Products Cart (0)

Your cart is currently empty.

Home/Support/Privacy Policy

Privacy Policy

Cerulea (hereinafter referred to as “the Company”) values the personal information of its customers and is committed to protecting it at all times. The Company complies with relevant personal information protection regulations under the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection (hereinafter referred to as the “Information and Communications Network Act”). This privacy policy is published on the Company’s website to ensure that customers can easily access it at any time.

The Company may revise this privacy policy as needed, in accordance with changes in government laws and guidelines. The amended privacy policy applies to web/mobile web/mobile app services provided by the Company and outlines the necessary procedures for continuous improvement. This privacy policy informs users of the purposes and methods of personal information usage and the measures taken by the Company to protect it.

Purpose of Collecting and Using Personal Information

The Cerulea online shopping mall brand, operated by the Company, collects and uses personal information for the following purposes:

  1. Service Provision and Operation: Providing services, content, member management, identity verification, payment processing, and delivery.
  2. Customer Management: Customer support, complaint handling, and delivering notices.
  3. Marketing and Advertising: Providing information about events and advertisements, analyzing access frequency, and creating statistics on member service usage.

Items of Personal Information Collected

The Company collects the following personal information to provide its services:

  • Required Information: Name, ID, password, password hint and answer, mobile phone number, address, email, date of birth, home phone, SMS/email receipt status.
  • Optional Information: Address, payment information, service usage records, access logs, cookies, access IP information.

Retention and Use Period of Personal Information

The Cerulea online shopping mall brand retains and uses personal information from the time of the service contract (membership registration) until the service contract is terminated (withdrawal request or membership expulsion). Personal information is destroyed without delay once the purpose of collection and use is fulfilled. However, personal information may be retained for a specified period according to relevant laws to confirm transaction-related rights and obligations.

[Retention of Personal Information Under Relevant Laws]

Related Law Retention Items Retention Period
Act on Consumer Protection in Electronic Commerce Display and advertisement records 6 months
Records of contracts or withdrawal of contracts 5 years
Records of payment and supply of goods 5 years
Records of consumer complaints or dispute resolution 3 years
Protection of Communications Secrets Act Computer communication and Internet log records, access tracking data 3 months

Procedures and Methods for Destroying Personal Information

The Cerulea online shopping mall brand destroys personal information without delay after the purpose of collection and use is fulfilled. The destruction procedures and methods are as follows:

  • Destruction Procedures: Personal information is transferred to a separate database and destroyed after being stored for a certain period according to internal policies and relevant laws. Information in the separate database is not used for any other purposes except when required by law.
  • Destruction Methods: Personal information stored in electronic files is permanently deleted using technical methods that prevent recovery or regeneration. Personal information printed on paper is shredded or incinerated.

Provision of Personal Information to Third Parties

The Cerulea online shopping mall brand uses personal information within the scope notified under the “Scope and Purpose of Collection and Use of Personal Information” section and does not provide it to third parties without the user’s prior consent. However, exceptions are made in the following cases:

  1. When the user has given prior consent.
  2. When required by law or necessary for investigative purposes.
  3. When necessary for payment processing related to transactions.
  4. When legally required for other reasons.
  5. During a business transfer or merger.

Note: In the event of a business transfer or merger, the Company will notify customers of the personal information transfer in advance and provide an opportunity to withdraw consent.

Outsourcing of Personal Information Processing

The Cerulea online shopping mall brand may outsource personal information processing to external specialized companies to improve services. Members’ consent will be obtained, or relevant details will be disclosed. The following is a list of trustees and their respective tasks:

Trustee Entrusted Task
NICE Payments Co., Ltd. Payment services (via Codem)
KakaoPay Co., Ltd. Easy payment services
Kakao Corp. Kakao login services

Users’ Rights and Methods of Exercise

The Company provides simple procedures to allow users to view, correct, or withdraw consent to the use of their personal information. Customers (or legal representatives) can access or correct their personal information at any time and can withdraw consent through membership withdrawal procedures.

  • View and Modify: Log in and go to My Page > Profile (Member Information Management).
  • Delete and Withdraw Membership: Log in and go to My Page > Profile (Member Information Management) > Membership Withdrawal.
  • Withdraw Consent (Email/SMS Receipt): Log in and go to My Page > Profile (Member Information Management) > Modify Member Information.

For users who have registered through a simplified process, they need to log in as simplified members to withdraw their membership. If users request corrections or deletion of incorrect information, the Company will not use the personal information until the process is completed.

Installation, Operation, and Refusal of Automatic Information Collection Devices

The Company uses “cookies” to store and retrieve user information. Cookies are small text files stored on the user’s computer and used to analyze access frequency, track usage, and provide personalized services.

  • How to Refuse Cookies: Users can set their browser to allow all cookies, receive alerts before cookies are saved, or refuse to save cookies entirely.
  • Internet Explorer: Tools > Internet Options > Privacy > Advanced > Cookies settings.
  • Chrome: Settings > Advanced > Privacy and Security > Cookies.

Technical and Administrative Measures for Protecting Personal Information

The Company takes the following measures to ensure that personal information is not lost, stolen, leaked, altered, or damaged:

  1. Technical Measures: Password protection, file encryption, virus protection, and network security using SSL.
  2. Administrative Measures: Limiting access to personal information, conducting regular employee training on privacy, and controlling access to sensitive areas.

Contact Information

If you have any concerns or complaints related to personal information, you can contact the following:

The Company will respond promptly to inquiries and reports.

Additional Resources for Personal Information Infringement

  • Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
  • Personal Information Infringement Report Center: www.privacy.kisa.or.kr / 118
  • Cyber Security Bureau of the Police: cyberbureau.police.go.kr / 182
  • Supreme Prosecutors’ Office Cyber Investigation Division: www.spo.go.kr / 1301

Notification of Privacy Policy Changes

In the event of changes to the privacy policy due to laws or security technologies, the Company will notify users at least 30 days before the changes take effect.

Effective Date: June 16, 2024.

Popup Sticky