Privacy Policy
Effective: 2026-07-13
VanaM Inc. (the "Company") complies with the Personal Information Protection Act of the Republic of Korea and establishes this Privacy Policy to protect users' personal information.
1. Purpose of Processing
The Company processes personal information solely for the following purposes. · Receiving and responding to inquiries and quote requests · Order processing, payment, delivery and settlement · Issuing tax invoices and other transaction records · Customer support and dispute resolution
2. Personal Information Collected
· Inquiries and quotes: name, email, phone, company, message · Orders and payment: purchaser and recipient name, phone, shipping address, email, payment details (method, approval number) · For tax invoices: business registration number, company name, representative name, contact email · Automatically collected: IP address, cookies, access time, usage records The Company does not directly collect or store card numbers or account passwords. Such data is handled by the payment gateway.
3. Retention Period
Personal information is destroyed without delay once the purpose of processing is achieved, except where retention is required by law. · Records of contracts and withdrawal of subscription: 5 years · Records of payment and supply of goods: 5 years · Records of consumer complaints or disputes: 3 years · Records of electronic financial transactions: 5 years · Access logs: 3 months · Inquiry and quote records: 3 years after the purpose is achieved
4. Provision to Third Parties
The Company does not provide personal information to third parties, except: · With the user's prior consent · When required by law through lawful procedures · When providing recipient details (name, phone, address) to the delivery carrier
5. Outsourcing of Processing
The Company outsources the following processing tasks. · Payment processing: Toss Payments Co., Ltd. · Website hosting and infrastructure: Cloudflare, Inc. · Delivery: contracted courier Data protection obligations are specified in each contract and compliance is supervised.
6. Rights of Data Subjects
Users may exercise the following rights at any time. · Request access to personal information · Request correction of errors · Request deletion · Request suspension of processing Requests may be made in writing or by email to the officer below, and the Company will act without delay.
7. Destruction of Personal Information
Personal information is destroyed without delay once the retention period expires or the purpose is achieved. · Electronic files: permanently deleted by irrecoverable means · Paper documents: shredded or incinerated
8. Security Measures
· Minimising and training staff who handle personal information · Managing access rights to personal information · Encryption in transit (HTTPS) · Retention of access logs and prevention of tampering · Payment data is handled by the payment gateway and is not stored by the Company
9. Data Protection Officer
· Name: Sudeok Han · Title: CEO · Email: hello@vanam.co.kr · Phone: +82-2-6951-0922
10. Remedies
For assistance with privacy infringements, you may contact: · Personal Information Infringement Report Center (privacy.kisa.or.kr / 118) · Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972) · Supreme Prosecutors' Office Cybercrime Division (spo.go.kr / 1301) · National Police Agency Cyber Bureau (ecrm.police.go.kr / 182)
11. Changes to This Policy
This policy takes effect on the stated date. Any additions, deletions or amendments will be announced on the website at least 7 days before taking effect.