The company name (hereinafter referred to as "company") establishes and discloses personal information processing guidelines as follows to protect the personal information of the information subject under Article 30 of the Personal Information Protection Act and to handle related complaints quickly and smoothly.

Article 1 (Purpose of Processing Personal Information)
The company processes personal information for. The personal information being processed will not be used for any purpose other than the following, and necessary measures such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act will be implemented.

1. Homepage membership registration and management
Personal information is processed for the purpose of confirming intention to register as a member, providing membership services, maintaining and managing membership, preventing illegal use of services, checking consent of legal representatives.

2. provision of goods or services
It processes personal information for the purpose of delivering goods, providing services, sending contracts and invoices, providing content, providing customized services, identifying oneself, age verification, payment and settlement of fees, collection of bonds.

3. complaint handling
Personal information is processed for purposes such as identification of the complainant, confirmation of complaints, contact and notification for fact-finding, and notification of processing results.

Article 2 (Processing and Retention Period of Personal Information)
① The company holds personal information under laws and regulations, holds personal information with consent when collecting personal information from the period of use or the subject of information, and processes and retains personal information within the period of use.
② The processing and retention period of each personal information is as follows.

1. Homepage membership registration and management: Until the withdrawal of business/group homepages
However, in cases where the following grounds are met, until the termination of said grounds
1) In the event that an investigation, investigation, etc. is in progress due to a violation of relevant laws and regulations, until the completion of said investigation or investigation
2) If the claim and debt relationship remains due to the use of the website, until the settlement of said claim and debt relationship

2. Provision of goods or services: until completion of supply of goods or services and completion of payment and settlement of fees
However, if any of the following grounds apply, by the end of the relevant period
1) Labeling and advertising based on the "Act on Consumer Protection in Electronic Commerce, etc." Record of Contract Contents and Transactions of Performance, etc
- Display/Advertising Records: June
- Records of withdrawal, payment, supply of goods, etc. from a contract or contract: 5 years
- Records of consumer dissatisfaction or dispute resolution: 3 years
2) Storage of communication fact-checking materials pursuant to Article 41 of the Communications Secrets Protection Act
- Subscriber telecommunication date and time, start/end time, other subscriber number, usage frequency, originating station location tracking data: 1 year
- Computer communication, Internet log records and destination tracking: 3 months

Article 3 (Provision of Personal Information to Third Parties)
① The company processes personal information of the information subject only within the scope specified in Article 1 (Purpose of Processing Personal Information) and provides personal information to third parties only if it falls under Article 17 of the Personal Information Protection Act.
② The company provides personal information to third parties as follows.
- Individuals who provide personal information:
- Purpose of personal information use of the recipient:
- Personal information items to be provided:
- Retention and usage period of the recipient:

Article 4 (Entrustment of Personal Information Processing)
① For smooth personal information processing, the company entrusts personal information processing as follows.

- Consignee (Trustee): IMWeb Co., Ltd
- Contents of consignment: Shopping mall hosting service system provision, mobile application service, marketing service and addition, partnership service provision and notification talk, friend talk, text message delivery agency service, etc

- Consignee (Trustee): OOOPG
- Contents of business to be entrusted: Settlement and escrow business

- Consignee (Trustee): OOO courier service
- Business to be consigned: Product delivery business

- Consignee: OOO Customer Center
- Contents of the business to be entrusted: Customer consultation services

- Consignee (Trustee): OOO
- Contents of business to be entrusted: Identification business

② When signing a consignment contract, the company shall specify liability matters such as prohibition of personal information processing, technical and management protection measures, restrictions on re-entrustment, management and supervision of trustees, and compensation, It oversees whether the trustee handles personal information securely.
③ If the contents of the entrusted work or the trustee changes, it shall be disclosed through this personal information processing policy without delay.

Article 5 (user and exercise method)
①Information center, information can exercise the company, you can exercise the following items.
1. Personal Information Inspection Request
2. If there are errors, correction request
3. Request for deleting
4. Processing Stop Request
②The right exercise under paragraph 1 can be carried through a document, e-mail, e-mail, e-mail, and copy electronic mail, and copy electronic mail, and copy electronic mail.
③If the information maintaining or delete the information center is requested to error, the company will not provide or delete the individual information until the company is completed.
④The exercise under paragraph 1 can be through the agent, such as legal agent and delegate.In this case, the provisions of the individual information Protection Act, the Appended 11 item format shall submit the delegate.
⑤The information center is not to violate relationships, such as personal information protection laws and privacy of others, and privacy.

Article 6 (Processed Personal Information Items)
The company processes the following personal information items.

1. Homepage membership registration and management
Required items:
Choice:

2. provision of goods or services
Required items:
Selected Items :

3. The following personal information items can be automatically created and collected during the process of using the Internet service.
IP address, cookie, MAC address, service usage record, visit record, error usage record, etc

Article 7 (Destruction of Personal Information)
①When personal information becomes unnecessary, such as the expiration of the personal information retention period or achievement of the processing purpose, the company will destroy the personal information without delay.
②If the retention period of personal information agreed by the information subject has expired or the purpose of processing has been achieved, but personal information must be stored according to other laws and regulations, the personal information shall be transferred to a separate database (DB).
③The procedures and methods for destroying personal information are as follows.
1. Procedures for Destruction
The company selects personal information that causes destruction and destroys personal information with approval from the company's personal information security officer.
2. Disposal Method
The company destroys personal information recorded and stored in the form of electromagnetic files by using methods such as low level format so that records cannot be reproduced, and destroys personal information recorded and stored on paper documents by crushing or incinerating.

Article 8 (Measures to ensure the safety of personal information)
The company is taking the following measures to ensure the safety of personal information.
1. Management measures: Establishment and implementation of internal management plans, regular employee training, etc
2. Technical measures: Access authority management such as personal information processing system, installation of access control system, and unique identification information
Back encryption, installation of security programs
3. Physical Measures: Access control of computer room, data storage room, etc

Article 9 (Matters concerning the installation, operation and rejection of automatic personal information collection devices)
①The company uses 'cookies' that store usage information and call frequently to provide individual customized services to users.
②Cookies are small amounts of information sent to your computer browser by the server (http) that runs the website and is sometimes stored on your hard disk.
Here we go. Purpose of using cookies: It is used to provide optimized information to users by identifying each service and website they visit, usage patterns, popular search terms, security access, etc.
Me. Cookie installation, operation, or rejection: You can refuse to save cookies by setting options on Tools > Internet Options > Personal Information menu at the top of your web browser.
All. Refusing to store cookies may cause difficulties in using customized services.

Article 10 (Personal Information Security Officer)
①The company is responsible for the handling of personal information and designates a personal information security officer as follows to handle complaints and damage relief related to the processing of personal information.

▶Personal Information Security Officer
Statement: OOO
Responsibilities: OOO
Contacts: , ,
*You will be connected to the department in charge of personal information protection.

▶Personal Information Protection Department
Department Name: OOO Team
Contact: OOO
Contacts: , ,

②Information subjects can contact the person in charge of personal information protection measures and the department in charge for all personal information protection-related inquiries, complaints, and damage relief that occurred while using the company's service (or business.The company should respond and process inquiries from the information subject without delay.

Article 11 (Request for access to personal information)
The information subject may request access to personal information under Article 35 of the Personal Information Protection Act to the following department.The company will make efforts to ensure that requests for personal information access by the information subject are processed quickly.

▶Personal information access request reception and processing department
Department Name: OOO
Contact: OOO
Contacts: , ,

Article 12 (Relief Method for Infringement of Rights and Interests)
The information subject can inquire about damage relief and counseling for personal information infringement to the following institutions.

▶Personal Information Infringement Reporting Center (Operated by the Korea Internet Agency)
-Jurisdiction: Report infringement of personal information and apply for counseling
- Home page: privacy.kisa.or.kr
Phone: (no station number) 118
Address: (58324), Personal Information Infringement Reporting Center on 3F, Jinheung-gil 9 (Gwanggaram-dong 301-2), Naju, Jeollanam-do

▶Personal Information Dispute Coordination Committee
-Jurisdiction: Application for mediation of personal information disputes, collective dispute settlement (civil resolution)
- Home page: www.kopico.go.kr
Phone: (no station number) 1833-6972
Address: (03171) 4th floor of Seoul Government Complex 209 Sejong-daero, Jongno-gu, Seoul

▶Supreme Prosecutor's Office Cyber Crime Investigation Team: 02-3480-3573 (www.spo.go.kr )
▶Cyber Security Bureau of the National Police Agency: 182 (http://cyberbureau.police.go.kr )

Article 13 (Enforcement and Change of Personal Information Processing Policy)
This privacy statement will be applied from 20XX.X.X.