Privacy Policy
General
- The Company is using its best efforts to provide smooth and convenient services. The Company takes measures for the protection of user’s personal information in compliance with the Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc. (the “Information Network Act”) and the Personal Information Protection Act, among other applicable laws and regulations related to the protection of personal information.
- The Policy is displayed in the application for the user’s ease of reference.
The Policy is subject to change pursuant to changes in the applicable laws or regulations or changes in the Company’s internal policy. When such change is made, the Company will immediately notify the change and the reason for such change through the application.
- The term “personal information” means information pertaining to a living individual, which identifies a specific person with a name, a national identification number, or similar information in the form of a code, letters, voice, sound, motion picture, or any other form (including information that makes it impracticable to identify a specific person by itself, but that enables one to identify such person easily if combined with other information).
- The Company will use personal information within the scope notified in “1. Personal Information Collected and Collection Method” and “2. Purpose of Collection and Use of Personal Information.” The Company will seek users’ consent in the event of any use outside of such scope or any change in such scope. The same applies for changes in the retention and use period of personal information or the provision or consignment of handling personal information to a third party; users will be informed about major changes and their consent will be obtained through internet pages, telephone, e-mail, etc. However, the Company may provide notice to users without their consent when certain legal exceptions apply, such as “if it is necessary to provide the service by contract with the user and it is difficult to obtain consent,” “when necessary for settlement of charges” or “when special provisions in other laws apply”.
1. Personal Information Collected and Collection Method
When a user uses the service, the following personal information of the user may be collected.
- Method of collection: mobile, e-mail, written document, telephone
- Information collected: ID, password, nickname, gender, age, profile photo, e-mail address, name, mobile phone number, carrier information, device information (ID, model name, OS type and version), app use and access record, authentication record, transaction record, date and time of access record, service abuse record, address, voice information, service use record (correct and wrong answer rate, etc.)
2. Purpose of Collection and Use of Personal Information
The purpose of collection and use of personal information collected by the Company is as follows.
Member management
- Personal identification for use of service: ID, e-mail address, password
- Complaint management: ID, e-mail address, mobile phone number, name
Performance of contracts for the provision of services and settlement of fees
- Provision of content: ID, password, nickname, gender, age, profile photo, e-mail address, name, mobile phone number, carrier information, device information (ID, model name, OS type and version), app use and access record, authentication record, transaction record, date and time of access record, service abuse record
- Use of paid information and payment: transaction record
Use in events and marketing
- Events: name, e-mail address, mobile phone number, address
- Marketing: carrier information, device information, app use and access record, service abuse record
Provision to third parties
- Use in third party marketing or product development: age, gender, location, voice information, app use and access record, authentication record, transaction record, service usage record
3. Retention and Use Period of Personal Information
In principle, after the purpose of collecting and using personal information is achieved, the Company will immediately destroy such information. However, the following information will be retained for the “retention period” for the reasons specified under “retention grounds”.
- Retained information: ID, password, nickname, gender, age, profile photo, e-mail address, name, mobile phone number, app use and access record, transaction record, service abuse record
- Retention grounds: to resolve consumer dissatisfaction or disputes when a user withdraw membership
- Retention period: 30 days
If necessary pursuant to the Commercial Code or other applicable laws and regulations related to consumer protection in e-commerce, the Company may retain personal information for a period exceeding the periods set forth in such laws or regulations. In such case, the Company will retain such personal information only according to the purpose for which they are retained for the “retention period” and for the reasons specified in “retention grounds”.
Record of withdrawal from agreement or subscription
- Retention grounds: applicable laws and regulations related to consumer protection in e-commerce
- Retention period: 5 years
Record of payment and supply of goods, etc.
- Retention grounds: applicable laws and regulations related to consumer protection in e-commerce
- Retention period: 5 years
Records of consumer complaints or disputes
- Retention grounds: applicable laws and regulations related to consumer protection in e-commerce
- Retention period: 3 years
4. Method and Procedures for Destruction of Personal Information
In principle, after the purpose of collecting and using personal information is achieved, the Company will immediately destroy such information. The method and procedures of destruction is as follows:
Destruction procedure
- After retaining personal information during the retention period according to the retention grounds, the Company destroys it in a manner where it cannot be restored.
Destruction method
- Personal information stored in electronic file format is deleted using a technical method where such records cannot be restored.
- Personal information printed on paper is destroyed by a shredder.
5. Providing and Sharing Personal Information
In principle, the Company does not provide users’ personal information to third parties with the following exceptions:
- When the user provides prior consent;
- When it is necessary to settle payment for the providing of services;
- When required by applicable laws related to information and communications, or when there is a request from an investigating agency for the purpose of investigation in accordance with the procedures and methods set forth in applicable law; or
- If it is necessary for statistical purposes, academic research or market research, and is processed in a form in which a specific individual cannot be identified.
The Company may, with the prior consent of the user, provide the user’s personal information to the following third party recipients, for payment or free of charge.
- Third party recipients: [Kakao], [Samsung Electronics], [Naver], [Line], [SK Telecom], [KT], [LG], [Google], [Amazon], [Apple]
- Entities currently under a contractual relationship with the Company are included.
- Any change in the third party recipients will be notified pursuant to the Policy from time to time.
- Purpose of use of personal information received by third parties: [Promoting products and services, market research, service research and development, etc.]
- Personal information provided: [e-mail address, age, gender, address, ID, voice information, service usage record]
- Retention and use period of personal information of third party recipients: until the withdrawal of membership or the cancellation of the agreement with the third party recipient.
6. Consignment of Collected Personal Information
The Company may consign the handling of personal information to external professional service providers to provide users with professional services.
- Consignee: None
- Consignment Services: complaint handling, customer support
terms/privacy/a6/2
- terms/privacy/a6/2-1
- terms/privacy/a6/2-2
- terms/privacy/a6/2-3
7. Rights of Users and Legal Representatives and How They are Exercised
- Users and users’ legal representatives may withdraw their consent to the collection of personal information via written notice, telephone, e-mail, etc. In such case, after the Company verifies the user’s identity, the Company will, except as otherwise provided by law, destroy such personal information or take any other necessary measures. If personal information is destroyed due to membership withdrawal, related information generated and accumulated by the user when using the company’s services may also be destroyed.
- In the event that a legal representative of a user visits the Company and requests access or a modification of personal information, the Company will verify whether the legal representative is duly authorized and may require the applicant to show proof of legal representation.
- In the event that the Company has justifiable reasons to refuse a request to access or modify the user’s personal information in whole or in part, the Company will notify the user without delay and explain the reasons for the rejection.
8. Installation, Operation, and Rejection of the Automatic Collection of Personal Information
- In order to provide customized services tailored to the user, the Company utilizes ‘cookies’ (access information files), which store and retrieve information of members from time to time. The Company identifies members’ computers and mobile phones in connection with the operation of cookies but does not personally identify members.
- Users have the option to allow or disallow the use of cookies. You can choose to allow or disallow all cookies through the settings option on your mobile device. However, if you refuse to store all cookies, you may not be able to use the services provided by the Company through cookies.
9. Technological and Administrative Protection Measures for Personal Information
In handling personal information of users, the Company takes technical and administrative measures to ensure the security of personal information and prevent such information from being lost, stolen, leaked, altered or damaged.
Technological measures
- The personal information of users is encrypted and cannot be known except by the user, and the user’s personal information can be confirmed and changed only by the user’s request.
- The Company securely transmits personal information over the network through encrypted communication.
- The Company does its best to prevent personal information from being leaked or damaged by hacking or computer viruses.
- The Company periodically backs up personal information in case of emergency and takes measures to prevent damage from computer viruses by using a vaccine program.
- The Company continuously strives to enhance security through measures such as access control, authority management, and vulnerability checks on the system.
Administrative measures
- The Company restricts access to users’ personal information to a minimal number of persons, as follows.
- Those who perform marketing, events, customer support, service operation, and delivery work directly to the user (including consignees and employees of partner companies).
- Persons in charge of personal information management and other personnel that handle personal information-related tasks.
- Those who are unavoidably required to handle personal information for business purposes.
- The Company conducts regular training regarding personal information protection obligations for personnel that handle personal information.
- The Company makes efforts to ensure that the department in charge of personal information protection is in compliance with the Policy and internal regulations, and if an issue is discovered, to rectify the issue immediately.
- The Company is not responsible or liable for any damages caused by leakage of personal information such as name, password, etc. attributable to a user’s negligence or issues arising from the internet.
10. Civil Service Related to Personal Information
In order to protect users’ personal information and to handle complaints related to personal information, the following individual is designated as the personal information manager.
Personal information manager
- Company: CatchItPlay Inc.
- Name: Sung Chul Park
- E-mail: support@catchitplay.com
Users may notify the personal information manager of any personal information related complaints that occur when using the Company’s services. The Company will respond promptly and sufficiently to the user’s report. Please contact the following organizations if you need to report or receive consultation regarding other personal information related infringement.
- E-Commerce Mediation Committee (www.ecmc.or.kr / 1661-5714)
- Korea Online Privacy Association (www.eprivacy.or.kr / 02-580-0533)
- KISA (privacy.kisa.or.kr / 02-405-5118)
- Korean National Police Agency Cyber Bureau (http://cyberbureau.police.go.kr/ / 02-392-0330)
- Korea Communications Standards Commission (www.singo.or.kr / 1377 (no area code))
11. Linked Sites
The Company may provide users with links to other companies’ websites or materials. The Company has no control over external sites and materials and cannot be held responsible for any damages in connection with the use of the services or materials provided by such external sites. If a user taps a link included by the Company and moves to a page of another site, please check the privacy policy of such site as such policy will have no relation whatsoever to the Company.
12. Miscellaneous
If a part of the Policy is deleted or modified pursuant to changes in applicable law or security technology, such changes and the reasons for such changes will be notified in advance in the application.
- Effective Date: February 18,2019