Privacy Policy

01 Controller

Personal information is controlled by IDB Global (아이디비글로벌) (“Company”).

Contact: sypa2561@gmail.com

02 Information We Collect

• Account data: email, username, password (hashed), mobile number
• Verification data: SMS OTP status and related timestamps
• Membership & billing data: fee amount, payment status, paid date, approval status
• Order & shipping data: cart, orders, delivery address, recipient details
• Device & usage data: IP address, browser type, cookies, access logs
• Communications: customer support messages and notices

03 Purpose of Processing

• Member registration, authentication, and account management
• Membership fee collection, renewal, and admin approval
• Order processing, delivery, and after-sales support
• Fraud prevention, security, and abuse detection
• Service-related emails, SMS, and notifications
• Legal compliance and dispute handling

04 Legal Basis

We process personal information based on contract performance, legitimate interests (security and service improvement), legal obligations, and—where required—your consent.

05 Retention

We retain personal information while your Membership is active and for as long as needed afterward for legal, accounting, fraud-prevention, or dispute purposes. Certain records may be kept longer where Korean law requires.

06 Sharing

We may share information with:

• Payment processors / banks (for fee and order settlement)
• Logistics partners (for delivery)
• SMS / email service providers (for verification and notices)
• IT hosting and security vendors
• Authorities when required by law

We do not sell your personal information.

07 International Transfers

If vendors process data outside Korea, we apply reasonable contractual and technical safeguards consistent with applicable law.

08 Your Rights

Subject to applicable law, you may request access, correction, deletion, restriction, or withdrawal of consent by contacting sypa2561@gmail.com. We may verify your identity before fulfilling requests.

09 Security

We use administrative, technical, and physical measures appropriate to the risk, including access controls and encrypted transport where practicable. No method of transmission is 100% secure.

10 Children

The Service is for users aged 18 or older. We do not knowingly collect personal information from minors.

11 Changes

We may update this Policy. The Effective Date above will be revised when material changes are published.