Privacy Policy

MatchNChat Inc. (hereinafter referred to as the "Company") values your personal information very much and complies with relevant regulations. The Company informs you about the purposes and methods of using your personal information, as well as the measures taken to protect your personal information.

1. How we collect and use your information

The Company processes personal information for the following purposes. The personal information being processed will not be used for any other purposes, and if the purpose of use changes, necessary measures will be taken in accordance with relevant regulations, such as obtaining separate consent.

• Fulfillment of contracts related to service provision and fee settlement according to service provision
• Member management: identity verification according to the use of membership services, personal identification, prevention of illegal use by bad members and unauthorized use, confirmation of intention to sign up, age verification, complaint handling including handling of complaints, delivery of notices
• Use in marketing and advertising: delivery of advertising information such as events, identification of access frequency, or statistics on members' use of services

2. Provision and collecting method of personal information

The Company collects the following personal information for membership registration, consultation, and service application.

• Collected items: name, date of birth, gender, login ID, password, mobile phone number, email, profile picture, access log, cookies, access IP information, payment records, suspension records
• Personal information collection method: application (membership registration through app store or platform operator, telephone and online consultation through customer center, event participation)

3. Providing and sharing of personal information

The Company uses users' personal information within the scope stated in "1. How we collect and use your information" and does not, in principle, use it beyond that scope or disclose users' personal information externally without prior consent. However, the following cases are exceptions:

• When the user has consented to disclosure in advance
• When there is a request from an investigative agency in accordance with the procedures and methods prescribed by law for investigative purposes or in accordance with legal provisions

4. Storage and use duration of personal information

The Company processes and retains personal information within the retention and use period of personal information according to laws or within the retention and use period of personal information consented to when collecting personal information from the data subject.

• In case of member registration information: when withdrawing from membership or being expelled from membership
• However, in the following cases, it will be retained until the end of the relevant reason:
  • If an investigation or inquiry is in progress due to violation of relevant laws, until the end of the investigation or inquiry
  • If there are remaining creditor-debtor relationships according to service use, until the settlement of the relevant creditor-debtor relationships
• The Company retains the following information for a certain period for the purpose of confirming the relationship of rights and obligations related to transactions in accordance with relevant laws:
  • Records on contracts or withdrawal of subscriptions: 5 years (Act on Consumer Protection in Electronic Commerce)
  • Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce)
  • Records on consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
  • Records on display and advertising: 6 months (Act on Consumer Protection in Electronic Commerce)
  • Website visit records: 3 months (Protection of Communications Secrets Act)

5. Deletion procedure of personal information

In principle, the Company destroys the relevant personal information without delay when the purpose of processing personal information is achieved. The procedures, deadlines, and methods of destruction are as follows.

• Deletion procedure: The information entered by the user is transferred to a separate DB after the purpose is achieved (in case of paper, a separate document) and stored for a certain period according to internal policies and other relevant laws, or destroyed immediately. At this time, the personal information transferred to the DB will not be used for other purposes unless required by law.
• Deletion deadline: When the retention period of personal information has expired, within 5 days from the end of the retention period; when the personal information becomes unnecessary due to achievement of the purpose of processing personal information, abolition of the service, termination of business, etc., within 5 days from the date when the processing of personal information is deemed unnecessary.
• Deletion method:
  • Information in electronic file format uses technical methods that cannot reproduce records.
  • Personal information printed on paper is destroyed by shredding with a shredder or incineration.

6. Rights and exercise method of the user

Users can inquire about or modify their registered personal information at any time and can also request withdrawal from membership. To inquire or modify your personal information, click 'Change Personal Information' (or 'Modify Member Information', etc.), and to withdraw from membership (withdraw consent), click "Withdraw Membership" and after going through the identity verification process, you can directly view, correct, or withdraw.

Or if you contact the person in charge of personal information management in writing, by phone, or by email, we will take action without delay.

If the user requests correction of errors in personal information, we will not use or provide the personal information until the correction is completed. Also, if the incorrect personal information has already been provided to a third party, we will notify the third party of the correction processing result without delay so that the correction can be made.

The Company processes personal information that has been terminated or deleted at the user's request as stated in "4. Storage and use duration of personal information" and processes it so that it cannot be viewed or used for any other purpose.

7. Installation of automated collection of personal information

The Company uses 'cookies' that store and retrieve usage information from time to time to provide individual customized services to users.

Cookies are small pieces of information sent by the server (http) used to operate a website to the user's computer browser and may also be stored on the hard disk inside the user's PC computer.

• Purpose of using cookies: Used to provide optimized information to users by identifying visits and usage patterns for each service and website visited by users, popular search terms, whether secure access is used, etc.
• Installation, operation, and refusal of cookies: You can refuse to store cookies by setting options in Tools > Internet Options > Privacy menu at the top of the web browser.
• If you refuse to store cookies, you may have difficulty using customized services.

8. Policy on administrative and technical protection

The Company takes the following technical/administrative measures to ensure safety so that personal information is not lost, stolen, leaked, altered, or damaged when processing users' personal information.

• Password encryption: User passwords are encrypted and stored and managed, so only the person knows them, and confirmation and change of personal information are only possible by the person who knows the password.
• Measures against hacking: The Company is doing its best to prevent members' personal information from being leaked or damaged by hacking or computer viruses. We regularly back up data in preparation for damage to personal information, and use the latest vaccine programs to prevent users' personal information or data from being leaked or damaged, and we use encrypted communication to safely transmit personal information over the network. We also use intrusion prevention systems to control unauthorized access from outside, and we are trying to have all possible technical devices to ensure security systematically.
• Minimization and education of personal information processing staff: The Company limits personal information-related processing staff to those in charge and grants separate passwords for this purpose and updates them regularly, and always emphasizes compliance with the personal information processing policy through regular training of those in charge.

9. Contact of the personal information administrator

The Company designates a person in charge of personal information protection as follows to take overall responsibility for work related to personal information processing, and to handle complaints and remedy damages related to personal information processing by data subjects.

Users can inquire with the person in charge of personal information protection and the relevant department about all matters related to personal information protection inquiries, complaint handling, damage remedy, etc. that occurred while using the Company's services. The Company will respond to and process users' inquiries without delay.

10. Supplementary Provisions

This privacy policy is effective from May 1, 2019.