Privacy Policy

Iyu Lab Co., Ltd.(hereinafter referred to as ‘Company’) establishes and discloses the personal information processing policy as follows in order to protect the personal information of information subjects and to promptly and smoothly handle complaints related thereto in accordance with Article 30 of the Personal Information Protection Act.

Iyulab Co., Ltd. (hereinafter referred to as the "Company") establishes and discloses this Privacy Policy in order to protect the personal information of data subjects and to promptly and smoothly handle any related grievances in accordance with the Personal Information Protection Act.

Article 1 (Purpose of processing personal information)

Article 1 (Purpose of Processing Personal Information)

The company processes personal information for the following purposes. Personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent.

(The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use is changed, necessary measures such as obtaining separate consent will be implemented.)

  1. Homepage membership registration and management:Confirmation of intention to become a member, identification/authentication of identity, maintenance/management of membership, prevention of illegal use of services, various notices/notifications, grievance handling, etc.

    (Membership Registration and Management: Confirmation of intent to join, identity verification/authentication, maintenance and management of membership, prevention of unauthorized use of services, various notices/notifications, and grievance handling.)

  1. Provision of goods or services:Content provision, customized service provision, identity verification, bill payment/settlement, etc.

    (Provision of Goods or Services: Provision of content, personalized services, identity verification, and payment/settlement of fees.)

Article 2 (Personal information items processed)

Article 2 (Categories of Personal Information Processed)

The company processes the following personal information items.

(The Company processes the following categories of personal information.)

  1. Required:Email, Password Hash
  1. Optional:Areas of Interest
  1. Automatically collected items:IP address, cookies, service usage records, visit records, etc. (IP Address, Cookies, Service usage records, Access logs, etc.)

Article 3 (Processing and retention period of personal information)

Article 3 (Processing and Retention Period of Personal Information)

① The company processes and retains personal information within the personal information retention and use period pursuant to the law or within the personal information retention and use period agreed upon when collecting personal information from the information subject.

(The Company processes and retains personal information within the period of retention and use prescribed by law or the period of retention and use agreed upon when collecting personal information from the data subject.)

② The processing and retention period for each personal information is as follows.

(The processing and retention periods for each category are as follows.)

  • Homepage membership registration and management:Until withdrawal from the website
  • Provision of goods or services:Until completion of payment and settlement

Article 4 (Destruction of personal information)

Article 4 (Destruction of Personal Information)

When personal information becomes unnecessary, such as when the personal information retention period has passed or the purpose of processing has been achieved, the company destroys the relevant personal information without delay. Information in the form of electronic files uses technical methods that cannot reproduce the records, and personal information recorded in paper documents is shredded or incinerated.

(The Company destroys personal information without delay when it becomes unnecessary, such as the expiration of the retention period or achievement of the processing purpose. Information in the form of electronic files is destroyed using technical methods that cannot reproduce the records, and personal information recorded on paper is shredded or incinerated.)

Article 5 (Rights, obligations and exercise methods of information subjects)

Article 5 (Rights and Obligations of Data Subjects and How to Exercise Them)

The information subject can exercise his/her rights, such as requesting the company to view, correct, delete, or suspend processing of personal information at any time. You can exercise these rights by writing to the company, e-mail, etc., and the company will take action without delay.

(Data subjects may exercise their rights to access, correct, delete, or suspend the processing of personal information at any time. Such rights may be exercised in writing or via email, and the Company will take action without delay.)

Article 6 (Measures to ensure the safety of personal information)

Article 6 (Measures to Secure Safety of Personal Information)

To ensure the safety of personal information, the company is taking measures such as establishing an internal management plan, storing access records, encrypting personal information, and installing security programs.

(To ensure the safety of personal information, the Company takes measures such as establishing internal management plans, storing access records, encrypting personal information, and installing security programs.)

Article 7 (Personal Information Protection Manager)

Article 7 (Privacy Officer)

The company is responsible for the overall management of personal information processing, and has designated a personal information protection manager as follows to handle complaints and provide relief for damage from information subjects related to personal information processing.

(The Company has designated a Privacy Officer to take overall responsibility for the processing of personal information and to handle complaints and remedial compensation of data subjects.)

  • Department responsible for personal information protection:Operations Team

Article 8 (Changes to personal information processing policy)

Article 8 (Changes to the Privacy Policy)

This personal information processing policy is applied from the effective date, and if there are any additions, deletions, or corrections of changes in accordance with laws and policies, they will be notified through notices.

(This Privacy Policy shall be applied from the effective date, and any additions, deletions, or corrections of changes in accordance with laws and policies will be notified through announcements.)

Announcement date:January 3, 2024

Effective date:January 3, 2024

KRKOKRKO