Privacy Policy
Siwol Media Co., Ltd. (service name: Siwol Music, hereinafter referred to as "the Company") complies with relevant laws and regulations, such as the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Electronic Financial Transactions Act, and the Communications Privacy Protection Act, and makes every effort to protect users' personal information. This Privacy Policy applies to all services provided by the Company.
Article 1 (Items of Personal Information Collected and Collection Methods)
① Items of Personal Information Collected
The Company collects the following personal information during member registration, customer support, and service use:
- Member Registration and Service Use: Email address, password, name, nickname, phone number
- Payment and Settlement: Account holder name, bank name, account number, (individual members) government-issued ID or passport copy, (corporate members) business registration number and company name
- Service Usage Records: Channel names and IDs of YouTube, Instagram, Facebook, video information, campaign participation records
- Automatically Collected Information: Access logs, cookies, service usage records, settlement records, account cancellation records, device information, hardware ID, mobile carrier information
- Consent for Receiving Advertising and Marketing Information: Consent for receiving promotional information via email, SMS, push notifications, etc.
② Methods of Collecting Personal Information
- Direct input by the user during member registration and service use
- Information provided during customer support consultations
- Automatic collection of information (cookies, log analysis, service usage records, etc.)
Article 2 (Purpose of Collection and Use of Personal Information)
The Company uses the collected personal information for the following purposes:
① Service Provision and Operation
- Content delivery, identity verification, settlement and payment processing
- Monitoring activities on registered SNS channels and managing participation in advertising campaigns
② Member Management and Customer Support
- Member identification, service-related guidance, handling complaints, and resolving disputes
- Preventing fraudulent use and unauthorized access
③ Marketing and Advertising
- Providing information on new services and events (via email, SMS, push notifications, etc.)
- Analyzing access frequency and service usage statistics
④ Use of Pseudonymous Information
- Data analysis and research for service improvement
- Developing new services and optimizing operations
- Marketing strategy development and usage pattern analysis
Article 3 (Retention and Use Period of Personal Information)
The Company will delete users' personal information without delay once the purpose of collection and use has been achieved. However, the information will be retained for the following periods as required by law:
| Retained Information | Reason for Retention | Retention Period |
|---|---|---|
| Contract or withdrawal records | Electronic Commerce Act | 5 years |
| Payment and service provision records | Electronic Commerce Act | 5 years |
| Consumer complaint and dispute resolution records | Electronic Commerce Act | 3 years |
| Advertising-related records | Electronic Commerce Act | 6 months |
| Tax-related books and evidence | National Tax Basic Act, Corporate Tax Act | 5 years |
| Electronic financial transaction records | Electronic Financial Transactions Act | 5 years |
| Website visit records | Communications Privacy Protection Act | 3 months |
| Encrypted emails to prevent re-registration of fraudulent users | Service Operation Protection | 5 years |
| Inactive accounts (Dormant Accounts) | Personal Information Protection | 1 year (after prior notice, deletion) |
Article 4 (Procedures and Methods for Deleting Personal Information)
① Deletion Procedure
- Personal information is deleted immediately once the purpose is achieved, and is retained for a period as required by law before deletion.
② Deletion Method
- Paper-based personal information: Shredding or incineration
- Electronic files: Deletion using irreversible technical methods
Article 5 (Provision and Outsourcing of Personal Information to Third Parties)
① Provision of Personal Information to Third Parties
The Company does not provide personal information to external parties without the user's consent. However, it may provide information if required by law or if the user has granted consent.
| Recipient | Purpose of Provision | Provided Information | Retention and Use Period |
|---|---|---|---|
| [Partner Company Name] | Service operation and payment processing | Name, contact information, account details | Until the contract ends |
② Outsourcing of Personal Information Processing
The Company may outsource personal information processing tasks for service provision, and will manage the outsourced companies as follows:
| Outsourced Company | Outsourced Task | Retention and Use Period |
|---|---|---|
| [Payment Agency] | Payment and settlement processing | Until the contract ends |
| [Customer Support Company] | Customer consultation and complaint handling | Until the contract ends |
Article 6 (Overseas Transfer of Personal Information)
The Company may store personal information on overseas servers by utilizing cloud services (e.g., AWS, Google Cloud).
- Transfer Country: [USA, Singapore, etc.]
- Purpose of Transfer: Data storage and service operation
- Protective Measures: Data encryption and access restrictions
Article 7 (Rights of Users and Legal Representatives and Methods of Exercising Them)
- Access and Modification of Personal Information: Users may modify their personal information directly via the 'My Page' section of the service.
- Account Deletion: Users may delete their account through the 'Account Deletion' menu after identity verification.
- Users can request corrections or deletions of their personal information through the Company's customer support.
Article 8 (Installation and Refusal of Automatic Personal Information Collection Devices)
① Purpose of Using Cookies
- To analyze user service usage patterns and provide customized services
② How to Refuse Cookies
- Users can refuse the storage of cookies by adjusting their browser settings.
- Setting methods:
- Internet Explorer: Tools > Internet Options > Privacy > Settings
- Chrome: Settings > Advanced Settings > Privacy > Content Settings > Cookies
Article 9 (Technical and Managerial Measures for Personal Information Protection)
① Managerial Measures
- Establishment and implementation of internal management plans, regular employee training
② Technical Measures
- Access management for personal information, encryption storage, security programs
- Database (DB) access control, firewall, and intrusion detection systems
③ Physical Measures
- Access control to computer rooms and document storage areas
Article 10 (Personal Information Leakage Response and Reporting Procedures)
- The Company will immediately notify relevant authorities and users in case of a personal information leakage incident and take necessary protective measures.
- If a personal information breach occurs, users may report it to the following organizations:
- Personal Information Dispute Mediation Committee (https://www.kopico.go.kr, 1833-6972)
- Supreme Prosecutor's Office Cyber Investigation Department (http://www.spo.go.kr, 02-3480-2000)
- National Police Agency Cyber Safety Bureau (https://cyberbureau.police.go.kr, 182)
Article 11 (Personal Information Protection Officer and Contact Information)
Personal Information Protection Officer
- Name: [Officer's Name]
- Title: [Department]
- Email: [Officer's Email]
- Contact: [Customer Service Contact]
Article 12 (Changes to the Privacy Policy and Obligation to Notify)
- Any additions, deletions, or modifications to this Privacy Policy will be announced at least 7 days prior to implementation.
- If there is a significant change to the rights of users, notification will be made at least 30 days in advance.
Effective Date: 3 28, 2025