Privacy Policy

Article 1 (Purpose of Processing Personal Information)

ShortieSoo Inc. (hereinafter the "Company") processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than those stated below, and if the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Membership registration and management: Verifying intent to register, providing membership services, and identifying and authenticating members
2. Service provision: Providing content, offering personalized services, and identity verification
3. Complaint handling: Verifying the identity of the complainant, confirming the details of the complaint, and contacting and notifying for fact-finding

Article 2 (Processing and Retention Period of Personal Information)

1. The Company processes and retains personal information within the retention and use period required by law or the retention and use period agreed upon when collecting personal information from the data subject.
2. The processing and retention periods for each type of personal information are as follows.

Article 3 (Rights and Obligations of Data Subjects and How to Exercise Them)

1. Data subjects may exercise their rights at any time, including the right to access, correct, delete, and request suspension of processing of their personal information with respect to the Company.
2. The exercise of rights under Paragraph 1 may be made in writing, by email, or by fax in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the Company will act on such requests without delay.
3. The exercise of rights under Paragraph 1 may be carried out through a representative, such as the data subject's legal guardian or an authorized agent. In this case, you must submit a power of attorney in the form of Attachment No. 11 of the Enforcement Rules of the Personal Information Protection Act.

Article 4 (Items of Personal Information Processed)

1. The Company processes the following personal information items.
2. Required items: name, email address, password, date of birth, gender, and contact number
3. Optional items: address and profile photo

Article 5 (Destruction of Personal Information)

1. When personal information becomes unnecessary due to the expiration of the retention period or the fulfillment of the processing purpose, the Company destroys the relevant personal information without delay.
2. If personal information must continue to be retained under other laws even after the agreed retention period has expired or the processing purpose has been fulfilled, the Company stores such personal information in a separate database (DB) or in a different storage location.
3. The procedures and methods for destroying personal information are as follows. Destruction procedure: The Company identifies the personal information for which grounds for destruction have arisen and destroys the personal information with the approval of the Company's Chief Privacy Officer.

Article 6 (Measures to Ensure the Security of Personal Information)

The Company takes the following measures to ensure the security of personal information.

1. Administrative measures: Establishing and implementing an internal management plan and conducting regular employee training
2. Technical measures: Managing access permissions to the personal information processing system and installing an access control system
3. Physical measures: Controlling access to server rooms, data storage rooms, and similar areas