Privacy Policy

Article 1 (Purpose)

Double B&D (hereinafter referred to as "the Company") establishes this Privacy Policy (hereinafter referred to as "this Policy") to protect the information (hereinafter referred to as "Personal Information") of individuals (hereinafter referred to as "Users" or "Individuals") who use the services provided by the Company (hereinafter referred to as "Company Services"), to comply with relevant laws and regulations including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc. (hereinafter referred to as "Network Act"), and to promptly and smoothly handle grievances related to the protection of users' personal information.

Article 2 (Principles of Personal Information Processing)

In accordance with personal information-related laws and this Policy, the Company may collect users' personal information, and the collected personal information may be provided to third parties only with the individual's consent. However, in cases legally mandated by laws and regulations, the Company may provide users' collected personal information to third parties without prior individual consent.

Article 3 (Publication of this Policy)

The Company publicly discloses this Policy through the first screen of the Company's website or a screen linked to the first screen so that users can easily check this Policy at any time.

When the Company publicly discloses this Policy pursuant to Paragraph 1, it shall use font size, color, etc. to make it easy for users to check this Policy.

Article 4 (Changes to this Policy)

This Policy may be revised in accordance with changes in personal information-related laws, guidelines, notices, government or Company service policies, or content.

When the Company revises this Policy pursuant to Paragraph 1, it shall notify users through one or more of the following methods:

The Company shall make the notification under Paragraph 2 at least 7 days prior to the effective date of the revision of this Policy. However, in case of significant changes to user rights, notification shall be made at least 30 days in advance.

Article 5 (Information for Member Registration)

The Company collects the following information for users' registration as members of the Company Services.

Required Information: Email address, password, name, date of birth, and mobile phone number

Article 6 (Information for Identity Verification)

The Company collects the following information for users' identity verification.

Required Information: Mobile phone number, email address, and name

Article 7 (Methods of Personal Information Collection)

The Company collects users' personal information through the following methods:

Article 8 (Use of Personal Information)

The Company uses personal information in the following cases:

Article 9 (Retention and Use Period of Personal Information)

The Company retains and uses users' personal information during the period necessary to achieve the purpose of collection and use of personal information.

Notwithstanding the preceding paragraph, the Company retains records of fraudulent service use for a maximum of 1 year from the time of membership withdrawal in accordance with internal policies to prevent fraudulent registration and use.

Article 10 (Retention and Use Period of Personal Information under Laws)

The Company retains and uses personal information as follows in accordance with relevant laws and regulations:

Retention Information and Retention Period under the Act on Consumer Protection in Electronic Commerce, Etc.

Retention Information and Retention Period under the Protection of Communications Secrets Act

Retention Information and Retention Period under the Electronic Financial Transactions Act

Act on the Protection and Use of Location Information

Article 11 (Principles of Destruction of Personal Information)

In principle, the Company destroys such information without delay when personal information is no longer needed, such as when the purpose of processing users' personal information has been achieved or the retention and use period has elapsed.

Article 12 (Personal Information Destruction Procedure)

Information entered by users for member registration, etc. is transferred to a separate database after the purpose of personal information processing has been achieved (in the case of paper, to a separate document box) and is stored for a certain period in accordance with internal policies and information protection reasons under other relevant laws (refer to retention and use period) before being destroyed.

The Company destroys personal information for which a reason for destruction has arisen after obtaining approval from the Personal Information Protection Officer.

Article 13 (Methods of Personal Information Destruction)

The Company deletes personal information stored in electronic file format using technical methods that make the records irreproducible, and destroys personal information printed on paper by shredding it with a shredder or through incineration.

Article 14 (Measures for Transmission of Advertising Information)

When the Company transmits commercial advertising information for profit purposes using electronic transmission media, it obtains explicit prior consent from users. However, prior consent is not required in any of the following cases:

Article 15 (Protection of Children's Personal Information)

To protect the personal information of children under the age of 14, the Company allows membership registration only for users aged 14 or older.

Notwithstanding Paragraph 1, if a user is a child under the age of 14, the Company obtains consent for the collection, use, and provision of the child's personal information from the child's legal representative.

In the case of Paragraph 2, the Company additionally collects the legal representative's name, date of birth, gender, duplicate registration confirmation information (ID), and mobile phone number.

Article 16 (Obligations of Users)

Users must keep their personal information up to date, and users are responsible for problems arising from inaccurate information input by users.

In the case of membership registration using another person's personal information, user qualification may be lost or the user may be punished under relevant personal information protection laws.

Users are responsible for maintaining security of email addresses, passwords, etc., and may not transfer or lend them to third parties.

Article 27 (Designation of the Company's Personal Information Protection Officer)

The Company designates the relevant department and Personal Information Protection Officer as follows to protect users' personal information and handle complaints related to personal information.

Personal Information Protection Officer

Article 28 (Remedy for Rights Infringement)

Data subjects may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, Korea Internet & Security Agency Personal Information Infringement Report Center, etc. to receive relief for personal information infringement. For other reports and consultations regarding personal information infringement, please contact the following organizations.