Privacy

1. Personal information we process

1. Orders: orderer's name, mobile number and email; recipient's name, mobile number, postal code, address, address line 2 and delivery note
2. Bank transfer: depositor name; mobile number or business registration number when a cash receipt is requested; refund account (bank, account number, account holder) when cancelling after payment
3. Card and easy pay: you enter your card number and password directly in the Toss Payments window, and the Company does not receive them. From the approval result the Company receives and keeps as a payment record the payment method, approval time, approval number, partly masked card number and receipt URL.
4. Collected automatically: IP address at the time of ordering, the time you agreed to the collection and use of personal information, and order and payment records
5. Inquiries and complaints: the name, contact and inquiry details you give to customer support

There is no membership registration, and we do not collect personal information other than the items above.

2. Purposes of processing

Receiving orders, confirming payment, delivering goods, exchanges and returns, refunds, order lookup, sending order emails, handling inquiries and complaints, issuing cash receipts, and preventing fraudulent transactions

3. Retention period

Personal information is destroyed without delay once its purpose is achieved. However, under the E-Commerce Act the following records are kept for the periods below.

Orders that ended without payment (cancelled, or deposit or payment deadline expired)

30 days from the day of cancellation

Contract or withdrawal records

5 years

Payment and supply records

5 years

Consumer complaint and dispute records

3 years

The 5 years are counted from the latest of the order's last payment, shipment, delivery, cancellation or refund. The IP address, cancel request reason and admin notes kept with the order record are retained for the same period as the order record and destroyed with it.

4. Provision to third parties

The Company does not provide users' personal information to third parties, except where the law specifically requires it.

5. Outsourced processing

The Company outsources the following personal information processing in order to handle orders.

Toss Payments Co., Ltd.

Card and easy pay processing. Items entrusted: order number, order name, payment amount, orderer's name, email and mobile number

Couriers

Delivery of goods. Items entrusted: recipient's name, mobile number, address and delivery note. The courier used is shown in the shipping email and on the order lookup screen

Resend (Plus Five Five, Inc.)

Sending order emails. Items entrusted: the same as the overseas transfer items in section 6

The outsourcing contracts prohibit using personal information beyond the purpose of the work, and the Company manages whether the processors handle it safely.

Address search uses the Kakao Postcode service. Search terms typed into the address search window go from your browser directly to Kakao and the Company does not receive them. Only the address you choose enters the order form.

Users' personal information is stored in a database on the servers of the hosting provider 시험 호스팅.

6. Overseas transfer

To send order emails, personal information is transferred overseas as follows (Personal Information Protection Act Article 28-8(1)3, outsourced processing for performance of a contract).

Recipient

Plus Five Five, Inc. (Resend), support@resend.com

Country

United States

Items

Orderer's name, email and mobile number; recipient's name, mobile number, address and delivery note; depositor name; cash receipt request details; order contents and amounts; tracking number; cancellation and refund reasons

When and how

Transferred over the network (encrypted API transmission) each time an email about order receipt, payment, shipping, cancellation or refund is sent

Purpose

Sending order emails

Retention

For the time needed to send emails and check delivery records; destroyed when the outsourcing contract ends

To refuse the overseas transfer, contact customer support. Order emails are necessary to process orders, so if you refuse you cannot use the ordering service.

7. Destruction procedure and method

Personal information whose retention period has ended or whose purpose has been achieved is destroyed without delay.

1. Timing: the server destroys it automatically 30 days after cancellation for orders that ended without payment, and after the 5-year retention period for paid orders.
2. Method: in electronic files, personal information such as name, contact, email, address, depositor name, refund account and IP address is overwritten with irrecoverable values so that no one can tell whose it was. Transaction details such as amounts, items and payment times remain in the ledger in a form that cannot identify a person. Paper documents are shredded or incinerated.
3. Records kept by law are used only for the purpose of keeping them and can be viewed only by authorized administrators.

8. Your rights

You may at any time ask to view, correct, delete or suspend the processing of your personal information. Ask customer support or the privacy officer by phone or email and we will handle it without delay. You may also ask through a legal representative or an authorized agent. However, transaction records that must be kept by law cannot be deleted.

9. Security measures

1. Administrator access is limited to the minimum by role, and administrator passwords are stored with irreversible encryption. Accounts are locked after repeated failed logins.
2. Administrator logins and order handling (who handled it, IP address, time, changes) are recorded and kept for at least one year. Personal information contained in the changes is deleted when the retention period of the order ends.
3. Information exchanged with the Site is sent over an encrypted connection (HTTPS).
4. Order lookup links use a secret value that cannot be guessed.

10. Cookies and browser storage

The shopping bag is kept only in your browser storage (localStorage) and is not sent to the Company's servers. What you enter on the order form (name, contact, address, delivery note, depositor name and so on) stays in temporary browser storage (sessionStorage) until you finish ordering, and this temporary copy is not sent to the Company's servers. The temporary copy is erased when the order ends or you close the browser tab. When you start a card payment, the order number and lookup secret of the order being paid are kept in the same storage and erased when payment ends.

The only cookie placed in your browser is one (sk-hero, 1 year) used to alternate the video on the main screen, and it holds no personally identifying information. The Company does not use cookies for advertising or behavioral analysis. The payment window and address search window are provided by Toss Payments and Kakao, which may use their own cookies or browser storage. You can clear stored data in your browser settings.

11. Privacy officer

Privacy officer

김한나

Contact

02-000-0000, help@sickness.kr

Send inquiries, complaints and requests for relief about personal information to the contact above.

12. Remedies for infringement

You can also seek advice or report personal information infringement to the following bodies.

Personal Information Dispute Mediation Committee

1833-6972, www.kopico.go.kr

Personal Information Infringement Report Center

118, privacy.kisa.or.kr

Supreme Prosecutors' Office

1301, www.spo.go.kr

National Police Agency

182, ecrm.police.go.kr

13. Effective date

This Privacy Policy applies from the day it is posted on the Site. If it changes, we announce it on the Site from 7 days before the change takes effect.

Business information

상호

식니스

대표

김한나

사업자등록번호

171-15-02847

통신판매업 신고

제0000-서울성동-0000호

주소

서울특별시 성동구 상원1길 5, 유미빌딩 4F

전화

02-000-0000

이메일

help@sickness.kr

개인정보 보호책임자

김한나

고객센터

평일 10:00-18:00