Kohonjin Republic Co., Ltd. Privacy Policy Kohonjin Republic Co., Ltd.
( hereinafter referred to as the “Company”) establishes and discloses the following Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect users’ personal information and to promptly and smoothly handle grievances related thereto.
The Privacy Policy contains the following information.
1. Purpose of processing personal information
2. Processing and Retention Period of Personal Information
3. Items of personal information processed and methods of collection
4. Matters concerning the processing of personal information of children under the age of 14
5. Matters concerning the provision of personal information to third parties
6. Matters concerning the entrustment of personal information processing
7. Procedures and Methods for Destruction of Personal Information
8. Matters concerning the rights and obligations of the data subject and their legal representative and the method of exercising them
9. Matters concerning measures to ensure the safety of personal information
10. Matters concerning the installation and operation of devices that automatically collect personal information and the refusal thereof
11. Matters concerning the Chief Privacy Officer
12. Remedies for Infringement of the Rights and Interests of Data Subjects
13. Changes to the Privacy Policy
1. Purpose of processing personal information
The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those listed below, and if the purpose of use changes, the Company plans to take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
(1) Website membership registration and management
We process personal information for the purposes of confirming intent to register as a member, identifying and authenticating the user for the provision of membership services, maintaining and managing membership status, preventing fraudulent use of services, verifying consent from a legal representative when processing personal information of children under the age of 14, providing various notices and notifications, and handling grievances.
(2) Provision of goods or services
We process personal information for the purposes of providing content, purchasing and payment of fees, shipping of goods or sending of invoices, providing services, and providing customized services.
(3) Use in marketing and advertising
We process personal information for purposes such as providing event and advertising information and opportunities to participate, identifying access frequency, or statistics on members’ use of the service.
2. Processing and Retention Period of Personal Information
(1) The Company processes and retains personal information within the retention and usage period agreed upon by the data subject at the time of collection. The Company destroys the relevant personal information without delay upon the achievement of the purpose of processing the personal information or upon the data subject’s request to terminate the service. The processing and retention periods for each type of personal information are as follows:
① Website Membership Registration and Management: Until membership withdrawal
② Provision of Goods or Services: Until the completion of the supply of goods or services and the payment and settlement of fees
(2) However, if preservation is required in accordance with the provisions of relevant laws and regulations, the Company retains member information for a certain period as stipulated in the relevant laws and regulations as follows.
① Records regarding contracts or withdrawal of subscription, etc.
– Reason for preservation: Act on the Consumer Protection in Electronic Commerce, etc.
– Retention period: 5 years
② Records regarding payment settlement and supply of goods, etc.
– Reason for preservation: Act on the Consumer Protection in Electronic Commerce, etc.
– Retention period: 5 years
③ Records regarding consumer complaints or dispute resolution
– Reason for preservation: Act on the Consumer Protection in Electronic Commerce, etc.
– Retention period: 3 years
④ Records regarding labeling and advertising
– Reason for preservation: Act on the Consumer Protection in Electronic Commerce, etc.
– Retention period: 6 months
⑤ Service Visit Records
– Reason for preservation: Protection of Communications Secrets Act
– Retention period: 3 months
3. Items of personal information processed and methods of collection
(1) Items of personal information processed
① The Company collects the following personal information for membership registration, consultation, service application, etc.
– When signing up for general membership
Required items: ID, Password, Name, Email, Mobile phone number, Date of birth, (for subscribers under 14 years of age) Legal guardian information
Selectable Item: Gender
– When ordering products
Required items: Order information (Name, Email, Mobile phone), Shipping information (Name, Address, Mobile phone), (For non-member orders) Order lookup password
Selectable item: Landline
– When logging in with Kakao Easy Login
Required field: Name
– When logging in to Naver Easy Login
Required fields: ID, Name, Email
Optional items: Nickname, Birthday
② The following information may be generated and collected during the service usage process or business processing process.
– Service usage records, access logs, cookies, access IP information, payment records, service suspension records, records of improper use
(2) Collection method
– Website, written forms, bulletin boards, email, event entries, delivery requests, telephone, fax, provision from affiliates, collection through information generation tools
4. Matters concerning the processing of personal information of children under the age of 14
(1) When collecting personal information from children under the age of 14, the company obtains the consent of a legal representative and collects the minimum amount of personal information necessary to perform the service.
– Required Items: [List personal information collected through the legal representative consent form]
(2) When collecting personal information of children under the age of 14, the Company may request minimal information from the child, such as the name and contact information of a legal representative, and verify whether a lawful legal representative has consented by one of the following methods.
– A method of requiring a legal representative to indicate whether they consent on an internet site that has posted the consent details, and notifying the legal representative via a text message to their mobile phone that the personal information processor has confirmed the indication of consent.
– A method of requiring a legal representative to indicate whether they consent on an internet site that posts the consent details, and receiving the legal representative’s card information, such as credit cards and debit cards.
– A method of requiring a legal representative to indicate their consent on an internet site that posts the consent details, and verifying their identity through methods such as mobile phone authentication.
– A method of issuing a written document containing the consent directly to the legal representative, or delivering it via mail or fax, and having the legal representative sign and seal the consent before submitting it.
– A method of receiving an email containing an expression of consent from a legal representative by sending an email containing the details of the consent.
– A method of notifying a legal representative of the details of the consent via telephone and obtaining consent, or providing guidance on how to verify the details of the consent, such as an internet address, and obtaining consent through a follow-up phone call.
– Other methods equivalent to the above to notify the legal representative of the contents of the consent and confirm the expression of intent to consent
5. Matters concerning the provision of personal information to third parties
(1) The company processes personal information only within the scope specified in Article 1 (Purpose of processing personal information), and provides personal information to third parties only in cases corresponding to Articles 17 and 18 of the Personal Information Protection Act, such as the consent of the data subject or special provisions of the law.
(2) The company provides personal information to third parties as follows.
| Name of the third party receiving the provision | Purpose of provision | Items of personal information provided | Retention and usage period by the recipient |
| [Name of third party receiving] | [Purpose of provision] | [Items of personal information provided] | [Retention and Usage Period by the Recipient] |
(3) In accordance with the “Guidelines for the Processing and Protection of Personal Information in Emergency Situations” jointly announced by government ministries, the Company may provide personal information to relevant agencies without the consent of the data subject in the event of an emergency situation such as a disaster, infectious disease, an incident or accident causing imminent danger to life or body, or imminent loss of property.
Please click here* for more details .
6. Matters concerning the entrustment of personal information processing
(1) The company entrusts personal information processing tasks as follows to ensure smooth processing of personal information.
| Consignment company | Outsourcing |
| Cafe24 Co., Ltd. | System provision and maintenance of shopping mall hosting services |
| post office | Delivery operations, collection operations, sorting operations, return collection and return operations |
| [Toss Payments] | Payment and Escrow Services |
| View supplier list | [Details of Outsourced Work] |
(2) In accordance with Article 26 of the Personal Information Protection Act, when concluding a consignment contract, the Company specifies in documents such as contracts matters concerning the prohibition of processing personal information for purposes other than the performance of consigned work, technical and administrative protective measures, restrictions on re-consignment, management and supervision of the consignee, and liability for damages, and supervises whether the consignee safely processes personal information.
(3) If there are any changes to the content of the entrusted work or the trustee, we will disclose this through this Privacy Policy without delay.
7. Procedures and Methods for Destruction of Personal Information
The company destroys personal information without delay when it becomes unnecessary, such as when the retention period for personal information has expired or the purpose of processing has been achieved.
(1) Destruction procedure
① In cases where personal information must continue to be preserved pursuant to other laws even after the retention period consented to by the data subject has expired or the purpose of processing has been achieved, the relevant personal information is transferred to a separate database (DB) or stored in a different location.
② Personal information transferred to a separate database will not be used for any other purpose, except as required by law.
(2) Method of destruction
① Information in the form of electronic files uses technical methods that cannot reproduce the records.
② Personal information printed on paper is destroyed by shredding or incineration.
8. Matters concerning the rights and obligations of the data subject and their legal representative and the method of exercising them
(1) Data subjects may exercise their rights to access, correct, delete, and request suspension of processing of their personal information at any time with respect to the company.
(2) To view or modify your personal information, click “Change Personal Information” (or “Edit Member Information,” etc.). To cancel your membership (withdraw consent), click “Withdraw Membership.” After completing the identity verification process, you can directly view, correct, or withdraw your information.
(3) Or if you contact the Chief Privacy Officer in writing, by phone, or by email, we will take action without delay.
(4) The exercise of rights under Paragraph 1 may be done through a representative, such as a legal representative of the data subject or a person authorized by the data subject. In this case, you must submit a power of attorney in accordance with Form No. 11 of the “Notice on the Method of Processing Personal Information (No. 2020-7)”.
(5) The right of a data subject to request access to and suspension of processing of personal information may be restricted pursuant to Article 35, Paragraph 4 and Article 37, Paragraph 2 of the Personal Information Protection Act, and the right to request correction and deletion of personal information cannot be requested if the personal information is specified as a subject of collection in other laws.
(6) When a request for access, correction, deletion, or suspension of processing is made in accordance with the rights of the data subject, the company verifies whether the person making the request is the principal or a legitimate representative.
9. Matters concerning measures to ensure the safety of personal information
The company is taking the following measures to ensure the safety of personal information.
(1) Administrative measures: establishment and implementation of internal management plans, operation of a dedicated organization, regular employee training
(2) Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of personal information, installation and updating of security programs
(3) Physical measures: Access control for computer rooms, data storage rooms, etc.
10. Matters concerning the installation and operation of devices that automatically collect personal information and the refusal thereof
The Company uses ‘cookies,’ which store and frequently retrieve usage information, to provide personalized services to users. Cookies are small amounts of information sent by the server operating the website to the user’s computer browser, and they are sometimes stored on the hard disk of the user’s PC.
(1) Purpose of using cookies
It is used to provide information optimized for users by identifying visit and usage patterns, popular search terms, secure connection status, etc., for each service and website visited by the user.
(2) Installation, operation, and rejection of cookies
You can refuse to store cookies through the option settings in the Tools > Internet Options > Privacy menu at the top of your web browser.
However, if you refuse to store cookies, you may experience difficulties using personalized services.
11. Matters concerning the Chief Privacy Officer
(1) The Company is responsible for overseeing all business related to the processing of personal information and has designated a Personal Information Protection Officer as follows to handle complaints and provide relief for damages to data subjects regarding the processing of personal information.
o Chief Privacy Officer
Name: Baek Min-
a Department: Management Support Department
Phone Number: 010-8210-3942
Email: mina@kohonjin.com
o Personal Information Protection Officer
Name: Baek Min-
a Department: Management Support Division
Phone Number: 010-8210-3942
Email: mina@kohonjin.com
(2) Data subjects may contact the Chief Privacy Officer and the person in charge regarding all inquiries, complaints, and damage relief matters related to personal information protection that arise while using the Company’s services. The Company will respond to and process the data subject’s inquiries without delay.
12. Remedies for Infringement of the Rights and Interests of Data Subjects
(1) To seek relief for personal information infringement, you may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency’s Personal Information Infringement Report Center, etc. For other reports or consultations regarding personal information infringement, please contact the following organizations.
Personal Information Dispute Mediation Committee: 1833-6972 (without area code) (privacy.go.kr)
Personal Information Infringement Report Center: 118 (without area code) (privacy.kisa.or.kr)
Supreme Prosecutors’ Office: 1301 (without area code) (www.spo.go.kr)
National Police Agency: 182 (without area code) (ecrm.cyber.go.kr)
(2) Any person whose rights or interests have been infringed by a disposition or inaction by the head of a public institution in response to a request under Article 35 (Access to personal information), Article 36 (Correction and deletion of personal information), and Article 37 (Suspension of processing of personal information, etc.) of the Personal Information Protection Act may file an administrative appeal in accordance with the Administrative Appeals Act.
※ For detailed information regarding administrative appeals, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).
13. Changes to the Privacy Policy
This Privacy Policy is effective as of May 1, 2025.