Legal
Privacy Policy
Effective: June 12, 2026
더단장 ("the Company") has established and discloses this Privacy Policy in accordance with the Personal Information Protection Act and other applicable law, to protect users' personal information and promptly handle related grievances.
Article 1 (Purposes of Processing Personal Information)
- Membership registration and management: identity verification, member identification, managing terms-agreement history, preventing fraudulent use
- Product sales and shipping: order processing, payment, delivery, exchange, refund, and customer support
- Rental service operation: confirming rental schedules, return notices, and settlement/notice for late returns, damage, soiling, or loss
- Customer support: handling inquiries, complaints, and disputes
- Marketing and benefit notices: sending coupons, events, KakaoTalk alerts, SMS, and email (with opt-in consent)
Article 2 (Personal Information Items Processed)
| Category | Items Processed | Purpose | Retention Period |
|---|---|---|---|
| Membership | Name, email, mobile number, password, terms-agreement history | Member identification, login, identity verification, service provision | Until membership withdrawal |
| Orders, shipping | Orderer and recipient name, contact, shipping address, order and payment history | Product delivery, payment processing, exchange, refund, customer support | 5 years |
| Rental | Rental product, date of use, expected return date, return history, records of late return, damage, soiling, or loss | Fulfilling the rental agreement, return management, cost settlement, dispute handling | 5 years after contract ends |
| Marketing | Name, email, mobile number, coupon and consent history | Sending coupons, events, benefit notices, and alerts | Until consent is withdrawn |
Article 3 (Retention and Use Period of Personal Information)
The Company destroys personal information without delay once the purpose of processing has been achieved. However, information required to be kept under applicable law is retained for the following periods.
- Records on contracts or withdrawal of subscription: 5 years
- Records on payment and supply of goods: 5 years
- Records on consumer complaints or dispute resolution: 3 years
- Login records and other communication confirmation data: as prescribed by applicable law
Article 4 (Provision of Personal Information to Third Parties)
The Company does not, in principle, provide users' personal information to third parties. However, within the minimum scope necessary for legal obligations, users' separate consent, or fulfilling a contract such as shipping or payment, information may be provided as described below.
| Recipient | Purpose | Items Provided | Retention Period |
|---|---|---|---|
| Courier companies handling delivery | Product delivery, return, exchange, rental item collection | Recipient name, contact, shipping address | Retention period under applicable law after delivery is completed |
| Relevant authorities | Legal requests, dispute handling, protection of rights | Minimum information necessary for the request or dispute handling | As prescribed by applicable law |
Article 5 (Outsourcing of Personal Information Processing)
The Company may outsource necessary tasks to external providers to deliver the service smoothly, and manages and supervises such providers to ensure personal information is handled securely under outsourcing agreements.
| Provider | Outsourced Task |
|---|---|
| Supabase Inc. | Database, authentication, file storage, and other service infrastructure |
| Vercel Inc. | Website hosting and server operation |
| Toss Payments | Payment approval, cancellation, refund, and payment history management |
| Courier companies handling delivery | Product delivery, return, exchange, rental item collection |
| Kakao business messaging and SMS delivery agencies | Sending KakaoTalk alerts and text messages for orders, shipping, rental schedules, returns, and coupon notices |
| CoolSMS, Lunasoft, and other connected delivery agencies | Re-outsourcing or supporting the delivery of KakaoTalk alert/friend talk messages and SMS |
Article 6 (Destruction of Personal Information)
The Company destroys personal information without delay once the retention period has elapsed or the processing purpose has been achieved. Electronic files are deleted using methods that prevent recovery, and paper documents are shredded or incinerated.
Article 7 (Users' Rights and How to Exercise Them)
Users may request access to, correction of, deletion of, suspension of processing of, or withdrawal of consent for their personal information at any time. The Company will act without delay after verifying identity, in accordance with applicable law.
Article 8 (Measures to Ensure the Security of Personal Information)
- Minimizing and managing access privileges to personal information
- Encrypting or securely storing authentication information such as passwords
- Access control and security checks for the service operating environment
- Managing and supervising outsourced personal information processors
Article 9 (Use of Cookies)
The Company uses essential cookies to maintain login sessions, perform security authentication, and operate the service. Users may refuse cookies in their browser settings, but this may restrict the use of certain services such as login.
- Essential cookies: maintaining login sessions, authentication, and security — required for the service to function
- Analytics cookies: collecting service usage statistics (applied only with opt-in consent)
Article 10 (Overseas Transfer of Personal Information)
The Company may transfer users' personal information overseas as described below.
| Recipient | Country | Purpose | Retention Period |
|---|---|---|---|
| Supabase Inc. | United States, Singapore | Database, authentication, file storage | Until membership withdrawal |
| Vercel Inc. | United States | Website hosting and server operation | Until the processing purpose is achieved |
| Google LLC | United States | Google social login authentication | Destroyed immediately after authentication |
| Naver Corporation | Republic of Korea | Naver social login authentication | Destroyed immediately after authentication |
Article 11 (Personal Information of Children Under 14)
The Company's service is intended for users aged 14 and older. The Company does not collect personal information from children under 14, and will refuse any attempt by a child under 14 to register as a member or use the service. If personal information of a child under 14 is found to have been collected, it will be destroyed immediately.
Article 12 (Personal Information Protection Officer)
Officer: Kiguk Ryu
Email: contact@thedanjang.com
Article 13 (Remedies for Infringement of Rights)
- Personal Information Dispute Mediation Committee: 1833-6972
- Privacy Violation Report Center: 118
- Supreme Prosecutors' Office: 1301
- National Police Agency: 182
Article 14 (Marketing Consent)
The items collected, content sent, retention period, and withdrawal method for optional marketing consent follow the Marketing Consent notice.
Privacy inquiries: contact@thedanjang.com