WowKoreaService Co., Ltd. (the “Company”) applies the following policy to securely manage personal information of all users of its website.

Article 1 (Items Collected and Collection Methods)

The Company collects personal information—such as name, email address, mobile phone number, password, shipping address, and payment details—when you register as a member, place an order or payment, use customer support, or enter promotional events. We may also collect optional information, like your consent to marketing communications or your date of birth.

Article 2 (Purpose of Use)

Collected personal information will be used solely to provide and improve our services, including member management; processing orders, payments, and deliveries; handling chat support and defect or damage reports; conducting refund and exchange procedures; notifying you of promotions and events; and analyzing service usage patterns.

Article 3 (Retention Period and Disposal)

We will promptly destroy personal data once you withdraw your membership or the purpose for which the data was collected has been fulfilled. However, under the “Act on Consumer Protection in Electronic Commerce,” records of contracts, payments, and dispute resolutions are retained for up to five years, and under the “Protection of Communications Secrets Act,” log records are kept for three months. Upon disposal, electronic files are permanently deleted in an unrecoverable manner, and paper documents are shredded or incinerated.

Article 4 (Third-Party Provision and Outsourcing)

The Company may provide or outsource personal information to couriers and payment gateway providers (PG companies) for delivery and payment processing. Aside from these cases, we will disclose personal data to investigative agencies only when required by law. Details of each outsourced party—including their purpose and retention period—are maintained in a separate register and reviewed regularly.

Article 5 (User Rights and How to Exercise Them)

At any time, you may request to view, correct, or delete your personal information, suspend its processing, or withdraw consent by deleting your account, using our chat support, or emailing us. The Company will verify and fulfill your request without undue delay and will notify you of the outcome within 30 days at most.

Article 6 (Security Measures)

To protect personal information, the Company implements technical measures such as access controls, storing passwords as bcrypt hashes, and operating web application firewalls and intrusion detection systems, alongside administrative and physical measures including dedicated staff training and an internal management plan.

Article 7 (Policy Amendments)

If this Policy is amended, we will announce the reasons for change and the effective date at least seven days in advance via on-site notice and email. The revised Policy will take effect on the announced date.