Privacy Policy

The company name (hereinafter referred to as ‘Company’) establishes and discloses the following personal information processing guidelines in order to protect the personal information of information subjects and to promptly and smoothly handle complaints related thereto in accordance with Article 30 of the Personal Information Protection Act.

Article 1 (Purpose of processing personal information)
The company processes personal information for the following purposes. Personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Website membership registration and management
Personal information is processed for the purposes of confirming intent to become a member, identifying and authenticating oneself through the provision of membership services, maintaining and managing membership qualifications, verifying one's identity through the implementation of a limited identity verification system, preventing fraudulent use of services, confirming the consent of the legal representative when processing personal information of children under the age of 14, various notices and notifications, and handling grievances.

2. Provision of goods or services
We process personal information for the purposes of delivering goods, providing services, sending contracts and invoices, providing content, providing customized services, identity verification, age verification, bill payment and settlement, and debt collection.

3. Grievance handling
Personal information is processed for the purposes of verifying the identity of the complainant, confirming complaints, contacting and notifying for factual investigation, and notifying processing results.

Article 2 (Processing and retention period of personal information)
① The company processes and retains personal information within the personal information retention and use period in accordance with the law or within the personal information retention and use period agreed upon when collecting personal information from the information subject.
② The processing and retention period for each personal information is as follows.

1. Website membership registration and management: Until withdrawal of business/organization website
However, in the case of the following reasons, until the end of the relevant reason
1) If an investigation, investigation, etc. is in progress for violation of relevant laws and regulations, until the investigation or investigation is completed.
2) If any claims or debts remain due to use of the website, until the relevant claims or debts are settled.


2. Provision of goods or services: Until completion of supply of goods or services and completion of payment/settlement.
However, in the following cases, until the end of the relevant period:
1) Records of transactions, such as labeling, advertising, contract details and performance, in accordance with the Act on Consumer Protection in Electronic Commerce, etc.
- Records of product descriptions and advertising: 6 months
- Records of contract or subscription withdrawal, payment, supply of goods, etc.: 5 years
- Records on handling consumer complaints or disputes: 3 years
2) Storage of communication confirmation data in accordance with Article 41 of the 「Communication Secrets Protection Act」
- Subscriber telecommunication date and time, start and end time, other party subscriber number, frequency of use, sending base station location tracking data: 1 year
- Computer communication, Internet log records, access point tracking data: 3 months


Article 3 (Provision of personal information to third parties)
① The company processes the personal information of the information subject only within the scope specified in Article 1 (Purpose of processing personal information), and provides personal information to third parties only in cases that fall under Articles 17 and 18 of the Personal Information Protection Act, including the consent of the information subject and special provisions of the law. Other than that, the company does not provide the personal information of the information subject to third parties.
② In order to provide smooth service, the company may provide personal information to a third party only to the minimum extent necessary with the consent of the information subject pursuant to Article 17, Paragraph 1, Item 1 of the Personal Information Protection Act in the following cases.
- Person receiving personal information: <Example) OOO Card Co., Ltd.>
- Purpose of use of personal information of the recipient: <Example) Business partnership, such as joint hosting of events, and issuance of affiliated credit cards>
- Personal information items provided: <Example) name, address, phone number, email address, credit card payment account information>
- Retention and use period of the recipient: <Example) During the transaction period according to the credit card issuance contract>


Article 4 (Entrustment of personal information processing)
① In order to smoothly process personal information, the company entrusts personal information processing as follows.
- Details of entrusted work
- Entrusted person (trustee): I’m Web Co., Ltd.
- Contents of entrusted work: Shopping mall hosting service system provision, mobile app service, marketing service and addition, affiliate service provision and notification talk, friend talk, text message sending service, sales channel order linking service, etc.
- Entrusted person (trustee): OOO PG
- Details of entrusted work: Payment and escrow work
- Consignee (Consignee): OOO Courier
- Details of entrusted work: Product delivery work
- Entrusted person (trustee): OOO Customer Center
- Contents of entrusted work: Customer consultation work
- Entrusted person (trustee): OOO
- Contents of entrusted work: Identity verification work
- **Re-consignor**
- **Re-consignee (trustee): I’mweb Co., Ltd. → InfoBib Co., Ltd.**
- **Contents of entrusted work: Sending text messages, sending KakaoTalk notification messages (informational messages)**
- **Re-entrusted person (trustee): I’m Web Co., Ltd. → Lunasoft Co., Ltd.**
- **Contents of entrusted work: Sending text messages, sending KakaoTalk notification messages (informational messages) and friend chats**
② When concluding a consignment contract, in accordance with Article 25 of the Personal Information Protection Act, the company specifies matters related to responsibilities such as prohibition of processing of personal information for purposes other than the purpose of performing the consignment, technical and managerial protection measures, restrictions on re-entrustment, management and supervision of the consignee, and compensation for damages in documents such as the contract, and supervises whether the consignee handles personal information safely.
③ If the details of the entrusted work or the trustee changes, we will disclose it through this personal information processing policy without delay.

Article 5 (Rights of information subjects and legal representatives and methods of exercising them)

① The information subject may exercise the following rights related to personal information protection against the company at any time.
1. Request to view personal information
2. Request for correction if there is an error, etc.
3. Request for deletion
4. Request to suspend processing
② Rights pursuant to Paragraph 1 may be exercised to the Company in writing, by phone, e-mail, facsimile (FAX), etc., and the Company will take action without delay.
③ If the information subject requests correction or deletion of errors in personal information, the company will not use or provide the personal information until correction or deletion is completed.
④ Rights under paragraph 1 may be exercised through an agent, such as the information subject's legal representative or a person authorized to do so. In this case, you must submit a power of attorney in the format of Appendix 11 of the Enforcement Rules of the Personal Information Protection Act.
⑤ The information subject shall not violate the personal information and privacy of the information subject or others processed by the company in violation of relevant laws and regulations, such as the Personal Information Protection Act.


Article 6 (Personal information items processed)
The company processes the following personal information items.

1. Website membership registration and management
Required items: <Example) name, date of birth, ID, password, address, phone number, gender, email address, i-PIN number>
Optional items: <Example) Marital status, areas of interest>

2. Provision of goods or services
Required items: <Example) Payment information such as name, date of birth, ID, password, address, phone number, email address, i-PIN number, credit card number, bank account information, etc.>
Optional items: <Areas of interest, past purchase history>

Article 7 (Destruction of personal information)
① When personal information becomes unnecessary, such as when the personal information retention period has passed or the purpose of processing has been achieved, the company destroys the relevant personal information without delay.
② If personal information must continue to be preserved pursuant to other laws and regulations despite the expiration of the personal information retention period agreed to by the information subject or the purpose of processing has been achieved, the personal information will be transferred to a separate database (DB) or stored in a different storage location.
③ The procedures and methods for destroying personal information are as follows.
1. Destruction Procedure
The company selects the personal information that requires destruction and destroys the personal information with the approval of the company's personal information protection manager.
2. Method of destruction
The company destroys personal information recorded and stored in the form of electronic files so that the records cannot be reproduced, and personal information recorded and stored in paper documents is destroyed by shredding or incineration.

Article 8 (Measures to ensure the safety of personal information)
The company is taking the following measures to ensure the safety of personal information.
1. Management measures: establishment and implementation of internal management plan, regular employee training, etc.
2. Technical measures: Management of access rights to personal information processing system, installation of access control system, unique identification information
Encryption, security program installation, etc.
3. Physical measures: Access control to computer rooms, data storage rooms, etc.

Article 9 (Matters regarding installation, operation and refusal of automatic personal information collection devices)
① The company uses ‘cookies’ to store usage information and retrieve it from time to time in order to provide individualized services to users.
② Cookies are a small amount of information that the server (http) used to run the website sends to the user's computer browser and are stored on the user's PC or mobile phone.
③ The information subject can set settings such as allowing or blocking cookies through web browser option settings. However, if you refuse to store cookies, you may have difficulty using customized services.

▶ Allow/block cookies in web browser
- Chrome: Web browser settings > Privacy and security > Delete browsing history
- Edge: Web browser settings > Cookies and site permissions > Manage and delete cookies and site data

▶ Allow/block cookies in mobile browser
- Chrome: Mobile browser settings > Privacy and security > Delete browsing history
- Safari: Mobile device settings > Safari > Advanced > Block all cookies
- Samsung Internet: Mobile browser settings > Internet usage history > Delete Internet usage history

④ In the process of using the service, the company collects and uses the information to provide optimized information to the user by identifying visitation and usage patterns, popular search terms, and secure access for each service and website visited by the user.


Article 10 (Personal Information Protection Manager)
① The company is responsible for overall management of personal information processing, and has designated a personal information protection manager as follows to handle complaints and provide relief for damage from information subjects related to personal information processing.

▶ Personal information protection officer
Name: OOO
Position: OOO
Contact information: <Phone number>, <Email>, <Fax number>
※ You will be connected to the personal information protection department.

▶ Personal information protection department
Department Name: OOO Team
Contact information: <Phone number>, <Email>, <Fax number>

② Information subjects may inquire about all personal information protection-related inquiries, complaint handling, damage relief, etc. that arise while using the company's services (or business) to the personal information protection manager and responsible department. The company will respond and process inquiries from information subjects without delay.


Article 11 (Request to view personal information)
The information subject may request access to personal information pursuant to Article 35 of the Personal Information Protection Act to the department below. The company will strive to promptly process the information subject's request to view personal information.

▶ Personal information access request reception and processing department
Department Name: OOO
Contact information: <Phone number>, <Email>, <Fax number>

Article 12 (Methods for relief from rights infringement)
Information subjects can inquire about damage relief and consultation regarding personal information infringement to the organizations below.
1. Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Reporting Center: (without area code) 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: (without area code) 1301 (www.spo.go.kr)
4. National Police Agency: (without area code) 182 (ecrm.police.go.kr/minwon/main)


Article 13 (Implementation and change of personal information processing policy)
This privacy policy applies to 20XX. Applies from X. X.