Privacy Policy
iiroom d&p (the "Company") establishes and discloses the following personal information processing policy pursuant to Article 30 of the Personal Information Protection Act in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.
Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes. The personal information processed is not used for purposes other than the following, and where the purpose of use changes, the Company will take necessary measures such as obtaining separate consent under Article 18 of the Personal Information Protection Act.
1. Handling inquiries and quotes: receiving and confirming quote inquiries, identity verification, consultation and response, production consultation, various notices, and grievance handling.
2. Providing goods or services: custom packaging production consultation, sending contracts and quotations, providing content, and identity authentication.
3. Grievance handling: verifying the identity of complainants, confirming the details of complaints, contacting and notifying for fact-finding, and notifying results.
Article 2 (Processing and Retention Period of Personal Information)
1. The Company processes and retains personal information within the retention and use period under applicable law or the period consented to by the data subject at the time of collection.
2. The processing and retention period for each is as follows:
1. Handling inquiries and quotes: up to 3 years after the inquiry/consultation ends. However, where an investigation for violation of applicable law is in progress, until such investigation ends.
2. Providing goods or services: until completion of service provision and settlement. However, in the following cases, until the relevant period ends.
- Records on contracts or withdrawal of subscription, payment, and supply of goods: 5 years
- Records on consumer complaints or dispute handling: 3 years
- Records on labeling/advertising: 6 months
Article 3 (Provision of Personal Information to Third Parties)
1. The Company processes the data subject's personal information only within the scope specified in Article 1 (Purpose of Processing), and provides personal information to third parties only where Articles 17 and 18 of the Personal Information Protection Act apply, such as the data subject's consent or special provisions of law; otherwise it does not provide personal information to third parties.
2. The Company currently does not provide data subjects' personal information to third parties. If provision becomes necessary in the future, the Company will notify in advance and obtain consent regarding the recipient, purpose, items, and retention/use period.
Article 4 (Outsourcing of Personal Information Processing)
1. The Company may outsource personal information processing tasks to external specialized providers within the necessary scope for smooth processing, and discloses the outsourced party and the content of the outsourced work through this policy.
- Outsourced party (trustee): cloud infrastructure (hosting/data storage) provider
- Content of outsourced work: website hosting, storage of inquiry data and attachments
2. When entering into an outsourcing contract, the Company specifies in writing matters concerning prohibition of processing personal information beyond the purpose, technical and administrative protective measures, restrictions on re-outsourcing, supervision of the trustee, and liability for damages, in accordance with the Personal Information Protection Act, and supervises whether the trustee processes personal information safely.
3. If the content of the outsourced work or the trustee changes, the Company will disclose it through this policy without delay.
Article 5 (Rights of Data Subjects and Legal Representatives and How to Exercise Them)
1. A data subject may exercise the following rights regarding personal information protection against the Company at any time.
1. Request to access personal information
2. Request to correct errors
3. Request to delete
4. Request to suspend processing
2. The rights under paragraph 1 may be exercised against the Company in writing, by phone, or by email, and the Company will act on them without delay.
3. Where a data subject requests correction or deletion of errors in personal information, the Company will not use or provide the relevant personal information until correction or deletion is completed.
4. The rights under paragraph 1 may be exercised through the data subject's legal representative or an authorized agent.
5. A data subject must not infringe the personal information or privacy of themselves or others processed by the Company in violation of the Personal Information Protection Act or other applicable law.
Article 6 (Personal Information Items Processed)
The Company processes the following personal information items.
1. Handling inquiries and quotes
Required: company/business name, contact person name, email, phone number
Optional: product information, quantity, design link, attachments, inquiry content
2. Automatically collected items
IP address, cookies, access logs, etc. may be automatically generated and collected during use of the service.
Article 7 (Destruction of Personal Information)
1. When personal information becomes unnecessary due to the expiration of the retention period or achievement of the processing purpose, the Company destroys it without delay.
2. Where personal information must continue to be retained under other laws despite the expiration of the consented retention period or achievement of the purpose, the Company moves it to a separate database or stores it in a different location.
3. The procedure and method of destruction are as follows:
1. Procedure: the Company selects the personal information for which a reason for destruction has arisen and destroys it with the approval of the personal information protection officer.
2. Method: personal information recorded/stored in electronic file form is destroyed so it cannot be reproduced, and personal information recorded/stored on paper is shredded or incinerated.
Article 8 (Measures to Ensure the Safety of Personal Information)
The Company takes the following measures to ensure the safety of personal information.
1. Administrative measures: establishment and implementation of an internal management plan, regular staff training, etc.
2. Technical measures: access rights management for the personal information processing system, installation of an access control system, encryption of unique identifying information, and installation of security programs.
3. Physical measures: access control to the server room, archive room, etc.
Article 9 (Installation/Operation and Refusal of Automatic Personal Information Collection Devices)
1. The Company uses "cookies" that store and frequently retrieve usage information to provide individually tailored services to users.
2. A cookie is a small piece of information sent by the server (http) used to run the website to the user's browser, stored on the user's PC or mobile device.
3. Data subjects can allow or block cookies through their web browser settings. However, refusing to store cookies may cause difficulty in using tailored services.
▶ Allowing/Blocking Cookies in a Web Browser
- Chrome: Settings > Privacy and security > Delete browsing data
- Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
Article 10 (Personal Information Protection Officer)
1. The Company designates a personal information protection officer as below to take overall responsibility for personal information processing and to handle data subjects' complaints and relief related to personal information processing.
▶ Personal Information Protection Officer
Contact: +82-51-507-9090, kyungil7442@gmail.com
2. Data subjects may direct any inquiries, complaints, or relief matters related to personal information protection arising from use of the Company's services to the personal information protection officer. The Company will answer and handle data subjects' inquiries without delay.
Article 11 (Request to Access Personal Information)
A data subject may request access to personal information under Article 35 of the Personal Information Protection Act at the contact below. The Company will endeavor to process access requests promptly.
▶ Receipt/Handling of Access Requests
Contact: +82-51-507-9090, kyungil7442@gmail.com
Article 12 (Remedies for Infringement of Rights)
Data subjects may inquire about relief and consultation regarding personal information infringement to the following agencies.
1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
4. National Police Agency: 182 (ecrm.police.go.kr/minwon/main)
Article 13 (Effective Date and Changes to the Privacy Policy)
This Privacy Policy applies from June 29, 2026.
