Policy
Privacy
Policy
How Chireunsibill Co., Ltd. collects and uses personal information
Effective date: November 3, 2026 (purpose of use and retention period of subscription pre-registration information) · Previous policies: effective November 1, 2026 (subscription, subscription pre-registration and points information; outsourcing of KakaoTalk notification messages), effective October 27, 2026 (sign-up source and quote information collected; retention period for inquiry and quote records stated)
Notice of revision — the following changes take effect on November 3, 2026 (announced October 27, 2026)
- Purpose of use added: subscription pre-registration information is used to apply the pre-registration benefit (an extra kit in the first subscription box) — we match the mobile number left at pre-registration with the mobile number of the member who subscribes
- Retention period changed: subscription pre-registration information, previously destroyed after the launch notice, will be kept until November 30, 2026, when the pre-registration benefit period ends, and then destroyed
Notice of revision — the following changes take effect on November 1, 2026 (announced October 21, 2026)
- Items collected added: subscription (delivery address, subscription type, payment, delivery and class booking history, recurring-payment key, and optionally the birth year and gender of the child), subscription pre-registration information, and points earned and used
- Purposes added: running subscriptions, subscription planning, subscription launch notice, points management
- Retention periods added: the recurring-payment key and the child's information until the subscription is cancelled, pre-registration information deleted after the launch notice, and points history until you leave the membership
- Processing outsourced: KG Inicis — sending KakaoTalk notification messages (Kakao BizMessage)
Notice of revision — the following changes take effect on October 27, 2026 (announced October 20, 2026)
- Items added: sign-up source (referring site and ad link information) at membership registration, and the details of quotes customers download or print
- Purposes added: sign-up source analysis (measuring the effect of each promotion channel), preparing quote consultations
- Retention periods added: inquiry and quote records for 2 years from the date received (created); quotes saved to a member account until the member deletes them or closes the account
Chireunsibill Co., Ltd. (hereinafter referred to as the "Company") complies with relevant laws and regulations, including the Personal Information Protection Act, and establishes and discloses the following Privacy Policy to process users' personal information safely.
1. Personal information we collect and how we collect it
| Category | Items collected | Collection method |
|---|---|---|
| Member registration and login | Email, password (encrypted storage), name, sign-up source (referring site and ad link information) Note: for social login (Kakao, Naver, Google): email, name (nickname) and the unique identifier issued by each service |
Website sign-up / social login |
| Orders and payment | Name, contact, email, shipping address, order history ※ Payment details such as card numbers are not stored on our servers; they are processed directly by the payment gateway (KG Inicis). For subscriptions, we keep only the encrypted recurring-payment key (billing key) issued by the payment gateway, from which the card number cannot be derived. |
Checkout form |
| Subscription | Name, contact, email, delivery address, subscription type, payment, delivery and class booking history, recurring-payment key (billing key, stored encrypted) (Optional) Birth year and gender of the child who will use the subscription |
Subscription sign-up and payment method registration |
| Subscription pre-registration | Name, contact, email, subscription of interest, who it is for and the child's age group, preferred start time, requests | Pre-registration form |
| Points | History of points earned, used, taken back and expired | Generated automatically on purchase and refund |
| Class booking | Name, contact, email, desired date | Booking form |
| Inquiry/quote request | Name, contact, email, inquiry details | Inquiry / quote form |
| Create a quote | Company/organization name, project name, contact person, phone number, email, event venue/delivery address, preferred date, quote items, amounts and remarks | Saved automatically when a quote is downloaded or printed |
| Identity verification | Name, date of birth, gender, phone number, encrypted user verification value (CI) | Identity verification (PASS, etc.) at sign-up, guest checkout and order lookup |
| AI chat assistant | Chat content (questions and answers), anonymous browser identifier, pages visited Note: please do not enter personal information in the chat |
Saved automatically when you use the AI chat |
| Automatically collected information | IP address, cookies, time of visit, service usage records, device and browser information | Automatically generated/collected during service use |
2. Purpose of collecting and using personal information
- Member management: verifying identity, logging members in and preventing misuse of the member service
- Orders, payment and delivery: processing Art Kit orders and payments, confirming the shipping address, sending shipping notices
- Running subscriptions: recurring payments, delivery of subscription items, Regular Class schedule notices, cancellation and pause handling
- Subscription planning: putting together kits that suit the child's age and gender (optional; you can use the subscription without entering it)
- Subscription pre-registration: notice of the subscription launch and applying the pre-registration benefit (matched against the mobile number of the member who subscribes)
- Points management: earning, using and expiring points, expiry notices, preventing fraudulent earning
- Bookings and classes: taking bookings for One-day Classes and On-site Classes, sending schedule notices
- Inquiries: checking and answering inquiries, sending quotes
- Quote consultation preparation: keeping quotes that customers download or print and, if needed, having a staff member contact them (no automatic emails or KakaoTalk notification messages are sent)
- Service improvement: improving service quality by analyzing access statistics (Google Analytics, Microsoft Clarity)
- Sign-up source analysis: analysis of the effectiveness of each promotional channel
- AI chat history: used only internally, to improve answer quality and to plan products and services (marketing); never provided to third parties.
3. Period of retention and use of personal information
As a rule, we destroy personal information without delay once the purpose of collection and use has been achieved. Where the law requires us to keep it, we retain it for the periods below.
| Item retained | Retention period | Legal basis |
|---|---|---|
| Records of contracts and order cancellations | 5 years | Act on the Consumer Protection in Electronic Commerce, etc. |
| Records of payment and supply of goods, etc. | 5 years | Act on the Consumer Protection in Electronic Commerce, etc. |
| Records of consumer complaints or dispute resolution | 3 years | Act on the Consumer Protection in Electronic Commerce, etc. |
| Records of labeling and advertising | 6 months | Act on the Consumer Protection in Electronic Commerce, etc. |
| Member registration information (email, login information, etc.) | Until the account is deleted | - |
| Access logs and IP address | 3 months | Protection of Communications Secrets Act |
| AI chat history | 1 year (automatically deleted after expiration) | - |
| Inquiry and quote records (including quote details) | 2 years from the date received (created) (automatically destroyed afterward) ※ Records that led to an order or contract are kept for 5 years as the contract and payment records above | - |
| Quotes saved to a member account | Until the member deletes them or closes the account | - |
| Recurring-payment key (billing key) | Destroyed immediately when the subscription is cancelled | - |
| Birth year and gender of the child who uses the subscription | Until the subscription is cancelled | - |
| Subscription pre-registration information | Kept until November 30, 2026 (launch notice and pre-registration benefit period), then destroyed | - |
| Points history | Until the account is deleted ※ Records related to payments are kept for 5 years as payment records above | - |
| Product reviews (author name, rating, text, photos) | Until removal is requested | - |
4. Procedure and method for destroying personal information
Personal information is destroyed without delay once its purpose has been fulfilled or its retention period has ended. Electronic files are deleted by technical means that make recovery impossible, and paper documents are shredded or incinerated.
5. Providing personal information to a third party
As a rule, the Company does not provide users' personal information to third parties. The following cases are exceptions.
| Recipient | Purpose of Provision | Items to be Provided |
|---|---|---|
| KG Inicis | Payment processing and approval (including recurring payments) | Name, contact, email, payment (order) amount |
| KG Inicis | Identity verification (sign-up, guest checkout, order lookup) | Name, date of birth, gender, phone number, encrypted user verification value (CI) |
Otherwise, personal information is provided only with the user's prior consent, where the law requires it, or where an investigative agency requests it for an investigation following the procedures laid down by law.
6. Outsourcing of personal information processing
To keep the service running smoothly, we outsource some personal-information processing to the following companies.
| Processor | Outsourced task |
|---|---|
| Cloudflare, Inc. | Website hosting; storage and management of member, order, inquiry, booking and review information |
| Resend, Inc. | Sending order, shipping and review-request emails |
| KG Inicis | Sending KakaoTalk notification messages (Kakao BizMessage) — order, booking, subscription payment and point expiry notices |
| Google LLC (Google Analytics, social login) | Service usage statistics analysis, Google account login |
| Microsoft Corporation (Clarity) | Service usage behavior analysis (heat map, etc.) |
| Kakao Corp. | Kakao account login, KakaoTalk channel chat |
| Naver Inc. | Naver account login |
7. Your rights as a data subject and how to exercise them
You may view or correct your registered personal information at any time, or withdraw your consent to its collection and use by deleting your account. To request access, correction, deletion or suspension of processing, contact the privacy officer below in writing, by phone or by email and we will act without delay.
8. Use of cookies and how to refuse them
We use cookies to provide services tailored to you. Cookies are used to keep you logged in and to analyze service usage statistics (Google Analytics, Microsoft Clarity), among other things. You can refuse cookies in your browser settings, but some services that require login may then not work properly.
9. Measures to ensure the safety of personal information
- Passwords are stored and managed in a one-way encrypted form (PBKDF2) that cannot be decrypted
- Access to personal information is limited to the minimum number of people
- Security software is installed and kept up to date to guard against hacking and similar threats
- Payment information (card numbers, etc.) is not stored on our servers and is processed directly by the payment gateway (the recurring-payment key for subscriptions is stored encrypted)
10. Privacy Officer
| Full name | Hyejin Jeong |
|---|---|
| Position | CEO / Privacy Officer |
| Phone number | 0507-1339-5782 |
| [email protected] (two underscores) |
You may direct any privacy-related question arising from your use of our services to the privacy officer above.
11. Changes to this Privacy Policy
If this Privacy Policy is amended because of changes in law, policy or security technology, we will announce the changes on our website at least 7 days before they take effect.