Privacy Policy

Birex (hereinafter referred to as the ‘Company’) considers customer information important and has the following privacy policy. The company complies with the “Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.” and informs you of the purpose and method of using your information and what measures are being taken to protect your personal information.

1. Items of personal information to be collected and methods of collection
The company collects personal information for membership registration, service provision, and other consultations, and may also request personal information for collective statistical analysis during a survey or event or for the purpose of sending out prizes. However, the company does not collect sensitive personal information (race and ethnicity, ideology and creed, place of birth and domicile, political orientation and criminal record, etc.) that is likely to infringe on users' basic human rights. Be sure to ask for consent. Even at this time, we inform you that the information entered will not be used for any purpose other than the provision of the service or the purpose previously disclosed to the member.

The contents of personal information collection are as follows.
1) Required items
- Individual member: name, trade name, e-mail address, phone number, address
2) How to collect personal information
- Homepage, App

2, Purpose of collection and use of personal information
The company collects personal information for the following purposes.
1. Marketing and advertising such as service guide
- Development and specialization of new services, provision of services and advertisements according to demographic characteristics;
Confirmation of product information and order information confirmation and settlement;
Delivery of advertising information such as access frequency, statistics on service use, and events

3. Consent to collection of personal information
The company obtains consent for the collection of members' personal information, and has prepared a procedure for consenting to collection of personal information in the Terms of Use and Privacy Policy during the membership registration process within the company. If you check the box [I agree to the 'Privacy Policy'], you agree to the collection of personal information.

4. Provision and Sharing of Personal Information
The company shares member information with merchants in order to provide better service to company members. The content of the shared information is personally identifiable information (name, contact information, email address, UID), etc., and the information is not shared for purposes other than service provision and marketing purposes.
The company protects users’ personal information in ‘2. Purpose of collection and use of personal information’ shall be used within the scope notified in the ‘Purpose of Collection and Use of Personal Information’. However, exceptions are made in the following cases
1. When users consent to disclosure in advance
2. In accordance with the provisions of laws and regulations, or when there is a request from the investigation agency in accordance with the procedures and methods stipulated in the laws for the purpose of investigation

5. Period of retention and use of personal information
As long as the service user continues to use the service as a member of our company, the company will continue to retain the user's personal information and use it to provide the service.
In the event of a request for abuse of rights, prevention of abuse, infringement of rights/defamation disputes, and cooperation in investigations, the Company may keep the member's personal information for one year from the time of the member's cancellation of the use contract in preparation for a recurrence.
If it is necessary to preserve it in accordance with the provisions of related laws, such as the Commercial Act, the Consumer Protection Act in Electronic Commerce, etc., the Company keeps member information for a certain period of time as stipulated by the relevant laws and regulations. In this case, the company uses the stored information only for the purpose of storage, and the retention period is as follows.
end. Reasons for information retention according to company internal policy
The retention period of personal information upon withdrawal of membership is as follows.
1. Preservation Grounds: User's Rights Infringement Dispute and Investigation Cooperation
2. Retention period: 1 year
I. Reasons for information retention according to related laws
If it is necessary to preserve it in accordance with the provisions of related laws, such as the Commercial Act, the Consumer Protection Act in Electronic Commerce, etc., the company keeps member information for a certain period of time as stipulated by the relevant laws and regulations. In this case, the company uses the stored information only for the purpose of storage, and the retention period is as follows.
1. Records on handling consumer complaints or disputes
Reason for Retention: Act on Consumer Protection in Electronic Commerce, Etc.
Retention period: 3 years
2. Records of visits
Reason for retention: Act on Promotion of Information and Communications Network Utilization and Information Protection
Retention period: 3 months

6. Procedure and method of destruction of personal information
In principle, the company destroys the information without delay after the purpose of collection and use of personal information has been achieved or the period of retention and use has elapsed.
However, the information that must be kept in accordance with the relevant laws and regulations is stored for the period set by the laws and then destroyed.
In accordance with the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., in the case of a member who has not had a use record for one year, the company separates it from the member's personal information in use and safely stores it, and the purpose of collecting and using personal information for personal information After this is achieved, the information will be destroyed without delay. At this time, the separately stored and managed personal information will never be used for any other purpose except as stipulated by law.
Personal information that has achieved the purpose of collection and use of personal information, such as service termination or the arrival of the personal information retention period agreed by the user, is destroyed in a non-renewable way.
Information for which the duty of preservation is imposed by law is also separately stored and destroyed in a way that cannot be reproduced without delay after the relevant period has elapsed.
1. Destruction procedure
In accordance with the internal policy and other relevant laws and regulations (see retention and use period), the information is stored for a certain period and then destroyed.
This personal information will not be used for any other purpose other than being retained unless it is required by law.
2. Destruction method
Personal information printed on paper is shredded with a shredder or destroyed through incineration.
Personal information stored in the form of electronic files is deleted using a technical method that cannot reproduce the record.

7. Matters concerning the installation and operation of the automatic personal information collection device and its rejection
A cookie is a small data file sent by the HTTP server to the user's browser and is stored on your computer. The company uses these cookies to obtain the member's browser type or service usage type, and based on such cookie information, it is used to provide useful and more convenient customized services to members.
You have choices about cookies. By selecting an option in your web browser, you can accept all cookies, check each time a cookie is saved, or refuse to save all cookies. However, if you refuse to store cookies, you will not be able to use all services of the company that require log-in.

8. Technical and administrative measures for personal information protection
Your personal information is protected by a password. Only you can know the password of your account, and only you who know the password can check and change your personal information. Therefore, you should not disclose your password to anyone. Also, it is recommended to log out and close the web browser after completing the work. In particular, if you share a computer with others or use it in a public place, this procedure is more necessary to prevent personal information from being disclosed to others. The company is not responsible for leakage of personal information due to user negligence or problems on the Internet.
The company is implementing the following technical and administrative measures for personal information protection.
1. We are fully committed to firewall and security systems to prevent hacking.
2. When sending and receiving personal information, an SSL security server certificate is installed to protect information.
3. Access to personal information is restricted to those who perform the relevant work and those who need to handle personal information when performing work, so that other employees cannot access it.
4. In the case of personal information handlers, regular and frequent training is provided.
5. We maintain a record of access to the personal information processing system and regularly check and supervise it.
6. We are implementing protective measures when printing and copying personal information.

9. Person in charge of personal information management
If you have any comments regarding the company's privacy policy, please send us an e-mail and we will take action immediately upon receipt and notify you of the result. The personal information manager and personal information protection manager are as follows.
Personal information manager
Privacy Manager
name: 
E-mail: [email protected]

10. ADDENDUM
The existing personal information protection policy will be amended as a personal information processing policy.
If there is any amendment or change to the current personal information processing policy, we will notify you through a notice on the site at least 7 days in advance.

Date of enforcement of privacy policy: AUG 1, 2021