Skip to main content
Whattobuy
Whattobuy

What To Buy Privacy Policy

 

1. Purpose of Collecting and Using Personal Information

Data Heroes Co., Ltd. (hereinafter referred to as "the Company") values the personal information of users and specifies the following contents as its privacy policy in accordance with the Personal Information Protection Act and the General Data Protection Regulation (GDPR).

 

2. Personal Information Collected

The Company collects the following personal information:

  • Name
  • Email address
  • Phone number
  • Shipping address

 

3. Purpose of Collecting and Using Personal Information

The Company uses the collected personal information for the following purposes:

  • Order processing: Processing orders and shipping products
  • Customer service: Responding to customer inquiries and handling complaints
  • Marketing: Providing product recommendations and marketing information

 

4. Legal Basis for Processing Personal Information

The Company processes personal information based on the following legal grounds:

  • User consent
  • Performance of a contract
  • Compliance with legal obligations
  • Legitimate interests pursued by the Company

 

5. Retention and Use Period of Personal Information

The Company, in principle, destroys personal information without delay once the purpose of its collection and use is achieved. However, it will retain the information for a certain period as required by relevant laws:

  • Records on contract or subscription withdrawal: 5 years
  • Records on payment and supply of goods: 5 years
  • Records on consumer complaints or dispute resolution: 3 years

 

6. Provision of Personal Information to Third Parties

The Company does not provide personal information to third parties without the user's consent. However, the following cases are exceptions:

  • When required by law
  • When urgently needed to protect the user's life or safety
  • When providing the necessary information within the scope required for service provision to analytics tool providers like Google Analytics

 

7. Measures to Ensure the Safety of Personal Information

The Company takes the following measures to ensure the safety of personal information:

  • Managerial measures: Establishment and implementation of internal management plans, regular employee training
  • Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information
  • Physical measures: Access control to computer rooms and data storage rooms

 

8. User Rights

Under GDPR, users have the following rights regarding their personal information:

  • Access: Users have the right to access their personal information.
  • Rectification: Users have the right to correct inaccurate personal information.
  • Erasure: Users have the right to request the deletion of their personal information.
  • Restriction: Users can request the restriction of processing their personal information.
  • Data portability: Users have the right to transfer their personal information to another data controller.
  • Objection: Users have the right to object to the processing of their personal information in certain circumstances.

Users can exercise these rights through 'My Page' or by contacting customer service.

 

9. Use of Cookies

The Company uses cookies to enhance user convenience on the website. Information collected through cookies is used for product recommendations and future marketing purposes. Users can refuse cookie settings, which may limit the use of services.

 

10. Changes to the Privacy Policy

The Company will notify users in advance of any changes to the privacy policy via email.

 

11. Data Protection Officer and Contact Information

The Company has designated the following person as the Data Protection Officer (DPO):

 

12. Data Breach Notification

In the event of a data breach, the Company will notify the relevant supervisory authority within 72 hours and inform the data subjects without undue delay if the breach is likely to result in a high risk to their rights and freedoms.

 

This privacy policy is effective from July 22, 2024.