Privacy Policy

In accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea, Batterfly Co., Ltd. (the “Company”) establishes and discloses this Privacy Policy to protect the personal information of data subjects and to handle related complaints promptly.

Article 1 (Purposes of Processing Personal Information)

The Company processes personal information for the following purposes. Personal information being processed will not be used for any purpose other than those listed below, and if the purposes change, the Company will obtain prior consent.

Membership registration and management: confirming the intent to register, providing membership services, identity verification, preventing fraudulent use, etc.

Provision of goods or services: delivery of goods, provision of services, sending contracts and invoices, etc.

Handling of complaints: verifying the identity of the complainant, reviewing the complaint, notifying the results, etc.

Article 2 (Processing and Retention Period of Personal Information)

The Company processes and retains personal information within the retention and use period required by law or the period consented to by the data subject at the time of collection.

The specific retention and use periods are as follows.

1) Membership registration and management: until membership withdrawal (however, if there are outstanding claims or debts, up to 6 months after termination)
2) Records of e-commerce contracts and withdrawal of offers: 5 years (Act on the Consumer Protection in Electronic Commerce)
3) Records of consumer complaints and dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce)

Article 3 (Provision of Personal Information to Third Parties)

The Company processes personal information only within the scope of the purposes stated in Article 1, and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or under special provisions of law.

Recipient: [Name of receiving organization/company]

Purpose of provision: [Recipient’s purpose of use]

Items provided: [Name, contact number, email, etc.]

Retention and use period: [Recipient’s retention period]

Article 4 (Outsourcing of Personal Information Processing)

To provide services smoothly, the Company outsources personal information processing tasks as follows.

Outsourced company: [Courier company, payment gateway (PG) provider, etc.]

Outsourced tasks: [Product delivery, payment processing, etc.]

Article 5 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them)

Data subjects may at any time exercise their rights against the Company, including requests to access, correct, delete, or suspend the processing of their personal information.

These rights may be exercised in writing, by email, or by other means, and the Company will take action without delay.

Article 6 (Measures to Ensure the Security of Personal Information) and Privacy Officer

The Company takes administrative, technical, and physical measures (establishing an internal management plan, encryption, access control, etc.) to ensure the security of personal information.

Detailed information on inquiries and reporting agencies can be found on the CELA website.