OOTD Application, Fashion Social Network Service operated by OOTD Co., Ltd. (hereinafter referred to as the "OOTD"), considers the protection of the customers’ personal information paramount and makes the best effort to protect the customers’ privacy.
OOTD complies with the provisions concerning the protection of personal information under any applicable laws and regulations regarding information and communications service providers, including the Telecommunications Security Protection Act, the Telecommunications Business Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., the Personal Information Protection Act and its Enforcement Decree. In accordance with applicable laws,
OOTD has established the Privacy Policy (this "Policy"), which is disclosed in its Application(hereinafter referred to as the "App"), for customer access.
This Policy may be, from time to time, revised according to amendments in relevant laws and regulations. In the event of revisions or changes to this Policy, OOTD notifies such changes of the Policy by posting it on the first page of the Homepage. Users are requested to check for such revisions when visiting the OOTD website.
OOTD complies with the provisions concerning the protection of personal information under any applicable laws and regulations regarding information and communications service providers, including the Telecommunications Security Protection Act, the Telecommunications Business Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., the Personal Information Protection Act and its Enforcement Decree. In accordance with applicable laws,
OOTD has established the Privacy Policy (this "Policy"), which is disclosed in its Application(hereinafter referred to as the "App"), for customer access.
This Policy may be, from time to time, revised according to amendments in relevant laws and regulations. In the event of revisions or changes to this Policy, OOTD notifies such changes of the Policy by posting it on the first page of the Homepage. Users are requested to check for such revisions when visiting the OOTD website.
1. Purpose of Collecting and Using Personal Information
OOTD collects and uses the personal information of OOTD users for the following purposes :
1. Membership management
- To identify members for providing membership services
- To prevent misuse by an unauthorized user
- To confirm user registrations
- To keep record for consultations, complaint handling procedures, and dispute settlements
- To deliver notices
- To prevent unauthorized use of ID
- To prevent fraudulent transactions
2. Execution of an agreement concerning service provision and payment
- To provide media contents, event/giveaway notifications and delivery updates
- For identity verification relating to financial transactions and financial services
- To send invoices, purchase and payment procedures, collection of payment notices
3. Marketing and advertisement
- To provide customized services for users
- To develop and specialize new services (products)
- To provide services and useful information for users
- For user analysis of OOTD services and products
- To send periodicals and notifications about new products or services
- To plan App services and events corresponding to the user’s area of interests
- To deliver advertisements such as giveaway event, or operate spaces where users can interact
- To conduct user surveys
1. Membership management
- To identify members for providing membership services
- To prevent misuse by an unauthorized user
- To confirm user registrations
- To keep record for consultations, complaint handling procedures, and dispute settlements
- To deliver notices
- To prevent unauthorized use of ID
- To prevent fraudulent transactions
2. Execution of an agreement concerning service provision and payment
- To provide media contents, event/giveaway notifications and delivery updates
- For identity verification relating to financial transactions and financial services
- To send invoices, purchase and payment procedures, collection of payment notices
3. Marketing and advertisement
- To provide customized services for users
- To develop and specialize new services (products)
- To provide services and useful information for users
- For user analysis of OOTD services and products
- To send periodicals and notifications about new products or services
- To plan App services and events corresponding to the user’s area of interests
- To deliver advertisements such as giveaway event, or operate spaces where users can interact
- To conduct user surveys
2. Personal Information Collected
A. OOTD collects only the information required for providing the basic services. It obtains consent from users when collecting the necessary information for providing service. Even when users do not provide optional information, there are no restrictions on their use of service.
B. OOTD does not collect any sensitive personal information that may infringe the human rights of users (i.e., race, ideology, creed, political tendency, criminal records, health condition, sexual life, etc.). Under any circumstances, OOTD does not use or disclose to a third party the users’ information that did not obtain their consents in advance.
C. OOTD collects and uses personal information as follows :
Sign-up (Mandatory)
- Email address, password, name
Registering through social accounts (Google, Facebook, Apple, LINE) (Mandatory)
- Google : Name, Email address, Profile photo
- Facebook : Name, Email address, Profile photo
- Apple : Email address
Use of service (Mandatory)
- IP address, device and browser information, cookies, date of visit to OOTD, service usage record, abnormal service usage record
Size recommendation service (Optional)
- Body size (height, weight, etc.), gender
Product review (Optional)
- Body size (height, weight, etc.), gender
B. OOTD does not collect any sensitive personal information that may infringe the human rights of users (i.e., race, ideology, creed, political tendency, criminal records, health condition, sexual life, etc.). Under any circumstances, OOTD does not use or disclose to a third party the users’ information that did not obtain their consents in advance.
C. OOTD collects and uses personal information as follows :
Sign-up (Mandatory)
- Email address, password, name
Registering through social accounts (Google, Facebook, Apple, LINE) (Mandatory)
- Google : Name, Email address, Profile photo
- Facebook : Name, Email address, Profile photo
- Apple : Email address
Use of service (Mandatory)
- IP address, device and browser information, cookies, date of visit to OOTD, service usage record, abnormal service usage record
Size recommendation service (Optional)
- Body size (height, weight, etc.), gender
Product review (Optional)
- Body size (height, weight, etc.), gender
3. Methods of Collecting Personal Information
OOTD collects personal information through the sign-up process, consultation, events, giveaways, sales agencies or partner companies, as well as through information collection tools (cookies) on mobile phones and wired/wireless internet services
4. Personal Information Storage Period and Its Use
A. OOTD shall maintain and use the user’s personal information for the period which was notified by OOTD and agreed by the customer. The OOTD users’ personal information is destroyed after any of the following three: achieving the purpose of its collection and use, expiration of the information withholding period, or withdrawal of user’s consent.
B. OOTD reserves the right to possess the personal information of its members for a certain period to confirm transaction-related rights or obligations in accordance with applicable laws and regulations as follows.
- Records regarding execution of agreements or withdrawal of subscriptions, etc.: Five (5) years
- Records regarding payment and provision of goods, etc.: Five (5) years
- Records regarding consumer complaints or dispute resolution: Three (3) years
- However, if the usage agreement between the member and OOTD is maintained (member has not withdrawn membership), the time information is stored may be longer than indicated above. Records of which the data storage period has passed shall be destroyed upon customer’s withdrawal of consent.
C. In the event any user requests to inspect the transaction of the information OOTD acquired through the user’s permission, OOTD shall immediately take necessary measures for the user to inspect such information.
D. If a member has no record of using the service for one year, the personal information of such user shall be stored separately, and the user shall be notified separately.
B. OOTD reserves the right to possess the personal information of its members for a certain period to confirm transaction-related rights or obligations in accordance with applicable laws and regulations as follows.
- Records regarding execution of agreements or withdrawal of subscriptions, etc.: Five (5) years
- Records regarding payment and provision of goods, etc.: Five (5) years
- Records regarding consumer complaints or dispute resolution: Three (3) years
- However, if the usage agreement between the member and OOTD is maintained (member has not withdrawn membership), the time information is stored may be longer than indicated above. Records of which the data storage period has passed shall be destroyed upon customer’s withdrawal of consent.
C. In the event any user requests to inspect the transaction of the information OOTD acquired through the user’s permission, OOTD shall immediately take necessary measures for the user to inspect such information.
D. If a member has no record of using the service for one year, the personal information of such user shall be stored separately, and the user shall be notified separately.
5. Use of the Collected Personal Information and Provision of such Information to a Third Party
A. Limited Domain of Personal Information Usage
OOTD shall use the personal information of users within the scope notified in the sign-up form and “Purpose of Collecting and Using Personal Information” under the Policy, and shall neither use it exceeding such scope nor provide it for other persons, companies, or institutions. However, requests made with consent of the customer and in accordance with procedures set by the law shall be excepted. In such case, personal information may be used and provided with due care.
B. Consent to Provide Personal Information to a Third Party
- Recipient of personal information : Seller [Seller List] / Korea
When provision of personal information to a Third Party occurs, OOTD takes measures to notify the user and seek their consent in advance.
Users may refuse to provide their personal information to a third party. The refusal, however, may affect their membership registration and use of services.
C. Provision of Information to Both Parties
In the event any transaction is realized through services provided by OOTD, the necessary information relating to the transaction and delivery shall be provided to both parties.
D. Access to Personal Information
The access to personal information may change depending on the beginning or end of partnerships, and such changes shall be added to the list of partners upon provision of personal information and deleted from the list upon destruction of personal information due to end of the partnership, etc.
OOTD shall use the personal information of users within the scope notified in the sign-up form and “Purpose of Collecting and Using Personal Information” under the Policy, and shall neither use it exceeding such scope nor provide it for other persons, companies, or institutions. However, requests made with consent of the customer and in accordance with procedures set by the law shall be excepted. In such case, personal information may be used and provided with due care.
B. Consent to Provide Personal Information to a Third Party
- Recipient of personal information : Seller [Seller List] / Korea
When provision of personal information to a Third Party occurs, OOTD takes measures to notify the user and seek their consent in advance.
Users may refuse to provide their personal information to a third party. The refusal, however, may affect their membership registration and use of services.
C. Provision of Information to Both Parties
In the event any transaction is realized through services provided by OOTD, the necessary information relating to the transaction and delivery shall be provided to both parties.
D. Access to Personal Information
The access to personal information may change depending on the beginning or end of partnerships, and such changes shall be added to the list of partners upon provision of personal information and deleted from the list upon destruction of personal information due to end of the partnership, etc.
6. Inspection and Correction of Personal Information
A. Users may, at any time, inspect or correct their registered personal information. If users seek to inspect or change their personal information, they shall click “My account” and then inspect or change the relevant information themselves or contact the supervisor and the person responsible for managing personal information by telephone or by e-mail, in which case such request shall be processed without delay./her personal information, he/she shall click ‘My account’ and then inspect or change the relevant information himself/herself, or contact the supervisor and the person responsible for management of personal information in writing, by telephone or by e-mail, inwhich case such request shall be processed without dely.
B. If a user requests the correction of any errors in personal information, the relevant personal information shall not be used or provided until the error has been corrected.
C. In the event any wrong personal information is provided to a third party, the corrected information shall be immediately notified to a third party.
B. If a user requests the correction of any errors in personal information, the relevant personal information shall not be used or provided until the error has been corrected.
C. In the event any wrong personal information is provided to a third party, the corrected information shall be immediately notified to a third party.
7. Withdrawal of Consent to Collect, Use and Provide Personal Information
A. Users may, at any time, withdraw their consent to the collection, use and provision of personal information, which they consented to during sign-up. Users may immediately withdraw consent to collect, use and provide their personal information by clicking "Delete Account" under “My account” on the first page of the Homepage. If users contact the supervisor in charge of managing personal information in writing, telephone, e-mail, etc., OOTD shall immediately take necessary measures for the withdrawal without delay. In the event of withdrawal of consent or destruction of personal information, OOTD shall immediately notify the user thereof.
B. OOTD shall take necessary measures so that a withdrawal of the consent to collect personal information (withdrawal from membership) is easier than consenting to collect personal information.
C. When a user voluntarily withdraws from the membership, OOTD shall destroy personal information of the user one (1) month after the withdrawal for the purpose of prohibiting the user from illegally or expediently receiving any economic profits such as discount coupons, promotions, etc. through repetitive sign ups and withdrawals, or from using someone else’s identity illegally.
B. OOTD shall take necessary measures so that a withdrawal of the consent to collect personal information (withdrawal from membership) is easier than consenting to collect personal information.
C. When a user voluntarily withdraws from the membership, OOTD shall destroy personal information of the user one (1) month after the withdrawal for the purpose of prohibiting the user from illegally or expediently receiving any economic profits such as discount coupons, promotions, etc. through repetitive sign ups and withdrawals, or from using someone else’s identity illegally.
8. Procedure and Method of Destroying Personal Information
A. When the purpose of collecting and using personal information is achieved, OOTD shall immediately destroy the relevant information in accordance with the possession and usage period. The procedure, method and time of destruction shall be as follows:
- Procedure and Time of Destruction
Personal information entered by a user for membership registration shall be deleted or destroyed after the lapse of the period prescribed for privacy protection (see the “Personal Information Storage Period and Its Use” above) under OOTD’s bylaws and other applicable laws after the purpose of using personal information is achieved, such as termination of services. In general, if there are no remaining credits or debts, personal information collected upon membership registration and then managed in the form of an electronic file shall be deleted immediately upon withdrawal from membership.
- Method of Destruction
Personal information printed on paper shall be destroyed by shredding, incineration, or dissolution by chemicals. Personal information stored as an electronic file shall be deleted by a technological method that makes it impossible to restore or reproduce it.
- Procedure and Time of Destruction
Personal information entered by a user for membership registration shall be deleted or destroyed after the lapse of the period prescribed for privacy protection (see the “Personal Information Storage Period and Its Use” above) under OOTD’s bylaws and other applicable laws after the purpose of using personal information is achieved, such as termination of services. In general, if there are no remaining credits or debts, personal information collected upon membership registration and then managed in the form of an electronic file shall be deleted immediately upon withdrawal from membership.
- Method of Destruction
Personal information printed on paper shall be destroyed by shredding, incineration, or dissolution by chemicals. Personal information stored as an electronic file shall be deleted by a technological method that makes it impossible to restore or reproduce it.
9. Protection of Children’s Personal Information
OOTD does not collect personal information of children to protect the privacy of a child less than fourteen (14) years. It allows only a person of fourteen (14) years or more to subscribe for membership.
10. Entrustment to Handle Personal Information
A. OOTD entrusts an outside company with the handling of personal information for better business performance including facilitating basic services, service improvement, convenience, etc., as follows:
- Company : Cafe24
- Purpose of Entrustment : Sending out SMS/LMS
In addition to the above, OOTD use the Google Analytics Tool (a log analysis tool) for service use and statistical analysis. If you want to stop log analysis through Google Analytics Tool, you can turn it off in the guide page below:
- “Turn off Google Analytics”
B. In the business entrustment agreement, etc., OOTD prescribes the provisions concerning the compliance with laws and regulations related to the following: privacy protection, confidentiality of personal information, prohibition of providing personal information to a third party, responsibility in the event of accident, period of entrustment, and obligations to return or destroy personal information after handling personal information, etc. OOTD complies to the foregoing provisions.
- Company : Cafe24
- Purpose of Entrustment : Sending out SMS/LMS
In addition to the above, OOTD use the Google Analytics Tool (a log analysis tool) for service use and statistical analysis. If you want to stop log analysis through Google Analytics Tool, you can turn it off in the guide page below:
- “Turn off Google Analytics”
B. In the business entrustment agreement, etc., OOTD prescribes the provisions concerning the compliance with laws and regulations related to the following: privacy protection, confidentiality of personal information, prohibition of providing personal information to a third party, responsibility in the event of accident, period of entrustment, and obligations to return or destroy personal information after handling personal information, etc. OOTD complies to the foregoing provisions.
11. Entrustment to Handle Personal Information
A. When OOTD seeks to obtain additional consent from users for the use of or provision to a third party of their personal information beyond the consented scope, OOTD shall notify the users of the relevant matter in advance in writing, by e-mail etc.
B. In the event OOTD entrusts collection, possession, disposition, use, provision, management or destruction, etc. of user’s personal information to a third party, OOTD shall inform the user thereof and obtain consent from the user by notifying such information on the sign-up page or the Policy appearing on the Homepage, etc.
B. In the event OOTD entrusts collection, possession, disposition, use, provision, management or destruction, etc. of user’s personal information to a third party, OOTD shall inform the user thereof and obtain consent from the user by notifying such information on the sign-up page or the Policy appearing on the Homepage, etc.
12. Technical and Administrative Measure for Privacy Protection
A. OOTD has prepared and applies the technical and administrative measures to protect the user’s personal information.
B. Technical Measure OOTD devises the following technical measures to safeguard personal information from being lost, stolen, leaked, forged or damaged in the process of handling the users’ personal information:
- (1) User’s personal information is password-protected and the important information is protected through independent security functions that encode files and transmission data or use lock functions.
- (2) OOTD takes measures to prevent damage which may arise from computer viruses by using a vaccine program. The vaccine program is regularly updated. Upon sudden emergence of a virus, a new vaccine developed against the virus shall be immediately provided upon availability to prevent infringement of personal information.
- (3) OOTD adopts a security system (SSL or SET) for safely transmitting personal information over network through a code algorithm.
- (4) OOTD makes best efforts to battle infiltrations from outside such as hacking, etc. by using infiltration blocking systems and vulnerability analysis systems, etc. on each server.
C. Administrative Measure OOTD takes administrative measures to safeguard personal information from being lost, stolen, leaked, forged, or damaged in the process of handling user’s personal information by limiting the number of persons with access to the users’ personal information to a minimum, requiring employees to sign the written oath for privacy protection or upon their employment, etc.
D. OOTD shall not be responsible for any events resulting from user’s negligence or the fundamental risks of the Internet. Members should properly manage their IDs and passwords to protect their personal information and be liable therefor.
E. OOTD recommends that any password others can guess easily should be avoided and that the passwords be changed on a regular basis.
F. In the event of any loss, leakage, falsification, or damage to personal information due to an internal manager’s mistake or any technical accident, OOTD shall immediately inform users thereof and prepare proper measures and compensation.
B. Technical Measure OOTD devises the following technical measures to safeguard personal information from being lost, stolen, leaked, forged or damaged in the process of handling the users’ personal information:
- (1) User’s personal information is password-protected and the important information is protected through independent security functions that encode files and transmission data or use lock functions.
- (2) OOTD takes measures to prevent damage which may arise from computer viruses by using a vaccine program. The vaccine program is regularly updated. Upon sudden emergence of a virus, a new vaccine developed against the virus shall be immediately provided upon availability to prevent infringement of personal information.
- (3) OOTD adopts a security system (SSL or SET) for safely transmitting personal information over network through a code algorithm.
- (4) OOTD makes best efforts to battle infiltrations from outside such as hacking, etc. by using infiltration blocking systems and vulnerability analysis systems, etc. on each server.
C. Administrative Measure OOTD takes administrative measures to safeguard personal information from being lost, stolen, leaked, forged, or damaged in the process of handling user’s personal information by limiting the number of persons with access to the users’ personal information to a minimum, requiring employees to sign the written oath for privacy protection or upon their employment, etc.
D. OOTD shall not be responsible for any events resulting from user’s negligence or the fundamental risks of the Internet. Members should properly manage their IDs and passwords to protect their personal information and be liable therefor.
E. OOTD recommends that any password others can guess easily should be avoided and that the passwords be changed on a regular basis.
F. In the event of any loss, leakage, falsification, or damage to personal information due to an internal manager’s mistake or any technical accident, OOTD shall immediately inform users thereof and prepare proper measures and compensation.
13. Matters Concerning Installation, Operation and Refusal of Automatic Personal Information Collection Device
A. OOTD may install and use cookies, which contain user’s information and can be searched through its Internet service. Cookie means a string of information which the web server sends to web browser for storing and is sent back to the server at the time of additional request from the server. If a user accesses OOTD’s web site, OOTD may read the contents of the cookie existing in the user’s browser, search additional information and use such information to provide services without additional input of the name, etc.
B. The user’s information collected by OOTD through a cookie may be used for the following purposes:
- (1) Providing customized information according to the areas of personal interests;
- (2) Targeted marketing by analyzing the frequency or duration of a visit by the members and non-members and determining users’ preference and interests;
- (3) Providing customized service to the user by tracking the traces of the contents which the user viewed with interest;
- (4) Notifying the expiration of any subscription used; or
- (5) Analyze users’ habits as a measure of service reorganization, etc.
C. A user has an option to decide whether to install cookie or not. A user may choose to accept all cookies, see a notice when cookies are installed, or refuse all cookie under "Tools - Internet Options - Privacy - Advanced" at the top of the web browser. However, when the user refuses to install cookies, there may be some inconvenience in use of or difficulty in provision of services.
D. Cookies expires upon closing the browser or logging out.
B. The user’s information collected by OOTD through a cookie may be used for the following purposes:
- (1) Providing customized information according to the areas of personal interests;
- (2) Targeted marketing by analyzing the frequency or duration of a visit by the members and non-members and determining users’ preference and interests;
- (3) Providing customized service to the user by tracking the traces of the contents which the user viewed with interest;
- (4) Notifying the expiration of any subscription used; or
- (5) Analyze users’ habits as a measure of service reorganization, etc.
C. A user has an option to decide whether to install cookie or not. A user may choose to accept all cookies, see a notice when cookies are installed, or refuse all cookie under "Tools - Internet Options - Privacy - Advanced" at the top of the web browser. However, when the user refuses to install cookies, there may be some inconvenience in use of or difficulty in provision of services.
D. Cookies expires upon closing the browser or logging out.
14. Rights and Obligations of Users
A. Users should exercise caution to enter and maintain the most up-to-date personal information. Users shall be liable for any incident arising from any inaccurate information indicated by them. If users indicate any false information such as personal information of someone else, their membership may be revoked.
B. Users have the right to have their personal information be protected as well as the obligation to protect themselves, and not to infringe information of others. Users should be careful to avoid theft of their personal information including passwords, and also avoid potentially damaging others’ personal information through, including but not limited to, posts.
B. Users have the right to have their personal information be protected as well as the obligation to protect themselves, and not to infringe information of others. Users should be careful to avoid theft of their personal information including passwords, and also avoid potentially damaging others’ personal information through, including but not limited to, posts.
15. Collecting Opinions, Deleting Customer Information, and Handling Complaints
A. OOTD values the opinion of users and users have the right to receive sincere replies to their inquiries at any time.
B. OOTD operates consultation channels such as the Help Center for seamless communication with users. If users have any questions, they may contact the following and hear sincere replies at any time:
- (1) Help Center relating to personal information (Inquiries including destruction of customer's information)
- Access E-mail: join@ootdkorea.com
B. OOTD operates consultation channels such as the Help Center for seamless communication with users. If users have any questions, they may contact the following and hear sincere replies at any time:
- (1) Help Center relating to personal information (Inquiries including destruction of customer's information)
- Access E-mail: join@ootdkorea.com
16. Supervisors Responsible for Managing Personal Information
A. OOTD considers the user’s personal information to be very valuable and makes best efforts to prevent any damage, infringement, or leakage of user’s personal information.
B. The Help Center strives to answer users’ questions regarding privacy protection promptly and sincerely. In addition, when users seek to contact OOTD’s manager in charge of privacy protection, they are redirected to the following person using the contact information or email address below:
- Manager in charge of privacy protection: Jang hyoungcheol
- Grievance Handling Department: OOTD Help Center
- Access E-mail: join@ootdkorea.com
B. The Help Center strives to answer users’ questions regarding privacy protection promptly and sincerely. In addition, when users seek to contact OOTD’s manager in charge of privacy protection, they are redirected to the following person using the contact information or email address below:
- Manager in charge of privacy protection: Jang hyoungcheol
- Grievance Handling Department: OOTD Help Center
- Access E-mail: join@ootdkorea.com
17. Duty to Notify
This Policy was established on [Jan 01, 2023]. In the event of addition, deletion or amendments to its contents according to the changes in government policies or cybersecurity technologies, any general changes shall be publicly announced at least seven (7) days before the changes take effect, and any important changes shall be publicly announced at least thirty (30) days before the changes take effect, under the NOTICE section of OOTD help center (https://ootdkorea.com) of the Homepage.