Privacy Policy

Company Name: iamandy.net (아엠엔디닷넷)
Website: koreanlearn.net
Version: v1
Announcement Date: August 7, 2026
Effective Date: August 7, 2026

iamandy.net (아엠엔디닷넷), hereinafter referred to as the “Company,” provides community and online shopping services through koreanlearn.net and places great importance on protecting users’ personal information.

The Company complies with applicable laws and regulations, including the Personal Information Protection Act and the Act on the Consumer Protection in Electronic Commerce, and explains below the purposes for which personal information is collected and used and how such information is retained and destroyed.

Article 1. Purposes of Processing Personal Information

The Company processes personal information for the following purposes.

The Company will not use personal information for purposes other than those stated below. If the purposes of use change, the Company will take necessary measures, including obtaining additional consent where required by applicable law.

1. Membership Registration and Management

Confirming the user’s intention to register
Identifying and authenticating members
Maintaining and managing membership status
Preventing unauthorized use and duplicate registration
Protecting accounts and resetting passwords
Delivering notices and service-related information
Handling member inquiries and disputes

2. Provision of Community Services

Creating and displaying posts, comments, and product reviews
Displaying the author’s username or nickname
Receiving and processing reports concerning posts
Preventing illegal or harmful content and spam
Handling disputes between users
Maintaining proper use of the Service
Enforcing membership restrictions and preventing unauthorized use

3. Product Orders and Delivery

Receiving and confirming product orders
Identifying purchasers and recipients
Delivering products and providing delivery status information
Processing order changes and cancellations
Processing exchanges, returns, and refunds
Managing purchase history
Providing customer support and handling disputes

4. Payments and Refunds

Processing payment for products
Approving payments and confirming payment results
Issuing cash receipts and other transaction documents
Processing payment cancellations and refunds
Preventing fraudulent payments and financial incidents

5. Customer Inquiries and Reports

Identifying the person submitting an inquiry or report
Receiving inquiries, reports, and complaints
Providing responses and processing results
Resolving disputes and retaining related records

6. Service Operation and Security

Reviewing access records
Analyzing service errors
Preventing abnormal access and unauthorized use
Preventing and responding to security incidents
Improving service quality
Producing service usage statistics

Article 2. Categories of Personal Information Processed

The Company may process the following personal information to the extent necessary to provide the Service.

1. Membership Registration and Management

Required information

Email address
Password
Username or nickname

Optional information

Name
Mobile phone number
Profile image
Personal introduction

When using social login

User identification value assigned by the social login provider
Email address
Name or nickname
Profile image

The Company stores passwords using encryption or a secure one-way hashing method that prevents them from being restored to their original form.

2. Community Services

Username or nickname
Posts and comments
Product reviews
Attached images and files
Date and time of posting
Report details and processing history
Usage restrictions and enforcement records
IP address

Information voluntarily posted by users in the community, including usernames, posts, comments, product reviews, and images, may be visible to other users.

Users should avoid including unnecessary personal information, such as addresses, telephone numbers, or bank account numbers, in posts or comments.

3. Orders and Delivery

Purchaser’s name
Purchaser’s mobile phone number
Purchaser’s email address
Recipient’s name
Recipient’s mobile phone number
Delivery address
Delivery instructions
Ordered products and order history

4. Payments and Refunds

Payment method
Payment amount
Payment date and time
Payment approval number
Payment, cancellation, and refund status
Where required for a refund: bank name, account number, and account holder’s name

Certain information required for payment, including credit card details, may be processed directly by a payment service provider and may not be stored directly by the Company.

5. Inquiries and Reports

Name or nickname
Email address
Mobile phone number
Inquiry or report details
Response and processing history
Attached files

6. Information Automatically Generated During Use of the Service

IP address
Cookies
Access date and time
Service usage records
Unauthorized usage records
Browser type
Operating system and device information
Error records

Article 3. Retention and Use Period of Personal Information

The Company destroys personal information without undue delay when the purpose of processing has been fulfilled or the applicable retention period has expired.

However, information that must be retained under applicable law will be stored separately from other personal information for the required period.

1. Membership Information

Retention period: Until membership withdrawal

However, information necessary to prevent unauthorized use, resolve disputes, or comply with legal retention requirements may be stored separately for the necessary period.

2. Community Posts and Comments

Posts and comments may not be automatically deleted when a member withdraws from membership.

Where posts or comments are connected to comments, replies, or community records created by other users, the member should delete such content before withdrawing or submit a separate deletion request to the Company.

However, the Company may retain such information for a certain period in any of the following circumstances:

Where retention is required by applicable law
Where necessary to resolve a dispute
Where necessary to prevent rights violations or unauthorized use
Where a lawful request is made by an investigative or other competent authority

3. Electronic Commerce Records

The Company retains the following transaction records in accordance with applicable laws:

Records concerning labels and advertising: 6 months
Records concerning contracts or cancellation of orders: 5 years
Records concerning payment and supply of goods or services: 5 years
Records concerning consumer complaints or dispute resolution: 3 years

Even after a member withdraws or withdraws consent to the processing of personal information, the Company may separately retain transaction records and personal information necessary to identify the relevant transaction party until the legally required retention period expires.

4. Inquiry and Report Records

General inquiry and response records: 3 years after processing is completed
Consumer complaint or dispute resolution records: 3 years
Unauthorized use and membership enforcement records: For the period necessary to prevent unauthorized use

Article 4. Provision of Personal Information to Third Parties

In principle, the Company does not provide users’ personal information to third parties.

However, the following circumstances are exceptions:

Where the user has given prior consent to the third-party provision
Where a specific provision of law requires or permits the disclosure
Where an investigative or competent authority makes a lawful request
Where disclosure is urgently necessary to protect the life, physical safety, or property of a user or third party

If the Company provides personal information to a third party, it will inform the user of the recipient, purpose of provision, categories of information provided, and retention period, and will obtain consent where required by applicable law.

Article 5. Outsourcing of Personal Information Processing

The Company may outsource certain personal information processing activities to external service providers for the smooth operation of the Service.

1. Payment Processing

Service provider: [Enter the payment service provider actually used]
Outsourced services: Payment approval, payment processing, payment cancellation, and refunds
Personal information processed: Order number, payment amount, payment method, and information required to process payment
Retention and use period: Until completion of payment processing or termination of the outsourcing agreement. Where a retention period is required by law, the information will be retained for that period.

2. Product Delivery

Service provider: Korea Post Parcel Service, operated by Korea Post
Outsourced services: Product delivery, delivery tracking, delivery-related notifications, and collection of returned products
Personal information processed: Recipient’s name, mobile phone number, delivery address, and delivery instructions
Retention and use period: Until completion of delivery services or termination of the outsourcing agreement. Where a retention period is required by law, the information will be retained for that period.

3. Server Operation and Data Storage

Service provider: Cafe24 Corp.
Outsourced services: Server operation, storage of personal information and data, backups, and security management
Personal information processed: Personal information processed through the Service and service usage records
Retention and use period: Until membership withdrawal or termination of the outsourcing agreement. Where a retention period is required by law, the information will be retained for that period.

4. SMS and Email Notifications

Service provider: [Enter the SMS or email service provider actually used]
Outsourced services: Sending notifications relating to orders, delivery, membership, and customer support
Personal information processed: Name, email address, mobile phone number, and notification content
Retention and use period: Until the purpose of sending the notification has been fulfilled or the outsourcing agreement has ended

When entering into an outsourcing agreement, the Company includes legally required personal information protection obligations in the agreement and supervises the service provider to ensure that personal information is securely managed.

Any outsourcing category that is not actually used should be removed from this Privacy Policy.

Article 6. Overseas Transfer of Personal Information

The Company does not currently transfer personal information outside the Republic of Korea.

However, if personal information is transferred overseas through the use of an overseas cloud service, social login provider, analytics service, email service, or payment service, the Company will separately disclose the following information and complete the procedures required by applicable law:

Recipient of the personal information
Country to which the information is transferred
Categories of personal information transferred
Purpose of the transfer
Date, time, and method of transfer
Retention and use period
How to refuse the overseas transfer and the consequences of refusal

If the Company uses Google Login, Google Analytics, or another service operated by an overseas provider, this Article will be revised to reflect the actual use of such services.

Article 7. Procedure and Method of Destroying Personal Information

The Company destroys personal information without undue delay when the applicable retention period expires or the purpose of processing has been fulfilled.

1. Destruction Procedure

The Company confirms whether the purpose of processing has been fulfilled and whether the applicable retention period has expired.
Personal information that must be retained under applicable law is separated into a separate database or storage location.
After the legally required retention period expires, the information is destroyed using a method that prevents recovery or restoration.

2. Destruction Method

Electronic files: Permanently deleted using technical methods that prevent recovery or restoration
Paper documents: Shredded or incinerated

Article 8. Rights of Users and Legal Representatives and How to Exercise Them

Users may exercise the following rights at any time:

Request confirmation of whether their personal information is being processed
Request access to their personal information
Request correction or deletion of their personal information
Request suspension of personal information processing
Withdraw consent to the collection and use of personal information
Request membership withdrawal

Users may exercise these rights through the account information modification or membership withdrawal functions or by contacting the Personal Information Protection Officer by email, telephone, or another available method.

The Company will verify whether the person making the request is the user or a lawful representative and will process the request in accordance with applicable law.

However, information that must be retained under applicable law may not be deleted until the legally required retention period has expired.

Article 9. Personal Information of Children Under the Age of 14

In principle, the Company does not permit children under the age of 14 to register as members.

If the Company discovers that personal information relating to a child under the age of 14 has been collected without the consent of a legal guardian, the Company will delete the information without undue delay.

If the Company allows children under the age of 14 to register in the future, it will separately disclose the method used to verify the legal guardian’s consent and the categories of personal information processed.

Article 10. Use of Cookies

The Company may use cookies for the following purposes:

Maintaining login status
Providing shopping cart functionality
Saving user preferences
Preventing unauthorized use
Analyzing service usage
Improving service quality

Users may allow or block the storage of cookies through their browser settings.

If cookies are blocked, certain functions, including login, shopping cart, or personalized services, may be limited.

Article 11. Measures to Ensure the Security of Personal Information

The Company takes the following measures to securely manage personal information:

Minimizing the number of personnel authorized to process personal information
Managing the granting, modification, and revocation of access rights
Controlling access by administrators and personnel who process personal information
Encrypting passwords or storing them using secure one-way hashing
Encrypting personal information during transmission
Installing and updating security software
Retaining access records and preventing unauthorized alteration
Regularly backing up personal information and data
Applying safeguards against hacking and abnormal access
Training and supervising personnel who process personal information
Regularly inspecting personal information processing systems

Article 12. Personal Information Protection Officer

The Company appoints the following Personal Information Protection Officer to oversee personal information processing and handle privacy-related inquiries and complaints:

Personal Information Protection Officer: Jong-Shin Kim
Position: Representative
Email: customer@koreadating.net
Telephone: 010-4999-2217
Business Address: 896-2, Hwagok-dong, Gangseo-gu, Seoul, Republic of Korea

Users may contact the Personal Information Protection Officer regarding privacy-related inquiries, complaints, requests for relief, or requests to access, correct, delete, or suspend the processing of personal information.

Article 13. Remedies for Personal Information Infringement

Users who require consultation or wish to report a personal information infringement may contact the following organizations:

Personal Information Infringement Report Center

Telephone: 118, without an area code within Korea

Personal Information Dispute Mediation Committee

Telephone: 1833-6972

Users may also seek relief from an investigative authority or competent court in accordance with applicable law.

Article 14. Changes to This Privacy Policy

If this Privacy Policy is amended, the Company will announce the reasons for the amendment and the effective date through a notice on koreanlearn.net.

General amendments will be announced at least seven days before the effective date.

Amendments that materially affect users’ rights will be announced at least 30 days before the effective date.

Supplementary Provision

This Privacy Policy takes effect on August 7, 2026.

Company: iamandy.net (아엠엔디닷넷)
Website: koreanlearn.net
Privacy Policy Version: v1
Announcement Date: August 7, 2026
Effective Date: August 7, 2026