Privacy Policy
The Company complies with the Personal Information Protection Act and related laws, and adopts and publishes this policy to process users' personal information safely.
1. Data collected
To register users, verify organisations, and perform transactions the Company collects: business name, business registration number, CEO name, address, business category, contact name, phone, email, and account details. During service use, IP, access log, device info, and transaction history may be collected automatically.
2. Purpose
Collected data is used for (a) user identification and organisation verification, (b) transaction performance including quotation, order, payment, settlement, shipping and inspection, (c) fraud prevention and dispute handling, (d) legally required retention, and (e) statistical analysis for service improvement.
3. Retention
Personal data is destroyed without delay once the purpose of collection is fulfilled, except that under statutes such as the E-Commerce Act, Electronic Financial Transactions Act, and VAT Act the following records are retained: advertising records (6 months), contract or withdrawal records (5 years), payment and supply records (5 years), consumer complaint/dispute records (3 years), access logs (3 months).
4. Third-party disclosure
The Company does not disclose personal data to third parties without user consent, except where required by law or strictly necessary for the service (for example, payment details to the payment processor, or recipient details for shipping); in such cases only the minimum necessary data is shared.
5. Processors
The Company may entrust the following to external processors: payment, cloud infrastructure and database hosting, email/SMS delivery, and log/monitoring. Data protection is managed by contract with each processor.
6. User rights
Users may at any time request access, correction, deletion, suspension of processing, or withdrawal of consent regarding their personal data. Requests are received at the Privacy Officer email in the footer; the Company notifies the outcome within the period required by applicable law.
7. Privacy officer
The Company designates and publishes a Privacy Officer responsible for personal data processing. The name and contact are shown in the footer of this page.