Personal Information Processing Policy
Everline Co., Ltd. (hereinafter "the Company") values the personal information of its users and complies with applicable laws and regulations, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection.Through this Privacy Policy, the Company informs users of the purposes and methods by which their personal information is used, and the measures taken to protect it.
① Items Collected
| Category | Required | Optional |
|---|---|---|
| Member Registration | User ID (email), password, name, date of birth, mobile phone number, CI (connection information), DI (duplicate registration verification information),nationality | Gender |
| Identity Verification | Name, date of birth, gender, nationality (Korean/foreign national), mobile phone number, CI, DI | - |
| Order / Payment | Orderer name, contact number, email, delivery address, payment method information | - |
| Refund Processing | Account holder name, bank name, account number | - |
| Customer Service Inquiry | Name, email, inquiry content | Contact number |
| Automatically CollectedDuring Service Use | IP address, cookies, service usage records, device information (OS, browser type), records of improper use | |
② Collection Methods
- Directly entered by users during membership registration, order and payment, event participation, and customer service inquiries
- Provided by identity verification agencies during mobile phone identity verification
- Automatically generated and collected during service use
| Purpose of Use | Items Collected |
|---|---|
| Member registration and management (identity verification, fraud prevention, duplicate registration check) | User ID, password, name, mobile phone number, CI, DI |
| Product ordering, payment, delivery, and processing of cancellations, returns, and exchanges | Orderer name, contact number, email, delivery address, payment method information |
| Customer support, complaint handling, and delivery of notices | Name, email, contact number |
| Event and promotion operations, service improvement, and personalized service delivery | Name, email, service usage records |
| Detection of violations of laws and terms of service, fraud prevention | IP address, service usage records, records of improper use |
In principle, the Company destroys users' personal information without delay upon withdrawal of membership. However, the following information is retained for a specified period in accordance with applicable laws and regulations.
① Retention Under Internal Company Policy
- Records retained after withdrawal for fraud prevention and dispute resolution: 1 year from the date of withdrawal
② Retention Required by Law
| Item | Applicable Law | Retention Period |
|---|---|---|
| Records of contracts or withdrawal of subscription | Act on Consumer Protection in Electronic Commerce (Korea) | 5 years |
| Records of payment and supply of goods | Act on Consumer Protection in Electronic Commerce (Korea) | 5 years |
| Records of consumer complaints or dispute resolution | Act on Consumer Protection in Electronic Commerce (Korea) | 3 years |
| Records of advertisements and displays | Act on Consumer Protection in Electronic Commerce (Korea) | 6 months |
| Tax-related records such as tax invoices and receipts | Framework Act on National Taxes (Korea) | 5 years |
| Connection log records of telecommunications service users | Protection of Communications Secrets Act (Korea) | 3 months |
In principle, the Company does not disclose users' personal information to external parties. Exceptions are made only with the user's prior consent or as required by applicable laws and regulations.
The Company currently does not provide users' personal information to any third parties. If such provision becomes necessary in the future, the Company will obtain prior consent from users.
The Company entrusts the processing of personal information to the following external companies and stipulates necessary provisions in consignment agreements to ensure secure management in accordance with applicable laws.
| Category | Consignee | Consigned Tasks | Retention & Use Period |
|---|---|---|---|
| Payment Processing | Toss Payments Co., Ltd. | Credit card and easy payment processing, escrow, payment cancellation, and refund processing | Until termination of consignment agreement |
| Delivery | CJ LogisticsUPS | Parcel delivery processing and delivery status tracking | Retention period required by applicable law after delivery completion |
| Identity Verification | NHN KCP Co., Ltd. | Mobile phone identity verification, CI/DI issuance | Destroyed immediately upon completion(excluding legally mandated retention periods) |
| CloudServices | Amazon Web Services, Inc. (AWS) | Provision of cloud infrastructure and data storage for service operations | Until termination of consignment agreement |
| Service Development & Operations | Tomorrow Steps Co., Ltd. | Website service management and maintenance | Until termination of consignment agreement |
| Message Delivery | Biztalk Co., Ltd. | KakaoTalk message and SMS delivery | Until termination of consignment agreement |
The Company transfers users' personal information overseas as set out below for the purpose of operating its services.
| Recipient | Country | Items Transferred | Purpose | Retention Period |
|---|---|---|---|---|
| Amazon Web Services, Inc. | United States and others (AWS data center locations) | All personal information collected during service use | Cloud infrastructure provision and data storage | Until termination of consignment agreement |
| United Parcel Service, Inc. (UPS) | United States and others (delivery destination countries) | Recipient name, contact number, delivery address | International delivery processing | Retention period required by applicable law after delivery completion |
Users have the right to refuse consent to cross-border transfer of personal information. Refusal may result in restrictions on the use of certain payment methods.
The Company destroys personal information without delay when it is no longer necessary.
① Destruction Procedures
Information entered by users is transferred to a separate database after the purpose has been fulfilled, retained per internal policy and applicable law, then destroyed. It is not used for any other purpose unless required by law.
② Destruction Methods
- Electronic files: Securely deleted using technical methods to prevent recovery or restoration
- Personal information in printed form: Shredded or incinerated
Users and their legal representatives may exercise the following rights against the Company at any time.
- Right to access personal information
- Right to request correction of errors
- Right to request deletion
- Right to request suspension of processing
These rights may be exercised in writing, by email, or by fax, and the Company will take action without delay.
If a user requests correction or deletion, the Company will not use or provide such information until the process is completed.
For children under the age of 14, their legal representative may exercise these rights on their behalf.
The Company uses "cookies" to store and retrieve user information in order to provide individualized services.
① Purpose of Cookies
Used to analyze users' visit patterns, popular search terms, and secure connection status to provide optimized services.
② Cookie Settings and Opt-out
- You may manage cookie preferences via your browser: [Tools] > [Internet Options] > [Privacy].
- Disabling cookies may result in difficulties using certain personalized services.
The Company takes the following security measures.
- Administrative measures: Internal management plans; minimization of personnel handling personal information and regular training
- Technical measures: Access control for personal information systems; encryption of unique identification information; security programs
- Physical measures: Access control for server rooms and data storage facilities
The Company has designated a Privacy Officer to oversee personal information processing and handle user complaints and requests for relief.
Users may contact the Privacy Officer or the relevant department for any inquiries, complaints, or requests for relief related to personal information. The Company will respond without delay.
Personal Information Infringement Reporting and Consultation (Korea)
- Personal Information Infringement Report Center: 118 (no area code) / privacy.kisa.or.kr
- Supreme Prosecutors' Office Cyber Investigation Division: 1301 (no area code) / www.spo.go.kr
- National Police Agency Cyber Bureau: 182 (no area code) / cyberbureau.police.go.kr
- Personal Information Dispute Mediation Committee: 1833-6972 / www.kopico.go.kr
This Privacy Policy is effective from its date of enforcement. Any additions, deletions, or modifications will be announced on the website at least 7 days in advance.
- Privacy Policy effective date: May 19, 2026
- Privacy Policy last revised: May 19, 2026
COPYRIGHT ⓒ WWW.EVERLINESHOP.COM ALL RIGHTS RESERVED.
