FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
E-commerce

Imweb

PreferencesOfficial website

Imweb is a popular Korean hosted website builder and e-commerce platform operated by Imweb in Seoul. It lets users build websites, landing pages and online stores without coding, with built in templates, payment integration and basic SEO and analytics. Sites are served from Imweb infrastructure in Korea. When EU visitors interact with an Imweb hosted page, their data is transferred to Korea under the EU Korea adequacy decision, with GDPR transparency and consent obligations still applying.

Block Imweb until consentScan my site
Overview

What does Imweb do?

What Imweb is

Imweb is one of the most popular hosted website and e-commerce builders in South Korea, run by Imweb in Seoul. It is used by Korean SMEs, creators and small commerce brands to publish corporate websites, landing pages and online stores without coding. Templates, payment integration, basic SEO, analytics and a hosted commerce engine are bundled in the platform. Korean export brands increasingly use Imweb to serve European audiences with K beauty, K food, fashion and design products.

What data and cookies Imweb collects

An Imweb site sets a session cookie, a CSRF token cookie and, for commerce sites, a persistent cart cookie and an authentication cookie. The platform processes the site visit metadata, form submissions and commerce data: customer name, email, phone, address, payment metadata and order history. Optional marketing pixels (Facebook Pixel, Google Ads, Naver, Kakao) add their own cookies and transfer data to their providers.

GDPR and ePrivacy implications

Session, CSRF and cart cookies fall under the Article 5(3) ePrivacy strictly necessary exemption. Optional analytics and marketing cookies are non strictly necessary and require consent. Order and account data are processed under contract performance (Article 6(1)(b) GDPR), and the transfer of EU customer data to Imweb servers in Korea relies on the EU Korea adequacy decision (Implementing Decision (EU) 2022/254).

Consent requirements and legal basis

Hosting and basic site analytics rely on legitimate interest (Article 6(1)(f) GDPR). Commerce features rely on contract performance (Article 6(1)(b) GDPR). Marketing pixels and remarketing rely on consent (Article 6(1)(a) GDPR). A data processing agreement under Article 28 GDPR between the operator (controller) and Imweb (processor) is required, alongside the documentation of any Korean specific safeguards required by the PIPC.

Data transfers and hosting

Imweb hosts the platform on AWS Korea regions in Seoul. Korea benefits from the EU adequacy decision (Implementing Decision (EU) 2022/254), so transfers from the EEA to Imweb do not require Standard Contractual Clauses. Operators must mention the transfer in the privacy notice, name Imweb as recipient and reference the adequacy decision. Marketing pixels can add additional transfers to the United States, requiring SCC or the EU US Data Privacy Framework.

Practical compliance steps

Sign the Imweb DPA, mention Imweb as a processor in the privacy notice and cite the EU Korea adequacy decision. Block optional marketing pixels and analytics behind a CMP and align retention with EU rules. For commerce sites, limit the customer data to what is required for the order and provide a documented data subject rights procedure for EU customers.

Compliance

Imweb and the GDPR

Imweb is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Contract performance (Art. 6(1)(b) GDPR) for hosted commerce features (cart, login, order); consent (Art. 6(1)(a) GDPR) for analytics, marketing pixels and remarketing modules; legitimate interest (Art. 6(1)(f) GDPR) for basic site analytics and fraud prevention.
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive, Korean Personal Information Protection Act (PIPA), Korea EU adequacy decision

Impact assessment (DPIA)

A DPIA is not generally required when Imweb is used to host a simple website or small online store. A DPIA becomes relevant when the operator uses Imweb to run high traffic campaigns, sells sensitive product categories or combines Imweb with extensive marketing pixels and remarketing flows that build long term visitor profiles.

Sample text for your banner

This website is built on Imweb, a Korean website and commerce platform. Strictly necessary cookies are used to keep your session, cart and checkout running; these do not require your consent. With your permission we also activate optional analytics and marketing cookies. Your data is transferred to South Korea, recognised by the European Commission as offering an adequate level of data protection.
Cookies and trackers

What Imweb sets and contacts

Tracking method
Hosted website builder with server side session and analytics cookies, plus optional commerce cart cookies
Server location
South Korea (Imweb, Seoul) with AWS Korea regions
Data transferred outside the EU
Imweb is operated by Imweb in Seoul on AWS Korea regions. South Korea benefits from the European Commission adequacy decision under Implementing Decision (EU) 2022/254, so transfers of personal data from the EEA to Imweb can rely on the adequacy decision without additional safeguards, provided the additional safeguards adopted by the Korean Personal Information Protection Commission are respected.

Cookies set (4)

NameTypeDurationPurpose
imweb_sessionfirst_partySessionServer side session identifier set by Imweb to bind the visitor to a server session.
imweb_csrffirst_partySessionCSRF protection token used to safely submit forms and commerce actions.
imweb_cartfirst_party30 daysPersistent cart cookie used on Imweb commerce sites to retain the basket between visits.
imweb_authfirst_party30 daysAuthentication cookie set after the visitor signs in to an Imweb account.

Third-party domains contacted (3)

  • imweb.me
  • app.imweb.me
  • cdn.imweb.me
Questions

Frequently asked questions about Imweb

Can't find your question? Write to us, we answer fast.

Which cookies does Imweb set?

Session and CSRF token cookies on every page; persistent cart and authentication cookies on commerce sites. Optional analytics and marketing pixels add additional cookies.

Is consent required for Imweb?

Not for strictly necessary cookies (session, CSRF, cart). Yes for optional analytics, marketing pixels and remarketing cookies.

What is the legal basis for Imweb?

Hosting and basic site analytics rely on legitimate interest. Commerce flows rely on contract performance. Marketing pixels rely on consent. Statutory retention relies on legal obligation.

Does Imweb transfer data outside the EEA?

Yes, to South Korea. Covered by the EU Korea adequacy decision so SCC are not required for the core transfer. Marketing pixels may trigger additional transfers to the US, requiring SCC or DPF.

Is a DPIA required for Imweb?

Not generally for a simple site or small shop. Recommended for high traffic deployments, sensitive product categories or extensive remarketing flows.

How do I implement Imweb compliantly?

Sign the Imweb DPA, list Imweb as a processor, cite the EU Korea adequacy decision, block optional pixels behind a CMP and limit retention to what is necessary.

What are the alternatives to Imweb?

For website builders: Wix, Squarespace, Webflow, Tilda. For Korean alternatives: Cafe24, Makeshop, Wins eCommerce. EU based options simplify the transfer chain.

How do I document Imweb in the cookie policy?

List the strictly necessary cookies with names and durations. Mention Imweb as a processor in Korea and cite the EU Korea adequacy decision. Document any optional analytics or marketing cookies separately.

Same category

More services: E-commerce

See the whole category

CIMcloud

CIMcloud is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. CIMcloud supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, CIMcloud ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Zapiet

Zapiet is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Zapiet supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Zapiet ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

BRT

BRT is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. BRT integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, BRT helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Happy Returns

Happy Returns is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Happy Returns supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Happy Returns ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

E-commerce

futureshop

Future Shop offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. Future Shop integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make data-driven business decisions for sustainable growth.

Preferences

Oracle Commerce

Oracle Commerce offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. Oracle Commerce integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make data-driven business decisions for sustainable growth.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site