Privacy Policy
Inorbit Co., Ltd. – Privacy Policy (Last Updated: January 31, 2025)
Inorbit Co., Ltd. (hereinafter referred to as the “Company”) values the privacy of its customers and is committed to protecting their personal information.
The Company collects, uses, and manages users’ personal information in accordance with the following principles, and complies with the relevant laws and regulations of the Republic of Korea, including the Personal Information Protection Act and applicable guidelines for information and communications service providers.
Through this Privacy Policy, the Company informs users of the purposes and methods of personal information collection and use, as well as the measures taken to protect such information.
Collection and Use of Personal Information
“Personal information” refers to information about a living individual that can identify the individual directly (such as name, email address, etc.), or indirectly when combined with other information, even if the information alone may not identify a specific person.
The Company ensures that this Privacy Policy is easily accessible at all times by publishing it on the homepage of the Inorbit website (inorbit.co.kr).
The Company has established internal procedures to revise and improve this Privacy Policy on an ongoing basis. When the policy is updated, a version number is assigned so that users can easily recognize and understand the changes made.
Purpose and Methods of Collecting Personal Information
The Company processes only the minimum amount of personal information necessary for the purposes stated below. The Company does not collect sensitive personal information that may pose a risk to users’ fundamental rights and freedoms, such as race or ethnicity, beliefs or ideologies, place of origin or residence, political orientation, criminal records, health status, or sexual orientation.
Purposes of Use:
① Fulfillment of service-related agreements
② Responding to inquiries regarding products, technologies, or purchases
③ Marketing and advertising: including the introduction of new products and services, event announcements, market research, and statistical analysis (e.g., analysis by age, gender, and region)
Use of Specific Personal Information:
① Name, user ID, password: To verify the user’s identity for membership-based services
② Email address, phone number, newsletter subscription status: For notifications, confirmation of user intent, handling of complaints, and providing communication channels; also used to deliver information about new services, products, and events tailored to user preferences
③ Bank account or credit card information: For processing payments for purchased products or services
④ Address, phone number: To ensure accurate delivery of invoices, prizes, and purchased items
⑤ Address: Also used for demographic analysis, including statistics by age, gender, and location
Methods of Collecting Personal Information
The Company collects personal information for the following purposes and through the following methods:
Purposes of Collection and Use:
Personal information is collected to respond to product inquiries, provide customer support, manage customer relationships, and improve the quality of services offered by the Company.
Methods of Collection:
① Online collection through product inquiry forms and consultations via the Company’s website
② Offline collection via applications submitted through telephone, fax, or at physical store locations
③ Provision of personal information from partner companies
④ Collection of publicly available information on the internet
⑤ Automatic generation of information through log analysis tools and similar technologies
Scope of Personal Information Collected
The Company provides content that can be accessed without requiring membership registration. However, certain personal information may be required when using specific services such as product inquiries or payment processing. Optional fields may be left blank without restricting access to services.
①Personal Information Collected During Product Inquiries
-
Required information: Company name, name of the inquirer, email address (including newsletter subscription preference)
-
Optional information: Phone number, physical address
② Personal Information Collected During Transactions and Payments
-
For identity verification: Name, email address, company name, business registration number
-
Depending on the payment method:
• Bank name, account number, account holder’s name
• Credit card type, card number, expiration date, password, installment period
• Mobile phone number
③ Personal Information Required for Delivery
-
Name, address, postal code, and contact information of both sender and recipient
Use of Personal Information for Other Purposes and Provision to Third Parties
The Company does not use users’ personal information beyond the scope of the purposes notified in “Purpose of Collection and Use of Personal Information”, nor does it disclose or provide such information to third parties, including individuals, companies, or institutions, without the user’s prior consent, unless otherwise permitted or required by applicable laws.
If the Company intends to provide or share personal information, it will individually notify the user in advance—via email or in writing—of the following details: the identity and primary business of the recipient, the specific personal information to be shared or provided, and the purpose of such provision or sharing. Consent will be obtained from the user prior to any such disclosure.
However, the Company may provide personal information without user consent in the following circumstances, in accordance with relevant laws and regulations:
-
When necessary to fulfill contractual obligations related to service provision or for billing purposes (e.g., content delivery, shipping of goods, invoice issuance, identity verification for financial transactions, payment processing, and debt collection)
-
When personal information is processed into anonymized statistical data for research or market analysis purposes, and no individual can be identified
-
When required by specific laws such as the Real Name Financial Transactions and Confidentiality Act, the Use and Protection of Credit Information Act, the Framework Act on Telecommunications, the Telecommunications Business Act, the Local Tax Act, the Consumer Protection Act, the Bank of Korea Act, the Criminal Procedure Act, or other applicable statutes
Consent to the Collection of Personal Information
The Company collects and uses personal information only after obtaining the user’s consent.
When users are presented with the Company’s Privacy Policy or Terms of Use during the use of a service, checking the box marked “Agree” will be considered as valid consent to the collection and use of personal information.
Users are given the option to agree or decline. However, refusal to consent may result in limited access to certain services.
The Company clearly states the purpose of collection, the categories of personal information collected, and the retention period at the time consent is obtained. Consent is collected through electronic means such as checkboxes or consent forms.
Collection of Personal Information via Cookies
The Company uses cookies and similar technologies to store and retrieve user information on a regular basis. A cookie is a small text file that the server operating the Company’s website sends to the user’s web browser, which is then stored on the user’s device.
① Operation of Cookies
The Company operates cookies to enhance user convenience. The only information collected through cookies is the user’s site login ID; no other personal information is collected.
② Purpose of Cookie Usage
Information collected through cookies is used for the following purposes:
-
Analyzing access frequency and visit times to understand user preferences and interests, and to track user behavior for personalized marketing and services
-
Providing tailored content based on the user’s interests
-
Tracking viewed or purchased items for personalized shopping experiences
-
Analyzing user behavior to guide service improvement or redesign
-
Enabling features such as posting content on message boards
* Cookies are automatically deleted when the browser is closed or the user logs out.
③ User Choice Regarding Cookies
Users have the right to choose whether to allow the installation of cookies. Users may configure their browser settings to accept all cookies, to prompt each time a cookie is saved, or to reject all cookies.
④ How to Disable Cookies
Users can refuse the use of cookies by adjusting their browser settings. Please note that disabling cookies may limit access to certain services.
- Example (For Internet Explorer 11.0 users):
-
To allow or block cookies: Go to Tools → Internet Options → Privacy tab → Click Advanced to set your preferred level of cookie handling.
-
To view stored cookies: Go to Tools → Internet Options → General tab → Under Browsing History, click Settings → View Files
-
To block all cookies: Go to Tools → Internet Options → Privacy tab → Set the slider to High or Block All Cookies
Withdrawal of Consent for Collection, Use, and Provision of Personal Information
① Withdrawal of Consent
Users and their legal representatives may withdraw their consent to the collection, use, and provision of personal information at any time. To withdraw consent, users may contact the Customer Service Center via the website, phone, email, or by contacting the Company’s Privacy Officer. Upon receiving such a request, the Company will promptly take necessary actions such as deleting the relevant personal information and will notify the user or legal representative without undue delay once the action has been completed.
② Request for Correction of Personal Information
If a user or legal representative requests the correction of inaccurate or outdated personal information, the Company will not use or provide such personal data until the correction is completed. If the incorrect information has already been shared with a third party, the Company will promptly notify the third party of the correction request and ensure that the update is applied.
③ Account Deletion (Membership Withdrawal)
The Company will ensure that the process of withdrawing consent and deleting personal information (i.e., membership withdrawal) is as easy and accessible as the process of providing consent in the first place.
Retention and Use Period of Personal Information
The Company retains personal information only for the period necessary to fulfill the purposes for which it was collected or provided. Once such purposes are achieved, the information is destroyed without delay, except where retention is required by law (e.g., the Commercial Act, the Act on the Consumer Protection in Electronic Commerce, etc.).
① Retention Periods Based on Legal Obligations:
In accordance with applicable laws, including the Act on the Consumer Protection in Electronic Commerce, certain transaction-related information is retained for the following periods:
-
Records regarding contracts, withdrawal of offers, payment, and supply of goods or services: 5 years
-
Records of consumer complaints or dispute resolution: 3 years
-
Records related to tax payments and evidence: 5 years
-
In cases where the retention period was individually notified to or agreed upon by the user: retained for the agreed-upon period
② Destruction of Personal Information:
Personal information is destroyed without delay once the purpose of collection or provision has been fulfilled, unless required to be preserved by law.
-
Payment information: Upon completion of the payment or expiration of the statute of limitations on the related claims
-
Delivery information: Upon delivery of the goods or services
③ Right to Access Retained Information:
If a user requests access to transaction-related information retained with their consent, Inorbit Co., Ltd. will promptly provide such access and ensure the user can review the information without undue delay.
Procedures and Methods for the Destruction of Personal Information
In principle, the Company promptly destroys personal information once the purpose of collection and use has been achieved. The procedures and methods of destruction are as follows:
① Destruction Procedures
-
Personal information entered by the user is transferred to a separate database (or stored in a separate filing cabinet for paper-based documents) after the intended purpose is fulfilled. It is then retained for a certain period in accordance with internal policies and relevant laws (see “Retention and Destruction Period”) and subsequently destroyed.
-
Personal information transferred to a separate database will not be used for any purpose other than those required by law.
② Destruction Methods
-
Personal information stored in electronic form is deleted using irreversible technical methods that prevent data recovery.
-
Printed documents containing personal information are shredded or incinerated to ensure complete destruction.
Policy on Linked Websites
The Company may provide links to websites or resources operated by third parties. However, the Company has no control over such external websites and resources and is not responsible for their availability, accuracy, usefulness, or any services or content provided through them.
When users click on a link and are redirected to a third-party website, the privacy practices of that site are independent from those of the Company. Therefore, users are encouraged to review the privacy policy of any third-party site they visit.
Protection of Personal Information for Children Under the Age of 14
As a general policy, the Company does not collect personal information from individuals under the age of 14.
If it becomes necessary to collect personal information from a child under 14 in order to provide specific services, the Company will first obtain verifiable consent from the child’s legal guardian. The collected information will be strictly managed during the course of the service and will be deleted without delay upon completion of the related purpose.
-
A legal guardian of a child under 14 may request access to, correction of, or deletion of the child’s personal information at any time. The Company will take prompt and necessary action in response to such requests.
-
The Company does not share or provide personal information of children under 14 to any third party.
-
If a legal guardian requests correction of inaccurate information collected from a child, the Company will suspend the use and provision of such information until the correction is completed.
-
The Company does not send advertising emails or promotional offers to users identified as under the age of 14, and does not attempt to induce the disclosure of additional personal information through games, prizes, or events.
Access and Correction of Personal Information
① Users may access or correct their registered personal information at any time. To do so, users can click the “Update Personal Information” menu on the website or contact the Company’s Privacy Officer or designated personnel via written request, telephone, or email. Upon receiving such a request, the Company will take prompt action without undue delay.
② If a user requests the correction of inaccurate personal information, the Company will not use or provide the relevant information to any third party until the correction has been completed.
③ If incorrect personal information has already been provided to a third party, the Company will notify the third party of the correction request without delay and take the necessary steps to ensure that the correction is applied.
Outsourcing of Personal Information Processing
The Company may, for the purpose of improving service quality, delegate the collection, handling, or management of personal information to external service providers.
-
In the event personal information is outsourced, the Company will notify users in advance via written notice, email, telephone, or through its website. This notice will include details such as the name of the entrusted entity, duration of delegation, nature of the relationship between the Company and the service provider, and the scope of responsibilities.
-
The Company will enter into written or electronic agreements with the service providers to include specific terms regarding the handling of personal information, including compliance with privacy regulations, confidentiality obligations, prohibition of third-party disclosure, liability for breaches, retention periods, and the return or destruction of data upon contract termination. These agreements will be securely stored.
-
Currently, the Company does not delegate any personal information processing to external parties without the user’s prior consent. If such outsourcing becomes necessary in the future, the Company will notify users of the details in advance and, where required, obtain prior consent.
User Rights and Responsibilities
① Users are responsible for entering accurate and up-to-date personal information in order to prevent any unintended issues. The Company shall not be held liable for any problems arising from the user’s provision of inaccurate information. Furthermore, users who submit false or fraudulent data, including impersonating others, may have their membership revoked.
② Users have the right to have their personal information protected, but they also have a duty to protect themselves and to respect the privacy rights of others.
Users must take care not to disclose their own personal information and must not misuse or infringe upon the personal information of others.
Privacy Officer and Customer Support
Inorbit designates the following individual as its Privacy Officer to protect users’ personal information and handle any related complaints or inquiries:
①Privacy Officer
-
Name: Jiyeon Ryu, CEO
-
Email: sales@inorbit.co.kr
-
Phone: 1566-6271
-
Address: #1515, 181, Gasan digital 1-ro, Geumcheon-gu, Seoul, Republic of Korea
② Users may contact the Privacy Officer or the Company’s Customer Support Center for any personal data-related questions or concerns. While the Company takes all reasonable security measures, it shall not be held responsible for damages caused by network vulnerabilities, hacking, or user-generated content, unless caused by willful misconduct or gross negligence.
For further assistance regarding personal data protection or to report a complaint, users may also contact the following institutions in Korea:
-
Korea Consumer Agency: https://www.kca.go.kr/home/main.do
-
E-Commerce Dispute Mediation Committee: https://www.ecmc.or.kr
-
Personal Information Infringement Reporting Center: ☎ 1336 / https://privacy.kisa.or.kr/main.do
-
ePrivacy Certification Committee: ☎ 02-580-0533 / https://www.eprivacy.or.kr/index.do
-
Supreme Prosecutors’ Office – Cybercrime Investigation: ☎ 02-3480-3600 / https://www.spo.go.kr/site/spo/main.do
-
Korean National Police Agency – Cyber Bureau: https://www.police.go.kr
Effective Date of this Privacy Policy: January 31, 2025