creallo logo

Privacy Policy

Creallo (the “Company”), which operates Creallo (https://creallo.com), collects, uses, and manages personal information of users (including both members and non-members ordering customers) according to the following principles. In this regard, we are complying with the relevant laws and personal information protection regulations and guidelines of the Republic of Korea that information and communications service providers must comply with.

Article 1 Personal information collection items and collection methods

The company collects the following minimum personal information as essential items for smooth customer consultation and provision of various services when signing up for membership.

table class="table table-sm"thead class="thead-light"tr/th/th/th/theadtbodytr/td/td/td/trtr/td/td/trtr/td/td/trtr/td/td/tr/tbody

Collection methodCollection and use itemsthUse / retention period   
When registering as a membere-mailtd colspan="4"Until the membership withdrawal
When entering a selectionpassword    
Order and delivery requestName, phone number, shipping address, personal customs code    
Automatic generation and collectionThe following information may be automatically generated and collected while using the service. >>  Service usage record, access IP address, access log, cookie    
  • Personal information is collected during membership registration, delivery request, and prize event application process through the Crelo website.
  • During the consultation process through the customer center, personal information of users may be collected through web pages, e-mails, faxes, and phone calls.
  • There is a grace period of 7 days after application for withdrawal from membership, and withdrawal is processed after 7 days.

Article 2 Purpose of personal information collection

The company uses your personal information for the following purposes.

Fee settlement for service provision and contract fulfillment (content provision, service purchase and payment, financial transaction identity verification and financial service, delivery service according to product order, etc.)

Member Management

  1. Identity verification according to the membership service, personal identification, prevention of illegal and unauthorized use of bad members, confirmation of intention to join, limiting the number of subscriptions and subscriptions, preservation of records for dispute settlement, complaint handling, etc., delivery of notices
  2. As a non-member customer, it is used for smooth ordering, service reception, product delivery, and payment when using the service.

Used for new service development, marketing and advertising

  1. Development and specialization of new services (products), delivery of advertising information such as events, provision of services and advertisements according to demographic characteristics, identification of access frequency, or statistics on member service use
  2. The email and mobile phone number you provided when registering as a member may be used to provide important notices, new services, and various events and promotions.

Article 3 Consent to collection of personal information

When registering as a member, it is marked so that the member can check the privacy policy sufficiently, and an environment is created so that the member can sign up after agreeing to it.

All members who have completed membership sign-up are deemed to have agreed to all the above personal information collection procedures and purposes of use.

Article 4 Period of retention and use of personal information

The company processes and retains personal information within the period of retention and use of personal information in accordance with laws and regulations or the period of retention and use of personal information agreed upon when collecting personal information from the information subject.

Specific personal information processing and retention periods are as follows.

  1. Records on contract or subscription withdrawal, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
  2. Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
  3. Records on consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
  4. Records on labeling and advertising: 6 months (Act on Consumer Protection in Electronic Commerce, etc.)
  5. Website visit record: 3 months (Protection of Communications Secrets Act)

Article 5. Procedure and method of destruction of personal information

The company destroys the personal information without delay when the personal information becomes unnecessary, such as when the retention period of personal information has elapsed or the purpose of processing has been achieved.

destruction procedure
The information entered for membership registration, etc. is stored for a certain period of time in accordance with the internal policy and other relevant laws and regulations after the purpose is achieved and then destroyed.

Destruction method

  1. Information in the form of electronic files uses a technical method that cannot reproduce records.
  2. Personal information printed on paper is shredded with a shredder or destroyed through incineration.

Article 6 Provision of personal information to third parties

The company uses your personal information within the scope notified in the purpose of collection and use of personal information and, in principle, does not provide it to the outside. However, the following exceptions are made.

  1. When there is a request from the relevant agency for the purpose of investigation in accordance with the relevant laws
  2. When there is a request in accordance with the procedures stipulated in other relevant laws
  3. When users consent in advance

Article 7 Consignment of personal information

The company does not entrust the handling of your personal information to an outside company without your consent. If such a need arises in the future, the customer is notified of the consignee and the details of the entrusted work, and if necessary, prior consent is obtained.

ReceiverConsignment work
KG Inesis Co., Ltd., PaypalPurchase and payment (credit card, mobile phone, BC points)
CJ Logistics, Soonpoong Courier, DHL, FedEx
Nonstop Express, Hwachak Trading
product delivery

Article 8 Matters concerning the installation, operation and rejection of automatic personal information collection devices

The company uses 'cookies' to store and retrieve usage information from time to time to provide individual customized services. Cookies are a small amount of information that the server (https) used to operate the website sends to the user's computer browser and is also stored on the hard disk of the user's PC computer.

Purpose of use of cookies: It is used to provide optimized information to users by identifying the types of visits and usage, popular search terms, secure access, etc. to each service and website visited by the customer.

Installation, operation and rejection of cookies

  1. Internet Explorer: You can refuse to save cookies by setting the options in the Tools > Internet Options > Privacy menu at the top of the web browser.
  2. Chrome: Select the icon in the upper right corner of your web browser > Select Settings > Select Show advanced settings at the bottom of the screen > Content settings in the Privacy section > Set directly in the Cookies section

However, if the user refuses to store cookies, difficulties in using the service may occur.

Article 9 Rights of users and legal representatives and how to exercise them

Users and their legal representatives can inquire or modify the registered personal information of themselves or children under the age of 14 at any time, and may request cancellation of membership.

In order to view/modify personal information of users or children under the age of 14, or to cancel membership, you can inquire, modify, and withdraw from “Edit Information”.

The company handles the personal information canceled or deleted at the request of the user as specified in “Article 5 Period of Retention and Use of Personal Information” for personal information canceled or deleted at the request of the user or legal representative, and for other purposes It is processed so that it cannot be viewed or used.

Article 10 Measures to ensure the safety of personal information

The company is taking the following measures to ensure the stability of personal information.

Minimization and training of employees handling personal information: We are implementing measures to manage personal information by designating and limiting the personnel handling personal information to the person in charge.

Technical measures against hacking: In order to prevent leakage and damage of personal information due to hacking or computer viruses, the company installs security programs, periodically updates and checks, installs systems in areas where access is controlled from outside, and installs technical/physical monitoring and blocking.

Encryption of personal information: The user's personal information is stored and managed with an encrypted password, so only the user can know it. there is.

Restriction of access to personal information: We are taking necessary measures to control access to personal information through granting, changing, and canceling access rights to the database system that processes personal information, and unauthorized access from outside using an intrusion prevention system are controlling.

Article 11 Person in charge of personal information management

The company is responsible for overall handling of personal information, and designates a person in charge of personal information protection as follows to handle complaints of information subjects related to personal information processing.

Person in charge of personal information management and department in charge

  • Department in charge: Creallo Customer Support Team
  • Personal information manager: Jake Choi
  • Phone number: 02-565-7074
  • Email: support@creallo.com

Members may inquire about personal information protection related inquiries, complaint handling, damage relief, etc.

Article 12 Obligation to notify before revision

The above personal information processing policy is effective from the effective date, and if there are additions, deletions, or corrections of changes according to laws and regulations, we will notify you through notices at least 7 days prior to the implementation of the changes.
This policy is effective from 1 January 2020.