We value your personal information and comply with applicable laws to ensure safe and transparent data protection.
1. Purpose of Processing Personal Information
We process personal information for the purposes described below. If the purpose changes, we will obtain separate consent in accordance with the Personal Information Protection Act.
- Membership management, identity verification, prevention of fraudulent use
- Service provision, product delivery, billing, payment processing
- Marketing, analytics, service improvement
2. Retention and Use Period
We retain and use personal information within the period permitted by law or agreed upon by the user.
- Membership: Until membership withdrawal
- Service provision: Until settlement of payments
- Contract/transaction records: 5 years
- Payment records: 5 years
- Dispute resolution: 3 years
3. Items of Personal Information Processed
We process the following personal information:
- Required: Name, email, phone number, address
- Optional: Date of birth, occupation, interests
- Automatically collected: IP, cookies, access logs
4. Provision to Third Parties
We provide personal information only when permitted by law or with user consent.
5. Outsourcing of Personal Information Processing
We outsource personal information processing to provide efficient services.
- Delivery company: Shipping service
- Payment gateway: Payment processing
6. User Rights
Users may request the access, correction, deletion, or suspension of their personal information at any time.
- Right to access
- Right to correct/delete
- Right to suspend processing
7. Destruction of Personal Information
We destroy personal information without delay when it becomes unnecessary.
8. Privacy Officer
We appoint a privacy officer responsible for overseeing personal data matters.
9. Security Measures
We take the following measures to protect personal information.
- Administrative: Internal policy and training
- Technical: Access control, encryption — based on the security environment of the external hosting service provider
- Physical: Access control systems provided by the external hosting provider
