Privacy Policy

YMSCO Co., Ltd. (hereinafter referred to as the “Company”) complies with personal information protection regulations under applicable laws such as the [Personal Information Protection Act] and the [Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.], and is doing its best to protect users’ rights and interests by establishing this Privacy Policy in accordance with relevant laws. The meaning of terms used in this Privacy Policy follows relevant laws and the Company’s Terms of Use, and other matters follow general commercial practices. This policy takes effect on January 04, 2022.

Article 1. Items of Personal Information Collected and Collection Methods

The Company collects the minimum personal information necessary to provide ‘YMSCO’ services and conduct smooth customer consultations based on information entered by members.

[At the time of inquiry]

① Required consent: Essential information such as company name, customer name, email, and phone number

[During service use]

During service use, IP address, cookies, service usage records, device information, and location information may be automatically generated and collected. This means that an information and communications service provider automatically generates and stores (collects) information about users, or collects uniquely identifying information from user devices after safely converting it so that the original values cannot be identified.

Article 2. Purpose of Collection and Use of Personal Information

The Company collects and uses personal information for the following purposes.

① Civil complaint processing: Personal information is processed for purposes such as verifying the identity of complainants, confirming complaint details, contacting/notifying for fact-finding investigations, and notifying processing results.

② Use for marketing and advertising: Personal information is processed for purposes such as developing new services (products), providing customized services, providing event and promotional information and opportunities to participate, providing services and posting advertisements based on demographic characteristics, verifying service effectiveness, identifying access frequency, or compiling statistics on members’ service use.

Article 3. Retention and Use Period of Personal Information

The Company processes and retains personal information within the retention/use period prescribed by law or within the period agreed upon when collecting personal information from members. In principle, members’ personal information is destroyed without delay after the purpose of collection and use has been achieved. However, the following information is retained for the specified period in accordance with the law.

① Records on contracts or withdrawal of subscription Legal basis for retention: Act on the Consumer Protection in Electronic Commerce, etc. Retention period: 5 years

② Records on payment and supply of goods, etc. Legal basis for retention: Act on the Consumer Protection in Electronic Commerce, etc. Retention period: 5 years

③ Records on consumer complaints or dispute resolution Legal basis for retention: Act on the Consumer Protection in Electronic Commerce, etc. Retention period: 3 years

④ Preservation basis for service usage records: Protection of Communications Secrets Act Retention period: 3 months

⑤ Other cases prescribed by relevant laws: For the period required by such laws

Article 4. Provision of Personal Information to Third Parties

The Company does not provide members’ personal information to third parties without prior consent. However, depending on the nature of the service, if there is a mandatory reason for provision to a third party, it may be provided without member consent.

When providing or sharing members’ personal information, the Company separately informs members—through the website, email, written documents, application forms, etc.—of who receives or shares the information, what items of personal information are provided or shared, the purpose of providing or sharing, and the retention and use period, and then obtains separate consent.

However, where otherwise stipulated by relevant laws, personal information may be provided without member consent.

Article 5. Matters Concerning Entrustment of Personal Information Processing

For smooth processing of personal information-related tasks, the Company entrusts personal information processing tasks as follows. When entering into entrustment contracts, the Company complies with relevant laws and supervises whether entrusted parties process personal information safely. If the details of entrusted tasks or entrusted parties change, we will disclose such changes through this Privacy Policy without delay.

① Entrusted company: Kakao

② Details of entrusted task: Personal information storage

Article 6. Procedures and Methods for Destruction of Personal Information

The procedures and methods for destroying personal information are as follows.

① Destruction procedure: In principle, the Company destroys relevant information without delay after the purpose of collecting and using personal information has been achieved. However, if preservation is required under relevant laws, it is stored separately for a certain period and then destroyed. In such cases, separately stored personal information is not used for any purpose other than retention unless required by law.

② Destruction method: Personal information printed on paper is destroyed by shredding or incineration, and personal information stored in electronic file form on external storage media is deleted using technical methods that make records unrecoverable. The procedures and methods for destroying personal information are as follows.

Article 7. Installation/Operation of Automatic Personal Information Collection Devices and Matters on Refusal Thereof

The Company installs and operates devices such as ‘cookies’ that automatically collect personal information by frequently storing and retrieving user information.

Cookies are very small text files sent by the server used to operate the Company’s website to your browser and stored on the user’s computer hard disk. The Company uses cookies, etc. to provide personalized services by analyzing access frequency or visit times of members and non-members, and identifying number of visits.

Users have the right to choose whether to install cookies. By setting options in your web browser, you can allow all cookies, confirm each time a cookie is saved, or refuse saving all cookies. However, if you refuse to save cookies, some services that require login may not be available.

- Example of settings (for Internet Explorer): Tools at the top of the web browser > Internet Options > Privacy

Article 8. Matters Concerning the Chief Privacy Officer

The Company has designated the following Chief Privacy Officer, who is responsible for overall personal information processing tasks, including protecting personal information and handling complaints related to personal information.

Article 9. Matters Concerning Changes to the Privacy Policy

This Privacy Policy applies from its effective date. If there are additions, deletions, or corrections to changes in accordance with laws and this policy, we will provide prior notice through the website or email, etc. 7 days before implementation of the changes whenever possible, and if prior notice is difficult, we will notify without delay.

Chief Privacy Officer Yeom Min-ho

Department in charge CEO

Email mh.yeom@ymsco.site