Collection and Use of Personal Information
Effective Date: May 09, 2025
Smim Inc. (hereinafter referred to as the "Company") establishes and discloses the following Privacy Policy to protect the personal information of Members and to promptly and smoothly handle related complaints in accordance with the Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc. (hereinafter referred to as the "Information and Communications Network Act") and other applicable laws.
Article 1 (Items and Methods of Personal Information Collection)
The Company collects the following personal information upon "Member" registration. During registration (including SNS registration), the Company collects name, email address, and mobile phone number (mandatory information including possession verification information), as well as profile photo, age range, date of birth, and gender (optional information).
| Purpose | Required | Optional | Retention Period |
|---|---|---|---|
| Membership Registration | Name, Email Address | Profile Photo, Age Range, Date of Birth, Gender | Until Withdrawal of Consent or Account Deletion |
| SNS Registration (Naver) | Naver Account, Name, Email Address | ||
| SNS Registration (Kakao) | Kakao Account, Name, Email Address | ||
| SNS Registration (Apple) | Apple Account, Name, Email Address | ||
| SNS Registration (LINE) | LINE Account, Name, Email Address | ||
| SNS Registration (X, formerly Twitter) | X Account, Name, Email Address | ||
| Product Reservation and Payment | (Required) Reservation/Purchase Details (reservation date and time, payment method and amount, name, email address, and mobile phone number provided at the time of reservation/purchase) | Until Account Deletion or the retention period required under the Act on the Consumer Protection in Electronic Commerce, Etc. | |
| Provision of information on personalized Products and Service benefits, information and notifications upon request of the Company or other advertisers (promotions, event notifications) | (Optional) Upon consent to marketing provision and use | Until Withdrawal of Consent or Account Deletion |
During the reservation and payment process, the Company collects reservation/purchase information (name, email address, mobile phone number including possession verification information) and payment information (partial credit card number and bank account information, etc.).
For "Seller Members," during the "Product" information registration process immediately after membership registration, the Company collects mandatory items such as representative name, email address, mobile phone number, address and other Product information, and optional items such as business registration number, landline phone number, and bank account information (bank name, account number, account holder).
Contact information and email addresses may be collected during the process of receiving and responding to inquiries, and delivery information may be collected during events.
During the use of the Service, IP addresses, cookies, visit dates/times, records of improper use, and device information (PC/mobile) are automatically generated and collected.
The Company collects the following personal information upon "Seller Member" registration (including SNS registration). During the "Product" information registration process, the Company collects mandatory items such as representative name, address and other "Product" information, and optional items such as business registration number, landline phone number, and bank account information (bank name, account number, account holder).
| Purpose | Required | Optional | Retention Period |
|---|---|---|---|
| Membership Registration | Name, Email Address, Mobile Phone Number | Profile Photo, Age Range, Date of Birth, Gender | Until Withdrawal of Consent or Account Deletion |
| SNS Registration (Naver) | Naver Account, Name, Email Address | ||
| SNS Registration (Kakao) | Kakao Account, Name, Email Address | ||
| SNS Registration (Apple) | Apple Account, Name, Email Address | ||
| SNS Registration (LINE) | LINE Account, Name, Email Address | ||
| SNS Registration (X, formerly Twitter) | X Account, Name, Email Address | ||
| Product Reservation and Payment Management | Representative Name, Address | Landline Phone Number, Bank Account Information (Bank Name, Account Number, Account Holder), Business Information (Business Registration Number, Business Address, Business Name, Industry Type, Business Type) | Until Account Deletion or the retention period required under the Act on the Consumer Protection in Electronic Commerce, Etc. |
| Provision of information on personalized Products and Service benefits, information and notifications upon request of the Company or other advertisers (promotions, event notifications) | (Optional) Upon consent to marketing provision and use | Until Withdrawal of Consent or Account Deletion |
During the use of the Service, IP addresses, cookies, visit dates/times, records of improper use, and device information (PC/mobile) are automatically generated and collected.
Contact information and email addresses may be collected during the process of receiving and responding to inquiries, and delivery information may be collected during events.
When Members ("Members" and "Seller Members") and non-members make calls by pressing the 'Make a Call' button within the Service, the Company collects phone numbers through the call intermediation outsourcing service. The collected phone numbers are recorded by the outsourced company and are not recorded by the Company.
Methods of Personal Information CollectionDailyDuck PC/mobile membership registration, telephone consultation through the customer center, online consultation via email, online consultation through 1:1 consultation channels
Offline events, seminars, etc.
Article 2 (Purpose of Using Personal Information)
The Company collects only the minimum personal information necessary for providing the Service for the following purposes and does not use the collected information for purposes other than those stated or disclose it to third parties without the Member's consent.
Member Management: Personal identification for providing membership-based services, verification of registration intent, restriction measures against Members who violate the Terms of Service, limitation on registration and number of registrations, sanctions against fraudulent use of the Service, record retention for grievance handling and dispute resolution, delivery of notices, confirmation of account deletion intent
In addition to providing existing services such as content (including advertisements), demographic analysis, analysis of Service visit and usage records, formation of relationships between Members based on personal information and interests, development of new service elements such as customized service provision based on acquaintances and interests, and improvement of existing services, etc.
Development of New Services and Use in Marketing and Advertising: Development of new services and provision of customized services, service provision and advertisement placement based on demographic characteristics, verification of service validity, provision of event/advertising information and participation opportunities.
Identity verification for providing the payment system, reservation and fee payment, provision of Products and Services
Establishment of an environment where Members can use the Service with confidence in terms of security, privacy, and safety
Article 3 (Provision of Personal Information)
The Company does not disclose or share Members' personal information to third parties without prior consent. However, exceptions are made when Members have given prior consent to the provision or when requested by courts and investigative agencies pursuant to applicable laws and regulations.
Additionally, in the process of "Members'" space reservation and use, payment, and refund processing, personal information is provided to "Seller Members" as follows.
| Recipient | Items Provided | Purpose of Provision | Provision Period |
|---|---|---|---|
| DailyDuck "Seller Members" | [Required] Name, Contact Information, Payment Information (payment method and payment amount), Email Address | Product Reservation/Purchase and Refund Processing | Service provision period (the applicable retention period when preservation is required by relevant laws and regulations or when prior consent has been obtained) |
Article 4 (Outsourcing of Personal Information Processing)
The Company outsources personal information processing as follows for the smooth provision of the Service, and stipulates necessary matters to ensure the safe management of personal information in outsourcing contracts in accordance with applicable laws and regulations.
| Outsourced Company | Outsourced Task Description | Retention and Use Period of Personal Information |
|---|---|---|
| ㈜블라스트 | System development and operation for Service provision, infrastructure operation | Until Account Deletion or termination of outsourcing contract |
| 마이크로소프트 Azure | Provision of hosting services | Until Account Deletion or termination of outsourcing contract |
| 토스페이먼츠㈜ | Payment processing, simple payment processing | Until Account Deletion or termination of outsourcing contract |
| ㈜알리는사람들 | Kakao Notification Talk | Until termination of Notification Talk service or Account Deletion |
| 엔에치엔클라우드㈜ | SMS service, possession verification service | Until termination of SMS service or Account Deletion |
| Email delivery, possession verification service | Until Account Deletion or termination of outsourcing contract |
Article 5 (Rights and Obligations of Members and Methods of Exercise)
"Members" and their legal representatives may request to view, modify, or cancel their registered personal information from the Personal Information Protection Officer and the person in charge at any time. However, in such cases, use of some or all of the Service may be limited.
"Members" and their legal representatives may view or modify personal information by contacting the Company's Personal Information Protection Officer in writing, by phone, or by email, and the Company will take action without delay.
If a request is made to correct errors in a "Member's" personal information, the Company will not use or provide such personal information until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, the Company will promptly notify the third party of the correction results to ensure the correction is made.
Article 6 (Retention and Use Period of Personal Information)
The Company will destroy the relevant personal information without delay when the personal information becomes unnecessary after the purpose of processing has been achieved, such as account deletion.
However, personal information may need to be retained for a certain period in accordance with applicable laws and regulations, and the reasons for information retention under applicable laws are as follows. When payments and settlements occur during the space reservation process, payment and settlement-related information, including personal information, will be retained for 5 years in accordance with applicable laws.Act on the Consumer Protection in Electronic Commerce, Etc.Records related to contracts or withdrawal of offers: Retained for 5 years
Records related to payment and supply of goods, etc.: Retained for 5 years
Records related to consumer complaints or dispute resolution: Retained for 3 years
Records related to display and advertising: 6 months
Electronic Financial Transactions ActRecords related to electronic finance: Retained for 5 years
Protection of Communications Secrets ActLogin records: 3 months
Article 7 (Destruction of Personal Information)
When the purpose of collecting and using personal information has been achieved, such as account deletion, termination of the Service, or expiration of the agreed-upon personal information retention period, the personal information is destroyed using methods that make recovery impossible.
In the case of electronic files, the information is securely deleted using technical methods that prevent recovery and reproduction, and printed materials are destroyed by shredding or incineration.
Article 8 (Matters Regarding the Installation, Operation, and Refusal of Cookies)
What are Cookies?The Company uses 'cookies' that store and periodically retrieve information of service users including Members (hereinafter referred to as 'Users') to provide personalized and customized services.
Cookies are very small text files sent by the server operating the website to the User's browser and are stored on the User's computer hard disk. When a User visits the website thereafter, the website server reads the contents of the cookies stored on the User's hard disk and uses them to maintain the User's preferences and provide customized services.
Cookies do not automatically or actively collect information that identifies individuals, and Users may refuse or delete such cookies at any time.
Purpose of Cookie Use by the CompanyThe Company uses cookies to analyze visit and usage patterns of web pages visited by Users, user volume, etc., and to provide optimized and customized information (including advertisements) to Users.
Installation, Operation, and Refusal of CookiesUsers have the option to choose regarding cookie installation. Therefore, Users may allow all cookies by setting options in their web browser, go through a verification process each time cookies are saved, or refuse the saving of all cookies.
However, if Users refuse the saving of cookies, some services that require login may be difficult to use.
Article 9 (Technical and Administrative Protective Measures for Personal Information)
The Company takes the following technical and administrative measures to ensure the safety of personal information and to prevent loss, theft, leakage, alteration, or damage when processing Members' personal information.
Administrative Measures: Establishment and implementation of internal management plans, regular employee training, operation of a dedicated personal information protection organization, etc.
Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
Physical Measures: Access control for computer rooms, data storage rooms, etc.
Article 10 (Contact Information of the Personal Information Protection Officer)
Members may report complaints related to personal information protection to the Personal Information Protection Officer or the responsible department at the contact information below.
| Privacy Officer | Privacy Manager |
|---|---|
| Name : Mihyun Kim Department : Marketing Team Phone : 02-2088-1344 Email : cs@smim.xyz | Name : Seri Kang Department : Management Support Team Phone : 02-2088-1344 Email : dailyduck@smim.xyz |
Article 11 (Changes to the Privacy Policy and Obligation to Notify)
If there are any additions, deletions, or modifications to the contents of this Privacy Policy, the Company will provide notice through the 'Notices' section of the Service at least 7 days prior to the revision.
This Privacy Policy is effective as of May 09, 2025.