Privacy Policy
# Purpose of Personal Information Processing
RISE processes personal information for the following purposes and does not use it for any other purposes.
- Verification of customer registration intent
- Customer identification and authentication for service provision
- Maintenance and management of membership
- Payment processing for goods or services
- Supply and delivery of goods or services
## Processing and Retention Period of Personal Information
1. RISE processes and retains personal information within the period of consent received from the information subject or within the legally required retention period.
2. Specific processing and retention periods are as follows:
- Customer registration and management: Until service contract termination or membership withdrawal, however, in case of remaining credits/debts, until such relationships are settled
- Records of contracts, withdrawals, payments, and supply of goods in e-commerce: 5 years
## Collection of Personal Information
1. RISE collects personal information through mobile applications, written forms, telephone, membership registration, customer service consultation (phone or email), provision from partners, and event participation.
2. The company uses third-party analytics tools to measure traffic and usage trends. These tools collect information that helps improve RISE's services, such as visited service pages, sections, and time spent on service. This analytical information is collected collectively for all users and cannot be used to identify specific users.
## Use of Personal Information
1. Collected information may be used for the following purposes:
- Providing recommendation services using body data
- Providing notification services
- Improving/testing/monitoring service efficiency
- Developing and testing new features
- Diagnosing and resolving technical issues
- Internal operations including service problem solving, data analysis, research activities
- Displaying, sharing, and publishing content registered by members
2. Personal information is also used for:
- Confirming registration or withdrawal intentions
- User verification and identification
- Preventing service disruption and misuse
- Record preservation for dispute resolution
- Handling complaints
- Delivering notifications
3. Additionally, personal information is used for:
- Service usage analysis and statistics
- Providing customized services (including advertisements)
- Demographic-based service provision
- Payment processing
- Service development/provision or updates
- Providing event or promotional information
## Third-Party Provision of Personal Information
RISE only provides personal information to third parties in cases that fall under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the information subject or special legal provisions.
## Outsourcing of Personal Information Processing
1. RISE outsources personal information processing as follows for smooth operation:
- Recipient (Processor):
- Outsourced tasks:
- Outsourcing period:
2. When concluding outsourcing contracts, RISE specifies in documents the prohibition of processing personal information beyond the purpose of performing outsourced tasks, technical/administrative protection measures, restrictions on re-outsourcing, management and supervision of processors, and liability for damages, in accordance with Article 25 of the Personal Information Protection Act. RISE supervises to ensure that processors handle personal information safely.
3. Any changes in outsourced tasks or processors will be promptly disclosed through this privacy policy.
## Rights and Obligations of Information Subjects and Legal Representatives
1. Information subjects can exercise the following personal information protection rights against RISE at any time:
- Request to view personal information
- Request for correction of errors
- Request for deletion
- Request to stop processing
2. These rights can be exercised through written documents, telephone, email, or fax, and RISE will take action without delay.
3. If a user requests correction or deletion of personal information errors, RISE will not use or provide such personal information until the correction or deletion is completed.
4. These rights can be exercised through a legal representative or authorized agent. In such cases, a power of attorney must be submitted according to Form No. 11 of the Personal Information Protection Act Enforcement Rules.
5. Users must not violate the Personal Information Protection Act or related laws by infringing on their own or others' personal information and privacy being processed by the company.
## Categories of Personal Information Processed
RISE processes the following personal information items:
- For RISE's service and content provision:
- Required items: Login ID, profile, service usage records, access logs, IP information
- [Optional items]: Photos, gender, age, physical information
- Other users may access and view some optional items (such as photos) through community features
- RISE receives users' nicknames (names), emails, and member numbers from platform operators (e.g., Google)
- RISE collects service usage records, access logs, misuse records, carrier information, OS and device information, language information, payment records, cookies, IP information, and suspension records
- Additional information may be collected during event participation, prize applications, or service inquiries
Collection methods include:
- Website, mobile applications, written forms, telephone, fax, customer service consultation, partner provision, event participation, service usage collection tools, cooperation
## Destruction of Personal Information
RISE destroys personal information without delay when the processing purpose is achieved. The procedures, deadlines, and methods are as follows:
1. Destruction Procedure
- Information is moved to a separate DB (or paper documents) after achieving its purpose
- Information is stored for a certain period according to internal policies and relevant laws before destruction
- Transferred information is not used for other purposes except as required by law
2. Destruction Method
- Electronic files are destroyed in a way that prevents recovery or reproduction
- Paper documents are shredded or incinerated
## Installation/Operation of Automatic Personal Information Collection Devices and Rejection
RISE uses 'cookies' to store and retrieve user information for personalized services. Cookies are small pieces of information sent from the server to users' browsers and may be stored on users' devices.
1. Purpose of cookies:
- Analyzing access frequency and visit times
- Tracking user preferences and interests
- Targeted marketing and personalized service provision
2. Users can refuse cookie installation, though this may limit access to some services requiring login
- Settings (IE): Tools > Internet Options > Privacy > Site Blocking
## Personal Information Protection Officer
1. RISE has designated the following personal information protection officer:
- Name: Kyunghyun Nam
- Position: CEO
- Contact: rise@cheeezbucket.com
Protection Department:
- Department: Operations
- Position: CEO
- Contact: Same as above
2. Information subjects can inquire about all personal information protection matters through the protection officer and department. RISE will respond without delay.
## Changes to Privacy Policy
1. This policy is effective from its implementation date. Changes will be announced 7 days prior through notices. For significant changes affecting member rights, 30-day notice will be provided, and renewed consent may be required.
2. Continued use of RISE services after policy updates implies consent to the changes.
## Security Measures
RISE implements the following technical/administrative and physical measures for security:
1. Regular self-audits (quarterly) for personal information handling security
2. Minimization and training of personal information handling staff
3. Implementation of internal management plans for safe processing
(Effective Date) This policy is effective from November 23, 2023.