Privacy Policy

v1.2v1.1v1.0

1. The Company uses personal information solely for the purposes specified below. If the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.
   • Membership Registration and Management: Personal information is used to verify membership intent, provide membership-based services, verify and authenticate identity, maintain and manage membership status, prevent fraudulent service use, and handle various notifications and complaints.
   • Handling Complaints: Personal information is used to verify the complainant's identity, confirm complaint details, send notifications for verification purposes, and provide updates on the complaint resolution.
   • Provision of Goods or Services: Personal information is used for product delivery, service fulfillment, contract and invoice issuance, content distribution, personalized service delivery, identity and age verification, payment processing, and debt collection.
   • Marketing and Advertising: Personal information is used for the development of new services (products), the provision of customized services, event and promotional information dissemination, demographic-based service and advertisement delivery, service effectiveness analysis, access frequency assessment, and statistical analysis of service usage.

1. The Company collects the following personal information:

1. The Company retains and uses personal information within the period specified by law or the period agreed upon at the time of collection.
2. The retention and use periods for each type of personal information are as follows:

1. The Company promptly deletes personal information when the retention period expires or the processing purpose is fulfilled.
2. If the retention period has expired or the processing purpose has been fulfilled, but personal information must be preserved under other laws, the information is stored separately in a database (DB) or in a different physical location.
   • Destruction Procedure: The Company selects personal information to be destroyed and obtains approval from the Personal Information Protection Officer before securely deleting it.
   • Destruction Method:
     • Electronic files are permanently deleted using secure and irreversible methods.
     • Printed materials containing personal information are shredded or incinerated.

1. The Company does not disclose personal information to third parties without the user’s explicit consent.
2. However, personal information may be provided in the following cases:
   • When prior consent has been obtained from the data subject
   • When required by specific legal provisions or unavoidable for compliance with legal obligations
   • When law enforcement agencies request personal information through legal and proper procedures

1. The Company may use or provide personal information without user consent within the scope permitted by relevant laws.
2. When making such decisions, the Company takes the following factors into careful consideration:
   • Relevance to the original purpose of collection
   • Whether the user can reasonably predict the additional use or provision based on the collection context and common processing practices
   • Whether the rights or interests of the user are unfairly infringed
   • Whether security measures such as pseudonymization and encryption are applied

1. To ensure seamless service delivery, the Company outsources personal information processing to the following specialized external service providers:

   Service Provider	Country	Entrusted Personal Information	Purpose of Entrustment	Retention and Usage Period
   Amazon Web Services	South Korea, U.S. (West/East)	Minimum necessary user data for global service operation	Cloud service operation and management	Immediate deletion upon membership withdrawal
   Google Cloud Platform	South Korea	Minimum necessary user data for global service operation	Cloud service operation and management	Immediate deletion upon membership withdrawal
   Mailgun Technologies, Inc.	U.S.	Email, last four digits of card number	External email dispatch system	Retained in accordance with applicable laws
   Microsoft Azure	South Korea, U.S. (West/East), Europe (West/North), Southeast Asia, UAE (North), East Asia	Minimum necessary user data for global service operation	Cloud service operation and management	Immediate deletion upon membership withdrawal
   Microsoft Teams	South Korea	Email, name, company name, job title, mobile number	Webinar registration and participation management, webinar participation notification emails	Retained in accordance with applicable laws
   NHN Cloud	South Korea	Minimum necessary user data for global service operation	Cloud service operation and management	Immediate deletion upon membership withdrawal
   PayPal	U.S.	Name, email, payment method	Simple payment processing	Retained in accordance with applicable laws
   Stibee	U.S.	Email	Newsletter distribution	Immediate deletion upon membership withdrawal
   Stripe	U.S.	Card number, expiration date, CVV number, country information, postal code	Payment processing	Retained in accordance with applicable laws
   Daou Technology Co., Ltd.	South Korea	Mobile number, name	Mass SMS dispatch	Retained in accordance with applicable laws
   Bootpay	South Korea	Card number, expiration date, password, first six digits of birthdate, business registration number	Payment processing	Retained in accordance with applicable laws
   Zlgoon	South Korea	Mobile number	Mass SMS dispatch, prize delivery	Retained in accordance with applicable laws

2. When entering into outsourcing agreements, the Company ensures that contracts explicitly state the following matters in accordance with Article 26 of the 「Personal Information Protection Act」 and continuously monitors whether the entrusted parties ensure secure processing of personal information:
   • Prohibition of using personal information for purposes other than outsourced tasks
   • Implementation of technical and administrative protective measures
   • Restriction on subcontracting
   • Supervision and oversight of entrusted parties
   • Liability for damages related to personal information processing
3. If the content of the outsourcing agreement or the entrusted party changes, the Company will promptly update this privacy policy and, if necessary, notify affected users individually.

1. The Company takes the following measures to secure the safety of personal information:
   • Regular internal audits
     • To ensure the security of personal information handling, the Company conducts internal audits regularly (quarterly).
   • Minimization and training of personal information handlers
     • Personal information handlers are designated and limited to a minimum number, and management measures for personal information are implemented.
   • Establishment and implementation of an internal management plan
     • The Company establishes and implements an internal management plan to ensure the secure processing of personal information.
   • Technical measures against hacking
     • Security programs are regularly installed and updated to prevent data breaches and damage caused by hacking or computer viruses. Additionally, these systems are deployed in restricted-access environments and monitored through both technical and physical controls.
   • Encryption of personal information
     • Users' personal information and passwords are encrypted for storage and management so that only the user can know them. Critical data is encrypted during transmission or protected with file-locking features or other security functions.
   • Retention and prevention of tampering with access records
     • Records of access to the personal information processing system are retained and managed for at least one year. If processing personal information of 50,000 or more individuals, unique identification information, or sensitive information, records must be retained for at least two years. Security functions are applied to prevent access records from being altered, stolen, or lost.
   • Access control to personal information
     • Access rights to databases that process personal information are granted, changed, or revoked as necessary, and unauthorized access from external sources is blocked using an intrusion prevention system.
   • Use of locking devices for document security
     • Documents and auxiliary storage media containing personal information are stored securely in locked areas.
   • Access control for unauthorized personnel
     • The physical storage locations for personal information are operated separately, and strict access control procedures are established and enforced.

1. In order to deliver personalized services, the Company uses cookies that store and access user information as needed.
2. A cookie is a small data file sent from a website’s server to a user’s web browser, which may be temporarily or permanently stored on the user’s device.
   • Purpose of cookies: Cookies are used to analyze users’ visit and usage patterns on each service and website, track popular search terms, and verify secure logins to provide optimized information.
   • Cookie settings and rejection: Users can refuse the storage of cookies by adjusting their browser settings in Tools > Internet Options > Privacy.
   • Effects of rejecting cookies: If users disable cookies, some personalized services may not function properly.
3. Cookie Policy and Settings: For more details on the cookie policy and cookie settings, please refer to the Cookie Policy.

1. The Company collects and uses behavioral data, such as browsing history, to provide personalized services and benefits, including targeted online advertising. Sensitive behavioral data that may violate personal rights or privacy—such as information on beliefs, ideologies, or medical history—is not collected.

   Cookie Provider	Types of Data Collected	Methods of Data Collection	Purpose	Data Retention and Usage Period
   Google	Unique client identifier (Client ID), specific tracking attribute session identifier, unique user identifier for short-term sessions, and advertisement click-to-conversion link information.	Automatically collected when accessing and using the website	User identification and advertisement conversion tracking.	Two years from the date of collection.
   Yahoo	Advertisement-related data such as clicks, impressions, and conversions.	Automatically collected when accessing and using the website	Advertisement performance measurement.	Six months from the date of collection.
   Matomo	Anonymized user identifier-based profile information, including first/last visit time, number of visits, conversion events, e-commerce data, and session behavior tracking information.	Automatically collected when accessing and using the website	User identification and session tracking.	Thirteen months from the date of collection.

2. Users have the option to enable or block behavioral data by modifying their browser's cookie settings. Please note that changing cookie settings may limit access to certain features, including automatic login on websites.
   1. Google Chrome
      (1) How to block third-party cookies in a web browser
      – Click the '⋮' icon in the top-right corner of Chrome, then select 'Settings'.
      – On the Settings page, click「Privacy and Security」on the left, then click 「Third-Party Cookies」 and select whether to「Block Third-Party Cookies」.
      (2) How to block all cookies in the web browser
      – Also, click the ‘⋮’ icon in the top right of Chrome, then select ｢New Private tab｣. This will switch to Secret Mode, preventing browsing history, cookies, site data, and form information from being saved on the device.
   2. Microsoft Edge
      (1) How to block third-party cookies in a web browser
      – In Microsoft Edge, click the ‘…’ icon at the top right, then select ｢Settings｣.
      – In the Settings page, click ‘「Privacy, Search, and Services」’ on the left, then select whether to enable ‘「Tracking Prevention」’ and choose the level (Balanced or Strict). Alternatively, click ‘「Cookies and Site Permissions」’ on the left, then select ‘Manage and delete cookies and site data’ to block third-party cookies.
      (2) How to block all cookies in the web browser
      – In Edge, click the ‘…’ icon in the top right, then select ｢New InPrivate Window｣. This will switch to InPrivate mode, where browsing history, cookies, site data, and form inputs are not saved on the device.
3. Users may contact us with questions about behavioral data, to opt out, or to report any concerns or violations.
   – Department in Charge: Information Security Team
   – Tel: +82-2-6419-1087
   – Email: [email protected]

1. The data subject has the right to request access, correction, deletion, or suspension of processing of their personal information at any time.
2. Data subjects may exercise their rights under Paragraph 1 through written requests, email, fax, or other means, in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act. The Company will process such requests without undue delay.
3. The rights under Paragraph 1 may also be exercised through a representative authorized by the data subject. In such cases, a power of attorney must be submitted using the form specified in Annex No. 11 of the "Public Notice on Personal Information Processing Methods (No. 2020-7)."
4. Requests for access to or suspension of the processing of personal information may be restricted in accordance with Article 35(4) and Article 37(2) of the Personal Information Protection Act.
5. Requests for correction or deletion of personal information cannot be accommodated if the relevant personal information is mandatorily retained under applicable laws.
6. When a request for access, correction, deletion, or suspension of processing is made, the Company verifies whether the requester is the data subject or a legitimate representative.

1. The Company is responsible for overseeing all matters related to the processing of personal information and has designated a Personal Information Protection Officer and a Personal Information Protection Manager as follows to handle complaints and provide remedies related to personal information processing:
   • Personal Information Protection Officer
     • Name: Byungtak Kang
     • Position: CEO
     • Phone: +82-2-6419-1087
     • Email: [email protected]
   • Personal Information Protection Manager
     • Name: Jeong Hyeon Jeong
     • Position: Deputy General Manager
     • Phone: +82-2-6419-1087
     • Email: [email protected]
2. Data subjects may contact the Data Protection Officer or the responsible department for any inquiries, complaints, or remedies related to personal data protection arising from the use of the Company's services (or business). The Company will respond and handle such inquiries without undue delay.

1. A data subject may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency’s Personal Information Infringement Reporting Center, etc., to receive remedies for personal information infringements. Furthermore, for any other matters requiring reporting or consultation related to personal information infringement, the following institutions may be contacted:
   • Personal Information Dispute Mediation Committee: Phone no. 1833-6972 (www.kopico.go.kr)
   • Personal Information Infringement Reporting Center: Phone no. 118 (privacy.kisa.or.kr)
   • Supreme Prosecutor's Office: Phone no. 1301 (www.spo.go.kr)
   • National Police Agency: Phone no. 182 (ecrm.cyber.go.kr)
2. If a public institution’s decision or failure to act based on the request for the exercise of rights under Articles 35 (Access to Personal Information), 36 (Correction or Deletion of Personal Information), or 37 (Suspension of Personal Information Processing) of the Personal Information Protection Act infringes on the data subject’s rights or interests, the data subject may file an administrative appeal according to the Administrative Appeals Act.

※※ For detailed information on administrative appeals, please refer to the website of the Central Administrative Appeals Commission. (www.simpan.go.kr)

1. The current Privacy Policy will take effect on July 1, 2025.
2. The previous version of the privacy policy can be found below.
   Privacy Policy v1.1 (Revised on April 10, 2025)
   Privacy Policy v1.0 (Enacted on February 23, 2023)