Who's Fan Store Privacy Policy
"Protecting customers' personal information is an important business principle of Whosfan Store. Whosfan Store establishes and discloses the following personal information processing policy to protect users' personal information and to promptly and smoothly handle complaints related to it."
Accordingly, all activities carried out by Whoozfan Store comply with domestic laws and regulations, such as the Act on Promotion of Information and Communications Network Utilization and Information Protection (hereinafter referred to as the “Information and Communications Network Act”) and the Personal Information Protection Act, and follow this personal information processing policy.
"This privacy policy provides information on the processing of personal information by Whosfan Store and explains the rights customers have and how they can exercise those rights. Finally, it provides the contact information of the personal information protection officer and staff member who can be contacted in case of inquiries regarding personal information while using the Whosfan Store service."
If there are any changes related to the customer's personal information, the Whoozfan Store will promptly notify the customer through a revision of the personal information processing policy. The detailed table of contents of the personal information processing policy is as follows.
1. Purpose of processing personal information
2. Information on collected personal information and use
3. Provision of personal information
4. Entrustment of personal information
5. Destruction of personal information
6. Customer rights/obligations and how to exercise them
7. Matters concerning installation/operation and rejection of automatic collection devices
8. Measures to ensure the security of personal information
9. Personal information protection officer and staff information
10. Obligation to notify
1. Purpose of processing personal information
Whoozfan Store collects and uses users' personal information for the following purposes. Personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures such as obtaining separate consent will be taken.
1. App or web membership registration and management
2. Provision of Who's Fan service and development of new services
3. When a user purchases a product
4. When authenticating your identity
5. When using the simple payment service
6. CS Processing
2. Information on collected personal information and use
The Whoozfan Store collects and uses personal information as follows, and the retention and use period is as follows. However, in cases where there is a reason to retain information in accordance with relevant laws and regulations, such as the contents of '2.4 Member Information Collected and Used in Pursuance of Laws', and it is necessary to retain the information, the relevant information will be retained for the necessary period.
2.1. Regular Member
A regular member refers to a user who has signed up through the Whosfan app and registered with a Whosfan ID in the Whosfan store.
* Required collection items (when registering as a member)
1) Purpose of collection and use
- Service registration and user identification, product purchase processing, member management and communication
- Identity verification for product purchase and sale, purchase and payment, delivery of products and services, provision of customized content and services
- Providing customized content and services through detection of abnormal behavior and estimation of user interests, preferences, and tendencies
2) Collection/Use Items
- Who's fan ID, favorite artist
- Shipping information (name, contact information, address)
- Service usage history, access log, cookies, access IP information, payment history, terminal information (OS type and version)
3) Retention and use period
- For refund purposes, information is stored for 90 days after withdrawal and then destroyed without delay / Information to prevent misuse (ID, records of improper use) is deleted from the withdrawal DB after 90 days / Information to preserve transaction records (ID, account number, delivery address) is stored for 5 years (Act on Consumer Protection in E-Commerce, etc.) / IP is stored for 3 months (Protection of Communications Secrets Act)
- Destroyed without delay upon withdrawal of consent or withdrawal of membership
- Deleted without delay when membership is cancelled
* Optional collection items (when signing up for membership)
1) Purpose of collection and use
- Providing opportunities to participate in (tailored) advertising and marketing
2) Collection/Use Items
- Service usage records, payment records, mobile phone number, email, personal identification information (name, date of birth, gender, telecommunications company name, mobile phone number, identical person identification information (CI), duplicate subscription confirmation information (DI), domestic/foreigner information), delivery information (name, contact information, address), access IP information, advertising identifiers such as cookies
3) Retention and use period
- Destroyed without delay upon withdrawal of consent or withdrawal of membership
* Additional information collected during service use
1) Purpose of collection and use
- Providing customized content and services based on member identity and age verification
- Cancellation/Refund
- Customs duties and clearance
- User identification within the Whosfan Store service, exposure when writing posts (reviews), customer service consultation and response
- Coupons, points payment
- Customer verification, voting results confirmation and analysis
- Marketing, Analytics
- Who's Fan Store Event Winner Confirmation, Prize Delivery
2) Collection/Use Items
- Personal identification information (name, date of birth, gender, telecommunications company name, mobile phone number, identical person identification information (CI), duplicate registration confirmation information (DI), domestic/foreigner information)
- Depositor name, bank name, account number
- Personal unique customs clearance code
- Nickname in Whosfan Store
- Whosfan Store ID
- Whosfan Store ID (email address), age group, gender
- Email, contact number (mobile phone number)
- Name, mobile phone number, shipping address
3) Retention and use period
- When a member withdraws, the customer identification information (DI, CI) is deleted without delay to prevent misuse. The customer identification information (DI, CI) is deleted from the withdrawal DB after 6 months. To preserve transaction records, consumer identification information (DI, CI), payment, cancellation, refund, and delivery information are stored for 5 years (Act on Consumer Protection in E-Commerce, etc.)
- When a member withdraws, the customer identification information (DI, CI) is deleted without delay to prevent misuse. The customer identification information (DI, CI) is deleted from the withdrawal DB after 6 months. To preserve transaction records, consumer identification information (DI, CI), payment, cancellation, refund, and delivery information are stored for 5 years (Act on Consumer Protection in E-Commerce, etc.)
- Information will be deleted immediately upon request for deletion or withdrawal of membership.
- Deleted without delay when membership is cancelled
- Until the end of use, delete without delay when membership is cancelled
- Until the end of the event
- Stored for 5 years after collection or deleted immediately upon request for deletion/suspension of use of information
- Until delivery is completed
※ Unauthorized use includes acts of illegally or improperly obtaining economic benefits such as discount coupons and event benefits provided by the “Who’s Fan Store”, such as repeatedly withdrawing from membership and then re-registering, purchasing products and then canceling them, acts prohibited by the Terms of Use, etc., and illegal or improper acts such as identity theft.
※ In order to protect customer rights, we may use purchase information to contact members who have withdrawn or have not used the service for a long time to provide refunds or recall information.
※ The information above may be used for statistics and analysis of service use.
2.2 Event Participating Members
Event participating members refer to members who participated in events conducted through social media operated by Whosfan Store (Facebook, Kakao Story, Twitter, Instagram, Cafe, etc.) and the bulletin board of the Whosfan Store website.
|
classification |
Purpose of collection and use |
Collection/Use Items |
Retention and Use Period |
|
Event Entry |
Name, SNS ID/ Who's Fan Store ID, Email, Mobile Phone Number, Address |
Winner Selection |
The information collected is from the Whosfan Store Destroy within 30 days after the event ends |
|
Event Winner |
Shipping information: Name, phone number, address |
Product Delivery |
2.3 Method of collecting personal information
A. During the membership registration and service use process, the user agrees to the collection of personal information and enters it directly.
B. Collection through web pages, email, fax, phone, etc. during consultation process through customer center
Participation in events, functions, etc. held online/offline
A. Collection of generated information through log analysis program, collection of information through ‘cookies’
2.4 Member information collected and used in accordance with laws and regulations
|
Holding information |
Holding period |
Legal basis |
|
Records of payment and supply of goods, etc. |
5 years |
Article 6 of the Act on Consumer Protection in Electronic Commerce, etc. |
|
Records of contracts or cancellations of subscriptions, etc. |
5 years |
Article 6 of the Act on Consumer Protection in Electronic Commerce, etc. |
|
Records of consumer complaints or dispute resolution |
3 years |
|
|
Records of display and advertising |
6 months |
|
|
Records of electronic financial transactions |
5 years |
Article 22 of the Electronic Financial Transactions Act |
|
Location information handling register |
6 months |
Article 16 of the Act on the Protection and Use of Location Information |
|
Website and app visit history |
3 months |
Article 15-2 of the Communications Secrets Protection Act |
|
Information for advance payment of taxes and fees |
5 years |
Articles 145 and 164 of the Income Tax Act |
|
Records of collection, processing, and use of credit information |
3 years |
Article 20 of the Act on the Use and Protection of Credit Information |
|
Personal Credit Information |
5 years |
Article 20-2 of the Act on the Use and Protection of Credit Information |
3. Provision of personal information
3.1 Whoozfan Store processes users' personal information only within the specified scope, and provides personal information to third parties only with the consent of the user or in cases where there are special provisions in the law.
3.2 Whoozfan Store may provide personal information as follows in accordance with legal procedures, such as obtaining the user's consent, when necessary for transaction execution, including delivery.
3.3 Detailed information on the recipient can be checked by clicking on each item of ‘Recipient’ below.
|
Recipient |
Purpose of provision |
Information provided |
Retention and Use Period |
|
Shipping Product Provider |
Delivery of goods/services or reservation work Processing and Customer Consultation |
Name, mobile phone number, address, email, Product purchase information (card payment information, account information (bank transfer) When depositing)), recipient information (name, phone number, (mobile phone number, recipient address) ※ Required additional items to collect - When purchasing products that require customs clearance: personal customs code |
The purpose of providing goods or services After it is achieved, it is destroyed (however, in accordance with the relevant laws and regulations) During the statutory period according to the established regulations custody) |
|
Who's Fan Store Event Prize Delivery Company |
Confirm the winner, Sending prizes |
Name, mobile phone number, shipping address |
Until delivery is completed |
※ Required additional items to collect
- When purchasing products that require customs clearance: Personal customs clearance code
“ Destroyed after the purpose of providing goods or services has been achieved (however, stored for the statutory period according to the provisions of relevant laws and regulations)
Who's Fan Store Event Prize Delivery Company Confirmation of winners, Prize Delivery Name, Mobile Phone Number, Delivery Address Delivery Completed
※ Notice on right to refuse consent, etc.
"Provision of personal information is absolutely necessary to use the service. You may refuse to provide personal information, but in this case, use of the service may be restricted. Personal information is provided to third parties only when purchasing, and clear information will be provided at the time of purchase."
4. Entrustment of personal information
Whoozfan Store continuously manages and supervises the trustees to ensure that they are safely handling the entrusted personal information, and ensures that the personal information held by the trustees is immediately destroyed when the entrusted work is completed.
4.1 Status of domestic processing of personal information
|
division |
Person entrusted with personal information processing |
Retention and use period of personal information |
|
Payment processing (mobile phone, bank transfer, credit card, other payment methods, |
Payment will |
Until withdrawal of membership or termination of consignment contract (however, if there is an obligation to preserve in accordance with the provisions of relevant laws, it will be preserved for the relevant period) |
|
Order Information |
Until withdrawal of membership or termination of consignment contract (however, if there is an obligation to preserve in accordance with the provisions of relevant laws, it will be preserved for the relevant period) |
|
|
Goods delivery, return collection |
Until withdrawal of membership or termination of consignment contract (however, if there is an obligation to preserve in accordance with the provisions of relevant laws, it will be preserved for the relevant period) |
|
|
Sending SNS notification messages (information messages) |
Until withdrawal of membership or termination of consignment contract (however, if there is an obligation to preserve in accordance with the provisions of relevant laws, it will be preserved for the relevant period) |
|
|
Customer and Order Information |
Zendesk |
Until withdrawal of membership or termination of consignment contract (however, if there is an obligation to preserve in accordance with the provisions of relevant laws, it will be preserved for the relevant period) |
|
Data Management |
Until withdrawal of membership or termination of consignment contract (however, if there is an obligation to preserve in accordance with the provisions of relevant laws, it will be preserved for the relevant period) |
|
|
Identity verification |
vonage |
Until withdrawal of membership or termination of consignment contract (however, if there is an obligation to preserve in accordance with the provisions of relevant laws, it will be preserved for the relevant period) |
|
Electronic payment agency |
Until withdrawal of membership or termination of consignment contract (however, if there is an obligation to preserve in accordance with the provisions of relevant laws, it will be preserved for the relevant period) |
5. Destruction of personal information
In principle, the Whoozfan Store destroys the relevant information without delay after the purpose of collecting and using personal information has been achieved. If the personal information for which consent has been received from the user has expired or the purpose of processing has been achieved but is still kept in accordance with other laws and regulations, the personal information will be transferred to a separate database or stored in a different location.
5.1 Destruction Procedure
The company selects personal information for which a reason for destruction has arisen and destroys the personal information with the approval of the company's personal information protection officer.
5.2 How to destroy
- Personal information printed on paper: Destroyed by shredding or incineration
- Personal information stored in electronic file format: Destroyed using technical or physical methods that render the records unrecoverable.
6. Customer rights/obligations and how to exercise them
6.1 Customer Rights
"Customers and legal representatives may request correction, withdrawal of consent, deletion, or inspection of collected information at any time. However, withdrawal of consent or deletion may restrict use of some or all of the services. Personal information collected by Whosfan Store can be checked through the following methods:"
1. Request for viewing and correction of personal information
Users can view or correct their registered personal information at any time. If you wish to view or correct your personal information, you may do so directly, or request it in writing, by phone, e-mail, or fax. We will take action without delay after verifying your identity. If a user requests to view or correct personal information, Whoozfan Store will respond to the request within the statutory deadline. However, if there is a legitimate reason why we cannot respond within the given period, we will notify the user of the reason and postpone the response. If the reason is eliminated, we will take action without delay.
[Check collected personal information]
· In the Whoozfan Store mobile app - MY tab > Order, Delivery
· In the Whoozfan Store mobile app - MY tab > Profile ID
Information that cannot be confirmed directly through the Whoozfan Store website or app can be requested through the customer center (1:1 chat inquiry, email) or the grievance handling department.
2. Withdrawal of consent to collection, deletion, and suspension of processing of personal information
Users may withdraw their consent to the collection, use, and provision of personal information through membership registration at any time, or request deletion or suspension of processing. If you wish to withdraw consent, delete, or suspend processing, you may do so directly, or request it in writing, by phone, e-mail, or fax. We will take action without delay after verifying your identity.
[Withdrawal of consent to collection of personal information, deletion]
· In the Whoozfan Store mobile app - MY tab > Contact Us
6.2 Customer Obligations
"Customers are responsible for protecting their personal information, and Whosfan Store is not responsible for any problems caused by leakage of personal information due to reasons not attributable to the company, such as the customer's own negligence, such as transfer, rental, or loss of ID (email address), password, or access medium, or leaving the login state, or internet problems that the company cannot control despite considerable care, such as hacking using methods or technologies that cannot be blocked by security measures under relevant laws."
Customers must keep their personal information up to date, and are responsible for any problems that arise from incorrect information input by the customer. If you use someone else’s personal information to sign up for membership or process payments using an ID, you may lose your customer status and be punished in accordance with relevant laws. Customers are responsible for maintaining the security of their IDs, passwords, etc., and may not transfer or lend them to third parties. Customers are obligated to cooperate with periodic security activities in accordance with the Whoozfan Store’s personal information protection policy.
7. Matters concerning the installation/operation of automatic collection devices and their refusal
"Whozfan Store may store (collect) information automatically generated during the service use process for customers' easy, efficient, and personalized shopping, or collect and store non-personally identifiable device information. Whoozfan Store provides guidance on which of these automatically generated information is collected and how to set up collection rejection."
7.1. Cookies
"Cookies are small text files that are sent and stored on the user's device when accessing a website to ensure efficient and safe web use by the user. When the user visits the website again after the cookie has been stored, the cookie recognizes the user's device and automatically retrieves past settings and usage history. In addition, information on the service visited, service access time and frequency, information generated or provided (entered) during the service use process, etc. can be analyzed to provide services (including advertisements) tailored to the customer's tastes and interests. Customers have the option to choose cookies, and can allow all cookies, check each time a cookie is stored, or reject all cookies by setting options in the web browser."
7.2. Personalized Advertising
"In order to provide customized advertisements to customers, Whosfan Store collects and uses 'cookies' in web browsers and advertising identifiers (ADID) in mobile apps. Whosfan Store automatically collects customers' service usage history through cookies and advertising identifiers and provides this to Google and Facebook. Google and Facebook use this to provide customized advertisements to customers. Cookies and advertising identifiers collected by Whosfan Store are not linked to other personal information and do not identify individuals. In addition, Google and Facebook do not use the information provided by Whosfan Store to identify individuals."
Users can opt out of receiving such tailored advertising at any time, in which case they will be shown random advertisements rather than tailored advertisements.
8. Measures to ensure the security of personal information
Whoozfan Store is taking the following measures to ensure the security of personal information.
1. Management measures: Establishment and implementation of internal management plan, regular employee training
2. Technical measures: Management of access rights to personal information processing systems, encryption of passwords, installation of security programs
3. Physical measures: Access control to the archives
9. Personal information protection officer and staff information
"We have designated a personal information protection officer and department in charge as follows to take overall responsibility for the work related to customers' personal information, and to handle complaints and damage relief related to personal information. You may contact us at the contact information below for all inquiries, complaints, damage relief, etc. related to personal information protection that occur while using the services provided by the company. Whoozfan Store will respond to and process such inquiries without delay."
Data Protection Officer
Name: Kim Hye-kyung
Contact: 070-4127-3226
Email: whosfan@whosfan.com
Personal Information Protection Officer
Name: Park Song-i
Contact: 070-4127-3226
Email: privacy@whosfan.com
If you need to report or consult about other personal information infringements, you can contact the organizations below.
▶ Personal Information Infringement Report Center: (without area code) 118 / (Website: privacy.kisa.or.kr)
▶ Supreme Prosecutors' Office Cyber Investigation Department: (without area code) 1301 / (Website: www.spo.go.kr)
▶ National Police Agency Cyber Investigation Bureau: (without area code) 182 / (Website: ecrm.police.go.kr)
10. Obligation to notify
"This privacy policy is effective from the date of enforcement. If there is a significant change to the customer's personal information rights, we will notify you through a notice on the Whoozfan Store at least 14 days in advance. If there is any other change, we will notify you through a notice at least 7 days before the change takes effect."
Privacy Policy Version Number: 1.00
Current Privacy Policy Announcement Date: May 20, 2025
Current Privacy Policy Effective Date: May 20, 2025