Privacy Policy
Everline Co., Ltd. (hereinafter the "Company") places great importance on the personal information of its Users and complies with relevant laws and regulations, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection.
Through this Privacy Policy, the Company informs Users of the purposes and manner in which the personal information they provide is used, and of the measures taken to protect personal information.
Article 1 Personal Information Items Collected and Collection Methods
① Items Collected
| Category | Required Items | Optional Items |
|---|---|---|
| Membership Registration | ID (email), password, name, date of birth, mobile phone number, CI (Connecting Information), DI (Duplicate Information), nationality | Gender |
| Identity Verification | Name, date of birth, gender, domestic/foreign national classification, mobile phone number, CI, DI | - |
| Orders/Payments | Orderer name, contact number, email, delivery address, payment method information | - |
| Refund Processing | Account holder name, bank name, account number | - |
| Customer Center Inquiries | Name, email, inquiry details | Contact number |
| Automatically Collected During Service Use | IP address, cookies, service usage records, device information (OS, browser type), records of improper use | |
② Collection Methods
- Entered directly by Users in the course of using the services, such as website membership registration, orders and payments, event entries, and Customer Center inquiries
- Provided by the identity verification agency during mobile phone identity verification
- Automatically generated and collected in the course of service use
Article 2 Purposes of Collection and Use of Personal Information
| Purpose of Use | Items Collected |
|---|---|
| Membership registration and management (identity confirmation, prevention of fraudulent use, confirmation of duplicate registration) | ID, password, name, mobile phone number, CI, DI |
| Product orders, payment, delivery, and processing of cancellations, returns, and exchanges | Orderer name, contact number, email, delivery address, payment method information |
| Customer consultation, complaint handling, and delivery of notices | Name, email, contact number |
| Operation of events and promotions, service improvement, and provision of personalized services | Name, email, service usage records |
| Detection of violations of laws and the Terms of Use, and prevention of fraudulent activity | IP address, service usage records, records of improper use |
Article 3 Retention and Use Period of Personal Information
In principle, the Company destroys a User's personal information without delay upon withdrawal of membership. However, in the following cases, the information is retained for a certain period in accordance with relevant laws and regulations.
① Retention Under the Company's Internal Policy
- Records retained after withdrawal for purposes such as preventing fraudulent use and preparing for disputes : 1 year from the date of withdrawal
② Retention Under Relevant Laws
| Items Retained | Applicable Law | Retention Period |
|---|---|---|
| Records on contracts or withdrawal of offers, etc. | Act on the Consumer Protection in Electronic Commerce, etc. | 5 years |
| Records on payment of charges and supply of goods | Act on the Consumer Protection in Electronic Commerce, etc. | 5 years |
| Records on consumer complaints or dispute resolution | Act on the Consumer Protection in Electronic Commerce, etc. | 3 years |
| Records on labeling and advertising | Act on the Consumer Protection in Electronic Commerce, etc. | 6 months |
| Tax-related records such as tax invoices and receipts | Framework Act on National Taxes | 5 years |
| Access log records of telecommunications users | Protection of Communications Secrets Act | 3 months |
Article 4 Provision of Personal Information to Third Parties
In principle, the Company does not provide Users' personal information to external parties. However, exceptions are made where the User has given prior consent or where provision is required by law.
The Company does not currently provide Users' personal information to any third party. If provision becomes necessary in the future, the Company will obtain prior consent.
Article 5 Outsourcing of Personal Information Processing
To provide its services, the Company outsources the processing of personal information to external specialist companies as set out below, and, in accordance with relevant laws and regulations, stipulates the necessary matters in the outsourcing agreements to ensure that personal information is managed securely.
| Category | Processor | Outsourced Tasks | Retention and Use Period |
|---|---|---|---|
| Payment Processing | Toss Payments Co., Ltd. | Processing of payments such as credit card and simple payments; processing of escrow, payment cancellations, and refunds | Until termination of the outsourcing agreement |
| Delivery Services | CJ Logistics UPS | Processing of product deliveries; delivery status inquiries | Retention period under relevant laws after completion of delivery |
| Identity Verification | NHN KCP Corp. | Mobile phone identity verification; issuance of CI/DI | Destroyed immediately upon completion of identity verification (excluding legally mandated retention periods) |
| Cloud Services | Amazon Web Services, Inc. (AWS) | Provision of cloud infrastructure and data storage for service operation | Until termination of the outsourcing agreement |
| Service Development and Operation | Tumore Steps Co., Ltd. ((주)투모어스텝스) | Website service management and maintenance | Until termination of the outsourcing agreement |
| Message Delivery | Bizztalk Co., Ltd. (비즈톡 주식회사) | Sending of Kakao messages and text messages | Until termination of the outsourcing agreement |
| AWS (Amazon Web Services) has servers located in the United States, and as a result, some personal information may be transferred overseas. For details, please refer to Article 6 (Overseas Transfer of Personal Information). |
Article 6 Overseas Transfer of Personal Information
To operate its services, the Company transfers Users' personal information overseas as set out below.
| Recipient | Destination Country | Items Transferred | Purpose of Transfer | Retention Period |
|---|---|---|---|---|
| Amazon Web Services, Inc. | United States, etc. (locations of AWS data centers) | All personal information collected in the course of service use | Provision of cloud infrastructure and data storage | Until termination of the outsourcing agreement |
| United Parcel Service, Inc. (UPS) | United States, etc. (countries of delivery) | Recipient name, contact number, delivery address | Processing of international deliveries | Retention period under relevant laws after completion of delivery |
Users have the right to refuse consent to the overseas transfer of personal information; if consent is refused, use of the relevant payment method may be restricted.
Article 7 Procedures and Methods for Destruction of Personal Information
When personal information becomes unnecessary, such as upon expiration of the retention period or achievement of the purpose of processing, the Company destroys the personal information without delay.
① Destruction Procedure
Information entered by Users is, after the purpose is achieved, moved to a separate database (or a separate filing cabinet in the case of paper), retained for a certain period in accordance with internal policy and applicable laws, and then destroyed. Personal information moved to a separate database is not used for any other purpose except as required by law.
② Destruction Method
- Information in electronic file format : Securely deleted using technical methods so that it cannot be recovered or reproduced
- Personal information printed on paper : Shredded with a shredder or incinerated
Article 8 Rights of Users and Legal Representatives and How to Exercise Them
Users and their legal representatives may exercise the following personal information protection rights against the Company at any time.
- Request for access to personal information
- Request for correction in case of errors, etc.
- Request for deletion
- Request for suspension of processing
The above rights may be exercised against the Company in writing, by email, by facsimile (FAX), or the like, pursuant to Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.
Where a User has requested correction or deletion of errors, etc. in personal information, the Company will not use or provide the relevant personal information until the correction or deletion is completed.
In the case of a child under the age of 14, the child's legal representative may request access to, correction of, deletion of, or suspension of processing of the child's personal information.
Article 9 Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
To provide Users with individually personalized services, the Company uses 'cookies' that store and retrieve usage information from time to time.
① Purpose of Using Cookies
Cookies are used to understand Users' visit and usage patterns, popular search terms, whether a secure connection is used, and the like, in order to provide optimized services.
② Installation, Operation, and Refusal of Cookies
- You may choose whether to allow cookies through the [Tools] > [Internet Options] > [Privacy] menu at the top of your web browser.
- If you refuse to allow cookies to be stored, you may experience difficulty in using personalized services.
Article 10 Measures to Ensure the Security of Personal Information
The Company takes the following measures to ensure the security of personal information.
- Administrative measures : Establishment and implementation of an internal management plan; minimization of staff handling personal information and regular training
- Technical measures : Management of access rights to personal information processing systems, etc.; installation of access control systems; encryption of unique identification information, etc.; installation of security programs
- Physical measures : Access control for computer rooms, data storage rooms, etc.
Article 11 Data Protection Officer
The Company bears overall responsibility for matters relating to the processing of personal information and has designated a Data Protection Officer as set out below to handle User complaints and provide remedies for damage relating to the processing of personal information.
| Data Protection Officer Name : Park Jeong-hee (박정희) Affiliation/Title : CEO Contact : admin@everlineshop.com / 02-2661-0996 |
Users may direct all inquiries, complaints, and requests for remedies relating to personal information protection that arise while using the Company's services to the Data Protection Officer and the responsible department. The Company will respond to and handle Users' inquiries without delay.
Agencies for Reporting and Consulting on Personal Information Infringement
- Personal Information Infringement Report Center (KISA) : 118 (no area code) / privacy.kisa.or.kr
- Supreme Prosecutors' Office Cyber Investigation Division : 1301 (no area code) / www.spo.go.kr
- Korean National Police Agency Cyber Bureau : 182 (no area code) / cyberbureau.police.go.kr
- Personal Information Dispute Mediation Committee : 1833-6972 / www.kopico.go.kr
Article 12 Changes to the Privacy Policy
This Privacy Policy applies from its effective date, and if content is added, deleted, or amended due to changes in laws, policies, or security technology, the Company will give notice through its website at least 7 days before the effective date.
Last updated: October 20, 2026