User Privacy Policy

Kakao Style Co., Ltd. (hereafter "Company") establishes and discloses the following privacy policy in order to protect the personal information of users and to quickly and efficiently process relevant issues.

Article 1 [Purpose of Processing Personal Information]

The Company collects and uses the personal information of users for the following purposes. The personal information that is processed shall not be used for any other purposes aside from the following, and in the event of any changes in these purposes, the necessary measures shall be taken, such as obtaining additional consent.

Web or app member registration and management: Personal identification according to the provision of a membership system service, verify intent to register, take measures to restrict usage by members who violate the terms of use, registration and restricting the number of times a person can register, restrict delinquent service use, prevent unauthorized use, retain records to process issues and mediate disputes, deliver announcements, verify intent to delete account
Provide services on Zigzag and other services under a different name that are operated by the Company and develop new services: Develop new services, provide customized services, provide services and post advertisements according to demographic statistics, verify the validity of services, provide event and advertisement information and offer opportunities to participate, assess access frequency, statistics on members' service utilization, prevent the collection of information on children under 14 years of age, prevent unauthorized use
Process issues: Verify the identity of the person who filed the civil complaint, verify the civil complaint details, contact or send notifications to investigate the facts, send notifications on the results
User product purchases: Process payments and perform shipping tasks
Identity verification: Verify identity
Easy Pay services: Provide account deposit services when Easy Pay services are used
Management and registration through Kakao Sync: Personal identification according to the provision of a membership system service, verify intent to register, take measures to restrict usage by members who violate the terms of use, registration and restricting the number of times a person can register, restrict delinquent service use, prevent unauthorized use, retain records to process issues and mediate disputes, deliver announcements, verify intent to delete account
Body type information usage: Recommend sizes and post product reviews through body type information
Zigzag referral rewards: Issue Zigzag referral rewards and send notifications on reward history
Management and registration through Apple Login: Personal identification according to the provision of a membership system service, verify intent to register, take measures to restrict usage by members who violate the terms of use, registration and restricting the number of times a person can register, restrict delinquent service use, prevent unauthorized use, retain records to process issues and mediate disputes, deliver announcements, verify intent to delete account
Receive refunds: Fulfill contract (refund) when a refund is received
Send advertisements: Send advertisements through text message, e-mail, app push notifications, etc.
Management and registration through Fashion by Kakao: Personal identification according to the provision of a membership system service, verify intent to register, take measures to restrict usage by members who violate the terms of use, registration and restricting the number of times a person can register, restrict delinquent service use, prevent unauthorized use, retain records to process issues and mediate disputes, deliver announcements, verify intent to delete account
Fashion by Kakao service use: Provide customized services
Fashion by Kakao event management: Send free gifts and process public charges and taxes
Management and registration through Facebook: Personal identification according to the provision of a membership system service, verify intent to register, take measures to restrict usage by members who violate the terms of use, registration and restricting the number of times a person can register, restrict delinquent service use, prevent unauthorized use, retain records to process issues and mediate disputes, deliver announcements, verify intent to delete account
Management and registration through Google: Personal identification according to the provision of a membership system service, verify intent to register, take measures to restrict usage by members who violate the terms of use, registration and restricting the number of times a person can register, restrict delinquent service use, prevent unauthorized use, retain records to process issues and mediate disputes, deliver announcements, verify intent to delete account

Article 2 [Personal Information Items Processed]

The Company processes the following personal information.

App or web account creation management
(Required) Name, ID (e-mail address), password, mobile phone number, cookies (collected automatically) / (Optional) E-mail, mobile phone number
Provide services and develop new services
(Required) Age, date and time of visit, IP address, cookies and other service usage records and device information
Process issues
(Required) Orderer's contact information, orderer's name, depositor's name, order number
If the user purchased a product
(Required) Name, mobile phone number, address, e-mail, product purchase information (card payment information, bank account information (if a bank deposit was made)), recipient information (name, phone number, mobile phone number, recipient's address)
During identity verification
(Required) Name, date of birth, gender, CI, DI, mobile phone number (for mobile phone verification)
When using Easy Pay services
(Required) Bank name, bank account number, Easy Pay password
Upon registering through Kakao Sync
(Required) E-mail, mobile phone number, profile information (nickname/profile photo)
(Optional) Gender, year of birth, date of birth
When using body type information
(Optional) Height, weight, top/bottom size, shoe size
When signing up for Zigzag referral reward services
(Required) Individual: Phone number, e-mail, resident registration number, accountholder, bank name, bank account number
Business: Phone number, e-mail, business registration number, bank name, bank account number
When registering through Apple Login
(Required) E-mail, mobile phone number
(Optional) Name
Fulfilling contract (refund) when a refund is received
(Required) Accountholder, bank, bank account number
Sending advertisements through text message, e-mail, app push notifications, etc.
(Optional) E-mail, mobile phone number
Fashion by Kakao registration and management
(Required) Kakao account (e-mail or phone number), profile information (nickname, profile photo), Kakao channel addition status and history
(Optional) Gender, age range
When using Fashion by Kakao services
(Optional) Gender, age (year of birth)
Upon winning an event on Fashion by Kakao
(Required) Products that are shipped out: Name, address, phone number Mobile exchange coupon products: Mobile phone number Processing public charges and taxes when a gift value exceeds 50,000 won: Name, phone number, e-mail, address, resident registration number
When registering through Facebook
(Required) Name, E-mail, date of birth
When registering through Google
(Required) Name, E-mail, profile photo

Article 3 [Personal Information Collection Method]

① When a user agrees to the collection of personal information and enters their personal information during the account creation process and while using services, the Company shall collect the information.
② If a user gets consultation or sends an inquiry to the Company through various means, such as through the web, app page, e-mail, fax, phone, etc. during the process of getting consultation through the customer service center, their personal information may be collected.
③ Personal information may be provided from other companies or organizations that are partnered with the company; in such cases, the partner company must receive consent from the user to provide personal information.
④ Information that was generated through login analyses may be collected during the process of using the Company's services, and information, etc. may be automatically collected through cookies.

Article 4 [Installation/Operation and Denial of Automatic Personal Information Collection Devices]

① The Company operates "sessions" or "cookies" that continuously store and find user information in order to provide services that are customized for the user.

Definition of sessions and cookies: Sessions refer to when the server that is used to provide services saves the user's utilization information while they are on the service. Cookies are small text files that are sent from the service that is used to operate the website or app to the user's browser, and refer to information that may also be saved on the user's computer hard disk.
Purpose of using sessions and cookies: The Company uses sessions and cookies in order to provide customized services and improve service satisfaction by analyzing the users' access frequency, access date, and service usage patterns. In addition, cookies and session information are used for participating in various events and target marketing, etc.
How to refuse sessions and cookies: Users do not have the option to install or set sessions, but they have the option to install or not install cookies. Therefore, users can allow all cookies, go through a confirmation process each time cookies are stored, or deny all cookies through the options on their web browser. Users can allow all cookies, go through a confirmation process each time cookies are stored, or deny all cookies through the options on their web browser.

For Internet Explorer, cookies can be denied from [Tools] at the top > [Internet Options] > [Personal Information] > [Advanced].
For Safari, users can select whether to allow cookies through [Safari] at the menu bar on the top left of the MacOS > [Environmental Settings] > [Security].

② If users deny cookies, they may have difficulty using some services that require them to log in.
Information on Personalized Advertisements

Article 5 [Information on Access Permissions]

① The company may access and use information and features in the customer's mobile communications device as follows for the mobile app service.

(Required) Device and app records: To identify the device and check app status (version)
(Optional): Camera/Mic/Photos: Attach files when reviewing purchased items and writing posts (iOS)
External storage: Attach files when reviewing purchased items and writing posts (Android)

② Users shall be notified of required access items when they install the app or when they run the app for the first time. For optional access items, consent shall be obtained separately upon using the relevant service for the first time. For optional access items, the method of obtaining consent may differ depending on the operation system version, and there will be no restrictions when using basic services even if access is denied.

Article 6 [Provision of Personal Information to 3rd Parties]

① The Company shall only process the users' personal information up to the scope that was stipulated, and shall provide personal information to 3rd parties only with consent from the user or in cases where there are special regulations in the law.
② If necessary to fulfill a transaction, such as shipping through the Z Payment (tentative name) service, the company may provide the following personal information in accordance with the appropriate legal procedures, such as obtaining consent from the user.

Persons who receive the personal information	Information Recipient's Purpose of Use	Personal Information Items Provided	Retention Period
Company that provides products that are shipped (View Details)	To provide services (Shipping products that were purchased by the user, providing customer consultations, customer service, and processing complaints)	Name, mobile phone number, address, e-mail, product purchase information (card payment information, bank account information (for bank deposits)), recipient information (name, mobile phone number, shipping address, e-mail)	Service provision period (If it is necessary to retain information in accordance with relevant laws or if prior consent was obtained, the corresponding period will be followed)
CJ Logistics	Provide Z-Only services (receive, ship out, deliver items purchased by users and process return shipping)	Name, mobile phone number, address, e-mail, product purchase information (card payment information, bank account information (for bank deposits)), recipient information (name, mobile phone number, shipping address, e-mail)	Service provision period (If it is necessary to retain information in accordance with relevant laws or if prior consent was obtained, the corresponding period will be followed)

Article 7 [Consignment of Personal Information Processing Tasks]

Kakao Style Co., Ltd. consigns certain tasks that are necessary to provide services to the following external companies.

Consignee for Personal Information Processing Tasks	Task Details	Period of Retention and Utilization of Personal Information
NICE Payments Co., Ltd.	Processing payments (Mobile phone, bankbook-free deposits, credit card, other payment method, refund account verification) and theft prevention	Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period.
Goodsflow Co. Ltd.	Shipping products, providing return collection information	Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period.
Kakao Corp	Sending KakaoTalk notifications (informational messages)	Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period.
Korea Employment Information Service	All call center tasks, including customer and order information usage management	Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period.
Korea Mobile Certification Inc.	Identity Verification	Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period.
Settlebank Inc.	Process payments through Easy Pay Process Zigzag referral reward payments	Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period.
Amazon Web Service	Operating and managing domestic cloud servers	Until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period.
KG INICIS Co., Ltd.	Processing payments (Mobile phone, bankbook-free deposits, credit card, other payment method, refund account verification) and theft prevention	Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period.
KNET Corp.	Issuing and managing electronic tax invoices	Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period.
Hansol Inticube Co., Ltd.	Operating and managing omnicloud to processing call center tasks	Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period.
Daou Technology Inc., HKNets Co., Ltd. Sewon Sellic Co., Ltd., Nemo Commerce Co., Ltd., Playauto Inc.	Process user order information	Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period.
Kakao Enterprise Corp	Send text messages	Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period.
AB180 Inc.	For marketing and operation notification through sending CRM/information related to Braze service use (app push notifications, text messages, e-mails, messenger notifications)	Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period.

Matters related to the overseas transfer of personal information

Recipient	Transfer Country	Transfer Time and Method	Transferred Information	Purpose of Use	Retention and Usage Period
Braze, Inc	United States	Transmitted through a private established network	Name, e-mail, date of birth, device-related information, and information related to service use	Send CRM	When contract expires

Article 8 [Period of Retention and Utilization of Personal Information]

① The Company processes and retains personal information for the personal information retention/usage period that was consented to upon collecting personal information from the user or the personal information retention/usage period in accordance with relevant laws. If the information that was entered by the user (contact information, shipping address) is confirmed to be inaccurate during the process of providing services, the company may immediately discard the information in order to prevent the violation of a 3rd party's rights and benefits and to keep information updated.
② The Company's personal information processing and retention period is as follows.
1. Account creation and management: Until the user deletes their account However, if in the case of the following reasons, until the reason is resolved.
A. If an investigation is in progress due to a violation of relevant laws, until the investigation ends
B. If there is any remaining debt resulting from service use, until the debt is paid
C. If there are rewards remaining to be settled, information shall be deleted after the unpaid amount is batch settled on the 1st of the month of following the account deletion requestion date
2. If information is retained in accordance with relevant laws

Relevant Law	Retained Information	Retained Items	Retention Period
The Act on the Consumer Protection in Electronic Commerce, Etc.	Records regarding indications and advertisements	Advertisement records, etc.	6 months
The Act on the Consumer Protection in Electronic Commerce, Etc.	Records on the withdrawal of contracts or subscriptions:	Member identification information, records on the withdrawal of contracts or subscriptions, etc.	5 years
The Act on the Consumer Protection in Electronic Commerce, Etc.	Records pertaining to payment and the supply of goods	Member identification information, records on the withdrawal of contracts or subscriptions, etc.	5 years
The Act on the Consumer Protection in Electronic Commerce, Etc.	Records pertaining to processing consumer complaints and disputes	Member identification information, records pertaining to processing of disputes, etc.	3 years
Protection of Communications Secrets Act	Communication facts verification information	Log records, IP, etc.	3 months
Framework Act on National Taxes	Ledgers and documentary evidence on all transactions set forth by the Tax Act	Ledgers and documentary evidence on corporate taxes, incomes taxes, and value added taxes, etc.	5 years

③ To protect the personal information of users who have not used the service for an extended period of time (at least 1 year), the Company stores their personal information separately from the information of other users in accordance with Article 21 and Article 39-2 of the Personal Information Protection Act.

Article 9 [Personal Information Disposal Process and Method]

① In general, the personal information of users is immediately discarded once the purpose of collection and use is achieved.
② Personal information shall be transferred to a separate database or stored in a separate storage site if the information must be stored in accordance with relevant laws even after the purpose has been achieved or even after the retention period that was agreed upon by the user has passed.
③ The personal information disposal process and method are as follows.

The Company selects the personal information that is set to be discarded, and the information is discarded after getting approval from the Personal Information Protection Manager.
The Company discards personal information through the following methods.

A. Personal information recorded or saved on paper: Shredded through a shredder or incinerated
B. Personal information stored in electronic files: Deleted using a low level format or other technical method that renders the records irrecoverable

Article 10 [Rights and Duties of Users and How to Exercise Rights]

① The user may request the Company to exercise the following rights regarding personal information protection at any time.

Request to view and correct personal information
The user may view or correct their registered personal information at any time.
To view or correct personal information, the user may go to Settings > Click "Edit Member Info" and view or correct the information themselves, or they may make a request in writing, via phone (02-1670-8050), e-mail (support@zigzag.kr), or fax, and the necessary actions shall be taken immediately after completing the identity verification process.
If the Company receives a request to view or correct personal information from the user, they shall respond to the request by the deadline set forth by the law. However, if there is a legitimate reason for not being able to respond within the deadline, the Company shall notify the user of the reason and extend the deadline, and they shall respond immediately once the reason is resolved.
Withdrawing consent to the collection of personal information, deleting, and terminating the processing of personal information
The user may withdraw the consent they gave to the collection, use, and provision of personal information during the account creation process at any time, or they may request to delete or terminate the processing of their personal information.
To withdraw their consent or delete or terminate the processing of personal information, the user may go to Settings > Consent to receiving text messages, Settings > Consent to receiving e-mails, Settings > Click "Delete Account" to withdraw consent, delete, or terminate the processing of their personal information, or they may make a request in writing, via phone (02-1670-8050), e-mail (support@zigzag.kr), or fax, and the necessary actions shall be taken immediately after completing the identity verification process.

② The Company may restrict or deny requests to view or terminate the processing of personal information for the following reasons, and they shall immediately notify the user of the reason.

Reasons for restricting/denying requests to view personal information
If viewing information is prohibited or restricted in accordance with the law
If there are concerns that another person's life or physical body might be harmed or if there are concerns that another person's assets or other benefits will be infringed upon
Reasons for denying requests to terminate the processing of personal information
If there are special regulations in the law or if necessary in order to comply with legal obligations
If there are concerns that another person's life or physical body might be harmed or if there are concerns that another person's assets or other benefits will be infringed upon
If complying with the request will make it difficult to fulfill the agreement, such as if the service that was agreed upon with the information owner cannot be provided if personal information is not processed, and the information owner has not explicitly expressed their intent to cancel the agreement

③ If the user has requested the Company to correct or delete their personal information due to an error, the Company shall not use or provide the relevant personal information until the correction or deletion is completed.
④ The user shall not infringe upon their own personal information or another person's privacy or personal information that is processed by the company in violation of the Personal Information Protection Act and other relevant laws.

Article 11 [Processing the Personal Information of Children Under 14 Years of Age]

① The Company does not collect personal information from children under 14 years of age. However, in cases where the Company collects personal information from children under 14 years of age, the legal representative may withdraw consent to the collection, use, or provision of the personal information of a child under 14 years of age, and they may request to view the personal information that was provided by the child or request corrections in the event of any errors.
② If the legal representative of a child under 14 years of age requests to view information or requests verification through the phone or in writing, the Company shall verify whether or not the person who is making the request is truly the child's legal representative by receiving proof, such as a power of attorney, seal certificate, copy of the identification of the person making the request and representative to prove the relationship between the member and their legal representative..

Article 12 [Measures to Secure Safety of Personal Information]

The Company takes the following measures to secure the safety of personal information.

Administrative Measures: Establish and enforce internal management plans, regular employee training
Technical Measures: Manage access permissions to the personal information processing system, password encryption, install security programs, etc.
Physical Measures: Control access to the data storage room

Article 13 [Personal Information Protection Manager and Person-in-Charge]

The user may report all civil complaints related to personal information that occur while using the Company's services to the personal information protection manager or department-in-charge below. The Company shall provide a detailed response to the user's report as quickly as possible.
1. Personal Information Protection Manager
Name: Yeong-Gil Kim
Phone: 02) 1670-8050
Position: Personal Information Protection Manager
E-mail: support@zigzag.kr
2. Department in Charge of Personal Information Protection
Department Name: Security Team
Phone 02) 1670-8050
E-mail: support@zigzag.kr

Article 14 [How to Get Assistance for Rights and Interest Infringements]

The user may request assistance or consultation regarding any infringement of their personal information from the organizations in the following subparagraphs. The following institutions are independent from the Company, and the user may contact them if they are unsatisfied with the results of the Company's attempts to process personal information complaints or provide assistance, or if more detailed assistance is necessary.

Personal Information Infringement Report Center (Operated by Korea Internet & Security Agency)
Matters under jurisdiction: Report facts related to infringement of personal information, request consultation
Website:privacy.kisa.or.kr
Phone: (No area code) 118
Address: Personal Information Infringement Report Center, 3F, 9 Jingheung-gil, Naju-si, Jeonnam (58324) (301-2 Bitgaram-dong)
Personal Information Dispute Mediation Committee (Operated by Korea Internet & Security Agency)
Matters under jurisdiction: Request personal information dispute mediation, group dispute mediation (civil resolution)
Website:www.kopico.go.kr
Phone: 1833-6972
Address: Personal Information Dispute Mediation Committee, Government Complex Seoul 4F, 209 Sejong-daero, Jongno-gu, Seoul 03171
Supreme Prosecutors' Office, Cyber Bureau 1301 (spo.go.kr)
National Police Agency, Cyber Security 182 (police.go.kr/www/security/cyber.jsp)

Article 15 [Exemptions to the Privacy Policy]

The Company may provide the user with links to other websites or materials through the website. In such cases, the Company has no control over external websites and materials, hence the Company's privacy policy is not applicable to the collection of personal information on such websites. Therefore, if the user is redirected to another website by clicking on a link that was provided by the Company, the user is responsible for reading the relevant website's privacy policy.

Addenda

These Terms of Service shall be in force beginning 2022.02.14.

Check the previous User Privacy Policy

User Privacy Policy (2022-01-04 ~ 2022-02-13)