WithU (hereinafter referred to as the “Site”), operated by HJPMC Co., Ltd., complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws and regulations. The Site establishes and publishes this Privacy Policy to protect Users’ personal information and to promptly and efficiently address complaints and inquiries relating to personal information.
Article 1 (Purposes of Processing Personal Information)
The Site processes personal information for the following purposes. Personal information being processed shall not be used for purposes other than those specified below. If the purposes of use are changed, the Site shall take necessary measures in accordance with applicable laws and regulations.
- Receiving and Responding to Inquiries — Identifying and responding to User inquiries and handling complaints
- Site Operation and Management — Providing stable Services and preventing service disruptions and unauthorized use
- Service Improvement and Statistics — Analyzing Site usage and improving Content and Services
Article 2 (Categories of Personal Information Processed)
The Site may process the following personal information in the course of providing the Services.
- When an inquiry is submitted
- Name
- Email address
- Details of the inquiry
- Information that may be automatically generated and collected during use of the Site
- IP address
- Cookies
- Access logs
- Service usage records
※ If additional information, such as a mobile phone number, is collected during the inquiry process, the relevant categories will be reflected in this Privacy Policy.
Article 3 (Processing and Retention Period of Personal Information)
① The Site processes and retains personal information for the period necessary to achieve the purposes for which the information is processed.
② The specific processing and retention periods are as follows.
| Category | Retention Period |
|---|---|
| Information relating to inquiries and responses | Until the response to the inquiry and any necessary follow-up have been completed |
| Access logs and Service usage records | Retained for the period necessary for Service operation and security, and then deleted |
③ Where applicable laws and regulations require personal information to be retained for a specified period, such information shall be retained for the period prescribed by such laws and regulations.
Article 4 (Procedures and Methods for Destruction of Personal Information)
① When the retention period has expired or the purpose of processing has been achieved and the personal information is no longer necessary, the Site shall destroy such personal information without undue delay.
② If personal information must continue to be retained pursuant to other laws and regulations, such information shall be stored and managed separately from other personal information.
③ Personal information shall be destroyed using the following methods.
- Electronic Files — Securely deleted using methods that prevent restoration or recovery.
- Paper Documents — Destroyed by shredding or incineration.
Article 5 (Provision of Personal Information to Third Parties)
As a general rule, the Site does not provide Users’ personal information to third parties.
However, personal information may be provided to the extent necessary where permitted under the Personal Information Protection Act of the Republic of Korea, including where the data subject has given consent or where there is a specific provision under applicable laws and regulations.
Article 6 (Entrustment of Personal Information Processing)
The Site entrusts the following personal information processing activities to third parties for the efficient provision of the Services.
| Service Provider | Entrusted Services | Retention and Use Period |
|---|---|---|
| Cafe24 Corp. | Website server operation and system management (hosting) | Until termination of the outsourcing agreement |
When entering into an outsourcing agreement, the Site specifies necessary matters in the agreement or other relevant documents in accordance with applicable laws and regulations to ensure that personal information is securely managed, and supervises and monitors the service provider’s handling of personal information.
If the scope of the entrusted services or the service provider changes, such changes will be disclosed through this Privacy Policy.
Article 7 (Cross-Border Transfer of Personal Information)
The Site does not currently transfer Users’ personal information outside the Republic of Korea.
If a cross-border transfer of personal information occurs, the Site shall disclose the information required under applicable laws and regulations, including the categories of personal information transferred, the destination country, the recipient, the purpose of transfer, and the retention period, and shall complete all legally required procedures.
Article 8 (Measures to Ensure the Security of Personal Information)
The Site takes the following measures to ensure the security of personal information.
- Administrative Measures — Establishment and implementation of internal management plans for personal information, and management and training of personnel handling personal information
- Technical Measures — Management of access rights and access controls for personal information processing systems, retention and management of access records, and installation and inspection of security programs
- Physical Measures — Access controls for facilities and systems in which personal information is stored
Article 9 (Installation and Operation of Automatic Personal Information Collection Tools and the Right to Refuse Their Use)
① The Site may use cookies that store and retrieve usage information from time to time for purposes such as analyzing Site usage and improving the Services.
② Cookies are small amounts of information sent by a website server to a User’s web browser and may be stored on the User’s device. The Site may use cookies to understand matters such as frequency of access, visit duration, and patterns of Service use.
③ Users may allow or refuse the storage of cookies through their web browser settings and may delete previously stored cookies.
④ If a User refuses the storage of cookies, the use of certain Services that require cookies may be restricted.
- Example settings for Chrome — Settings > Privacy and security > Third-party cookies / Delete browsing data
Article 10 (Rights and Obligations of Data Subjects and Legal Representatives and Methods of Exercising Rights)
① In accordance with applicable laws and regulations, data subjects may exercise rights regarding their personal information, including the right to access, correct or delete, suspend processing, and withdraw consent.
② Rights relating to the personal information of children under the age of 14 may be exercised by their legal representatives in accordance with applicable laws and regulations.
③ Requests to exercise rights relating to personal information may be submitted in writing, by email, or through other methods provided by the Site. The Site shall take necessary measures in accordance with applicable laws and regulations.
④ A data subject may exercise his or her rights through a legal representative or a duly authorized representative.
⑤ The exercise of rights by a data subject may be restricted where permitted by applicable laws and regulations.
Article 11 (Chief Privacy Officer)
① The Site has designated the following Chief Privacy Officer to oversee matters relating to the processing of personal information and to handle inquiries, complaints, requests for relief, and other matters relating to personal information.
| Category | Details |
|---|---|
| Chief Privacy Officer and Person in Charge | Min-gu Kang |
| Telephone | 031-589-0570 |
| min9@hjpmc.studio |
② Data subjects may contact the above Chief Privacy Officer regarding inquiries, complaints, requests for relief, requests for access to personal information, and other matters relating to personal information arising from the use of the Site. The Site shall take necessary measures in accordance with applicable laws and regulations.
Article 12 (Remedies for Infringement of Personal Information Rights)
Data subjects may contact the following organizations to seek dispute resolution, consultation, or other remedies in relation to personal information infringement.
- Personal Information Dispute Mediation Committee — 1833-6972
- Personal Information Infringement Report Center — 118
- Supreme Prosecutors’ Office — 1301
- Korean National Police Agency — 182
The above organizations are independent of the Site and may be contacted where consultation or dispute mediation relating to personal information infringement is required.
Article 13 (Changes to the Privacy Policy)
① This Privacy Policy shall take effect on August 29, 2026.
② If this Privacy Policy is amended, the Site shall disclose the details of the changes and their effective date through the Site.
③ This is the first Privacy Policy established by the Site and there is no previous version. If this Privacy Policy is amended in the future, the Site will make the revision history available to Users.