We send emails to our customers that may include the following: transactional email, shipping notification, weekly offer, promotion, activity.


We use your personal information for the following purposes, relying on our legitimate business interests ("Business Purposes"), to enter into or perform a contract with you ("Contractual"), with your consent ("Consent"), and/or for compliance with our legal obligations ("Legal Reasons"). We specify the specific processing grounds we rely on next to each purpose listed below.

We use the information we collect or receive:

  • To send you administrative information related to your account, our business objectives, and/or for legal reasons. We may use your personal information to send you product updates and information about improved features and/or information about changes to our terms, conditions, and policies.
  • To provide you with targeted advertising for our business purposes and/or with your consent. We may use your information to develop and display content and advertisements (and work with third parties who do so) tailored to your interests and/or location and to measure their effectiveness. [For more information, please refer to our Cookie Policy.]
  • To request feedback for our business purposes and/or with your consent. We may use your information to request feedback and to contact you about your use of our site.
  • To protect our site for business purposes and/or for legal reasons. We may use your information as part of our efforts to keep our site safe (for example, for fraud monitoring and prevention).
  • To enable user-to-user communications with your consent. We may use your information to enable user-to-user communications with the consent of each user.
  • To enforce our terms, conditions, and policies for our business purposes and in accordance with the law.
  • To respond to legal requests and prevent harm as required by law. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.
  • For other business purposes. We may use your information for other business purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and evaluating and improving our site, products, services, marketing, and XOXO Inc.


We only share and disclose your information in the following situations:

  • Compliance with Laws: We may disclose your information when we are legally obligated to do so to comply with applicable law, government requests, a judicial proceeding, court order, or legal process, such as in response to a court order or subpoena (including to authorities to meet national security or law enforcement requirements).
  • Vital Interests and Legal Rights: We may disclose your information when we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, illegal activities, or as evidence in litigation in which we are involved.
  • Vendors, Consultants, and Other Third-Party Service Providers: We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work.
  • Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Third-Party Advertisers: We may use third-party advertising companies to serve ads when you visit the site. These companies may use information about your visits to our site and other websites contained in web cookies and other tracking technologies to provide advertisements about goods and services that may be of interest to you.
  • Affiliates: We may share your information with our affiliates, in which case we will require those affiliates to honor this privacy policy. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
  • Business Partners: We may share your information with our business partners to offer you certain products, services, or promotions.
  • With Your Consent: We may disclose your personal information for any other purpose with your consent.
  • Other Users: When you share personal information (e.g., by posting comments, contributions, or any other content on the site) or otherwise interact with public areas of the site, such personal information may be viewed by all users and may be publicly disclosed outside the site in perpetuity.


We may utilize cookies and similar tracking technologies (such as web beacons and pixels) to access or store information. Specific details on how we use these technologies and how you can refuse certain cookies are described in our cookie policy.


We will not transfer your personal information to a foreign recipient.


The website may contain advertisements from third parties that are not affiliated with us and may be linked to other websites, online services, or mobile applications. We cannot guarantee the security and confidentiality of data you provide to third parties. Any data collected by third parties is not covered by this privacy policy. We are not responsible for the content, practices, and privacy and security policies of third parties, including other websites, services, or applications that may be linked to or from the site. You should review the policies of these third parties and contact them directly to address your concerns.


We will only retain your personal information for the time necessary for the purposes stated in this privacy policy unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

When we have no legitimate business need to process your personal information, we will either delete or anonymize it, or if that is not possible (for example, because your personal information has been stored in backup archives), we will securely store your personal information and isolate it from any further processing until deletion is possible.


We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please remember that we cannot guarantee that the internet itself is 100% secure. While we strive to protect your personal information to the best of our ability, the transmission of personal information to and from our site is at your own risk. You should only access the services in a secure environment.


We do not knowingly solicit or market data to children under the age of 16. By using the Site, you represent that you are at least 16 years old or that you are the parent or guardian of such a minor and consent to the use of the Site by that minor in your care. If we learn that personal information from users under the age of 16 has been collected, we will disable the account and take reasonable steps to promptly remove such data from our records. If you become aware of data that we have collected from children under the age of 16, please contact us at


Personal Information

You can review or modify your account information or terminate your account at any time by:

Contacting us using the contact details provided below

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, some information may be retained in our files to prevent fraud, resolve issues, assist with any investigations, enforce our Terms of Use, and/or comply with legal requirements.

Cookies and Similar Technologies

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and reject cookies. If you choose to delete cookies or reject cookies, it may affect certain features or services of our Site.

COPPA – Children's Online Privacy Policy

The website aims to ensure the safety of children visiting this site. This Children's Online Privacy Policy clarifies our practices for collecting, disclosing, and obtaining parental consent regarding personal information provided by children under 13 years of age ("child" or "children") and uses terms defined in our privacy policy.

Information Collection, Use, and Communication with Parents

Children may browse the site and may view and print content without providing any individual data other than the automatic collection of device "persistent identifiers" as further discussed below. This site only collects limited individual data. In cases where the collected data does not enable contact with the child or their gadget (including, for example, anonymized analytics data), we may use and disclose it for any purpose to the extent permitted by applicable law.

Personally Identifiable Information

In accordance with the Children's Online Privacy Protection Act of 1998, we do not knowingly collect personally identifiable information from children under the age of 13 without verifiable parental consent. If we learn that we have collected such personal information without parental consent, we will delete that information from our records.

Persistent Identifiers

When children engage with the site, certain technical data may be collected automatically to make our site more interesting and useful and for various internal purposes identified to our business. Examples of automatically collected data include the computer's operating system type, device IP address or mobile device identifier, web browser, frequency of visiting different parts of our site, and information about the online or mobile service provider. This data is collected using techniques such as flash cookies, web beacons, and other unique identifiers (which we define in the "Cookies and Other Technologies" section of our overall privacy policy). This data may be collected by us or by a third party. Persistent identifiers are used by solely for the purpose of providing support for our internal operations, including:

Ensuring that the site functions properly Enabling us to conduct research and analytics to understand, address, and improve the usage and performance of the site Diagnosing and responding to issues

How can parents raise questions and concerns?

If a parent has any questions or concerns regarding their child's use of the site, we encourage the parent to contact us at


You have the right to request that we disclose certain information about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

  • The categories of personal information we have collected about you.
  • The categories of sources for the personal information we have collected about you.
  • Our business or commercial purpose for collecting or selling that personal information.
  • The categories of third parties with whom we share that personal information.
  • The specific pieces of personal information we have collected about you (also called a data portability request).
  • If we have sold or disclosed your personal information for a business purpose, two separate lists disclosing (i) sales, identifying the categories of personal information that each category of recipient purchased; and (ii) disclosures for a business purpose, identifying the categories of personal information that each category of recipient obtained.


You have the right to request that this website delete your personal information, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

  • Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity (including user-generated fraudulent content such as fake product reviews), or prosecute those responsible for such activities.
  • Debug products to identify and repair errors that impair existing intended functionality.
  • Exercise free speech rights, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
  • Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the deletion of the information is likely to render impossible or seriously impair the achievement of the research, if you have previously provided informed consent.
  • Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
  • Comply with a legal obligation.
  • Make other internal and lawful uses of that information that are compatible with the context in which you provided it.


To exercise the rights of access, data portability, and data deletion described above, please submit a verifiable consumer request to us by sending a message through our website. Only you or a person registered with the California Secretary of State whom you authorize to act on your behalf can make a verifiable consumer request regarding your personal information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

  • Provide sufficient information that reasonably allows us to verify you are the person about whom we collected personal information or an authorized representative.
  • Describe your request with enough detail to allow us to understand, evaluate, and respond accurately.
  • We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you.
  • We will only use the personal information provided in a verifiable consumer request to verify the requester's identity or authority to make the request.

Response Time and Format

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time, we will notify you in writing of the reason and the extension period.

We will deliver our written response by mail or electronically, according to your preference.

All disclosures we provide will only cover the 12 months preceding the receipt of the verifiable consumer request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance, notably by email communication.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will explain why we made that decision and provide you with a cost estimate before fulfilling your request.


If you are 16 years of age or older, you have the right to direct us at any time not to sell your personal information (the "right to opt-out"). We do not sell personal information of consumers we know to be under 16 years of age unless we receive affirmative authorization (the "right to opt-in") from the consumer who is between 13 and 16 years old, or from the parent or guardian of a consumer under 13 years old. Consumers who opt-in to personal information sales may opt-out of future sales at any time.

To exercise the right to opt-out, you (or your authorized representative) may submit a request to us via email:

We will only use the personal information provided in an opt-out request to review and comply with the request.


We will not discriminate against you for exercising any of your CCPA rights. However, please note that many features of our website, products, or services may not function without your personal information. Except as authorized by the CCPA, we will not:

  • Deny you goods or services.
  • Charge you different prices or rates for goods or services, including granting discounts or other benefits or imposing penalties.
  • Provide you with a different level or quality of goods or services.
  • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain CCPA-permitted financial incentives that can result in different prices, rates, or levels of quality. Any CCPA-permitted financial incentive we offer will reasonably relate to the value of your personal information and will contain written terms describing the material aspects of the program. Participation in a financial incentive program requires your prior consent, which you may revoke at any time.


We may update this privacy policy from time to time. The updated version will be indicated by an updated "revised" date, and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy policy, we may provide notice either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.


We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions regarding this privacy notice. If you have any questions regarding this privacy notice, including any requests to exercise your legal rights, please contact the Data Protection Officer using our email


For any issues, you can contact us at:

XOXO Commerce, Inc.
651 N Broad St Suite 206
Middletown, Delaware
19709 United States
Tel: (740) 990-2625