1. General Principles
1. We treat the protection of your personal data as a fundamental obligation and comply with all applicable privacy laws and regulatory guidelines.
2. This policy is published at the bottom of our website and is accessible at all times.
3. When this policy is updated, we will announce the changes and the new effective date via a site notice before they take effect.
4. Our services are intended for users aged 14 and above. We do not knowingly collect data from children under 14.
2. Data We Collect and How
We collect only the minimum personal data necessary for the following purposes.
Account Registration & Management
Purpose: identity verification, member services, fraud prevention, customer support
Data collected: name, email address, password, phone number; for social login — provider-issued identifier, email, display name
How: registration form, social login flow
Orders, Payments & Delivery
Purpose: order processing, payment handling, delivery and tracking, order history
Orderer: name, email, phone number
Shipping: recipient name, delivery address, recipient phone number
Payment: authorization number, payment method type, amount, timestamp. Card and payment credentials are processed directly by our payment processors (PortOne / KG Inicis) and are not stored by us.
Contact & Support Inquiries
Purpose: responding to service and order questions, maintaining support records
Data collected: name (or display name), email address, phone number (optional), inquiry subject and content
Custom Commission Requests
Purpose: consultation and production of commissioned works
Required: name, contact (phone or email), commission details. Optional: reference photos uploaded by the requester
Automatically Collected Data
Purpose: usage analytics, UX improvement, security, service quality
Data collected: IP address, cookies, visit timestamps, usage logs, browser and OS info
Tools used: Google Analytics 4, GTM, Hotjar, Microsoft Clarity, and others
3. Third-Party Processing (Sub-Processors)
We share personal data with the following trusted partners solely to deliver our services.
| Partner | Purpose | Data shared | Retention |
|---|---|---|---|
| CJ Logistics | Shipping & tracking | Name, address, phone, tracking number | 6 months post-delivery |
| PortOne / KG Inicis | Payment processing | Payment info, authorization number | As required by law |
| GreenCloud (Japan) | Server hosting & infrastructure | All service operating data | Until end of service agreement |
4. International Data Transfers
GreenCloud VPS — Japan
• Data transferred: account information, order/payment/delivery data, support inquiries, service logs
• Destination: Japan (GreenCloud data center)
• Purpose: service operation, maintenance, and data backup
Analytics tools (Google, Hotjar, Microsoft, etc.)
We use third-party analytics tools for traffic measurement and UX analysis. In the course of this, online identifiers (cookie IDs, IP addresses) and behavioral data may be transmitted to servers outside Korea. This data is collected for service optimization purposes. Where possible it is processed in pseudonymous form, but some tools may collect identifiable behavioral data. Contact us for details.
5. Retention Periods
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected. Once that purpose is met, data is deleted without delay.
The following categories are retained for the periods below.
Account data
• Retained until account deletion
• May be retained for up to 1 year post-deletion for fraud prevention purposes
Statutory retention
• Contract / withdrawal records: 5 years
• Payment / fulfillment records: 5 years
• Dispute / complaint records: 3 years
6. Your Rights
You may exercise the following rights with respect to your personal data at any time.
Access
Correction / Deletion
Restriction of Processing
Withdrawal of Consent
To exercise any of these rights, please contact our Privacy Officer at the address below.