However, in the following cases, personal information is retained until the reason ends:
1) Ongoing investigation or inquiry due to legal violations, until completion.
2) Outstanding claims or debts from website use, until settled.
3. Website Membership Management: Until account deletion
① The Company processes and retains personal information within the period required by law or as consented to
by the data subject at the time of collection.
② The retention period for each type of personal information is as follows.
Article 2 (Processing and Retention Period of Personal Information)
Personal information is processed for identity verification, issue confirmation, investigation, and result notification.
2. Grievance Handling
Personal information is processed for purposes such as product delivery, service provision, sending contracts/invoices,
content delivery, personalized services, identity and age verification, payment and settlement, and debt collection.
1. Provision of Goods or Services
The Company processes personal information for the purposes below. Information will not be used for other purposes,
and any changes will follow Article 18 of the Personal Information Protection Act, including obtaining separate consent.
Purpose of Processing Personal Information
※ Consent is optional, but refusal prevents use of the guest purchase service.
Stored for 5 years after purchase in accordance with the e-commerce law and related regulations.
Name, Company/Department, Contact Number, Email
2. Collected Personal Information Items
(2) Grievance Handling
Includes verifying the complainant’s identity, confirming the issue, contacting for fact-finding, and notifying the outcome.
(1) Guest Purchase Service Provision
Purposes: identity verification, delivery, service provision, contracts/invoices, authentication, payment, debt collection, abuse prevention, and notifications.
1. Collection and Use of Personal Information
DigiFore Co. (“the Company”) establishes and discloses the following privacy policy to protect personal data
under Article 30 of the Personal Information Protection Act and to promptly address related concerns.
Privacy Policy
The company destroys personal data stored electronically to make it unrecoverable and disposes of paper records by shredding or incineration.
2. Destruction Method
The company deletes personal data after approval from the Data Protection Officer.
1. Deletion Procedure
③ The procedures and methods for personal data deletion are as follows.
② If the retention period agreed upon by the data subject has expired, or the purpose of processing is complete,
but other laws require continued storage of personal data, the company will preserve it by moving it
to a separate database or storing it in a different location.
① The company promptly deletes personal data when retention period ends or purpose is fulfilled.
Article 7 (Personal Data Destruction)
Article 5 (Rights of Data Subjects and Legal Representatives and How to Exercise Them)
① Data subjects may exercise the following personal information protection rights with the Company at any time.
1. Request access to personal information
2. Request correction of errors
3. Request deletion
4. Request suspension of processing
② Data subjects may exercise the rights in Paragraph 1 by written request, phone, email, or fax, and the Company will promptly take action.
③ When a data subject requests correction or deletion of their personal information, the Company will not use or provide the relevant
personal information until the correction or deletion is completed.
④ Rights under Article 1 may be exercised through a legal representative or an authorized proxy, provided that a power of attorney
is submitted in accordance with the Personal Information Protection Act’s prescribed form.
⑤ Data subjects must not misuse personal information or violate privacy under relevant laws.
Article 8 (Personal Information Security Measures)
The company implements the following to protect personal information.
1. Administrative: Internal policy enforcement, regular staff training
2. Technical: Access control, encryption, security software installation
3. Physical: Access restrictions to server and data storage rooms
④ The company collects and uses data on service usage, visited sites, search trends, and secure access to provide
optimized information to users.
Article 10 (Personal Information Protection Officer)
① The company appoints a privacy officer responsible for overseeing personal data handling and addressing
complaints and remedies.
② Data subjects may contact the privacy officer or relevant department for any inquiries, complaints, or requests related
to personal data protection arising from using the company’s services or business. The company will promptly respond
and handle all such matters.
Article 12 (Remedies for Rights Violations)
Data subjects can seek remedies and consultation for personal data violations from the following organizations.
1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
2. Personal Data Violation Report Center: 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
4. National Police Agency: 182 (ecrm.police.go.kr/minwon/main)
Article 13 (Enforcement and Changes of Privacy Policy)
This privacy policy is effective from January 24, 2025.
Article 6 (Personal Information Collected)
The company collects the following personal information.
1. Service provision
Required: <Name, Date of Birth, Email, Company/Department>
Optional: <Contact Number>
2. Collected Personal Information Items