Next Level Studio Inc. (hereinafter, the “Company”) complies with regulations on privacy protection under relevant laws of the Republic of Korea such as the Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc. (hereinafter “Information and Communications Network Act”) and the Personal Information Protection Act. The Company is putting the best effort to protect the rights and interests of users (hereinafter, the “User”) by setting forth the Privacy Policy in accordance with the Information and Communications Network Act.
This Privacy Policy applies to all services including web services provided by the Company and includes the following contents.
1. User’s Rights and Methods of Exercising the Rights
1.
The User may exercise his/her rights as a principal of the information at any time (access, correction, withdrawal of consent, and deletion of his/her registered personal information), and request for access, provision, correction, withdrawal of consent, deletion (withdrawal from membership), suspension of processing, and objection for the following matters:
•
The User's personal information held by the Company
•
Current status where the Company has used or provided to a third party the User's personal information
•
Current status where the User has provided consent to the collection, use, and provision of the personal information
•
The Company operates CS center for providing and handling related consultation and inquiries, and the Company will take action without delay whenever the User reaches a privacy protection officer via email or phone.
Status | Methods |
View and edit
| Login → Profile menu → Click Setting button
Login → My menu → Click Modify My dInfo |
Delete and membership withdrawal | Login → contact CS Center |
Consent withdrawal (receiving promotional events information) | Login → Profile menu → Click Setting button
Login → My menu → Click Modify My Info |
2.
The User may request a correction of errors in personal information to the Company.
3.
The User may cause his/her representative (meaning the User’s legal representative, a person delegated by the User) to make a request for access to, correction and deletion of, suspension of the processing of the personal information on behalf of him/her. In this case, the representative shall submit a power of attorney to the Company.
4.
A legal representative of a child under the age of 14 may make a request to the Company for access to, correction and deletion of, suspension of the processing of the child’s personal information.
2. User’s Obligations
1.
The User is obliged to protect his/her personal information, and the Company shall not be responsible for problems arising due to the User’s negligence, such as sharing ID/password and leaving the place while logged in, without causes attributable to the Company such as the Company’s intention or negligence.
2.
The User shall keep his/her personal information up-to-date and shall be responsible for problems arising from entering incorrect information.
3.
The User’s ID/password shall only be used by the User him/herself and may not be transferred or rented out to a third party. Signing up for membership by stealing other’s personal information or making a purchase by stealing ID, etc. may be subject to forfeiture of membership and punishment by relevant laws.
4.
After using the Company's services, the User must log out of his/her account and close the web browser program.
3. Matters Concerning Automatic Collection of Personal Information and Rejection
1.
“Cookies” are very small text files that the server used for running the website sends to the User’s browser, and they are stored and run on the User's computer.
2.
The Company installs and runs cookies to provide personalized services for the User.
3.
The Company uses cookies to provide personalized services such as target marketing through the analysis of the User’s access frequency or visit time, understanding of usage patterns, and field of interests, tracing, understanding of the User’s level of participation in various promotional events and the number of visits.
4.
The User has the choice of installing cookies and may allow or reject all cookies by selecting options by web browser, or prompt for confirmation every time a cookie is saved. Here is how to set the authorization for installing cookies. However, if the User refuses to save cookies, there may be restrictions on the use of some services like services that require login.
•
Chrome: Settings → Select Show Advanced Settings → Set Personal Information-Contents → Set Cookie level
•
Edge: Settings → Cookies and Site Permissions → Manage and Delete Cookies and Site Data
•
Safari: Preferences → Personal Information Tab → Cookie and Website Data Level Setting
•
Firefox: Options → Personal Information → History → Customized Settings → Set Cookie Level
4. Collection of Personal Information and Purpose of Use
1.
The Company shall collect personal information with the consent of the User within the minimum scope for providing services and shall not refuse to provide the services on the grounds that the User does not provide personal information other than the information minimum required. Also, all personal information collected shall be used only within the scope of the notified purpose, and personal information is collected and used as follows according to the type of services provided by the Company.
Sign-up and use of services
Member type | Method of collection | Items collected | Purpose |
General | Sign-up | [Required] ID (email), password, nickname, name, date of birth, country, contact no.
[Option] sex | Securing smooth communication channels for confirming intention for sign-up, registering members for service use, giving announcements, and handling complaints |
General | Interlink with social accounts | [Option] Social account email (Google, Twitter, Kakao, Naver) | Using services visa social accounts (Google, Twitter, Kakao, Naver) |
General | Application for seller admission | [Required] Name, resident registration no., copy of ID card, bank account holder, account no., copy of a bankbook, address | Providing seller information as a duty of a sales brokerage business, confirming information for tax report to IRS, confirming information for payment of settlement |
General | Payment - when using cash | [Option] Mobile no. for cash receipt | Collecting mobile number for issuing cash receipt in case of using cash |
Business operator | Sign-up | [Required] ID (email), password, nickname, business name, business registration no., representative, contact no. of a person in charge, date of opening business, place of business, business registration certificate (copy) | Securing smooth communication channels for confirming business and intention for sign-up, handling consultation and inquiries, giving announcements and handling complaints |
Business operator | Application for seller admission | [Required] Business name, business registration no., name and contact no. of a person in charge, information of mail-order business, report certificate of mail-order business (copy), bank account holder, bank, account no., copy of a bankbook | Providing seller information as a duty of a sales brokerage business, confirming information for tax report to IRS, confirming information for payment of settlement |
Common | User verification | [Required] Email for receiving information | Email for user verification, for checking whether information can be delivered, and for receiving information with duty of notification |
Common | Profile setting | [Option] Self introduction, background image, thumbnail image, consent to receive marketing information | Identifying users, establishing relations among users, vitalizing a community |
Overseas | Application for seller admission | [Required] Name, Paypal ID, currency for settlement | Collecting information to pay settlement to overseas sellers |
Common | Payment method registration | [Option] Card number, expiration date, password 2 digits in front | Payment Processing and Billing |
Information automatically collected and created from use of services
Items collected | Purpose |
Usage information: Cookies, IP, visit time & date, service usage history
Device information; Device_id, OS type and version, device type, etc. | Service usages statistics, access management, providing user-specific usage environment, identifying activity information, checking events and promotions statistics, providing customized information |
2.
The Company may collect personal information in the following ways, and when collecting personal information that enables personal identification, the Company shall obtain consent from the User. If the User clicks the consent button or enters and saves personal information additionally collected by modifying the member information, the User shall be deemed to have agreed to collection of the personal information
•
Website, mobile app, written document, fax, phone, inquiry to CS center, entering for events
•
Automatic collection through a tool to collect created information
5. Provision of Personal Information to a Third Party
1.
The Company shall use the personal information only within the range notified in “4. Collection of Personal Information and Purpose of Use” and shall not provide the User’s personal information to a third party, in principle, except for the following cases:
•
If the User agrees to provide information to a third party to perform a transaction, only the minimum level of the personal information required for services, user identification, and verification shall be provided to the service provider.
Provision of personal information to a third party
Receiving party | Purpose | Items provided | Period of retention and use |
Seller | Seller checks a purchaser of the product on sale and purchase information | Name (if requested by seller) / Contact no. (if requested by seller) / Business information (applicable for a business operator) / Email to receive information / Usage / Nickname / Amount of payment | Until membership withdrawal or termination of consignment agreement |
Purchaser | Inquiries by purchaser on seller’s products and seller’s duty to provide information as a mail-order brokerage agent | Name (if requested by purchaser) / Contact no. (if requested by purchaser) / Date of birth (if requested by purchaser) / Address (if requested by purchaser) / Nickname / Email to receive information / Business information (applicable for a business operator) | Until membership withdrawal or termination of consignment agreement |
•
When there is a request from an investigative agency in accordance with the procedures and methods prescribed by law for investigation and research purposes
•
When providing information to advertisers, partners, research organizations, etc. in a form a specific individual is unidentifiable for conducting statistical writing, academic research, or market research
2. The User may disagree with the provision of personal information to a third party and may withdraw his/her consent to the provision of personal information to a third party at any time. However, the use of some services based on the provision to a third party may be restricted (membership service is available).
6. Consignment of Personal Information Processing
In relation to the processing of personal information, the Company consigns the following tasks and takes necessary measures to ensure that the personal information that is consigned in accordance with relevant laws and regulations can be managed safely. Also, the personal information consigned is limited to the minimum scope necessary to provide the services.
Domestic consignment
Company | Work description |
Ciot Co., Ltd. | Identification of account information |
Channel Corp. | Operation of CS center and channel talk system |
Toss Payments | Card payment, cancellation, and Pixel Pay operation |
LinkHub | Issuance of cash receipt and electronic tax invoice |
Bizrating SCI | User verification (mobile verification) |
Kakao Corp. | Delivery of email |
Overseas consignment
Receiving party | Receiving country | Transfer date and method | Personal information to be transferred | Purpose and period of processing |
Amazon Web Services Inc. | USA | On a frequent basis where necessary immediately upon signing up through information and communications network | Items specified in ‘Collection of Personal Information and Purpose of Use’ | Infrastructure management for providing services, delivery of mail Until membership withdrawal or termination of consignment agreement |
Paypal | USA | Operation of Paypal payment system | Paypal ID | Payment and refunds of Paypal, settlement
Until membership withdrawal or termination of consignment agreement |
TeleSign Corporation | USA | Transfer through network when personal information is needed for work | Mobile no. | User verification / Period of providing services |
7. Retention and Usage Period of Personal Information
1.
According to details notified to and consented by the User, the Company shall retain the information until the purpose of collection and usage is fulfilled, or until the User makes a request for withdrawal. However, if it needs to be stored by law, it shall be stored in a separate DB or table blocked from the outside.
Legal gronds for retaining information
Law | Purpose | Items to be collected | Retention period |
Protection of Communications Secrets Act | Provide if requested by an investigative agency upon receipt of a warrant from the court | Log record, IP, service access history, etc. | 3 months |
Act on the Consumer Protection in Electronic Commerce, Etc. | Records on handling of consumer complaints and disputes | Consumer identification data, records on dispute handling, etc. | 3 years |
Act on the Consumer Protection in Electronic Commerce, Etc. | Records on payment and supply of goods, etc. | Consumer identification data, records on contracts/withdrawals, etc. | 5 years |
Act on the Consumer Protection in Electronic Commerce, Etc. | Records on contracts or withdrawals, etc. | Consumer identification data, records on contracts/withdrawals, etc. | 5 years |
Framework Act on National Taxes | Calculate exclusion period for imposing national taxes | Evidencing materials of national taxes | 10 years |
Framework Act on National Taxes | Calculate extinctive prescription of authority to collect national taxes | Tax base and materials on tax report | 5 years |
Value-added Tax Act | Account, tax invoice, tax invoice on import, receipt, etc. | Tax base of value-added taxe and materials on tax report | 5 years |
Electronic Financial Transactions Act | Confirm records on electronic financial transactions | Records on electronic financial transcations, information of the other party, etc. | 5 years |
2.
The Company shall operate the personal information expiration date system (dormant account policy) based on the details defined below.
•
In accordance with Article 29 of the Information and Communication Network Act, membership information of the User with no service record for more than one year shall be saved and managed separately from the membership information of the general User.
•
The Company shall give notice to the User at least 30 days prior to turning the account dormant via e-mail, etc.
•
Except for cases where there is a special regulation in the relevant laws, the personal information separately stored shall not be used or released.
•
Order, payment, and CS information shall be stored during the retention period of personal information in accordance with relevant laws and then deleted.
8. Procedure and Method of Destroying Personal Information
1.
The Company shall destroy the user’s personal information without delay when the purpose of collecting and using personal information is fulfilled, in principle. However, if it should be stored in accordance with other laws specified in “7. Retention and Usage Period of Personal Information”, it shall be transferred to a separate DB, stored safely for a certain period in compliance with internal regulations and relevant laws, and then destroyed without delay. In this case, the personal information shall not be used for any other purposes except for cases it is used by law.
2.
The Company shall destroy personal information by using the destruction method defined below.
•
Information in the form of electronic files shall be deleted completely by using technical methods so that it cannot be recovered and reproduced.
•
Personal information printed on paper shall be destroyed by shredding or incineration.
9. Matters Regarding Measures to Protect Personal Information
1.
In processing the User’s personal information, the Company is seeking technical and managerial protection measures according to relevant laws including the Information and Communication Network Act and the Personal Information Protection Act which should be abided by the information and communication service provider for safety purposes to ensure the User’s personal information is not lost, stolen, divulged, altered, or damaged.
2.
The Company keeps the password, account information, and card information that the law requires encryption. Only the member can know the password, and only the person who knows the password can check and change personal information. Therefore, please take special care not to let others know your password.
10. Privacy Protection Officer and Handling of User Grievances
1.
The User may contact a privacy protection officer and CS center for all personal information protection-related complaints and grievance that have occurred during the use of the Company’s services, and the Company will respond promptly and faithfully to the Users’ inquiries.
•
Privacy protection officer: Customer Management Team
•
Contact no.: +82 70-8801-6986
2.
Please contact the following institutions if a report or consultation on other privacy infringement cases is needed:
Institutions related to privacy infringement
Institution | URL | Contact Info |
Personal Information Infringement Report Center | https://privacy.kisa.or.kr | 118 without area code |
Supreme Prosecutors’ Office Cyber Crime Investiation | https://www.spo.go.kr | 1301 without area code |
National Police Cyber Bureau | https://cyberbureau.police.go.kr | 182 without area code |
11. Obligation to Notify Privacy Policy
This Privacy Policy shall be effective on the date of registration or amendment. Any addition, deletion, or correction due to changes in relevant laws and the Company policies will be notified in advance on the Company’s website or via email.
