Parkron Co., Ltd. (hereinafter referred to as the "Company") does its best to protect users' personal information, and establishes and complies with the personal information processing policy to comply with the relevant laws that the company must comply with, such as the 'Personal Information Protection Act'. The company discloses the personal information processing policy on the first screen of the website so that users can see it easily at any time. There is.

If the privacy policy is revised or the privacy policy is changed, we will notify you through the website.

This privacy policy contains the following contents.

1. Purpose of collection and use of personal information
2. Items and methods of collecting personal information
3. Period of retention and use of personal information
4. Consignment of personal information processing
5. Provision of personal information to third parties
6. Protection of children's personal information
7. Rights of users and how to exercise them
8. Procedure and method of destruction of personal information
9. Measures to secure the safety of personal information
10. Matters concerning the installation, operation and rejection of the automatic personal information collection device
11. Personal information protection manager and person in charge
12. Duty of notice

1. Purpose of collection and use of personal information The company collects personal information for the following purposes in order to provide better quality services.

- Name, ID, password: Used for identification process according to membership service use
- E-mail, mobile phone number: delivery of notices, securing a smooth communication path for complaint handling, and information on new services and new products or events
- Address, phone number: Securing the correct delivery address when shipping invoices and goods
- Other optional items: Materials to provide personalized service
- IP Address: Prevention of illegal use by bad members and prevention of unauthorized use

2. Personal information collection items and methods The company collects personal information for users to use counseling or services in the following way.

① How to collect personal information
- Collection of personal information online through website member registration
- Collection of personal information for payment, product delivery, and order history confirmation at the time of purchase by users
- Collection of personal information online and offline to provide discounts

② Items to collect personal information
1) When registering as a member
- Required items: ID, password, name, mobile phone, email
- Optional items: address, landline phone number, gender, date of birth, region, recommender ID
1-1) (Kakao) membership registration
- Required items: auid
- Optional items: Name
1-2) When registering as a member of (Naver)
- Required items: account identification number
- Optional items: name, email, nickname, gender
1-3) (Facebook) when registering as a member
- Required items: account identification number
- Optional items: name, email
※ The information provided by SNS is used only in the membership registration stage, and if the membership registration is not in progress, it will be destroyed immediately. In addition, personal information is stored only when the customer directly consents through the company's membership registration process.
2) When writing a photo review
- Required item: Name
- Optional items: Password
3) (Non-member) order inquiry
- Required items: orderer name, order number, non-member order password
4) When paying for products
- Required items: name of orderer, email, mobile phone, recipient, address, order inquiry password (for non-members only), (when depositing without bankbook) name of depositor
- Optional items: landline phone, (when applying for personal cash receipt) mobile phone
5) (Zero Block) Quotation Inquiry
- Required items: Author
- Optional items: e-mail, mobile phone
6) (Representative website) In case of customer inquiry / partnership inquiry
- Required items: name, phone number, e-mail

In addition, the following information may be generated and collected in the course of service use or business processing.
- Service usage record, access log, access IP information, payment record, use suspension record

3. Period of retention and use of personal information The user's personal information is destroyed without delay after the purpose of collection or provision of personal information is achieved. However, the following information is retained for the period specified for the following reasons.

① Reasons under related laws
In accordance with the provisions of relevant laws, such as the Consumer Protection Act in the Commercial Act, the Electronic Commerce Act, etc., information that needs to be retained for a certain period of time for reasons such as confirmation of transaction-related rights and obligations is retained for a certain period of time.

In this case, the stored information is used only for the purpose of storage, and the retention period is as follows.
- Records on contract or subscription withdrawal: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
- Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
- Records on handling consumer complaints or disputes: 3 years (Act on Consumer Protection in Electronic Commerce, Etc.)
- Log-in records (log records, access data tracking data): 3 months (Communications Secret Protection Act)
- Record of issuance of cash receipts: 5 years (Corporate Tax Act)

② Transaction information held by the user with the consent of the user can be viewed and confirmed when the user requests it.

4. Consignment of personal information processing
The company entrusts some of the tasks necessary for service provision to external companies as follows, and in accordance with relevant laws, it regulates necessary matters so that personal information can be safely managed in the consignment contract in accordance with the relevant laws, and supervises them to comply with them. In addition, the information shared is limited to the minimum information necessary to achieve the purpose.

5. Provision of personal information to third parties
For the convenience of users, the company provides information to the following affiliates only with the user's prior consent for the purpose of providing personal information. However, there are exceptions if there are special provisions in the laws related to provision to third parties.

6. Protection of children's privacy
The company does not collect personal information from children under the age of 14.

7. Rights of users and how to exercise them

① Users can view, edit, and delete personal information registered with the company in the My Page menu after logging in to Parkron Mall.

② Users can exercise the following rights related to personal information protection against the company at any time.
- Request to read personal information
- Request for correction if there is an error
- Request for deletion
- Request to stop processing

③ Rights can be exercised in writing, by phone, e-mail, fax, etc., and the company will take action without delay.

④ If a user requests correction or deletion of personal information for errors, the company does not use or provide the personal information until the correction or deletion is completed.

8. Procedure and method of destruction of personal information
In principle, users' personal information is destroyed or stored separately without delay when the purpose of collection and use of personal information is achieved. The company's personal information destruction and separate storage procedures and methods are as follows.

① Destruction procedure
The information entered by the user is transferred to a separate DB (separate storage location in the case of paper) after the purpose is achieved and is stored for a certain period of time or immediately destroyed in accordance with internal policies and related laws (refer to the period of retention and use of personal information). At this time, the personal information transferred to the DB will not be used for any other purpose except by law.

② How to destroy
- Personal information printed on paper is shredded or destroyed through incineration.
- Personal information stored in the form of electronic files is deleted using a technical method that cannot reproduce the record (overwrite when reused, low format, etc.).

③ Introduction of personal information validity period system
- The company can select the period of validity of personal information (1 year, lifetime member) when signing up for membership, and if the service is not used during the selected period, to protect the member's personal information, as of August 2015, it is stored separately from other users' personal information; Manage.
- The period of non-use is calculated from the last log-in date, order, and payment history, and service non-users are separated, stored, and managed during the period defined by the law.
- The company notifies the relevant users through e-mail, etc. 1 month prior to the separation and storage of non-users' personal information.
- Separated and stored personal information of non-users is retained for a certain period in accordance with related laws and is destroyed after the end of the period. Personal information that has not been destroyed will be provided again at the time of resumption of service use according to the request of the user.

9. Measures to ensure the safety of personal information

10. Matters concerning the installation, operation and rejection of automatic personal information collection devices
The company uses 'cookies' to store and retrieve users' information from time to time to provide customized services that are specialized to users. A cookie is a small amount of information that the server (HTTP) used to operate the website sends to the user's computer browser, and is also stored on the hard disk of the user's PC.

① Purpose of use of cookies
It is used to provide optimized information to users by identifying the types of visits and usage of each service and website visited by users, popular search terms, and whether or not secure access is established.

② Installation, operation and rejection of cookies
Users have the option to install cookies. Therefore, by setting options in the web browser, the user can accept all cookies, check each time a cookie is saved, or refuse to save all cookies.
- Internet Explorer: Tools menu Internet Options Privacy tab Advanced
- Chrome: Settings menu Show advanced settings Privacy and security Site settings Cookies and site data settings
- Firefox: Options menu Privacy and security Cookies and site data settings
- Safari: Preferences menu Privacy tab Cookies and website data level settings

③ If you refuse to store cookies, you may experience difficulties in using customized services.

11. Person in charge of personal information protection and person in charge
In order to protect users' personal information and to handle complaints and inquiries related to personal information, the company has designated a person in charge of personal information protection and a person in charge as follows.

▶ Person in charge of personal information protection
Name : Shin, Shin
Affiliation : Product Strategy Department
E-MA I L 　 : parklon@parklonmall.com
Telephone number 　: 0505-511-3003

▶ Personal information protection manager
Name : Kim Hyun-bok
Affiliation: Sales Department
E-MA I L : parklon@parklonmall.com
Telephone number　: 0505-511-3003

If you need to report or consult about personal information infringement For more information, please contact the following organizations.

* Information on reporting and consulting organizations for personal information infringement
- Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: (without area code) 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office Cyber ​​Investigation Division: (without area code) 1301 (www.spo.go.kr)
- National Police Agency Cyber ​​Investigation Bureau: (without area code) 182 (ecrm.cyber.go.kr/minwon/main)
- NIS Cyber ​​Security Center: (without area code) 111 (www.ncsc.go.kr:4018)

12. Duty of notice
If there is any addition, deletion or modification of the contents of this Privacy Policy, we will notify you in advance through ‘Notice’ at least 7 days before the revision.

Announcement date: April 08, 2022

Enforcement date: April 15, 2022