Privacy policy

Categories of Personal Information

Processed data may include name, email address, mobile number, login identifiers, purchaser/recipient details, delivery address, order history, payment approval information, customer service records, IP address, cookies, access/device/service usage records, and language or other service settings.

Retention Period

Personal information is deleted without undue delay once its processing purpose has been fulfilled, except where transaction, payment, consumer dispute, or other records must be retained for periods required by law.

Provision to Third Parties

The Company does not provide personal information to third parties without user consent or a legal basis. Where third-party provision is necessary, the Company will provide legally required information and obtain consent where required.

Outsourcing of Processing

The Company may outsource payment, delivery, e-commerce operation, cloud hosting, messaging/notifications, and customer support to service providers. Actual processors and outsourced functions will be disclosed in this Privacy Policy or a separate notice as appropriate.

Overseas Transfer

Where overseas e-commerce, cloud, analytics, or messaging services are used, personal information may be processed or stored outside Korea. Where an overseas transfer occurs, the Company will disclose the legally required details, including data categories, country, timing/method, recipient, purpose, and retention period, and complete required procedures.

User Rights

Users may exercise rights provided by applicable law, including access, correction/deletion, suspension of processing, withdrawal of consent, and account deletion, through customer service or the privacy officer.

Destruction of Personal Information

Personal information whose retention period has expired or whose processing purpose has been fulfilled will be securely deleted or destroyed in a manner designed to prevent recovery.

Security Measures

The Company implements technical and administrative safeguards, including access control, protection of important information, security software, and access-log management.

Cookies

The Company may use cookies or similar technologies for login persistence, shopping carts, service improvement, and analytics. Users may restrict cookies through browser settings, although some functions may become unavailable.

Marketing Communications

The Company may send promotional information by email, text message, app notification, or similar means only where separate consent has been obtained, and users may withdraw such consent at any time.

Privacy Inquiries

Privacy inquiries and rights requests may be submitted using the contact information below. The name and title of the designated privacy officer will be added to this Policy once appointed.

Changes to this Policy

If this Privacy Policy is amended, the Company will announce the effective date and material changes through
the Mall.

Addendum
This Privacy Policy is effective as of August 19, 2026.