Privacy Policy

This is a draft pending the official text. The final version will be published as a new version and announced before it takes effect.

1. Article 1 (Purposes of Processing)

   1. 1.The Company processes personal information for membership registration and management, product orders, payment and delivery, cancellations and refunds, customer enquiries, demo and training applications, business member screening, benefits such as points and coupons, and marketing communications (only with consent).
   2. 2.If the purpose of processing changes, the Company takes necessary measures such as obtaining separate consent under the Personal Information Protection Act.

2. Article 2 (Items Collected and Collection Methods)

   1. 1.Registration: email, password, name, phone number, consent records. Social login: email, nickname and profile image from the Kakao or Naver account (limited to the items you agree to share). Business members: company name, business registration number, representative, business address, contact details, and supporting documents such as the business registration certificate.
   2. 2.Orders and delivery: recipient name, phone number, address, payment records. Enquiries and applications: name, contact details, enquiry content. Access IP, access time, device information and cookies may be generated and collected automatically while using the Service.

3. Article 3 (Retention Period)

   1. 1.Member information is retained until withdrawal. After a withdrawal request, information is destroyed once the grace period (7 days by default) has passed. During the grace period you can log in to cancel the withdrawal.
   2. 2.Under the E-Commerce Act, records of contracts, withdrawal of offers, payment and supply of goods are kept for 5 years, consumer complaint and dispute records for 3 years, advertising records for 6 months, and access logs for 3 months under the Protection of Communications Secrets Act. During this period the records are kept in anonymised form so that the member cannot be identified.

4. Article 4 (Provision to Third Parties)

   1. 1.The Company processes personal information only within the stated purposes and does not provide it to third parties except with the consent of the data subject or where specifically required by law.
   2. 2.For delivery, the recipient's name, phone number and address are passed to the courier, which constitutes provision for the performance of the contract.

5. Article 5 (Outsourcing of Processing)

   1. 1.The Company outsources the following processing to provide the Service: Toss Payments (payment processing), Supabase (authentication and data storage), Vercel (web hosting), Resend (email delivery), Naver Cloud Platform (map services), Sweet Tracker (shipment tracking), and courier companies (product delivery).
   2. 2.Outsourcing contracts specify, in accordance with the Personal Information Protection Act, the prohibition of processing beyond the outsourced purpose, technical and administrative safeguards, restrictions on sub-outsourcing, and liability for damages, and the Company supervises whether the processor handles information safely.

6. Article 6 (Rights of Data Subjects and How to Exercise Them)

   1. 1.Data subjects may at any time request access to, correction or deletion of, or suspension of processing of their personal information. You can correct information directly in My Page or make a request through customer service.
   2. 2.Rights may also be exercised through a legal representative or an authorised agent, in which case a power of attorney must be submitted. The Company acts on requests within 10 days of receipt.

7. Article 7 (Destruction of Personal Information)

   1. 1.The Company destroys personal information without delay when it is no longer needed, such as when the retention period has expired or the purpose of processing has been achieved.
   2. 2.Electronic files are permanently deleted in a way that prevents recovery or anonymised so that individuals cannot be identified; paper documents are shredded or incinerated.

8. Article 8 (Security Measures)

   1. 1.Passwords are stored using irreversible encryption, and personal information is protected in transit with TLS. Administrator access to and changes of personal information are logged.
   2. 2.The Company minimises the number of staff handling personal information, provides regular training, and manages access rights.

9. Article 9 (Cookies)

   1. 1.The Company uses cookies for convenience features such as keeping you logged in, language settings and the shopping cart.
   2. 2.You can refuse cookies in your browser settings, but some features such as login may then be unavailable.

10. Article 10 (Privacy Officer)

    1. 1.The Company designates a privacy officer who oversees personal information processing and handles related complaints and remedies.
    2. 2.Privacy officer: the CEO of Environ Korea Co., Ltd. Contact details are shown in the business information at the bottom of the site. (To be updated with the designated officer once the official text is received.)

11. Article 11 (Remedies for Infringement)

    1. 1.Data subjects may apply for dispute resolution or counselling to the Personal Information Dispute Mediation Committee or the KISA Personal Information Infringement Report Center.
    2. 2.Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), Supreme Prosecutors' Office Cyber Investigation (spo.go.kr, 1301), National Police Agency Cyber Bureau (ecrm.police.go.kr, 182).

12. Article 12 (Changes to this Policy)

    1. 1.This Privacy Policy applies from its effective date. Additions, deletions or corrections under law or policy are announced at least 7 days before they take effect.
    2. 2.Previous versions of this policy are available on request to the administrator.

Effective: October 1, 2026