Kakao Style Co., Ltd. (hereafter "Company") establishes and discloses the following privacy policy in order to protect the personal information of users and to quickly and efficiently process relevant issues.
The Company collects and uses the personal information of users for the following purposes. The personal information that is processed shall not be used for any other purposes aside from the following, and in the event of any changes in these purposes, the necessary measures shall be taken, such as obtaining additional consent.
[ZIGZAG]
| Service | Purpose of Processing | Collected Items |
|---|---|---|
| Web or app member registration and management (Management and registration through e-mail) |
Personal identification according to the provision of a membership system service, verify intent to register, take measures to restrict usage by members who violate the terms of use, registration and restricting the number of times a person can register, restrict delinquent service use, prevent unauthorized use, retain records to process issues and mediate disputes, deliver announcements, verify intent to delete account, Prevention of fraudulent sign-ups, fraudulent use, etc. | (Required) Name, ID (e-mail address), password, mobile phone number, cookies (collected automatically) |
| Web or app member registration and management (Management and registration through Kakao Sync) |
Personal identification according to the provision of a membership system service, verify intent to register, take measures to restrict usage by members who violate the terms of use, registration and restricting the number of times a person can register, restrict delinquent service use, prevent unauthorized use, retain records to process issues and mediate disputes, deliver announcements, verify intent to delete account, Prevention of fraudulent sign-ups, fraudulent use, etc. | (Required) Kakao account (e-mail or phone number), profile information (nickname, profile photo) (Optional) Gender, year of birth, date of birth, Kakao channel addition status and history, age range |
| Web or app member registration and management (Management and registration through Apple Login) |
Personal identification according to the provision of a membership system service, verify intent to register, take measures to restrict usage by members who violate the terms of use, registration and restricting the number of times a person can register, restrict delinquent service use, prevent unauthorized use, retain records to process issues and mediate disputes, deliver announcements, verify intent to delete account, Prevention of fraudulent sign-ups, fraudulent use, etc. | (Required) ID (e-mail address), password, mobile phone number, cookies (collected automatically) |
| Web or app member registration and management (Management and registration through Facebook) |
Personal identification according to the provision of a membership system service, verify intent to register, take measures to restrict usage by members who violate the terms of use, registration and restricting the number of times a person can register, restrict delinquent service use, prevent unauthorized use, retain records to process issues and mediate disputes, deliver announcements, verify intent to delete account, Prevention of fraudulent sign-ups, fraudulent use, etc. | (Required) Name, E-mail, profile photo |
| Web or app member registration and management (Management and registration through Google) |
Personal identification according to the provision of a membership system service, verify intent to register, take measures to restrict usage by members who violate the terms of use, registration and restricting the number of times a person can register, restrict delinquent service use, prevent unauthorized use, retain records to process issues and mediate disputes, deliver announcements, verify intent to delete account, Prevention of fraudulent sign-ups, fraudulent use, etc. | (Required) Name, E-mail, profile photo, mobile phone number, cookies (collected automatically) |
| Provide services on Zigzag under a different name that are operated by the Company and develop new services | Develop new services, provide customized services, provide services and post advertisements according to demographic statistics, verify the validity of services, provide event and advertisement information and offer opportunities to participate, assess access frequency, statistics on members' service utilization, prevent the collection of information on children under 14 years of age, prevent unauthorized use | (Required) Age, date and time of visit, IP address, cookies and other service usage records and device information |
| Process issues | Verify the identity of the person who filed the civil complaint, verify the civil complaint details, contact or send notifications to investigate the facts, send notifications on the results | (Required) Orderer's contact information, orderer's name, depositor's name, order number |
| User product purchases | Process payments and perform shipping tasks | (Required) Name, mobile phone number, address, e-mail, product purchase information (card payment information, bank account information (if a bank deposit was made)), recipient information (name, phone number, mobile phone number, recipient's address) |
| Identity verification | Verify identity | (Required) Name, date of birth, gender, CI, DI, mobile phone number (for mobile phone verification) |
| Receive refunds | Fulfill contract (refund) when a refund is received | (Required) Accountholder, bank, bank account number |
| Body type information usage | Recommend sizes and post product reviews through body type information | (Optional) Height, weight, top/bottom size, shoe size, skin |
| Sending promotional information (Event information, etc.) |
Sending promotional information (Event information, etc.) via phone, text, KakaoTalk, e-mail, etc. | (Optional) E-mail, mobile phone number |
| Easy Pay services | Provide account deposit services when Easy Pay services are used | (Required) Bank name, bank account number, Easy Pay password |
| Zigzag referral rewards | Issue Zigzag referral rewards and send notifications on reward history | (Required) Individual: Phone number, e-mail, resident registration number, accountholder, bank name, bank account number Business: Phone number, e-mail, business registration number, bank name, bank account number |
| Service Provision (Web) Customized Service Provision |
Customized Advertisement Provision | (Optional) E-mail address, cookie ID, Google Analytics data, user ID, client ID (device ID), advertising ID (ADID/IDFA), and postal code |
| Overseas Purchase Service | Overseas Purchase Import Declaration | (Required) Personal Customs Clearance Code |
[Posty]
| Service | Purpose of Processing | Collected Items |
|---|---|---|
| Web or app member registration and management (Management and registration through e-mail) |
Personal identification according to the provision of a membership system service, verify intent to register, take measures to restrict usage by members who violate the terms of use, registration and restricting the number of times a person can register, restrict delinquent service use, prevent unauthorized use, retain records to process issues and mediate disputes, deliver announcements, verify intent to delete account, Prevention of fraudulent sign-ups, fraudulent use, etc. | (Required) Name, ID (e-mail address), password, mobile phone number, cookies (collected automatically) |
| Web or app member registration and management (Management and registration through Kakao Sync) |
Personal identification according to the provision of a membership system service, verify intent to register, take measures to restrict usage by members who violate the terms of use, registration and restricting the number of times a person can register, restrict delinquent service use, prevent unauthorized use, retain records to process issues and mediate disputes, deliver announcements, verify intent to delete account, Prevention of fraudulent sign-ups, fraudulent use, etc. | (Required) Kakao account (e-mail or phone number), profile information (nickname, profile photo) (Optional) Gender, year of birth, date of birth, Kakao channel addition status and history, age range |
| Web or app member registration and management (Management and registration through Apple Login) |
Personal identification according to the provision of a membership system service, verify intent to register, take measures to restrict usage by members who violate the terms of use, registration and restricting the number of times a person can register, restrict delinquent service use, prevent unauthorized use, retain records to process issues and mediate disputes, deliver announcements, verify intent to delete account, Prevention of fraudulent sign-ups, fraudulent use, etc. | (Required) ID (e-mail address), password, mobile phone number, cookies (collected automatically) |
| Provide services on Posty under a different name that are operated by the Company and develop new services | Develop new services, provide customized services, provide services and post advertisements according to demographic statistics, verify the validity of services, provide event and advertisement information and offer opportunities to participate, assess access frequency, statistics on members' service utilization, prevent the collection of information on children under 14 years of age, prevent unauthorized use | (Required) Age, date and time of visit, IP address, cookies and other service usage records and device information |
| Process issues | Verify the identity of the person who filed the civil complaint, verify the civil complaint details, contact or send notifications to investigate the facts, send notifications on the results | (Required) Orderer's contact information, orderer's name, depositor's name, order number |
| User product purchases | Process payments and perform shipping tasks | (Required) Name, mobile phone number, address, e-mail, product purchase information (card payment information, bank account information (if a bank deposit was made)), recipient information (name, phone number, mobile phone number, recipient's address) |
| Identity verification | Verify identity | (Required) Name, date of birth, gender, CI, DI, mobile phone number (for mobile phone verification) |
| Receive refunds | Fulfill contract (refund) when a refund is received | (Required) Accountholder, bank, bank account number |
| Body type information usage | Recommend sizes and post product reviews through body type information | (Optional) Height, weight, top/bottom size, shoe size |
| Sending promotional information (Event information, etc.) |
Sending promotional information (Event information, etc.) via phone, text, KakaoTalk, e-mail, etc. | (Optional) E-mail, mobile phone number |
[fashionbykakao]
| Service | Purpose of Processing | Collected Items |
|---|---|---|
| Web or app member registration and management (Management and registration through Kakao Sync) |
Personal identification according to the provision of a membership system service, verify intent to register, take measures to restrict usage by members who violate the terms of use, registration and restricting the number of times a person can register, restrict delinquent service use, prevent unauthorized use, retain records to process issues and mediate disputes, deliver announcements, verify intent to delete account, Prevention of fraudulent sign-ups, fraudulent use, etc. | (Required) Kakao account (e-mail or phone number), profile information (nickname, profile photo) (Optional) Gender, year of birth, date of birth, Kakao channel addition status and history, age range |
| Provide services on Fashionbykakao under a different name that are operated by the Company and develop new services | Develop new services, provide customized services, provide services and post advertisements according to demographic statistics, verify the validity of services, provide event and advertisement information and offer opportunities to participate, assess access frequency, statistics on members' service utilization, prevent the collection of information on children under 14 years of age, prevent unauthorized use | (Required) Age, date and time of visit, IP address, cookies and other service usage records and device information |
| Process issues | Verify the identity of the person who filed the civil complaint, verify the civil complaint details, contact or send notifications to investigate the facts, send notifications on the results | (Required) Orderer's contact information, orderer's name, depositor's name, order number |
| User product purchases | Process payments and perform shipping tasks | (Required) Name, mobile phone number, address, e-mail, product purchase information (card payment information, bank account information (if a bank deposit was made)), recipient information (name, phone number, mobile phone number, recipient's address) |
| Identity verification | Verify identity | (Required) Name, date of birth, gender, CI, DI, mobile phone number (for mobile phone verification) |
| Receive refunds | Fulfill contract (refund) when a refund is received | (Required) Accountholder, bank, bank account number |
| Sending promotional information (Event information, etc.) |
Sending promotional information (Event information, etc.) via phone, text, KakaoTalk, e-mail, etc. | (Optional) E-mail, mobile phone number |
| Service Usage | Customized Service Provision | (Optional) Gender, age (year of birth) |
| Event Management | Sending prizes and processing taxes | (Required) For shipping products: Name, address, and phone number For mobile coupon products: Mobile phone number For tax processing when prize value exceeds 50,000 won: Name, phone number, email, address, resident registration number |
In accordance with legal obligations, the user's personal information, including the resident registration number, will be collected and used without consent.
| Service | Purpose of Processing | Collected Items | Applicable Laws |
|---|---|---|---|
| Handling income tax, value-added tax, etc. | Managing public charges and taxes (withholding tax, etc.) and issuing tax invoices | Name and resident registration number | Obligations to issue receipts for withholding tax related to business income and to submit payment statements, etc.: Income Tax Law Article 144, Article 164, etc. Obligations to issue receipts for withholding tax related to other incomes and to submit payment statements, etc.: Income Tax Law Article 145, Article 164, etc. Related to the issuance of tax invoices: Value Added Tax Law Article 32 Paragraph 1 Subparagraph 2 Related to withholding tax by the obligated party for withholding tax: Enforcement Decree of the Framework Act on National Taxes Article 68 Paragraph 3 |
① When a user agrees to the collection of personal information and enters their personal information during the account creation process and while using services, the Company shall collect the information.
② If a user gets consultation or sends an inquiry to the Company through various means, such as through the web, app page, e-mail, fax, phone, etc. during the process of getting consultation through the customer service center, their personal information may be collected.
③ Personal information may be provided from other companies or organizations that are partnered with the company; in such cases, the partner company must receive consent from the user to provide personal information.
④ Information that was generated through login analyses may be collected during the process of using the Company's services, and information, etc. may be automatically collected through cookies.
① The Company operates "sessions" or "cookies" that continuously store and find user information in order to provide services that are customized for the user.
② If users deny cookies, they may have difficulty using some services that require them to log in.
Additionally, the company provides a dedicated page to safeguard user rights in line with the "Guidelines for Protection of Personal Information in Online Behavioral Advertising."
Information on Personalized Advertisements
Article 4 [Information on Access Permissions]
① The company may access and use information and features in the customer's mobile communications device as follows for the mobile app service.
② Users shall be notified of required access items when they install the app or when they run the app for the first time. For optional access items, consent shall be obtained separately upon using the relevant service for the first time. For optional access items, the method of obtaining consent may differ depending on the operation system version, and there will be no restrictions when using basic services even if access is denied.
① The Company shall only process the users' personal information up to the scope that was stipulated, and shall provide personal information to 3rd parties only with consent from the user or in cases where there are special regulations in the law.
② If necessary to fulfill a transaction, such as shipping through the Z Payment service, the company may provide the following personal information in accordance with the appropriate legal procedures, such as obtaining consent from the user.
| Persons who receive the personal information | Information Recipient's Purpose of Use | Personal Information Items Provided | Retention Period |
|---|---|---|---|
| Company that provides products that are shipped (View Details) |
To provide services (Shipping products that were purchased by the user, providing customer consultations, customer service, and processing complaints) | Name, mobile phone number, address, e-mail, product purchase information (card payment information, bank account information (for bank deposits)), recipient information (name, mobile phone number, shipping address, e-mail) | Period of service provision (If it is necessary to retain information in accordance with relevant laws or if prior consent was obtained, the corresponding period will be followed) |
| Kakao Corp. | Use for processing of data analysis and statistics within Kakao services, providing personalized content recommendations, and marketing | Service usage history, including items in the shopping bag, purchase and payment history, etc. | Destroyed immediately upon cancellation of subscription or withdrawal of consent |
| NBT Inc. | Provision of offerwall services | User hash ID, advertising ID (ADID or IDFA), date of birth, and gender | Period of service provision (If it is necessary to retain information in accordance with relevant laws or if prior consent was obtained, the corresponding period will be followed) |
| Spain Shop | Direct Overseas Purchase Import Declaration | Personal Customs Clearance Code | Period of service provision (If it is necessary to retain information in accordance with relevant laws or if prior consent was obtained, the corresponding period will be followed) |
The company may disclose personal information to relevant authorities without the individual's consent in cases of emergencies, such as natural disasters, infectious diseases, situations posing immediate threats to life or physical well-being, or potential significant property loss.
Kakao Style Co., Ltd. consigns certain tasks that are necessary to provide services to the following external companies.
| Consignee for Personal Information Processing Tasks | Task Details | Period of Retention and Utilization of Personal Information |
|---|---|---|
| NICE Payments Co., Ltd. KG INICIS Co., Ltd. |
Processing payments (Mobile phone, bankbook-free deposits, credit card, other payment method, refund account verification) and theft prevention | Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| Delivus Co., Ltd. Kakao Mobility Corp. Dealicious Inc. cherground |
Processing of personal information such as name, address, and contact information for delivery of goods and related logistics services | Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| Lotte Global Logistics Co., Ltd. | Provision of overseas delivery (express delivery) services (Receiving, warehousing, shipping, delivery, customs clearance, and return shipping of goods purchased by users) |
Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| DHL(DHL Express) | Provision of overseas delivery (express delivery) services (Receiving, shipping, delivery, customs clearance, and return shipping of goods purchased by users) |
Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| CJ Logistics Corporation | Tasks related to online order collection and operation Tasks related to CS processing arising from the online logistics agency service |
Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| Goodsflow Co. Ltd. | Shipping products, providing return collection information | Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| Kakao Corp. | Operation of infrastructure, provision of payment services, and processing of data analysis and statistics Providing personalized content recommendation services, service operating agency, and sending KakaoTalk messages |
Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| Korea Employment Information Service MetaM Co., Ltd. |
All call center tasks, including customer and order information usage management | Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| GS Neotek Co., Ltd. | Management of GENESYS, ZENDESK, and WiseN SMS operations for the CS center | Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| Korea Mobile Certification Inc. | Identity Verification | Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| Hecto Financial Co., Ltd. | Processing payments through Easy Pay accounts Payment and settlement of Zigzag Share Rewards |
Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| Amazon Web Service | Operating and managing domestic cloud servers | Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| KNET Corp. | Issuing and managing electronic tax invoices | Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| BusinessOn Communication Co., Ltd. | Automated collection of invoice (tax) data and SAP integration | Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| Kakao Enterprise Corp Daou Technology Inc. |
Send text messages | Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| AB180 Inc. | For marketing and operation notification through sending CRM/information related to Braze service use (app push notifications, text messages, e-mails, messenger notifications) | Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| Opensurvey Inc. | Customer satisfaction survey and consulting on service improvement direction | Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
| EXIMBAY Co., Ltd | Payment processing (foreign credit cards, Japanese convenience store payments) and theft prevention | Until the member deletes their account or until the consignment contract ends However, if it is necessary to retain information in accordance with relevant laws, information shall be retained for the applicable period. |
Matters related to the overseas transfer of personal information
| Recipient | Transfer Country | Transfer Time and Method | Transferred Information | Purpose of Use | Retention and Usage Period | Contact |
|---|---|---|---|---|---|---|
| Braze, Inc | United States | Transmitted through a private established network | Name, e-mail, date of birth, device-related information, and information related to service use | Send CRM | When contract expires | contact@ab180.co |
| Zendesk | Australia | Transmitted through a private established network | Name, e-mail address, phone number, and inquiry details | Processing of inquiry | 3 years or when the contract expires | Euprivacy@zendesk.com privacy@zendesk.com |
| Spain Shop | Spain | Provide via system (online) upon payment completion | Orderer Information (Name, ID (email address), mobile number), recipient information (name, postal code, delivery address, mobile number), delivery note, PCCC, and purchase information. | For handling shipping/refund/exchange, order management, customs clearance, customer consultation, and complaint resolution. | Service provision period (If it is necessary to retain information in accordance with relevant laws or if prior consent was obtained, the corresponding period will be followed) | spainshop@naver.com |
① The Company processes and retains personal information for the personal information retention/usage period that was consented to upon collecting personal information from the user or the personal information retention/usage period in accordance with relevant laws. If the information that was entered by the user (contact information, shipping address) is confirmed to be inaccurate during the process of providing services, the company may immediately discard the information in order to prevent the violation of a 3rd party's rights and benefits and to keep information updated.
② The Company's personal information processing and retention period is as follows.
| Relevant Law | Retained Information | Retained Items | Retention Period |
|---|---|---|---|
| The Act on the Consumer Protection in Electronic Commerce, Etc. | Records regarding indications and advertisements | Advertisement records, etc. | 6 months |
| The Act on the Consumer Protection in Electronic Commerce, Etc. | Records on the withdrawal of contracts or subscriptions: | Member identification information, records on the withdrawal of contracts or subscriptions, etc. | 5 years |
| The Act on the Consumer Protection in Electronic Commerce, Etc. | Records pertaining to payment and the supply of goods | Member identification information, records on the withdrawal of contracts or subscriptions, etc. | 5 years |
| The Act on the Consumer Protection in Electronic Commerce, Etc. | Records pertaining to processing consumer complaints and disputes | Member identification information, records pertaining to processing of disputes, etc. | 3 years |
| Protection of Communications Secrets Act | Communication facts verification information | Log records, IP, etc. | 3 months |
| Framework Act on National Taxes | Ledgers and documentary evidence on all transactions set forth by the Tax Act | Ledgers and documentary evidence on corporate taxes, incomes taxes, and value added taxes, etc. | 5 years |
③ To protect the personal information of users who have not used the service for an extended period of time (at least 1 year), the Company stores their personal information separately from the information of other users in accordance with Article 21 and Article 39-2 of the Personal Information Protection Act.
① In general, the personal information of users is immediately discarded once the purpose of collection and use is achieved.
② Personal information shall be transferred to a separate database or stored in a separate storage site if the information must be stored in accordance with relevant laws even after the purpose has been achieved or even after the retention period that was agreed upon by the user has passed.
③ The personal information disposal process and method are as follows.
① The user may request the Company to exercise the following rights regarding personal information protection at any time.
② The Company may restrict or deny requests to view or terminate the processing of personal information for the following reasons, and they shall immediately notify the user of the reason.
③ If the user has requested the Company to correct or delete their personal information due to an error, the Company shall not use or provide the relevant personal information until the correction or deletion is completed.
④ The user shall not infringe upon their own personal information or another person's privacy or personal information that is processed by the company in violation of the Personal Information Protection Act and other relevant laws.
Article 10 [Your California Privacy Rights]
This section describes your rights under the California Consumer Privacy Act (“CCPA”) and how to exercise those rights.
Description of Your Rights
① Right to request access
You have the right to request the following information from us.
A. Specific pieces of personal information we have about you
B. Categories of personal information we have collected about you
C. Categories of sources from which the personal information is collected
D. Categories of personal information sold or disclosed (if any)
E. Categories of third parties with whom the personal information was sold or disclosed
F. The purpose(s) for collecting or selling the personal information.
② Right to delete
You have the right to request that we delete the personal information we have collected about you.
③ Right to opt-out of the sale
You have the right to direct us to not sell your personal information.
④ Right not to be Non-Discrimination against for exercising the rights identified above:
You have the right not to be denied goods or services, charged different prices or rates for goods or services, or receive a differing level of quality of goods or services as a result of exercising the above rights.
How to Submit a Request
You or your authorized agent may submit a CCPA request using one of the following methods:
We will confirm receipt of your request within 10 business days and will respond to your request within 45 calendar days, after proper verification, unless we need additional time, in which case we will let you know.
① The Company does not collect personal information from children under 14 years of age. However, in cases where the Company collects personal information from children under 14 years of age, the legal representative may withdraw consent to the collection, use, or provision of the personal information of a child under 14 years of age, and they may request to view the personal information that was provided by the child or request corrections in the event of any errors.
② If the legal representative of a child under 14 years of age requests to view information or requests verification through the phone or in writing, the Company shall verify whether or not the person who is making the request is truly the child's legal representative by receiving proof, such as a power of attorney, seal certificate, copy of the identification of the person making the request and representative to prove the relationship between the member and their legal representative.
The Company takes the following measures to secure the safety of personal information.
The user may report all civil complaints related to personal information that occur while using the Company's services to the personal information protection manager or department-in-charge below. The Company shall provide a detailed response to the user's report as quickly as possible.
The user may request assistance or consultation regarding any infringement of their personal information from the organizations in the following subparagraphs. The following institutions are independent from the Company, and the user may contact them if they are unsatisfied with the results of the Company's attempts to process personal information complaints or provide assistance, or if more detailed assistance is necessary.
The Company may provide the user with links to other websites or materials through the website. In such cases, the Company has no control over external websites and materials, hence the Company's privacy policy is not applicable to the collection of personal information on such websites. Therefore, if the user is redirected to another website by clicking on a link that was provided by the Company, the user is responsible for reading the relevant website's privacy policy.
These Terms of Service shall be in force beginning 2023.10.20.