This Privacy Policy (“Policy”) of LYCHEE & FRIENDS Corporation (hereinafter referred to as “L&F” describes how your personal information is collected, used, stored, and shared when you visit or make a purchase from LYCHEE & FRIENDS website (the “Site”). This Privacy Policy is effective as of Nov 30, 2020

“L&F” takes users' personal information very seriously, and does its best to protect users' personal information by complying with relevant laws, regulations, and guidelines for information and communication service providers must comply with, such as the ACT ON PROMOTION OF INFORMATION AND COMMUNICATIONS NETWORK UTILIZATION AND INFORMATION PROTECTION, and the PERSONAL INFORMATION PROTECTION ACT.

Please read this Policy carefully. Your use of the Site will constitute your fully integrated understand and agreement to this Policy.

1. Items of collected Personal Information and collection method

(1) Information collected from Members using the ”Site”

Items

Details

① Required Items

Name, ID (E-MAIL), password, date of birth, country, mobile phone number

② Optional Items

Gender


(2) Personal Information collected when purchasing products online

The following information is collected when Members and Non-Members purchase products online.

Items

Details

Required Items

Orderer’s information (name, email or contact number), shipping address information (name, shipping address), credit card information (name of cardholder, country, card number, card expired date, card validation number, billing address), Paypal account information (ID, email or mobile number, password)

(3) Automatically collected Personal Information

When you visit the “Site”, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

We also use the following third-party cookies on the Site:

- Facebook

By agreeing to the cookie notice pop-up or by agreeing to this “Policy”, you consent to our use of cookies and “Device Information” in accordance with this “Policy”.

2. Purpose of collection and use of Personal Information

Purpose

Details

① Member management and identification

Identity verification, personal identification, prevention of unauthorized use and unauthorized use of bad members, confirmation of subscription intention, age confirmation according to membership service use

Confirmation of consent from legal representative when collecting personal information of children under 14 years of age

Identification of the order when purchased by non-member

② Response to customer inquiries

Complaints and complaints handling, customer suggestions, delivery of notices, customer care and service support

The purpose of confirming the identity of the complainant, confirming the complaint matters, contacting and notifying for fact-finding, and notifying the result of processing

Handling requests related to order/delivery such as return/refund

③ Order deliveryDelivery or returns of goods and gifts

④ Settlement

Payment for purchase

Purchase information management for customers’ purchase performance and settlement processing

Payment Refund

⑤ Use for advertising such as marketing (limited to Members)

Delivery of advertising information such as products and services, coupons, appreciation and promotion events, and events on the Site or other third-party platforms

Market research, customer satisfaction survey, product and service development research, access frequency and use of statistical analysis data for each customer

Mail order sales, phone solicitation sales, telephone consultation service, SMSㆍDMㆍTMㆍE-mailㆍPush-mail delivery

Updates on Private policy or Terms and conditions.

3. Personal Information Retention Period

In principle, “L&F” destroys the information without delay after the purpose of collecting and using personal information is achieved. However, if it is necessary to preserve it in accordance with the provisions of the relevant laws and regulations, “L&F” keeps the information for a certain period specified by the relevant laws and regulations and may transfer the personal information to a separate database (DB) or store it in a different storage location.

Retained Item

Period

Records related to contract or subscription withdrawal

5 years

Records on payment and supply of goods, etc.

5 years

Records on consumer complaints or dispute settlement

3 years

Records on collection/processing and use of credit information

3 years

Records on display/advertising

6 months

Log records such as the user's Internet / tracking data of the user's access point, and other data to confirm communication facts

3 months/ 12 months

4. Deletion of Personal Information

In principle, personal information of users will be destroyed without delay when the purpose of use of personal information is achieved. However, information of members who do not have a record of using the service for more than one year will be converted to a dormant account in accordance with the application of the 'Personal Information Expiration Period' of the ACT ON PROMOTION OF INFORMATION AND COMMUNICATIONS NETWORK UTILIZATION AND INFORMATION PROTECTION.

(1) Deletion procedure

The information entered by the user is transferred to a separate database (DB) (separate documents in the case of paper) after the purpose is achieved, and is stored for a certain period of time or immediately destroyed in accordance with internal policies and other related laws. At this time, the personal information transferred to the DB will not be used for other purposes unless it is required by law.

(2) Deletion period

The user's personal information will be destroyed after the end of the retention period or when the personal information becomes unnecessary, such as the achievement of the purpose of processing personal information, the abolition of the service, or the end of the business.

(3) Method of Deletion

For information in the form of electronic files, a technical method that cannot reproduce the record will be used. Personal information printed on paper will be destroyed by shredding or incineration.

5. Provision of Personal Information to third party

If “L&F” needs to share the user's personal information with third parties, “L&F” shall notify the user of the recipient, purpose of provision, items of information provided, and period of use and retention to seek consent. In addition, if personal information is provided within the scope of the purpose and methods specified in relevant laws, “L&F” may provide the user's personal information.

6. Outsourcing of Personal Information Processing

(1) “L&F” outsources some of the tasks necessary to provide services to users to external companies.

(2) “L&F” stipulates duties, etc. and supervises external companies through contracts by regulating them to keep personal information confidential, prohibit provision to third parties, bear responsibility in case of accident, consignment period, and destroy personal information after processing ends

(3) “L&F” outsources the processing of personal information to the below outsourcees for service improvement and effective business processing. “L&F” can outsource the processing of personal information to a third party without the user's separate consent procedure by disclosing the contents of outsourcees and outsourced services as follows.

Outsourcees

Outsourced Services

A

Customer support and customer consultation

B

Payment processing

C

Logistics storage and delivery of ordered products

D

Service development and operation

7. Links to other websites

“L&F” may provide users with links to other companies' websites or materials. When “L&F” provides a user with a link to another company's website or material, “L&F” has no control over external sites and materials, so “L&F” cannot be held responsible for and cannot guarantee the usefulness of the services or materials provided therefrom.

8. Rights of the subject of Personal Information

(1) Users and legal representatives may request access to/correction/deletion/suspension of processing/withdrawal of consent at any time in relation to the registered user or the personal information of the person under age of 14.

(2) To this end, if you use the member information modification menu on the homepage, contact the representative phone, or the person in charge of personal information protection in writing, by phone or e-mail for information correction, we will take action without delay.

(3) “L&F” may refuse to view/correct/delete all or part of your personal information in the following cases.

– When viewing is prohibited or restricted by law

– When there is a risk of harming another person's life or body, or unreasonable infringement of another person's property and other interests

(4) If a user requests correction of errors in personal information, the personal information will not be used or provided to a third party until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, the result of correction processing will be notified to the third party without delay.

(5) “L&F” shall delete all personal information that has been deleted/ suspended at the request of a user or legal representative in ‘3. Personal Information Retention Period’, and processing so that it cannot be viewed or used for other purposes.

9. Duties of the subject of Personal Information

(1) Users are obligated to protect their personal information, and “L&F” is not responsible for any problems caused by leakage of personal information due to the user's carelessness.

(2) Please enter your personal information accurately and update regularly. Users are responsible for any problems arising from incorrect information input, and when registering as a member or using the service by stealing other's personal information, it may be punished in accordance with the PERSONAL INFORMATION PROTECTION ACT.

(3) In addition to the right to receive protection of personal information, users have an obligation to protect themselves and not to infringe on the information of others. Please be careful not to leak users’ personal information including IDs and passwords, and be careful not to damage the personal information of others, including posts.

(4) Users must comply with other personal information laws such as the ”ACT ON PROMOTION OF INFORMATION AND COMMUNICATIONS NETWORK UTILIZATION AND INFORMATION PROTECTION”, ”PERSONAL INFORMATION PROTECTION ACT”.

10. Technical/administrative protection measures for Personal Information

In processing users' personal information, “L&F” strives to protect information by preparing technical/administrative protection measures for personal information.

“L&F” takes the following technical/administrative protection measures to ensure safety so that personal information will not be lost, stolen, leaked, altered or damaged in processing users' personal information.

(1) Password encryption

User's password is stored and managed by one-way encryption, and confirmation and change of personal information is possible only by the person who knows the password. Therefore, please take special care so that the user's password is not known to others.

(2) Storage of access records and prevention of forgery

The records of access to the personal information processing system will be stored and managed for at least 6 months, and security functions are used to prevent forgery, theft, and loss of access records.

11. Personal information protection

For complaints related to personal information that occur while using the service, please contact “L&F” at sales@lycheeandfriends.com or by mail using the format below:

LYCHEE & FRIENDS Corporation

[Re: Privacy Compliance]

5/F, Haechang Bldg., 380, Hyoryeong-ro, Seocho-gu, Seoul, 06727, ROK

12. Revision of the Privacy Policy

This “Policy” is disclosed at the bottom of the first screen of the “Site" operated by “L&F” so that users can easily notice it. The contents of this “Policy” may be changed from time to time and will be posted at easily noticeable places in the “Site”. In addition, “L&F” shall comply with relevant laws and ordinances if the contents related to matters requiring separate consent from users are added or changed in accordance with related laws, such as the ACT ON PROMOTION OF INFORMATION AND COMMUNICATIONS NETWORK UTILIZATION AND INFORMATION PROTECTION, such as the collection and use of personal information and provision of third parties.