Privacy policy

Article 1 (Purpose)

Medley (hereinafter referred to as the "Company") establishes this Privacy Policy (hereinafter referred to as the "Policy") in order to comply with the relevant laws such as the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection (hereinafter referred to as the "Information and Communications Network Act"), to protect the personal information (hereinafter referred to as "Personal Information") of individuals (hereinafter referred to as "Users" or "Individuals") using the services provided by the Company (hereinafter referred to as "Company Services"), and to promptly and smoothly handle any grievances related to the protection of personal information of service users.

 

Article 2 (Principles of Personal Information Processing)

In accordance with laws related to personal information and this Policy, the Company may collect personal information from Users. Collected personal information may be provided to third parties only with the individual's consent. However, if required by applicable laws and regulations, the Company may provide the collected personal information of Users to third parties without prior consent.

 

Article 3 (Disclosure of This Policy)

The Company discloses this Policy through the main screen of its homepage or a linked screen from the main screen so that Users can easily check it at any time.

When disclosing this Policy in accordance with Paragraph 1, the Company shall use font sizes, colors, etc., to ensure Users can easily verify the Policy.

 

Article 4 (Changes to This Policy)

This Policy may be revised in accordance with changes in personal information-related laws, guidelines, notifications, or changes in the policies or contents of government or Company Services.

When revising this Policy pursuant to Paragraph 1, the Company shall notify Users through one or more of the following methods:

  1. Notification through a notice section on the main screen of the Company's homepage or a separate pop-up window

  2. Notification to Users via written document, fax, email, or similar methods

The Company shall notify the changes at least 7 days prior to the effective date. However, if there is a significant change to Users' rights, the notification will be made at least 30 days in advance.

 

Article 5 (Information for Membership Registration)

For the purpose of membership registration to the Company Services, the Company collects the following information:

Required Information: Email address, password, name, nickname, date of birth, and mobile phone number

 

Article 6 (Information for Identity Verification)

For the purpose of identity verification, the Company collects the following information:

Required Information: Mobile phone number, email address, name, date of birth, gender, mobile carrier, and nationality (Korean/foreign)

 

Article 7 (Information for Payment Services)

To provide the Company’s payment services, the Company collects the following information:

Required Information: Card number, card password, expiration date, 6-digit date of birth (yy/mm/dd), and bank name

 

Article 8 (Information for Providing Company Services)

To provide the Company’s services to Users, the Company collects the following information:

Required Information: ID, email address, name, date of birth, and contact information

 

Article 9 (Information for Service Use and Misuse Monitoring)

To collect statistics, conduct analysis based on service usage, and detect/analyze fraudulent activities (such as repeated re-registration after withdrawal, purchase and cancellation of products to unlawfully obtain economic benefits such as discount coupons or event benefits, or other unlawful activities prohibited under the Terms of Service), the Company collects the following information:

Required Information: Service usage records, cookies, and access location information

 

Article 10 (Methods of Personal Information Collection)

The Company collects personal information through the following methods:

  1. When a User enters their information on the Company homepage

  2. When a User enters their information via applications or services provided outside the homepage

  3. When a User inputs information through emails sent by the Company

  4. When a User provides information while using customer service, message boards, etc.

 

Article 11 (Use of Personal Information)

The Company uses personal information in the following cases:

  1. When necessary for Company operation, such as delivering notices

  2. For responding to inquiries, handling complaints, and improving services

  3. For providing the Company’s services

  4. For restricting use of services by members who violate laws or terms of service

  5. For the development of new services

  6. For marketing purposes, including event notifications

  7. For demographic analysis and service usage analysis

  8. For forming connections among Users based on personal information and interests

 

Article 12 (Retention and Use Period of Personal Information)

The Company retains and uses Users’ personal information during the period required to achieve the purpose of collection and use.

Notwithstanding the above, information related to service misuse is retained for up to 1 year after membership withdrawal to prevent unauthorized use or re-registration.

 

Article 13 (Retention and Use Period in Accordance with Laws)

The Company retains and uses personal information as required by relevant laws:

Under the Act on Consumer Protection in Electronic Commerce:

  • Records on contracts or withdrawal: 5 years

  • Records on payment and supply of goods: 5 years

  • Records on consumer complaints or disputes: 3 years

  • Records on display/advertising: 6 months

Under the Protection of Communications Secrets Act:

  • Website log records: 3 months

Under the Electronic Financial Transactions Act:

  • Records on electronic financial transactions: 5 years

Under the Act on the Protection and Use of Location Information:

  • Records on personal location information: 6 months

 

Article 14 (Principle of Personal Information Destruction)

In principle, the Company promptly destroys personal information when the purpose of processing has been achieved or the retention/use period has expired.

 

Article 15 (Procedure for Destruction of Personal Information)

Information entered by the User for membership registration, etc., is transferred to a separate database (or stored in a separate file cabinet in the case of paper) after the purpose of processing is achieved and stored for a certain period in accordance with internal policy and relevant laws before being destroyed.

The Company destroys personal information after obtaining approval from the personal information protection officer.

 

Article 16 (Method of Personal Information Destruction)

Electronically stored personal information is deleted using technical methods that render the records irrecoverable. Printed personal information is shredded or incinerated.

 

Article 17 (Measures for Sending Advertising Information)

The Company obtains explicit prior consent before sending advertising information for profit via electronic transmission. However, the following cases are exempt:

  • If the Company has directly collected contact information through a transaction and sends advertising information related to similar goods/services within 6 months of the transaction

  • If a door-to-door sales caller under the Act on Door-to-Door Sales informs the recipient of the data source and solicits via voice

Even in the above cases, if the recipient opts out or withdraws consent, the Company does not send further advertising and informs the recipient of the result.

The Company obtains separate prior consent before sending advertising via electronic means between 9:00 PM and 8:00 AM.

Advertising messages include:

  • Company name and contact information

  • How to opt out or withdraw consent

The Company does not take the following actions when sending advertising messages:

  • Obstructing or avoiding opt-out or withdrawal

  • Generating contact info automatically via numbers/symbols/letters

  • Auto-registering contact info for advertising purposes

  • Concealing sender identity or origin

  • Deceiving recipients to induce replies

 

Article 18 (Access to and Withdrawal of Consent for Personal Information Collection)

Users and legal representatives can access or modify their personal information at any time and may request withdrawal of consent for collection.

To withdraw consent, Users or representatives can contact the personal information protection officer by mail, phone, or email. The Company will take prompt action.

 

Article 19 (Correction of Personal Information)

Users may request correction of errors in their personal information using the same method as in the previous article.

Until the correction is completed, the Company will not use or provide the incorrect information. If it was already shared with a third party, the correction result will be promptly communicated.

 

Article 20 (User Responsibilities)

Users must maintain accurate and up-to-date personal information. They are responsible for issues arising from inaccurate information.

Membership using another’s personal information may result in loss of user status or legal penalties.

Users are responsible for maintaining the confidentiality of their email and password and must not transfer or lend them to others.

 

Article 21 (Cookies and Automatic Collection Devices)

The Company uses cookies—small pieces of information sent to the user's web browser from the web server and stored on the user’s device—to provide personalized services.

Users can choose whether to allow cookies. They can allow all, require confirmation for each, or block all cookies via browser settings.

Blocking cookies may hinder use of services requiring login.

 

Article 22 (How to Set Cookie Preferences)

Users can set cookie preferences via browser options:

  • Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data

  • Chrome: Settings > Privacy and security > Cookies and other site data

  • Whale: Settings > Privacy > Cookies and other site data

 

Article 23 (Designation of Personal Information Protection Officer)

To protect personal information and handle related complaints, the Company designates the following department and officer:

Email: info@medleykorea.com

 

Article 24 (Remedies for Rights Infringement)

Data subjects may request resolution or consultation with the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency (KISA) in case of privacy violations. For inquiries:

  • Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)

  • Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)

  • Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)

  • National Police Agency: 182 (ecrm.cyber.go.kr)

The Company endeavors to protect Users' rights and respond to violations. Contact the department mentioned in Article 23 for assistance.

Under the Personal Information Protection Act, individuals may file an administrative appeal if their rights are infringed by actions or omissions of public institutions regarding access (Art. 35), correction/deletion (Art. 36), or suspension of processing (Art. 37):

 

Supplementary Provision

Article 1 This Policy shall take effect from July 1, 2024.

Article 2 In the event of any discrepancy between a translation and the Korean version of these terms and conditions, the Korean version shall prevail.