Policy
Privacy
Policy
How Chireunsibill Co., Ltd. collects and uses personal information
Effective date: August 21, 2026 (storage location of personal data changed: processor list corrected, outsourcing to Notion Labs ended)
Chireunsibill Co., Ltd. (hereinafter referred to as the "Company") complies with relevant laws and regulations, including the Personal Information Protection Act, and establishes and discloses the following Privacy Policy to process users' personal information safely.
1. Personal information we collect and how we collect it
| Category | Items collected | Collection method |
|---|---|---|
| Member registration and login | Email, password (encrypted storage), name Note: for social login (Kakao, Naver, Google): email, name (nickname) and the unique identifier issued by each service |
Website sign-up / social login |
| Orders and payment | Name, contact, email, shipping address, order history Note: card numbers and other payment details are not stored on our servers; the payment gateway (KG Inicis) processes them directly |
Checkout form |
| Class booking | Name, contact, email, desired date | Booking form |
| Inquiry/quote request | Name, contact, email, inquiry details | Inquiry / quote form |
| Identity verification | Name, date of birth, gender, phone number, encrypted user verification value (CI) | Identity verification (PASS, etc.) at sign-up, guest checkout and order lookup |
| AI chat assistant | Chat content (questions and answers), anonymous browser identifier, pages visited Note: please do not enter personal information in the chat |
Saved automatically when you use the AI chat |
| Automatically collected information | IP address, cookies, time of visit, service usage records, device and browser information | Automatically generated/collected during service use |
2. Purpose of collecting and using personal information
- Member management: verifying identity, logging members in and preventing misuse of the member service
- Orders, payment and delivery: processing Art Kit orders and payments, confirming the shipping address, sending shipping notices
- Bookings and classes: taking bookings for One-day Classes and On-site Classes, sending schedule notices
- Inquiries: checking and answering inquiries, sending quotes
- Service improvement: improving service quality by analyzing access statistics (Google Analytics, Microsoft Clarity)
- AI chat history: used only internally, to improve answer quality and to plan products and services (marketing); never provided to third parties.
3. Period of retention and use of personal information
As a rule, we destroy personal information without delay once the purpose of collection and use has been achieved. Where the law requires us to keep it, we retain it for the periods below.
| Item retained | Retention period | Legal basis |
|---|---|---|
| Records of contracts and order cancellations | 5 years | Act on the Consumer Protection in Electronic Commerce, etc. |
| Records of payment and supply of goods, etc. | 5 years | Act on the Consumer Protection in Electronic Commerce, etc. |
| Records of consumer complaints or dispute resolution | 3 years | Act on the Consumer Protection in Electronic Commerce, etc. |
| Records of labeling and advertising | 6 months | Act on the Consumer Protection in Electronic Commerce, etc. |
| Member registration information (email, login information, etc.) | Until the account is deleted | - |
| Access logs and IP address | 3 months | Protection of Communications Secrets Act |
| AI chat history | 1 year (automatically deleted after expiration) | - |
| Product reviews (author name, rating, text, photos) | Until removal is requested | - |
4. Procedure and method for destroying personal information
Personal information is destroyed without delay once its purpose has been fulfilled or its retention period has ended. Electronic files are deleted by technical means that make recovery impossible, and paper documents are shredded or incinerated.
5. Providing personal information to a third party
As a rule, the Company does not provide users' personal information to third parties. The following cases are exceptions.
| Recipient | Purpose of Provision | Items to be Provided |
|---|---|---|
| KG Inicis | Payment processing and payment approval | Name, contact, email, payment (order) amount |
| KG Inicis | Identity verification (sign-up, guest checkout, order lookup) | Name, date of birth, gender, phone number, encrypted user verification value (CI) |
Otherwise, personal information is provided only with the user's prior consent, where the law requires it, or where an investigative agency requests it for an investigation following the procedures laid down by law.
6. Outsourcing of personal information processing
To keep the service running smoothly, we outsource some personal-information processing to the following companies.
| Processor | Outsourced task |
|---|---|
| Cloudflare, Inc. | Website hosting; storage and management of member, order, inquiry, booking and review information |
| Resend, Inc. | Sending order, shipping and review-request emails |
| Google LLC (Google Analytics, social login) | Service usage statistics analysis, Google account login |
| Microsoft Corporation (Clarity) | Service usage behavior analysis (heat map, etc.) |
| Kakao Corp. | Kakao account login, KakaoTalk channel chat |
| Naver Inc. | Naver account login |
7. Your rights as a data subject and how to exercise them
You may view or correct your registered personal information at any time, or withdraw your consent to its collection and use by deleting your account. To request access, correction, deletion or suspension of processing, contact the privacy officer below in writing, by phone or by email and we will act without delay.
8. Use of cookies and how to refuse them
We use cookies to provide services tailored to you. Cookies are used to keep you logged in and to analyze service usage statistics (Google Analytics, Microsoft Clarity), among other things. You can refuse cookies in your browser settings, but some services that require login may then not work properly.
9. Measures to ensure the safety of personal information
- Passwords are stored and managed in a one-way encrypted form (PBKDF2) that cannot be decrypted
- Access to personal information is limited to the minimum number of people
- Security software is installed and kept up to date to guard against hacking and similar threats
- Payment details (card numbers, etc.) are not stored on our servers; the payment gateway processes them directly
10. Privacy Officer
| Full name | Hyejin Jung |
|---|---|
| Position | CEO / Privacy Officer |
| Phone number | 0507-1339-5782 |
| [email protected] (two underscores) |
You may direct any privacy-related question arising from your use of our services to the privacy officer above.
11. Changes to this Privacy Policy
If this Privacy Policy is amended because of changes in law, policy or security technology, we will announce the changes on our website at least 7 days before they take effect.