Privacy Policy

Article 1 (Purpose of Processing Personal Information)

The company processes personal information for the following purposes. Personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be implemented such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

• Contract fulfillment and service provision
• Member management and identity verification
• Marketing and advertising utilization
• Service improvement and new service development

Article 2 (Processing and Retention Period of Personal Information)

The company processes and retains personal information within the period of retention and use of personal information under the law or within the period of retention and use of personal information agreed upon when collecting personal information from the data subject.

• Membership registration and management: Until membership withdrawal
• Records of contracts or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records of consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)

Article 3 (Personal Information Items Processed)

The company processes the following personal information items.

Article 4 (Provision of Personal Information to Third Parties)

The company processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information) and provides personal information to third parties only in cases that fall under Articles 17 and 18 of the Personal Information Protection Act, such as consent from the data subject or special provisions of the law.

Article 5 (Entrustment of Personal Information Processing)

The company entrusts some work for smooth personal information processing, and in accordance with Article 26 of the Personal Information Protection Act when signing entrustment contracts, specifies matters concerning the prohibition of processing personal information other than for the purpose of performing entrusted work, technical and managerial protective measures, restrictions on re-entrustment, management and supervision of the trustee, and liability for damages in documents such as contracts, and supervises whether the trustee processes personal information safely.

Article 6 (Rights and Obligations of Data Subjects and How to Exercise Them)

Data subjects may exercise the following personal information protection-related rights against the company at any time.

• Request to access personal information
• Request for correction if there are errors
• Request for deletion
• Request to stop processing

Article 7 (Measures to Ensure Safety of Personal Information)

The company takes the following measures to ensure the safety of personal information.

• Administrative measures: Establishment and implementation of internal management plan, regular employee training
• Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of personal information
• Physical measures: Access control to computer rooms and data storage rooms

Article 8 (Personal Information Protection Officer)

The company has designated a personal information protection officer as follows to take overall responsibility for personal information processing and to handle complaints and damage relief of data subjects related to personal information processing.

Article 9 (Changes to Privacy Policy)

This privacy policy is effective from December 1, 2024. Previous privacy policies can be found below.