[Company Name] (hereinafter the "Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.
Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes. Personal information being processed will not be used for any purpose other than those listed below, and if the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
1. Website Membership Registration and Management
Personal information is processed to confirm the intention to register as a member, identify and authenticate members for the provision of membership services, maintain and manage membership, verify identity under the limited identity verification system, prevent fraudulent use of services, confirm the consent of a legal representative when processing the personal information of children under the age of 14, deliver notices and notifications, and handle grievances.
2. Provision of Goods or Services
Personal information is processed for the delivery of goods, provision of services, sending of contracts and invoices, provision of content, provision of customized services, identity verification, age verification, payment and settlement of fees, and debt collection.
3. Handling of Grievances
Personal information is processed to verify the identity of the complainant, confirm the details of the complaint, contact and notify the complainant for fact-finding, and notify the complainant of the results.
Article 2 (Processing and Retention Period of Personal Information)
① The Company processes and retains personal information within the retention and use period prescribed by law or the retention and use period consented to by the data subject at the time of collection.
② The processing and retention period for each category of personal information is as follows.
1. Website membership registration and management: Until withdrawal from the business/organization website
However, in the following cases, until the end of the relevant reason:
1) If an investigation or inquiry is in progress due to a violation of relevant laws, until the end of such investigation or inquiry
2) If any claims or debts arising from the use of the website remain, until such claims and debts are settled
2. Provision of goods or services: Until the supply of goods/services and the payment and settlement of fees are completed
However, in the following cases, until the end of the relevant period:
1) Records of transactions, such as labeling and advertising, contract details, and performance, under the Act on the Consumer Protection in Electronic Commerce, Etc.
- Records on labeling and advertising: 6 months
- Records on contracts or withdrawal of subscriptions, payment, and supply of goods: 5 years
- Records on consumer complaints or dispute resolution: 3 years
2) Retention of communication confirmation data under Article 41 of the Protection of Communications Secrets Act
- Date and time of the subscriber's telecommunications, start and end times, the other party's subscriber number, frequency of use, and location tracking data of the originating base station: 1 year
- Computer communication records, internet log records, and access location tracking data: 3 months
Article 3 (Provision of Personal Information to Third Parties)
① The Company processes the personal information of data subjects only within the scope specified in Article 1 (Purpose of Processing Personal Information), and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or under special provisions of law. Otherwise, the Company does not provide the personal information of data subjects to third parties.
② For the smooth provision of services, the Company may provide personal information to third parties to the minimum extent necessary, with the consent of the data subject in accordance with Article 17(1)1 of the Personal Information Protection Act, in the following cases.
- Recipient of personal information:
- Recipient's purpose of use:
- Personal information items provided:
- Recipient's retention and use period:
Article 4 (Entrustment of Personal Information Processing)
① For the smooth handling of personal information, the Company entrusts personal information processing tasks as follows.
- Details of entrusted tasks
- Trustee: Imweb Inc.
- Entrusted tasks: Provision of shopping mall hosting systems, mobile app services, marketing services and add-on/partner services, and agency services for sending KakaoTalk AlimTalk and FriendTalk messages and text messages, sales channel order integration services, etc.
- Trustee: OOO PG
- Entrusted tasks: Payment and escrow services
- Trustee: OOO Courier
- Entrusted tasks: Product delivery
- Trustee: OOO Customer Center
- Entrusted tasks: Customer consultation
- Trustee: OOO
- Entrusted tasks: Identity verification
- **Sub-trustees**
- **Sub-trustee: Imweb Inc. → Infobip Ltd.**
- **Entrusted tasks: Sending text messages and KakaoTalk AlimTalk (informational messages)**
- **Sub-trustee: Imweb Inc. → Lunasoft Co., Ltd.**
- **Entrusted tasks: Sending text messages, KakaoTalk AlimTalk (informational messages), and FriendTalk messages**
② When concluding an entrustment contract, the Company specifies in the contract or other documents, in accordance with Article 25 of the Personal Information Protection Act, matters concerning responsibilities such as the prohibition of processing personal information for purposes other than performing the entrusted tasks, technical and administrative protective measures, restrictions on re-entrustment, management and supervision of the trustee, and compensation for damages, and supervises whether the trustee processes personal information safely.
③ If the details of the entrusted tasks or the trustee change, the Company will disclose such changes through this Privacy Policy without delay.
Article 5 (Rights of Data Subjects and Legal Representatives and How to Exercise Them)
① Data subjects may exercise the following rights regarding personal information protection against the Company at any time.
1. Request to access personal information
2. Request to correct errors, if any
3. Request for deletion
4. Request to suspend processing
② The rights under Paragraph 1 may be exercised against the Company in writing, by phone, by email, by facsimile (FAX), etc., and the Company will take action without delay.
③ If a data subject requests the correction or deletion of errors in personal information, the Company will not use or provide the personal information until the correction or deletion is completed.
④ The rights under Paragraph 1 may be exercised through a representative, such as the data subject's legal representative or a person authorized by the data subject. In this case, a power of attorney in accordance with Form No. 11 of the Enforcement Rule of the Personal Information Protection Act must be submitted.
⑤ Data subjects must not infringe upon the personal information or privacy of themselves or others being processed by the Company in violation of the Personal Information Protection Act or other relevant laws.
Article 6 (Personal Information Items Processed)
The Company processes the following personal information items.
1. Website membership registration and management
Required items:
Optional items:
2. Provision of goods or services
Required items:
Optional items:
Article 7 (Destruction of Personal Information)
① The Company destroys personal information without delay when it becomes unnecessary, such as when the retention period has expired or the purpose of processing has been achieved.
② If personal information must be retained under other laws even though the retention period consented to by the data subject has expired or the purpose of processing has been achieved, the Company will transfer the personal information to a separate database (DB) or store it in a different location.
③ The procedures and methods for destroying personal information are as follows.
1. Destruction procedure
The Company selects personal information for which a reason for destruction has arisen and destroys it with the approval of the Company's Chief Privacy Officer.
2. Destruction method
The Company destroys personal information recorded and stored in electronic file form so that the records cannot be reproduced, and destroys personal information recorded and stored in paper documents by shredding or incineration.
Article 8 (Measures to Ensure the Security of Personal Information)
The Company takes the following measures to ensure the security of personal information.
1. Administrative measures: Establishment and implementation of an internal management plan, regular employee training, etc.
2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information
and other data, installation of security programs
3. Physical measures: Access control for computer rooms, data storage rooms, etc.
Article 9 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)
① The Company uses "cookies," which store and retrieve usage information from time to time, to provide individually customized services to users.
② Cookies are small pieces of information sent by the server (http) used to operate the website to the user's computer browser, and are stored on the user's PC or mobile device.
③ Data subjects may allow or block cookies through their web browser settings. However, refusing to store cookies may make it difficult to use customized services.
▶ Allowing/blocking cookies in web browsers
- Chrome: Browser settings > Privacy and security > Delete browsing data
- Edge: Browser settings > Cookies and site permissions > Manage and delete cookies and site data
▶ Allowing/blocking cookies in mobile browsers
- Chrome: Mobile browser settings > Privacy and security > Delete browsing data
- Safari: Device settings > Safari > Advanced > Block All Cookies
- Samsung Internet: Mobile browser settings > Browsing data > Delete browsing data
④ In the course of service use, the Company collects and uses information such as visits to and usage patterns of each service and website visited by users, popular search terms, and whether secure connections are used, in order to provide users with optimized information.
Article 10 (Chief Privacy Officer)
① The Company has designated a Chief Privacy Officer as follows to take overall responsibility for personal information processing and to handle complaints and provide remedies to data subjects in relation to personal information processing.
▶ Chief Privacy Officer
Name: OOO
Position: OOO
Contact: , ,
※ You will be connected to the department in charge of personal information protection.
▶ Department in Charge of Personal Information Protection
Department: OOO Team
Contact: , ,
② Data subjects may contact the Chief Privacy Officer and the department in charge regarding all inquiries, complaints, and remedies related to personal information protection arising from the use of the Company's services (or business). The Company will respond to and handle such inquiries without delay.
Article 11 (Request to Access Personal Information)
Data subjects may submit a request to access their personal information under Article 35 of the Personal Information Protection Act to the department below. The Company will make every effort to process such requests promptly.
▶ Department receiving and handling requests to access personal information
Department: OOO
Contact: , ,
Article 12 (Remedies for Infringement of Rights)
Data subjects may contact the following organizations for remedies and consultation regarding infringement of personal information.
1. Personal Information Dispute Mediation Committee: (no area code) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center: (no area code) 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: (no area code) 1301 (www.spo.go.kr)
4. Korean National Police Agency: (no area code) 182 (ecrm.police.go.kr/minwon/main)
Article 13 (Effective Date and Changes to this Privacy Policy)
This Privacy Policy applies from 20XX. X. X.
