“Kith Seoul” allows most contents to be accessed freely without a separate membership registration process. However in the event that you use service realted to draw events  provided by “Kith Seoul” (e.g., membership registration, draw event participation, etc.), “Kith Seoul” may collect the following information. However, even if you do not provide the optional information, there are no restrictions on using other services, except for those that specifically utilize the optional information.

1) Personal Information Collected Without Consent:

Kith Seoul processes the following personal information without the customer’s consent.

2) Personal information collected with customer consent

“Kith Seoul” collects and uses personal information with the consent of the data subject in accordance with Article 15(1)(4)(performance of a contract) and Article 22(1)(7) of the Personal Information Protection Act

3) Personal information collected automatically during the use of services

• Kith Seoul automatically disposes of personal information of both members and non-members who have not logged into The homepage of Kith Seoul or contacted customer support for five years. Information shall be disposed of immediately upon request for consent withdrawal. However, if retention is required by law, the information shall be retained for the required period before being disposed of.
• "Kith Seoul" shall notify customers who have been inactive for an extended period of the impending deletion of their personal information at least 30 days prior to account termination. This notification will include details about the deletion, the expiration date, and the specific personal information to be deleted. The notification will be sent through email, SMS, or other methods that allow communication with the customer.
  
• If you do not wish to be automatically terminated due to inactivity, simply log in to The homepage of Kith Seoul or contact customer support before the expiration date.

① Kith Seoul promptly disposes of personal information that is no longer needed after the retention period or the purpose of processing has been fulfilled. However, some personal information may be retained according to the following legal requirements.

② If personal information, for which consent for collection and use has been obtained from the customer, must continue to be preserved even after the retention period has expired or the purpose of collection and use has been achieved, in accordance with relevant laws such as the "Act on the Consumer Protection in Electronic Commerce, etc.," the relevant personal information shall be transferred to a separate database (DB) with strictly controlled access for preservation.

③ (Destruction Procedure) “Kith Seoul” proceeds with the destruction of personal information after achieving the purpose for which it was retained through two procedures: automated destruction based on pre-defined processes and manual destruction.

• Automated destruction: In case of membership withdrawal, consent withdrawal, relevant personal information and draw participation data, etc., shall be automatically destroyed (deleted) by a pre-configured system (automation) once the relevant period has passed.
• Manual destruction: Personal information not subject to automated procedures shall be destroyed manually. The responsible employee reports and requests approval for destruction from the responsible authority → The request for destruction is sent to the service maintenance team → The service maintenance team destroys the relevant personal information in the system as requested → The maintenance team then reports the destruction results back to the requesting employee.

④ (Destruction Methods) The methods for destroying (deleting) personal information are as follows:

• Personal information stored in databases or files is destroyed (deleted) in a way that cannot be recovered.
• Personal information printed on paper is destroyed by shredding.

① Kith Seoul provides personal information to third parties only in cases where the customer has given consent or where it is required by law, in accordance with Articles 17 and 18 of the Personal Information Protection Act, and does not provide personal information to third parties in any other cases.

② Kith Seoul provides personal information to third parties only when legally required or with the customer’s consent. The following cases allow for provision without consent.

③ In accordance with the "Guidelines for Processing and Protecting Personal Information in Emergency Situations" jointly announced by relevant government ministries, in the event of an emergency such as disasters, infectious diseases, incidents or accidents that pose imminent danger to life or body, or urgent property loss, personal information may be provided to relevant authorities without the consent of the data subject. For more details, click here.

① "Kith Seoul" entrusts the handling of personal information for the purpose of providing services to customers as follows.
② When entering into an outsourcing contract, "Kith Seoul" stipulates in the contract or relevant documentation, in accordance with Article 26 of the Personal Information Protection Act, that personal information cannot be processed for purposes other than those related to the outsourced task, security measures must be ensured, re-outsourcing is restricted, and the management and supervision of the trustee, as well as liability for damages, are included. "Kith Seoul " also supervises whether the trustee securely handles personal information.

③ In accordance with Article 26(6) of the Personal Information Protection Act, if the trustee re-outsources the handling of customers' personal information, they are required to obtain consent from "Kith Seoul."
④ If the content of the outsourced task or the trustee changes, it shall be disclosed without delay through this personal information handling policy.
⑤ Current status of personal information outsourcing and re-outsourcing tasks:

• Personal Information Outsourcing Status

• Personal Information Re-Outsourcing Status

“Kith Seoul” uses and provides personal information only within the scope of the customer’s consent. In cases where personal information is additionally used or provided without the customer's consent, in accordance with Article 15(3) or Article 17(4) of the Personal Information Protection Act, decisions shall be made based on the following criteria:

1. a.Whether the purpose of the continued use and provision of personal information is related to the original purpose of collection
   b. Whether the additional use or provision of personal information is foreseeable in light of the circumstances of collection or the practices of processing
   c. Whether the customer’s interests are unduly infringed
   d. Whether necessary safety measures, such as pseudonymization (e.g., masking) or encryption, have been taken to ensure security

Kith Seoul implements various measures to ensure personal information security:

• Administrative: Staff education and internal management planning.
• Technical: Access control, encryption, and security programs.
• Physical: Restricted access to offices and data centers.

① “Kith Seoul” uses cookies to store and retrieve usage information from time to time to provide personalized services to customers.
② A cookie is a small amount of information sent from the server that operates the website to the user's computer browser, and it is stored on the user's PC or mobile device.

1. a. Purpose of using cookies
   • To provide differentiated information based on personal interests
   • To analyze connection frequency or visit times, understand users' preferences and interests, and use it as a metric for targeted marketing and service improvement
   • To track information on purchased items and items viewed with interest to provide personalized shopping services
2. b. How to install, operate, and refuse cookies
   • Customers have the option to allow the installation of cookies. By adjusting the web browser settings, customers can allow all cookies, be prompted for confirmation each time cookies are stored, or refuse all cookies. However, refusing cookie collection may result in inconvenience when using “Kith Seoul” services, and certain services that require login may be difficult to access.

• ① Customers have the rights regarding their personal information processed by “Kith Seoul” as stipulated in Article 4 (Rights of Data Subjects) of the Personal Information Protection Act (refer to the table below). These rights may be exercised (hereinafter referred to as “exercise of rights”).

• ② Customers may exercise their rights in writing, by email, or by fax in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act. “Kith Seoul” shall take action without delay.
  . Customers can withdraw their consent to the collection and use of personal information at any time by clicking on the “Modify Member Information” or “Withdraw Membership” section on the “Kith Seoul” website, or by contacting the Personal Information Protection Officer and the relevant personnel in writing, by phone, or by email, and we shall take immediate action.
• ③ The exercise of rights may also be carried out through a legal representative of the customer or delegated person. In this case, a power of attorney in the form specified in Form No. 11 of the “Notice on Personal Information Processing Methods (No. 2020-7)” must be submitted.
• Requests for access to personal information or suspension of processing may be restricted in accordance with Article 35(4) and Article 37(2) of the Personal Information Protection Act.
• ④ Requests for correction and deletion of personal information cannot be made if the personal information is specified as the object of collection in other statutes.
• ⑤ “Kith Seoul” confirms whether the person requesting access, correction, deletion, or suspension of processing is the data subject or a legitimate representative.
• ⑥ Requests for the exercise of the right to access, correct, delete, or suspend the processing of personal information can be submitted to the “Kith Seoul Customer Service Center” (refer to Section 10 for the Personal Information Protection Officer and the Personal Information Access Request section). We shall process the customer's request for exercising personal information rights without delay.

• ① “Kith Seoul” designates the following Personal Information Protection Officer who is responsible for overseeing tasks related to personal information processing, handling customer complaints, and providing remedies for damages related to personal information processing.
• ② Customers can request access to their personal information in accordance with Article 35 of the Personal Information Protection Act through the department listed below. “Kith Seoul” shall make efforts to promptly process these requests.

• ③ Phone consultations are available on weekdays from 9:00 AM to 6:00 PM. For inquiries during weekends or public holidays, please contact us via email.
• ④ We shall respond to inquiries made via email, fax, or mail as soon as possible after receiving them. However, inquiries made after business hours or during weekends and public holidays shall be handled on the next business day.

• ① "Kith Seoul" is committed to protecting customers' right to self-determination over their personal information and strives to provide consultation and remedies for personal information breaches. If you need to report or consult regarding a breach, please contact the following department.

• ② Customers may request dispute resolution or consultation regarding personal information breaches through the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency's (KISA) Personal Information Infringement Report Center, or other relevant organizations. For further reports or consultations on personal information breaches, please contact the institutions listed below.

• ① This privacy policy shall take effect from Nov 11th, 2024.
• ② This privacy policy may be changed due to government policies, laws, or the needs of "Kith Seoul." In the event of any additions, deletions, or corrections, prior notice shall be given through the website, email, etc., at least 7 days before the changes take effect. If prior notice is difficult, we shall notify you as soon as possible. However, if important matters such as changes to the purpose of personal information collection, or the provision of personal information to third parties are added, deleted, or corrected, we shall provide prior notice at least 30 days in advance. You can view previous versions of the privacy policy below.
• ③ Major changes to the revised privacy policy:
  a. Key amendments
  • To be provided when changes occur
  b. Comparison of changes before and after the amendment (View details)
  (When clicking on "View details" above, the information shall be displayed in a notice or pop-up form)

Notice Date: 2024-11-04
Effective Date: 2024-11-11