The period of retention and the procedures and method of destruction of personal information
When personal information becomes obsolete due to the achievement of the purpose of collecting and handling personal information, the Company shall immediately destroy such information
1. The list of information to be destroyed
1) Information provided when signing up for membership: It should be destroyed when the member withdraws from his or her membership or whose membership is revoked
2) If information other than the membership information, such as bank account information, was collected for the purpose of payment of refund it should be destroyed after the payment or refund
3) If different delivery address was collected other than the address provided in signing up for membership for the purpose of survey or events, it should be destroyed after the purpose is achieved
2. However, the personal information of a member can be retained even after the purpose was achieved in exceptional cases required by the Commercial Law or other laws
A. Where retention is inevitable due to the provisions in Commercial Law, Protection of Users of Digital Contents and other relevant laws.
- Information in regards to consenting or withdrawing the contract: 5 years
- Information in regards to payment settlements and supply of goods: 5 years
- Information in regards to handling of customers’ complaints and disputes: 3 years
B. Where the Company already notified the member of the period of retention through proper procedures
C. Where the Company received consent from an individual member
D. Where the Company retains the information for thirty (30) days to consult with customers or to prevent additional loss to customers
3. The method of destruction
A. Personal information printed in document: It shall be destroyed by shredder
B. Personal information saved as electronic file: It shall be destroyed with technical method which disables the recovery or reproduction of such personal information