Privacy Policy
Gobooki Corporation (hereinafter referred to as “the Company”) complies with the personal information protection regulations under the Personal Information Protection Act and related laws and strives to protect users" rights by establishing a privacy policy. Through this privacy policy, the Company informs you of the purposes and methods of using the personal information provided by users and the measures taken to protect personal information.
- Purpose of processing personal information
- Retention period of personal information
- Items of personal information processed
- Provision of personal information to third parties
- Entrustment of personal information processing
- Transfer of personal information overseas
- Procedures and methods for destroying personal information
- Rights and obligations of users and legal representatives and how to exercise them
- Measures to ensure the security of personal information
- Installation, operation, and rejection of automatic personal information collection devices
- Collection, use, and rejection of behavioral information
- Personal information protection department and personal information access request handling department
- Links to other sites
- Changes to the privacy policy
1. Purpose of processing personal information
The Company processes personal information for the following purposes:
- Membership registration and management
- Identification of users for membership services, maintenance and management of membership status, prevention of fraudulent use of services and unauthorized use, notifications, handling of complaints and customer inquiries, and preservation of records for dispute resolution.
- Provision of goods or services
- Performance of service contracts and fee settlement, provision of content, purchase and payment, refunds, delivery of goods, user verification, and collection of fees.
- Service improvement and marketing
- Development and specialization of new services (products), delivery of promotional information such as events, provision of services and advertisements according to demographic characteristics, analysis of service usage, and statistics on service usage.
2. Retention period of personal information
The Company, in principle, destroys personal information without delay after achieving the purpose of collection and use. However, if it is necessary to retain personal information in accordance with relevant laws and regulations, the Company will retain member information for a certain period as specified by the relevant laws, and in such cases, the Company will store the information separately.
- Records related to contracts or withdrawal of subscriptions: 5 years (Act on Consumer Protection in Electronic Commerce)
- Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce)
- Records of consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
- Records on display/advertising: 6 months (Act on Consumer Protection in Electronic Commerce)
- Records on website visits: 3 months (Communications Secrets Protection Act)
- Records on reporting VAT: 5 years (VAT Act)
3. Items of personal information processed
The Company collects the following personal information from users during membership registration or service use:
- Items of personal information collected
- During membership registration, the following information is collected:
- When using an email account: [Required] Name, email address, phone number, password
- During service use, the following information may be collected:
- Service usage records, access logs, IP information, usage records, country, device information (model name, OS information, MAC information, language and country information, unique device identifier, advertising identifier)
- When providing services that require age verification and user verification, the following information may be collected:
- For mobile phone verification: Name, phone number, date of birth, gender, duplicate registration information (DI), connection information (CI), domestic/foreign status
- When contacting customer service, the following information may be collected:
- Email address, phone number
- During paid transactions, the following information may be collected:
- Information required by the payment gateway company (PG) based on the payment method (credit card, bank transfer, lifelong education voucher, etc.)
- For refunds: Name, contact information, bank name, account holder, account number
- When distributing event prizes, the following information may be collected:
- For physical items: Name, address, phone number
- For mobile items: Name, phone number
- For tax processing of prizes: Front copy of ID card (for reporting other income under the Income Tax Act)
- During membership registration, the following information is collected:
- Methods of collecting personal information
- Website or mobile web/app membership registration, service use, member information modification, paper forms, phone, fax, customer service consultation, event participation, provision from partner companies, collection through information collection tools, collection through survey tools
※The Company does not collect personal information from children under the age of 14 as a principle.
4. Provision of personal information to third parties
- The Company processes personal information within the scope specified in 『1. Purpose of processing personal information』 and does not provide personal information to third parties without the user"s consent. However, exceptions are made in the following cases:
- When the user consents to the provision of personal information to a third party for transaction fulfillment, the Company may provide the minimum necessary personal information to service providers for service delivery and verification.
- When required by law or for investigation purposes, if requested by investigative agencies in accordance with the procedures and methods prescribed by law.
- When providing information in a non-identifiable form for statistical, research, or market research purposes.
5. Entrustment of personal information processing
- The Company entrusts personal information processing to ensure smooth handling of personal information tasks and takes necessary measures to ensure the safe management of personal information entrusted to service providers in accordance with relevant laws. The personal information processed is limited to the minimum necessary for service provision.
Recipient
Purpose
Items Provided
Retention Period
Delivery Company
Delivery of ordered goods, customer consultation, and handling complaints
Recipient information (name, phone number, address)
1 month after purchase confirmation
6. Procedures and methods for destroying personal information
- Procedures and deadlines for destruction: The Company will destroy personal information without delay when the retention period has elapsed or the purpose of processing has been achieved. However, if it is necessary to continue retaining personal information according to other laws as specified in 『2. Retention period of personal information』, the personal information will be transferred to a separate database (DB) or stored in a different location and will be destroyed without delay after the retention period expires. In this case, the personal information transferred to the DB will not be used for any other purpose except as required by law.
- Methods of destruction
- Electronic files: Permanently deleted using technical methods that make recovery and reproduction impossible.
- Printed personal information: Destroyed by shredding or incineration.
7. Rights and obligations of users and legal representatives and how to exercise them
- Users can request access, correction, deletion, withdrawal of consent, or suspension of processing of their personal information at any time. Users can directly view, modify, or delete their personal information through the “My Page” menu within the service. For related consultations and inquiries, please contact customer service or the personal information protection officer by letter, phone, or email, and we will take immediate action.
- If users request correction of personal information errors, the personal information will not be used or provided until the correction is completed. If incorrect personal information has already been provided to a third party, the correction results will be promptly notified to the third party to ensure that the correction is made.
- Rights can be exercised through legal representatives or delegated persons. In this case, a power of attorney must be submitted according to a separate form.
- Requests for correction and deletion of personal information cannot be made if the personal information is specified as a collection target by other laws.
- The Company confirms whether the requester is the individual or a legitimate representative when requesting access, correction, or deletion of personal information based on user rights.
8. Measures to ensure the security of personal information
The Company takes the following administrative and technical measures to ensure the safety of personal information and prevent loss, theft, leakage, alteration, or damage in accordance with relevant laws:
- Administrative measures: Establishment and implementation of internal management plans, operation of dedicated organizations, and regular employee training
- Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of personal information, installation and update of security programs
9. Installation, operation, and rejection of automatic personal information collection devices
The Company uses cookies to provide personalized services to users. The purpose and rejection of cookies are as follows:
- What are cookies: Cookies are small amounts of information sent by the server operating the website to the user"s computer browser and stored on the user"s computer.
- Purpose of using cookies: To analyze users" access frequency or visit time, understand usage patterns and interests, trace users" tracks, identify participation levels in various events, and provide personalized services and targeted marketing.
- Installation, operation, and rejection of cookies
- Users have the option to accept or reject the installation of cookies. You can choose to allow all cookies, check each time a cookie is saved, or refuse to save all cookies through browser settings. The method for specifying cookie settings is as follows:
- Microsoft Edge: Settings menu > Cookies and site permissions > Manage and delete cookies and site data
- Chrome: Settings menu > Show advanced settings > Privacy - Content settings > Set cookie level
- If you refuse to store cookies, there may be difficulties in using some services that require login.
- Users have the option to accept or reject the installation of cookies. You can choose to allow all cookies, check each time a cookie is saved, or refuse to save all cookies through browser settings. The method for specifying cookie settings is as follows:
10. Personal information protection department and personal information access request handling department
- Users can contact the following personal information protection department and personal information access request handling department for all personal information protection-related inquiries, complaints, and access requests while using the Company"s services. The Company will respond and handle user inquiries without delay.
- Personal Information Protection Department
- Department: Personal Information Team
- Contact: gobooooooooki@gmail.com
- Personal Information Protection Department
- Users can apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, Korea Internet & Security Agency Personal Information Infringement Report Center, etc., for relief from personal information infringement. For other reports and consultations on personal information infringement, please contact the following institutions:
- Personal Information Dispute Mediation Committee: https://www.kopico.go.kr / 1833-6972
- Personal Information Infringement Report Center: https://privacy.kisa.or.kr / 118
- Supreme Prosecutors" Office: https://www.spo.go.kr / 1301
- Cyber Bureau of Korean National Police Agency: https://ecrm.cyber.go.kr / 182
11. Links to other sites
The Company may provide links to other companies" websites or materials. In this case, the Company has no control over the third-party sites and materials, and this privacy policy does not apply. The Company cannot be responsible for or guarantee the usefulness of the services or materials provided by third parties. When clicking a link to move to another site, please check the privacy policy of the newly visited site as it is unrelated to the Company.
12. Changes to the privacy policy
This privacy policy is effective from June 30, 2024.