azoo Privacy Policy
Cubic Co., Ltd. (hereinafter “Company”) protects the personal information of users (hereinafter “Users”) who wish to use the services and detailed sub-services (hereinafter “Services”) of “azoo”, a data brokerage platform, in accordance with the Personal Information Protection Act. We value your rights and interests and have established and are operating the following personal information processing policy to promptly handle related grievances and difficulties. The company is making its best efforts to comply with and implement the responsibilities and obligations stipulated in relevant laws and regulations.
Article 1 ( Personal Information Collection and Usage Status )
1) The company collects the minimum amount of personal information through the following collection methods for membership registration, provision of various services, and customer consultation.
< Domestic : Individual Members>
Collection Method | Category | Items Collected | Purpose of Collection | Retention and Use Period |
Membership Registration | Mandatory | Name, Phone number, ID, Password, Email | Identity verification and consent for registration, Membership management, Various service provision, Personalized notifications, Participation in events, etc. | Until membership withdrawal Or until agreement withdrawal |
Paid service usage | Mandatory | For credit card payment: Card issuer name, Card number, etc. For bank transfer: Account holder name, Bank name, Account number, etc. | Purchase and usage of paid services | Until service purchase completion
※ However, in cases where preservation is required under relevant laws and regulations, the data will be retained until the end of the specified period. |
My Page > Account Information | Optional | (Account Holder) Account holder name, Bank name, Account number | Refund, Settlement | Until refund and settlement completion
※ However, in cases where preservation is required under relevant laws and regulations, the data will be retained until the end of the specified period. |
< Domestic : Corporate/Institutional Members >
Collection Method | Category | Items Collected | Purpose of Collection | Retention and Use Period |
Membership Registration (Responsible Party) | Mandatory | Contact Person's Name, Phone Number, ID, Password, Email | Identity verification and consent for registration, Membership management, Provision of various services, Personalized notifications, Participation in events, etc. | Until membership withdrawal Or until agreement withdrawal |
Membership Registration (Corporate/Institution) | Mandatory | Company (Institution) Name, Business Address (Institution Address), Company (Institution) Website, Business Registration Number (Institution Unique Number), Business (Institution) Registration Certificate, (Institution) Representative Name | Membership management | Until membership withdrawal Or until agreement withdrawal |
Membership Registration (Corporate) | Optional | Contact Person's Department Name, Contact Person's Title/Position | Membership Management | Until membership withdrawal Or until agreement withdrawal |
Paid service usage | Mandatory | For credit card payment: Card issuer name, Card number, etc. For bank transfer: Account holder name, Bank name, Account number, etc. | Purchase and usage of paid services | Until service purchase completion
※ However, in cases where preservation is required under relevant laws and regulations, the data will be retained until the end of the specified period. |
My Page > Account Information | Optional | (Corporate/Institution) Account holder name, Bank name, Account number | Refund, Settlement | Until refund and settlement completion
※ However, in cases where preservation is required under relevant laws and regulations, the data will be retained until the end of the specified period. |
< Overseas : Individual Members >
Collection Method | Category | Items Collected | Purpose of Collection | Retention and Use Period |
Membership Registration | Mandatory | Name, Phone number, ID, Password, Email
Country affiliation information, Date of birth | Identity verification and consent for registration, Membership management, Provision of various services, Personalized notifications, Participation in events, etc. | Until membership withdrawal Or until agreement withdrawal |
Paid service usage | Mandatory | For overseas credit card payment: Card issuer name, Card number, etc. | Purchase and usage of paid services | Until service purchase completion
※ However, in cases where preservation is required under relevant laws and regulations, the data will be retained until the end of the specified period. |
My Page > Account Information | Optional | (Member) Account holder name, Bank name, Account number | Refund, Settlement | Until refund and settlement completion
※ However, in cases where preservation is required under relevant laws and regulations, the data will be retained until the end of the specified period. |
< Overseas : Corporate/Institutional Members >
Collection Method | Category | Items Collected | Purpose of Collection | Retention and Use Period |
Membership Registration (Responsible Party) | Mandatory | Contact person's name, Phone number, ID, Password, Email
Contact person's date of birth | Identity verification and consent for registration, Membership management, Provision of various services, Personalized notifications, Participation in events, etc. | Until membership withdrawal Or until agreement withdrawal |
Membership Registration (Corporate/Institution) | Mandatory | Company (Institution) Name, Business Address (Institution Address), Company (Institution) Website, Business Registration Number (Institution Unique Number), Business (Institution) Registration Certificate, (Institution) Representative Name
Country affiliation information, (Institution) Representative ID card | Membership Management | Until membership withdrawal Or until agreement withdrawal |
Membership Registration (Corporate) | Optional | Contact person's department name, Contact person's title/position | Membership Management | Until membership withdrawal Or until agreement withdrawal |
Membership Registration (Corporation) | Optional | Shareholder registry | Membership Management | Until membership withdrawal Or until agreement withdrawal |
Paid service usage | Mandatory | For overseas credit card payment: Card issuer name, Card number, etc. | Purchase and usage of paid services | Until service purchase completion
※ However, in cases where preservation is required under relevant laws and regulations, the data will be retained until the end of the specified period. |
My Page > Account Information | Optional | (Corporate/Institution) Account holder name, Bank name, Account number | Refund, Settlement | Until refund and settlement completion
※ However, in cases where preservation is required under relevant laws and regulations, the data will be retained until the end of the specified period. |
< Receiving promotional information (marketing, etc.) >
Collection Method | Category | Items Collected | Purpose of Collection | Retention and Use Period |
Membership Registration | Optional | Name, Phone number, Email, Date of birth, Company (Institution) Name, Country affiliation information, Contact person's department name, Contact person's title/position | Information and promotional material regarding products and services, Promotions and events, Customer-specific marketing | Until membership withdrawal Or until withdrawal of consent for receiving promotional information |
※ The above items are optional, so even if you do not agree, there are no restrictions on using the service, and you can refuse to receive them at any time. ※ However, important information related to service provision, such as member information and transaction information, will be sent regardless of whether you agree to this item. |
2) In principle, the company processes personal information according to the specified retention and use period, but in the following cases, personal information is retained for the specified period according to the relevant retention reasons.
Category | Reason for Retention | Retention Period |
During ongoing investigation or inquiry | In case of violation of relevant laws and regulations | Until the conclusion of the investigation or inquiry |
Records related to contracts or withdrawal of subscriptions | Electronic Commerce and Consumer Protection Act | For 5 years after membership withdrawal or termination of service provision |
Records related to payment and supply of goods | For 5 years after membership withdrawal or termination of service provision | |
Records related to display and advertising | For 6 months after membership withdrawal or termination of service provision | |
Records related to consumer complaints or dispute resolution | For 3 years after membership withdrawal or termination of service provision | |
Website visit records | Act on the Protection of Communications Secrets | For 3 months after membership withdrawal or termination of service provision |
Records of transaction facts such as tax invoices or receipts | Value-Added Tax Act | For 5 years after membership withdrawal or termination of service provision |
3) Users under the age of 19 are restricted from registering as members, and related personal information is not collected.
Article 2 ( Provision of Personal Information to Third Parties )
1) In principle, the company does not collect, disclose, or provide to outside parties more than the personal information collected without the user's prior consent.
2) In the event of an emergency such as a disaster, infectious disease, incident or accident causing imminent life or physical danger, or imminent property loss, the company may provide information to the relevant authorities without the user's consent.
3) If an investigation, investigation, etc. is in progress due to a user's violation of relevant laws, the company may provide information to the relevant investigative agency without the user's consent.
4) Information may be provided in a form that does not personally identify individuals for the purpose of obtaining prior consent from users or for statistical, research, market research, etc.
5) If there is a request in accordance with the procedures set forth in other relevant laws and regulations, information may be provided to the relevant agency.
Article 3 ( Outsourcing of Personal Information Handling Tasks )
The company entrusts personal information as follows to improve services, and regulates necessary matters to ensure that personal information is safely managed when entering into a consignment contract in accordance with relevant laws and regulations.
Service Provider | Entrusted Tasks |
KOREA MOBILE CERTIFICATION INC. | Mobile phone verification |
Hecto Financial Co., Ltd. | Bank transfer, Account transfer, Credit card, and other payment methods |
U Fintech Hub Inc. | Settlement payment remittance, Overseas remittance |
BusinessOn Communication Co., Ltd. | Electronic contract |
LinkHub. | Electronic tax invoice |
Article 4 ( Personal Information Destruction Procedure and Method )
1) In principle, users' personal information is destroyed without delay once the purpose of use has been achieved.
2) Destruction Procedure : Users' personal information is transferred to a separate database (in the case of paper, a separate filing cabinet) and stored safely, and is stored for a certain period of time or immediately destroyed in accordance with internal policies and other relevant laws. At this time, personal information transferred to the DB will not be used for any other purpose except as required by law.
3) Destruction Method : Personal information printed on paper is completely destroyed by shredding or incineration, and personal information stored in the form of electronic files is completely deleted using technical methods that render the records unrecoverable.
Article 5 ( Rights, Obligations, and Exercise Methods of Data Subjects )
1) The information subject may exercise the right to request the company to view, correct, delete, or suspend processing of the user's personal information at any time. Additionally, if you do not agree to the company's processing of your personal information, you may refuse consent or request cancellation of membership. However, in such cases, it may be difficult to use some or all of the services.
2) Users can view and edit personal information in the My Page > My Information menu.
3) Users can withdraw membership from the My Page > My Information menu.
4) Rights can be exercised against the company through writing, e-mail, facsimile (fax), etc. in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the company will take action without delay.
5) Rights can also be exercised through an agent, such as the information subject's legal representative or a person authorized to do so. In this case, you must submit a power of attorney according to the form in Appendix No. 11 of the “Notice on Personal Information Processing Methods (No. 2020-7).”
6) Requests to view and suspend personal information processing may limit the information subject's rights pursuant to Article 35, Paragraph 4 and Article 37, Paragraph 2 of the Personal Information Protection Act.
7) Requests for correction or deletion of personal information cannot be requested if the personal information is specified as the subject of collection in other laws and regulations.
8) When requesting access, correction/deletion, or suspension of processing in accordance with the user's rights, the company verifies whether the person making the request is the person himself or a legitimate agent.
Article 6 ( Measures to Ensure the Security of Personal Information Protection
When processing users' personal information, the company establishes and operates technical, managerial, and physical protection measures to prevent personal information from being lost, stolen, altered, or damaged.
1) Technical Measures
- Encryption of Key Information
The user's password is encrypted, stored and managed, and personal information can only be checked and changed by those who know the password.
- Protection Measures against Hacking and Other Intrusions
To prevent members' personal information from being leaked or damaged by hacking or computer viruses, we install a system in an area where access from the outside is controlled. In preparation for damage to personal information, data is backed up on a regular basis, and the latest anti-virus programs are used to prevent users' personal information or data from being leaked or damaged. Personal information can be safely transmitted over the network through encrypted communication, etc. We are making sure to do so.
- Access Control to Personal Information Processing Systems
We are taking measures to control access to personal information by granting, changing, and deleting access to the system that processes personal information, and using an intrusion prevention system to control unauthorized access from outside.
2) Administrative Measures
- Regular Internal Audits
To ensure the safety of personal information handling, we conduct regular self-audits and strive to recognize, analyze, and supplement risks to personal information in various environments.
- Training for Personal Information Handlers
We minimize the possibility of leaks by keeping the number of employees handling personal information to a minimum. In addition, we continue to emphasize the protection of users' personal information through regular and frequent training and campaigns for all executives and employees, including those who handle personal information.
- Operation of Personal Information Protection Organization
Through our in-house organization, we regularly and frequently check whether the personal information processing policy has been implemented and whether the person in charge is complying with it. If a problem is discovered, we strive to correct it immediately.
3) Physical Measures
- Unauthorized Access Control
The system where personal information is stored restricts access to a separate location. Additionally, access by unauthorized persons is fundamentally blocked.
Article 7 ( Installation, Operation, and Rejection of Automatic Personal Information Collection Devices )
1) The company uses ‘cookies’ to store usage information and retrieve it from time to time in order to provide individualized services to users.
2) A cookie is a very small text file that the website sends to the user's browser when the user accesses the website and is stored on the user's PC.
3) The purpose of cookies is to store and frequently retrieve user information in order to provide personalized and customized services. When a user visits a website, the website server reads the cookies stored on the user's device to maintain the user's preferences and provide customized services. Cookies help users access and conveniently use the website when they visit the website. In addition, it is used to provide customized information, such as optimized advertisements, based on the user's website visit history and usage patterns.
4) Users have the option to install cookies and can accept or reject cookies through cookie settings in ‘Settings > Privacy > Cookies and other site data’ at the top of the web browser. However, if you refuse to install cookies, it may be inconvenient to use the service, and it may be difficult to use some services that require login.
Article 8 ( Personal Information Protection Officer and Complaint Handling Department )
The company has designated a personal information protection manager and grievance department to handle inquiries and complaints related to users' personal information.
Personal Information Protection Officer | Complaints Handling Department |
Department/Name: CEO Jung Minchan Email: [email protected] Contact: 070-8886-2966 | Department: C/S Team Email: [email protected] Contact: 070-8886-2966 |
Article 9 ( Remedies for Violations of Data Subject Rights )
1) In order to receive relief from personal information infringement, users may apply for dispute resolution or consultation at the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency's Personal Information Infringement Reporting Center. For other personal information infringement reports and consultations, please contact the organizations below.
■ Personal Information Infringement Report Center : privacy.kisa.or.kr / 118 (Without area code)
■ Personal Information Dispute Mediation Committee : www.kopico.go.kr / 1833-6972 (Without area code)
■ Supreme Prosecutors' Office : www.spo.go.kr / 1301 (Without area code)
■ Korean National Police Agency : ecrm.police.go.kr / 182 (Without area code)
2) The company guarantees the information subject's right to self-determination of personal information and strives to provide consultation and relief for damage caused by personal information infringement. If you need to report or consult, please contact the personal information related department.
③ Dispositions made by the head of a public institution in response to requests pursuant to the provisions of Article 25 (view of personal information), Article 26 (correction and deletion of personal information), and Article 37 (suspension of processing of personal information, etc.) of the Personal Information Protection Act. Or, a person whose rights or interests have been infringed due to an omission may request an administrative trial in accordance with the provisions of the Administrative Appeals Act.
Article 10 ( Matters regarding the Implementation and Modification of Privacy Policy )
① Please be advised that this “Personal Information Processing Policy” does not apply to other services linked within the company’s services.
② This personal information processing policy will be effective from March 26, 2024, and any additions, deletions, or modifications to the current personal information processing policy will be notified through “Notices” in the service at least 7 days prior to the revision.
③ You can check the previous privacy policy by clicking “View previous privacy policy” at the top right of the privacy policy.
Date of Announcement: March 26, 2024
Effective Date: March 26, 2024