Privacy Policy

Article 1 (Personal Information Collected and Methods of Collection)

The Company collects the following personal information in order to provide services such as membership registration, ordering and payment, delivery and customer consultation.

• Upon membership registration (required) : name or business name, mobile phone number, login ID (social login identifier), password (for direct registration)
• Upon membership registration (optional) : email address, address (default delivery address), contact details of the person in charge, registration route and purpose of registration
• When using social login : the Company receives the member’s name (or nickname) and profile picture from partner services such as Naver, Kakao and Google, and receives the email address, mobile phone number and the like only where the user has consented. (The items provided are shown on the consent screen of each partner service.)
• Upon ordering, payment and delivery : recipient’s name, contact number, delivery address, payment information (such as the depositor’s name for a virtual account transfer)
• Information generated and collected automatically in the course of using the Service : access IP, cookies, access date and time, service usage records, device information

Methods of collection : the website (membership registration, ordering, consultation), social login integration, and automatic collection in the course of using the Service

Article 2 (Purposes of Collection and Use of Personal Information)

• Member identification and verification of identity, and provision of membership-based services
• Performance of transactions such as ordering, payment, print production and delivery, and notification of their progress
• Customer consultation and response to inquiries, handling of complaints, and delivery of notices
• Prevention of fraudulent use and retention of records for dispute mediation
• Improvement of services and information about new services (only where the user has separately consented)

Article 3 (Retention and Use Period of Personal Information)

As a rule, the Company destroys personal information without delay once the purpose of its collection and use has been achieved. However, in the following cases it is retained for the period indicated.

• Member information : until withdrawal of membership (provided that, where an investigation or inquiry into a violation of applicable laws is in progress, until it is concluded)
• Records on contracts or withdrawal of subscription : 5 years (Act on the Consumer Protection in Electronic Commerce, Etc. of Korea)
• Records on payment and the supply of goods, etc. : 5 years (Act on the Consumer Protection in Electronic Commerce, Etc. of Korea)
• Records on consumer complaints or dispute handling : 3 years (Act on the Consumer Protection in Electronic Commerce, Etc. of Korea)
• Records on labelling and advertising : 6 months (Act on the Consumer Protection in Electronic Commerce, Etc. of Korea)
• Communication confirmation data such as access logs : 3 months (Protection of Communications Secrets Act of Korea)

Article 4 (Provision of Personal Information to Third Parties)

The Company does not provide users’ personal information to third parties beyond the scope notified in this Policy. The following cases, however, are exceptions.

• Where the user has given prior consent
• Where recipient information (name, contact number and address) is provided to a delivery company in order to perform delivery services
• Where there is a request based on statute, or a request made by an investigative agency in accordance with lawful procedures

Article 5 (Outsourcing of Personal Information Processing)

The Company may outsource personal information processing as follows in order to provide the Service smoothly.

• Parcel and logistics delivery services : contracted delivery agencies
• Operation of server and cloud infrastructure : cloud hosting providers
• Payment processing : electronic payment gateway (PG) providers (upon introduction)

When entering into an outsourcing agreement, the Company stipulates the matters necessary for personal information to be managed safely, and manages and supervises the trustee.

Article 6 (Overseas Transfer of Personal Information)

In order to provide the Service, the Company transfers and stores users’ personal information overseas as follows. The personal information transferred is processed with safety measures such as encryption applied.

• Date and method of transfer : the data is encrypted (HTTPS, TLS) and transferred over an internet line at the time the Service is used, membership is registered, or an order is placed.
• Users have the right not to consent to this overseas transfer. However, because the overseas transfer is infrastructure essential to provision of the Service, membership registration and use of the Service may be restricted if you refuse consent.

Article 7 (Rights and Obligations of Data Subjects and How to Exercise Them)

Users may view and modify their own personal information at any time, and may withdraw their consent to the use of personal information by withdrawing their membership. To view or modify personal information, please use My Page or contact the personal information protection officer in writing, by telephone or by email, and we will take action without delay.

The Company does not accept membership registration by children under 14 years of age.

Article 8 (Procedures and Methods for Destroying Personal Information)

• Destruction procedure : personal information for which the retention period has elapsed or the purpose of processing has been achieved is destroyed safely in accordance with internal policy.
• Destruction method : electronic files are permanently deleted by a method that makes recovery or reproduction impossible, and printed materials are shredded or incinerated.

Article 9 (Measures to Ensure the Security of Personal Information)

• Administrative measures : establishment and implementation of an internal management plan, minimisation of the staff who handle personal information, and training
• Technical measures : management of access rights, encryption of important information such as passwords, retention of access records, and operation of security programs
• Physical measures : access control over data storage systems

Article 10 (Installation and Operation of Automatic Collection Devices such as Cookies, and Refusal Thereof)

The Company uses cookies to keep users signed in, to analyse usage statistics and for similar purposes. Users may refuse the storage of cookies through their web browser settings, but in that case the use of some services, such as login, may be restricted.

Article 11 (Personal Information Protection Officer)

The Company designates a personal information protection officer as set out below, to take overall charge of work relating to the processing of personal information and to handle users’ complaints and provide remedies for damage.

• Personal information protection officer : Representative
• Company name : PrintingSolutions., LTD
• Address : Company address
• Phone : customer service number
• Email : privacy@photocafe.co.kr

Article 12 (Remedies for Infringement of Rights and Interests)

If you need to report or seek advice on an infringement of personal information, you may contact the following Korean agencies.

• Personal Information Infringement Report Centre (Korea Internet & Security Agency, KISA) : 118 (no area code) / privacy.kisa.or.kr
• Personal Information Dispute Mediation Committee (Korea) : 1833-6972 / www.kopico.go.kr
• Supreme Prosecutors’ Office, Cyber Investigation Division (Korea) : 1301 (no area code) / www.spo.go.kr
• National Police Agency, Cyber Investigation Bureau (Korea) : 182 (no area code) / ecrm.police.go.kr

Article 13 (Changes to this Privacy Policy)

This Privacy Policy may have content added, deleted or amended in line with changes in laws, policies or security technology, and any change will be announced on the website from 7 days before its effective date.

Effective date : May 13, 2026