Policy
Personal info
Processing policy
Information on personal information collected and used by Chireunsibill Co., Ltd.
Effective date: August 21, 2026 (Change of personal data storage location — correction of processing contractor, termination of Notion Labs outsourcing)
Chireunsibill Co., Ltd. (hereinafter referred to as the "Company") complies with relevant laws and regulations, including the Personal Information Protection Act, and establishes and discloses the following Privacy Policy to process users' personal information safely.
1. Personal information items to be collected and collection methods
| Division | Collection items | Collection method |
|---|---|---|
| Member registration and login | Email, password (encrypted storage), name ※ Social login (Kakao, Naver, Google): Email, Name (Nickname), Unique identifier issued by each service |
Home Page Sign-up/Social Login |
| Order·Payment | Name, contact, email, shipping address, order history ※ Card number and payment method information are not stored on the company server and are processed directly by the PG company (KG Inicis) |
Creating Order Form |
| Book class | Name, contact, email, desired date | Booking form writing |
| Inquiry/quote request | Name, contact, email, inquiry details | Inquiry/Estimate Form Creation |
| Identity verification | Name, date of birth, gender, phone number, encrypted user verification value (CI) | Member registration, non-member payment, and delivery inquiry requiring authentication (PASS, etc.) |
| AI counseling chatbot | Counseling conversation content (Q&A), anonymous browser identifier, usage page path ※ Please be careful not to enter personal information in the conversation content |
Automatically saved when using AI counseling |
| Automatically collected information | Access IP, cookies, visit time, service usage record, device/browser information | Automatically generated/collected during service use |
2. Purpose of collecting and using personal information
- Member Management: Identity verification, login, and misuse prevention for member-based service use
- Order·Payment·Delivery: Art Kit order processing, payment, shipping address check, shipping guide
- Booking · Class operation: One-day Class · On-site Class booking reception and schedule guide
- Inquiry/Consultation Response: Checking and answering inquiries, sending estimates
- Service improvement: Service quality improvement through access statistics analysis (Google Analytics, Microsoft Clarity)
- AI counseling record: used only for internal marketing purposes such as improving answer quality, planning products and services, and not provided to the outside.
3. Period of retention and use of personal information
We generally dispose of personal information after achieving the collection and use purpose, but we will retain it for a certain period in accordance with related laws.
| Storage item | Storage period | Grounds for legislation |
|---|---|---|
| Records related to contracts or subscription cancellations, etc. | 5 years | Consumer Protection Act in Electronic Commerce, etc. |
| Records of payment and supply of goods, etc. | 5 years | Consumer Protection Act in Electronic Commerce, etc. |
| Records of consumer complaints or dispute resolution | 3 years | Consumer Protection Act in Electronic Commerce, etc. |
| Display · Advertising Records | 6 months | Consumer Protection Act in Electronic Commerce, etc. |
| Member registration information (email, login information, etc.) | Until member withdrawal | - |
| Access log · IP | 3 months | Telecommunications Secrets Protection Act |
| AI counseling conversation record | 1 year (automatically deleted after expiration) | - |
| Product review (author name·rating·content·photo) | Until a request to stop posting. | - |
4. Procedure and method for destroying personal information
Personal information that has achieved its purpose or has passed its retention period will be destroyed without delay. Electronic files will be deleted using a technical method that cannot be recovered, and paper documents will be shredded or incinerated.
5. Providing personal information to a third party
The company does not provide users' personal information to external parties in principle. However, the following cases are exceptions.
| Recipient | Purpose of Provision | Items to be Provided |
|---|---|---|
| KG Inicis | Payment processing and payment approval | Name, contact, email, payment (order) amount |
| KG Inicis | Identity verification (membership registration, non-member payment, delivery inquiry) | Name, date of birth, gender, phone number, encrypted user verification value (CI) |
Otherwise, personal information can be provided only when the user has agreed in advance, or in accordance with the provisions of the law, or when there is a request from the investigative agency in accordance with the procedure and method prescribed by the law for investigative purposes.
6. Consignment of personal information processing
We outsource personal information processing tasks to the outside for smooth service operation.
| Trustee company | Consignment details |
|---|---|
| Cloudflare, Inc. | Website hosting, storage and management of member·order·inquiry·reservation·review information |
| Resend, Inc. | Send order, shipping, and review guide email |
| Google LLC (Google Analytics, social login) | Service usage statistics analysis, Google account login |
| Microsoft Corporation (Clarity) | Service usage behavior analysis (heat map, etc.) |
| Kakao (Co., Ltd.) | Kakao account login, KakaoTalk channel consultation |
| Naver Inc. | Naver account login |
7. Rights and obligations of the information subject and method of exercise
The user can withdraw their consent to the collection and use of personal information by viewing, modifying, or withdrawing their membership at any time. We will promptly take action on requests for personal information inquiry, modification, deletion, or suspension of processing in writing, by phone, or by email to the person in charge of personal information protection.
8. Operation and rejection of cookies
We use cookies to provide customized services to users. Cookies are used for login status maintenance, service usage statistics analysis (Google Analytics, Microsoft Clarity), etc. Users can refuse cookie storage through browser settings, but they may experience difficulties in using some services that require login.
9. Measures to ensure the safety of personal information
- Password is stored and managed in an encrypted form (PBKDF2) that cannot be decrypted.
- Limiting access to personal info to the minimum number of people
- Installation and update of security programs against hacking, etc.
- Payment information (card number, etc.) is not stored on the company server and is processed directly by the PG company
10. Personal Information Protection Officer
| Full name | Hyejin Jung |
|---|---|
| Position | CEO / Personal Information Protection Officer |
| Contact | 0507-1339-5782 |
| [email protected] |
Users can inquire about all personal information-related matters that occur while using the company's services to the person in charge of personal information protection.
11. Changes to the Personal Information Processing Policy
This personal information processing policy will be announced through the homepage 7 days before the implementation of changes, additions, deletions, and modifications due to changes in laws, policies, or security technologies.