This English text is a courtesy translation. The Korean version is the authoritative text; in case of any discrepancy, the Korean version prevails.
1. General
The information site (the "Company") regards users' personal information as highly important and complies with the personal information protection provisions of applicable laws, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection. Through this Privacy Policy, the Company explains for what purposes and in what manner the personal information provided by users is used, and what measures are taken to protect it.
2. Items of Personal Information Collected and How They Are Collected
A. Items collected
- Membership registration and management: name, ID, password, nickname, email address, mobile phone number
- Delivery of goods and performance of contracts: recipient name, address, telephone number, mobile phone number
- Use of paid services: payment records such as bank account information and credit card information
- Automatically collected items: service use records, access logs, cookies, access IP information
B. How information is collected
- Website registration, written forms, boards, customer service enquiries, event entries, delivery requests and the like
3. Purposes of Collection and Use
The Company uses the personal information it collects for the following purposes.
- Member management: providing membership services, verifying identity, identifying individuals, confirming intent to register, handling complaints and other enquiries, delivering notices
- Provision of goods or services: delivery of goods, issuing invoices, payment and settlement of charges
- Marketing and advertising: developing new services and providing tailored services, delivering event and promotional information (only where consent has been given)
4. Retention and Use Period
In principle, users' personal information is destroyed without delay once the purpose of collection and use has been achieved. However, where retention is required under applicable laws, the Company retains member information for the periods set out below.
- Records on contracts or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce)
- Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce)
- Records on consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
- Website visit records (logs): 3 months (Protection of Communications Secrets Act)
5. Procedure and Method of Destruction
In principle, the Company destroys personal information without delay once the purpose of collection and use has been achieved. The procedure and method are as follows.
- Procedure: information entered for registration and similar purposes is moved to a separate database once the purpose has been achieved, stored for a certain period in accordance with internal policy and other applicable laws, and then destroyed — or destroyed immediately.
- Method: information in electronic file form is deleted using a technical method that makes the record unrecoverable. Personal information printed on paper is destroyed by shredding or incineration.
6. Outsourcing of Processing
To provide the service smoothly, the Company outsources personal information processing as follows.
- Contractors: logistics and delivery companies such as CJ Logistics and Korea Post Parcel; payment gateways such as KG Inicis
- Outsourced work: delivery of goods, purchase safety services and payment processing
7. Rights of Users and Legal Representatives, and How to Exercise Them
Users may view or correct their registered personal information at any time, and may request withdrawal of membership (withdrawal of consent). Viewing, correction and withdrawal can be carried out directly through the member information or membership withdrawal functions in My Page.
8. Measures to Secure Personal Information
In accordance with Article 29 of the Personal Information Protection Act, the Company takes the following technical, administrative and physical measures.
- Password encryption: members' passwords are stored and managed in encrypted form so that only the member knows them.
- Technical measures against hacking: security programs are installed and periodically updated and inspected to prevent leakage or damage of personal information by hacking or computer viruses.
- Minimising and training staff who handle personal information: staff who handle personal information are designated and limited to the smallest number necessary.
9. Privacy Officer and Contact
The Company designates a privacy officer as set out below to take overall responsibility for personal information processing and to handle complaints and remedy damage relating to that processing.
- Privacy officer: Bae Junhyeon
- Contact: help@namdaemun.net
- Other reporting bodies: Privacy Infringement Report Centre (privacy.kisa.or.kr / 118 without area code)
Addendum
This Privacy Policy applies from 18 August 2026.