Privacy Policy
Effective: 2026-08-10
VanaM Inc. (the "Company") complies with the Personal Information Protection Act of the Republic of Korea and establishes this Privacy Policy to protect users' personal information.
1. Purpose of Processing
The Company processes personal information solely for the following purposes. · Receiving and responding to inquiries and quote requests · Order processing, payment, delivery and settlement · Issuing tax invoices and other transaction records · Customer support and dispute resolution
2. Personal Information Collected
· Inquiries and quotes: name, email, phone, company, message · Orders and payment: purchaser and recipient name, phone, shipping address, email, payment details (method, approval number) · For tax invoices: business registration number, company name, representative name, contact email · Automatically collected: IP address, cookies, access time, usage records The Company does not directly collect or store card numbers or account passwords. Such data is handled by the payment gateway.
3. Retention Period
Personal information is destroyed without delay once the purpose of processing is achieved, except where retention is required by law. · Records of contracts and withdrawal of subscription: 5 years · Records of payment and supply of goods: 5 years · Records of consumer complaints or disputes: 3 years · Records of electronic financial transactions: 5 years · Access logs: 3 months · Inquiry and quote records: 3 years after the purpose is achieved
4. Provision to Third Parties
The Company does not provide personal information to third parties, except: · With the user's prior consent · When required by law through lawful procedures · When providing recipient details (name, phone, address) to the delivery carrier
5. Outsourcing of Processing
The Company outsources the following processing tasks. Some processors are located overseas; pursuant to Article 28-8 of the Personal Information Protection Act, the cross-border transfers are disclosed below. You may refuse such transfer by discontinuing use of the service or contacting us, in which case payment, notification and related features may be limited. · Website hosting & security infrastructure: Cloudflare, Inc. (USA) — Items: access logs and transit of information entered on the site / When & how: continuous transmission over the network while using the service / Retention: until the outsourcing contract ends · International payment processing: PayPal Pte. Ltd. and its affiliates (USA, Singapore, etc.) — Items: name, email, payment details / When & how: transmitted when PayPal checkout is selected / Retention: per PayPal's privacy policy · Intake notifications: Google LLC (USA, Google Chat) — Items: name, email, phone, company, request details, shipping address / When & how: transmitted upon order, quote or inquiry submission / Retention: until the notification purpose is fulfilled (subject to Google Chat retention settings) · Delivery: contracted courier (Korea) — recipient name, phone, address Data protection obligations are specified in each contract and compliance is supervised.
6. Rights of Data Subjects
Users may exercise the following rights at any time. · Request access to personal information · Request correction of errors · Request deletion · Request suspension of processing Requests may be made in writing or by email to the officer below, and the Company will act without delay.
7. Destruction of Personal Information
Personal information is destroyed without delay once the retention period expires or the purpose is achieved. · Electronic files: permanently deleted by irrecoverable means · Paper documents: shredded or incinerated
8. Security Measures
· Minimising staff who handle personal information · Managing access rights to the admin console · Encryption in transit (HTTPS) · Retention of access logs · Payment data is handled by the payment gateway and is not stored by the Company
9. Data Protection Officer
· Name: Sudeok Han · Title: CEO · Email: hello@vanam.co.kr · Phone: +82-2-6951-0922
10. Remedies
For assistance with privacy infringements, you may contact: · Personal Information Infringement Report Center (privacy.kisa.or.kr / 118) · Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972) · Supreme Prosecutors' Office Cybercrime Division (spo.go.kr / 1301) · National Police Agency Cyber Bureau (ecrm.police.go.kr / 182)
11. Changes to This Policy
This policy takes effect on the stated date. Any additions, deletions or amendments will be announced on the website at least 7 days before taking effect.
12. Children Under 14
The Company does not collect or use personal information of children under 14. The service is intended for businesses and adult researchers. If such information is found to have been collected, it will be destroyed without delay.