Privacy policy

Privacy Policy

Wieom Co., Ltd. (hereinafter referred to as the “Company”) values your personal information and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection.

Through this Privacy Policy, the Company informs you of the purposes and methods by which the personal information you provide is used, as well as the measures taken to protect personal information.

■ Items of Personal Information Collected and Collection Methods

a. Items of Personal Information Collected
The Company collects the following personal information for membership registration, consultation, and service applications:

At the time of membership registration:
Name, date of birth, gender, login ID, password, home phone number, mobile phone number, email address, and for members under the age of 14, information of their legal guardian
At the time of service application:
Address, payment information

In addition, during the process of using the service or handling business operations, records such as service usage history, access logs, cookies, IP addresses, payment records, and records of improper use may be automatically generated and collected.

b. Collection Methods
Collected through the website, written forms, bulletin boards, email, event participation, delivery requests, telephone, fax, and automated data collection tools.

■ Purpose of Collection and Use of Personal Information

The Company uses the collected personal information for the following purposes:

Performance of contracts related to service provision and settlement of payments
Provision of content, purchase and payment processing, delivery of goods or sending of invoices, identity verification for financial transactions, and provision of financial services
Membership management
Identity verification for use of membership services, personal identification, prevention of fraudulent use by unauthorized or improper members, confirmation of intent to register, age verification, confirmation of consent from legal guardians when collecting personal information of children under 14, handling complaints and inquiries, and delivery of notices
Marketing and advertising activities
Promotion of new products, delivery of advertising information such as targeted marketing and events, analysis of access frequency, and statistics related to members’ service usage

■ Retention and Use Period of Personal Information

In principle, personal information is destroyed without delay once the purpose of collection and use has been fulfilled. However, the following information is retained for the periods specified below for the stated reasons:

a. Retention based on the Company’s internal policy
Even after a member withdraws, the Company may retain the member’s information for five (5) years from the date of termination of the service agreement in order to prevent recurrence of improper use by malicious members, resolve disputes, and cooperate with investigative authorities upon request.

b. Retention based on applicable laws and regulations
When retention is required under relevant laws such as the Act on Consumer Protection in Electronic Commerce, the Company retains personal information for the following periods:

Records related to contracts or withdrawal of subscription
Reason for retention: Act on Consumer Protection in Electronic Commerce
Retention period: 5 years
Records related to payment and supply of goods or services
Reason for retention: Act on Consumer Protection in Electronic Commerce
Retention period: 5 years
Records related to consumer complaints or dispute resolution
Reason for retention: Act on Consumer Protection in Electronic Commerce
Retention period: 3 years
Log records
Reason for retention: Protection of Communications Secrets Act
Retention period: 3 months

■ Procedures and Methods for Destruction of Personal Information

The Company destroys personal information without delay once the purpose of collection and use has been fulfilled. The procedures and methods are as follows:

Destruction procedure
Information entered by members for membership registration or other purposes is transferred to a separate database (or, in the case of paper documents, stored in a separate filing system) after the purpose has been achieved, stored for a certain period in accordance with internal policies and relevant laws, and then destroyed.
Personal information transferred to a separate database is not used for any other purpose unless required by law.
Destruction method
Personal information stored in electronic file format is deleted using technical methods that make the data irrecoverable.

■ Provision of Personal Information

In principle, the Company does not provide users’ personal information to third parties. However, exceptions are made in the following cases:

When users have given prior consent
When required by law or when requested by investigative authorities in accordance with legally prescribed procedures and purposes

■ Consent to Provision of Personal Information to Third Parties

Shagen Korea may provide collected personal information to third parties in the following cases.

■ Customer Service Regarding Personal Information

In order to protect personal information and handle complaints related to personal information, the Company has designated the following department and personnel responsible for personal information protection:

Person in Charge of Personal Information Protection
Name: Hatice Isik Buyuktasci
Affiliation: Wieom Co., Ltd.
Email: info@shagen.co.kr
Chief Privacy Officer
Name: Hatice Isik Buyuktasci
Affiliation: Wieom Co., Ltd.
Email: info@shagen.co.kr

If you need to report or consult regarding personal information infringement, please contact the following organizations:

Personal Information Infringement Report Center: privacy.kisa.or.kr / 118 (without area code)
Supreme Prosecutors’ Office Cyber Crime Investigation Division: www.spo.go.kr / +82-2-3480-2000
National Police Agency Cyber Safety Bureau: www.ctrc.go.kr / 182 (without area code)