Y Optical Co., Ltd. (hereinafter the "Company") collects, uses, and provides personal information "based on the consent of users," and actively guarantees "users' rights (the right to informational self-determination)."
 

1. Personal Information Items Collected

Information collected on a mandatory basis

① Personal information items collected: name, ID, password, email

② Service usage items: service usage records, access logs, cookies, IP address, payment records, member action records

Information collected on an optional basis

① Personal information items collected: gender, date of birth, identity verification value (DI)

② Service usage items: identity & adult verification
 

2. Purpose of Collection and Use of Personal Information

The Company uses the collected personal information for the following purposes.

① Performing contracts related to the provision of services and settling charges arising from the provision of services

Provision of content, delivery of goods, dispatch of invoices and similar documents, identity verification, and purchases

② Member management

Identity verification for the use of membership services, personal identification, prevention of fraudulent use by improper members and prevention of unauthorized use, and confirmation of intent to register

③ Use for marketing and advertising

Analyzing access frequency or compiling statistics on members' use of services
 

3. Retention and Use Period of Personal Information

In principle, once the purpose of collecting and using personal information has been achieved, the relevant information is destroyed without delay.

However, where it is necessary to retain information pursuant to the provisions of relevant laws, the Company retains member information for a certain period prescribed by the relevant laws as set out below.

① Items retained: login ID, payment records

② Basis for retention: Act on the Use and Protection of Credit Information

③ Retention period: 1 year

Records on labeling/advertising: 6 months (Act on the Consumer Protection in Electronic Commerce, etc.)

Records on contracts or withdrawal of subscription, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)

Records on payment and the supply of goods, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)

Records on consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)

Records on the collection/processing and use, etc. of credit information: 3 years (Act on the Use and Protection of Credit Information)
 

4. Procedure and Method of Destroying Personal Information

In principle, once the purpose of collecting and using personal information has been achieved, the Company destroys the relevant information without delay. The procedure and method of destruction are as follows.

① Destruction procedure

Information you have entered for purposes such as membership registration is, once its purpose has been achieved, transferred to a separate database (or, in the case of paper, a separate filing cabinet), stored for a certain period in accordance with internal policies and information protection grounds under other relevant laws (see Retention and Use Period), and then destroyed.

Personal information transferred to a separate database is not used for any purpose other than its retention, except as required by law.

Members may request the deletion of their data through the inquiry board or via the email address shown at the bottom of the site.

② Destruction method

Personal information stored in the form of electronic files is deleted using technical methods that make the records irreproducible.
 

5. Provision of Personal Information

In principle, the Company does not provide users' personal information to external parties. However, the following cases are exceptions.

① Where the user has given prior consent

② Where there is a request from an investigative agency in accordance with the procedures and methods prescribed by law, pursuant to the provisions of laws or for investigative purposes
 

6. Consignment of Collected Personal Information

The Company does not consign users' information to external companies without users' consent. Should such a need arise in the future, the Company will notify users of the consignee and the details of the consigned work and, where necessary, obtain prior consent.
 

7. Rights of Users and Legal Representatives and How to Exercise Them

Users may at any time view or modify their registered personal information and may also request to cancel their membership.

To view or modify their personal information, users may click "Edit Personal Information" (or "Edit Member Information," etc.), and to cancel their membership (withdraw consent), users may click "Withdraw Membership"; after completing the identity verification process, they may directly view, correct, or withdraw.

Alternatively, if you contact the Personal Information Manager in writing or by email, we will take action without delay.

In the case of a child under the age of 14, the legal representative has the right to view or modify the child's personal information and to withdraw consent to its collection and use.

If you request the correction of an error in your personal information, the Company will not use or provide the relevant personal information until the correction is completed. In addition, if the incorrect personal information has already been provided to a third party, the Company will notify the third party of the result of the correction without delay so that the correction is made.

The Company processes personal information that has been canceled or deleted at the user's request in accordance with what is specified in "Retention and Use Period of Personal Information Collected by the Company" and ensures that it cannot be viewed or used for any other purpose.
 

8. Matters Concerning the Installation and Operation of Devices that Automatically Collect Personal Information and Their Refusal

The Company operates "cookies" and similar technologies that frequently store and retrieve your information. A cookie is a very small text file sent to your browser by the server used to operate the Company's website, and it is stored on your computer's hard disk. The Company uses cookies for the following purposes.

① Purpose of using cookies, etc.

Providing targeted marketing and personalized services by analyzing the access frequency and visit times of members and non-members, identifying and tracking users' tastes and areas of interest, and ascertaining the degree of participation in various events and the number of visits

Users have the option to decide whether to install cookies. Accordingly, by setting options in your web browser, you may allow all cookies, go through a confirmation step each time a cookie is stored, or refuse the storage of all cookies.

② How to refuse cookie settings

Example: As a method of refusing cookie settings, by selecting the options of the web browser you use, you may allow all cookies, go through a confirmation step each time a cookie is stored, or refuse the storage of all cookies.

Example of how to set it (in the case of Internet Explorer): Tools at the top of the web browser > Internet Options > Privacy

However, if you refuse to install cookies, there may be difficulties in providing services.
 

9. Civil Complaint Services Concerning Personal Information

In order to protect users' personal information and handle complaints related to personal information, the Company has designated a Personal Information Manager as follows.

Personal Information Protection Officer: Yeo Seung-hun

Email: yoptical@naver.com

You may report to the Personal Information Manager any personal information protection complaints that arise while using the Company's services. The Company will provide prompt and sufficient responses to users' reports.

If you need to report or consult on other personal information infringements, please contact the agencies below.
 

① Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)

② Korea Privacy Protection Association (www.eprivacy.or.kr / 02-550-9500)

③ Supreme Prosecutors' Office Cybercrime Report (spo.go.kr / 1301)

④ National Police Agency Cyber Safety Bureau (cyberbureau.police.go.kr / 182)
 

10. Other

Please note that this "Privacy Policy" does not apply to the individual acts of collecting personal information by websites linked from this website.
 

11. Duty of Notification

In the event of any change to the contents of this Privacy Policy, we will give notice through the "Notices" section of the website at least 7 days prior to the revision.

- Date of announcement: September 10, 2024

- Effective date: September 10, 2024