Privacy Policy
The Company (hereinafter referred to as the “Company”) establishes and discloses the following Privacy Policy in accordance with Article 30 of the Personal Information Protection Act in order to protect the personal information of data subjects and to promptly and smoothly handle related grievances.
Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those stated below. If the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.
Website Membership Registration and Management
Personal information is processed for purposes including confirmation of intent to register, identification and authentication for membership services, maintenance and management of membership status, identity verification under the limited identity verification system, prevention of fraudulent use of services, confirmation of legal guardian consent for children under 14, various notices and announcements, and complaint handling.
Provision of Goods or Services
Personal information is processed for purposes including delivery of goods, provision of services, issuance of contracts and invoices, provision of content and customized services, identity and age verification, payment and settlement of fees, and debt collection.
Handling Complaints
Personal information is processed for purposes including verification of the complainant’s identity, confirmation of complaint details, contact and notification for fact-finding, and notification of processing results.
Article 2 (Retention and Use Period of Personal Information)
The Company processes and retains personal information within the retention and use period prescribed by law or agreed upon by the data subject at the time of collection.
The retention and use periods are as follows:
Website Membership Registration and Management:
Until withdrawal from the website.
However, in the following cases, until the relevant matter is resolved:
If an investigation or inquiry is ongoing due to violation of relevant laws, until its completion.
If claims or debts related to website use remain, until settlement is completed.
Provision of Goods or Services:
Until completion of supply and payment/settlement.
However, in the following cases:
Records related to transactions under the Act on Consumer Protection in Electronic Commerce:
Records on labeling/advertising: 6 months
Records on contracts, subscription withdrawal, payment, and supply: 5 years
Records on consumer complaints or dispute resolution: 3 years
Records under the Protection of Communications Secrets Act (Article 41):
Telecommunications date/time, start/end time, counterpart number, frequency of use, base station location data: 1 year
Computer communication and internet log records, access location tracking data: 3 months
Article 3 (Provision of Personal Information to Third Parties)
The Company processes personal information only within the scope specified in Article 1 and provides it to third parties only with the data subject’s consent or in cases permitted under Articles 17 and 18 of the Personal Information Protection Act.
For smooth service provision, the Company may provide personal information to third parties within the minimum necessary scope with the data subject’s consent:
Recipient:
Purpose:
Items Provided:
Retention/Use Period:
Article 4 (Outsourcing of Personal Information Processing)
The Company entrusts personal information processing tasks as follows:
Trustee: I’mweb Co., Ltd.
Scope: Provision of shopping mall hosting system, mobile app services, marketing services, affiliated services, AlimTalk/FriendTalk/SMS dispatch services
Trustee: OOO PG
Scope: Payment and escrow services
Trustee: OOO Courier
Scope: Product delivery services
Trustee: OOO Customer Center
Scope: Customer consultation services
Trustee: OOO
Scope: Identity verification services
Subcontractors:
I’mweb Co., Ltd. → Infobip LLC
Scope: SMS and Kakao AlimTalk (informational message) dispatch services
I’mweb Co., Ltd. → LUNASOFT Co., Ltd.
Scope: SMS, Kakao AlimTalk (informational messages), and FriendTalk dispatch services
In accordance with Article 25 of the Personal Information Protection Act, the Company specifies in contracts matters such as prohibition of processing beyond purpose, technical/administrative safeguards, restrictions on re-entrustment, supervision, and liability for damages.
Any changes in entrusted tasks or trustees will be disclosed without delay through this Privacy Policy.
Article 5 (Rights of Data Subjects and Legal Representatives)
Data subjects may exercise the following rights at any time:
Request access to personal information
Request correction of errors
Request deletion
Request suspension of processing
Requests may be made in writing, by phone, email, or fax, and the Company will respond without delay.
If correction or deletion is requested, the Company will not use or provide the relevant personal information until completion.
Rights may be exercised through a legal representative or authorized agent (with a power of attorney in the prescribed form).
Data subjects shall not infringe upon their own or others’ personal information or privacy in violation of applicable laws.
Article 6 (Items of Personal Information Processed)
Website Membership Registration and Management
Required:
Optional:
Provision of Goods or Services
Required:
Optional:
Article 7 (Destruction of Personal Information)
Personal information will be destroyed without delay once the retention period expires or the processing purpose is achieved.
If retention is required by other laws, the information will be stored separately.
Destruction Procedure and Method:
Selection and approval by the Personal Information Protection Officer
Electronic files: permanently deleted to prevent recovery
Paper documents: shredded or incinerated
Article 8 (Measures to Ensure Security)
The Company implements the following measures:
Administrative: internal management plan and regular employee training
Technical: access control, encryption, security programs
Physical: restricted access to server and storage rooms
Article 9 (Installation and Operation of Automatic Data Collection Devices)
The Company uses cookies to provide customized services.
Cookies are small data sent by the server and stored on users’ devices.
Users may manage cookie settings via browser options. Refusal may limit customized services.
(Browser settings for Chrome, Edge, Safari, Samsung Internet, etc.)
The Company collects and uses service usage data such as visit records, popular search terms, and secure access status to provide optimized services.
Article 10 (Personal Information Protection Officer)
The Company designates a Personal Information Protection Officer as follows:
Personal Information Protection Officer
Name: OOO
Title: OOO
Contact: , ,
Department in Charge
Department: OOO Team
Contact: , ,
Article 11 (Request for Access to Personal Information)
Requests for access under Article 35 of the Act may be directed to:
Department: OOO
Contact: , ,
Article 12 (Remedies for Infringement of Rights)
Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr
)
Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
Supreme Prosecutors’ Office: 1301 (www.spo.go.kr
)
National Police Agency: 182 (ecrm.police.go.kr)
Article 13 (Effective Date and Amendments)
This Privacy Policy shall take effect on XX/XX/20XX.
