Privacy Policy

Yeowubie Interaction Co., Ltd. (hereinafter referred to as the "Company") processes personal information lawfully and manages it safely in compliance with the Personal Information Protection Act and related laws to protect the freedom and rights of data subjects. In accordance with Article 30 of the Personal Information Protection Act, we establish and disclose this Privacy Policy to guide data subjects on the procedures and standards for processing and protecting personal information, and to handle related complaints promptly and smoothly. Article 1 (Purpose) ① "Personal information" refers to information about a living individual that can identify the individual through items such as name, resident registration number, etc. contained in the information (including information that cannot identify a specific individual by itself but can be easily combined with other information to identify). ② The Company takes the protection of your personal information very seriously and complies with the personal information protection regulations under the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and the Personal Information Protection Guidelines established by the Ministry of Information and Communication. ③ The Company makes this Privacy Policy easily accessible to users by posting it on the homepage. ④ The Company has established procedures necessary for revising the Privacy Policy for continuous improvement. Article 2 (Items and Purposes of Personal Information Collection) ① For Vendor Members The Company collects minimum personal information for the following purposes: [Service Provision] • User identification for service use, individual notification and notice • Providing vendor information to general member users and vendor member service provision, service purchase [Service Development and Improvement] • Service usage record analysis, environment construction for service updates and service improvement [Personal Information Items Collected] • Individual: ID, password, name, gender, date of birth, nationality, mobile phone, email, address • Organization: Business name, business registration number, phone number, email, address, account information, payment information ② For General Members [Service Provision] • User identification for service use, individual notification and notice • User information-based recommendations, vendor benefits, vendor communication and general member service provision [Service Development and Improvement] • Service usage record analysis, environment construction for service updates and service improvement [Personal Information Items Collected] • General Information: ID, password, name, gender, date of birth, nationality, mobile phone, email, address, location information • Other: Service usage records, IP address, terminal information (OS, device identifier) You have the right to refuse consent to the collection and use of personal information, and refusal of consent may restrict membership registration or prevent service use. Article 3 (Protection of Children's Personal Information) The Company restricts membership registration for children under 14 years of age who require the consent of a legal representative and does not collect or use any personal information. Article 4 (Retention and Use Period of Collected Personal Information) ① The Company's principle is to destroy personal information without delay when the purpose of collection and provision is achieved. However, if retention is required by relevant laws, it will be retained for that period. • Records on contracts or subscription withdrawal: 5 years (Act on Consumer Protection in Electronic Commerce) • Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce) • Records on consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce) • Log records: 3 months (Protection of Communications Secrets Act) Article 5 (Procedures and Methods for Destruction of Personal Information) ① The Company destroys personal information without delay when it becomes unnecessary due to the expiration of the retention and use period or achievement of processing purpose. ② Procedures and methods for destruction of personal information: • Destruction procedure: Collected personal information is moved to a separate database or stored in a different location according to internal policies and relevant laws, then destroyed. • Destruction method: Personal information recorded and stored in electronic file format is destroyed using technical or physical methods that prevent reproduction, and personal information recorded and stored in paper documents is destroyed by shredding or incineration. Article 6 (Provision of Personal Information to Third Parties) ① The Company does not use user personal information beyond the scope notified in Article 2 or provide it to others or other companies or institutions. However, exceptions are as follows: • When requested by relevant authorities for investigative purposes under relevant laws • When provided in a form that cannot identify specific individuals for statistics, academic research, or market research • When requested according to procedures prescribed by other relevant laws ② The Company provides personal information to third parties as follows only when users have consented in advance for smooth service use: • Recipients of personal information: Winnie Platform vendor members (affiliated stores) • Purpose of use by recipients: Provision of vendor products and services and history management, consultation response and event benefit provision • Personal information items provided: Name and ID for member matching and identification / Gender, nationality, date of birth, phone number, email, address for service and benefit provision • Retention and use period by recipients: Until user withdrawal or withdrawal of service use consent Article 7 (Measures to Ensure Safety of Personal Information) ① Administrative measures: Establishment and implementation of internal management plan, operation of dedicated organization, regular employee training ② Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of personal information, installation and update of security programs ③ Physical measures: Access control to computer rooms, data storage rooms, etc. Article 8 (Rights, Obligations, and Exercise Methods of Users and Legal Representatives) ① Users may exercise the following personal information protection related rights at any time as data subjects: • Request for access to personal information • Request for correction if there are errors • Request for deletion • Request for suspension of processing • Membership withdrawal (withdrawal of personal information consent) ② The Company may refuse access/correction/deletion of all or part of personal information in the following cases: • When access is prohibited or restricted by law • When the personal information is specified as a collection target in other laws • When there is a risk of harming the life or body of others or unfairly infringing on the property and other interests of others Article 9 (User Rights and Obligations) ① Please enter your personal information accurately and up-to-date to prevent unexpected accidents. The responsibility for accidents caused by inaccurate information entered by users lies with the users themselves, and membership may be revoked if false information such as identity theft is entered. ② Users have the right to have their personal information protected and also have the obligation to protect themselves and not infringe on others' information. Article 10 (Personal Information Protection Officer) The Company designates a personal information protection officer as follows to take overall responsibility for personal information processing and handle complaints and damage relief of data subjects related to personal information processing. • Personal Information Protection Department: Winnie Operations Team • Name: Hawon Kim • Email: winnie@yeowubie.com Article 11 (Remedies for Rights Infringement) Data subjects may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, Korea Internet & Security Agency Personal Information Infringement Report Center, etc. to receive relief from personal information infringement. • Personal Information Dispute Mediation Committee: (no area code) 1833-6972 (www.kopico.go.kr) • Personal Information Infringement Report Center: (no area code) 118 (privacy.kisa.or.kr) • Supreme Prosecutors' Office: (no area code) 1301 (www.spo.go.kr) • National Police Agency: (no area code) 182 (ecrm.cyber.go.kr) Article 12 (Changes to Privacy Policy) This Privacy Policy shall be effective from November 1, 2024.