Privacy Policy
verspin Co., Ltd. (hereinafter referred to as the “Company”) establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act, in order to protect the personal information of data subjects and to promptly and smoothly handle related complaints.
1. Purpose of personal information processing
The company processes personal information for the following purposes. Personal information being processed will not be used for purposes other than the following, and if the purpose of use is changed, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the 「Personal Information Protection Act」.
  1. Member signup and management
    Personal information for the purpose of confirmation of membership signup, identification/authentication of members by providing membership services, maintenance/management of membership, prevention of illegal use of services, and various notices/notifications
  2. Civil complaint handling
    Personal information is processed for the purpose of verifying the identity of the complainant, confirming the complaint, contacting and notifying for fact-finding, and notifying the processing result.
  3. Providing goods or services
    Personal information is processed for the purpose of providing services, sending contracts and invoices, providing contents, providing customized services, identity verification, age verification, and payment/settlement. .
  4. Utilization for marketing and advertising
    Development of new services (products) and provision of customized services, provision of event and advertising information and opportunities to participate, verification of service effectiveness, identification of access frequency Or, personal information is processed for the purpose of statistics on service use by members.
Types of Personal Information Collected and the Period of Retention and Use
  1. The company processes the following personal information with the consent of the data subject, in accordance with Article 15(1)(1) and Article 22(1)(7) of the Personal Information Protection Act.
Purpose of Collection
Items Collected
Retention and Use Period
Confirmation of Intent to Register
Email, Mobile Phone Number, Password, Date of Birth, and Name
Upon Membership Withdrawal
Identification and Authentication of the User for Membership Service Provision
Email, Mobile Phone Number, Password, Date of Birth, and Name
Upon Membership Withdrawal
Membership Qualification Maintenance and Prevention of Service Misuse
Email, Service Usage Records, Access Logs, Cookies, Access IP Information, Company Name
Upon Membership Withdrawal
3. Procedures and Methods for the Destruction of Personal Information
  1. The company promptly destroys personal information without delay when it becomes unnecessary, such as when the retention period has expired or the processing purpose has been fulfilled.
  2. If the retention period agreed upon with the data subject has expired or the purpose of processing has been achieved, but the company is required by other laws to continue storing the personal information, such information will be transferred to a separate database (DB) or stored in a different location.
    Cases and retention periods required by law:
    • Records related to collection, processing, and use of credit information: 3 years
    • Records of consumer complaints or dispute resolution: 3 years
    • Records of payment and supply of goods, etc.: 5 years
    • Records of contracts or withdrawal of subscription: 5 years
    • Records of labeling/advertising: 6 months
  3. The procedures and methods for destroying personal information are as follows.
    1. Destruction Procedure
      The company selects personal information for destruction when a reason for destruction arises and destroys it with the approval of the company's Personal Information Protection Officer.
    2. Destruction Method
      Personal information stored in electronic file format is destroyed so that it cannot be restored, and personal information recorded or stored on paper is shredded or incinerated.
4. Provision of Personal Information to Third Parties
  1. The company processes the personal information of data subjects only within the scope specified for its purpose of use, and provides personal information to third parties only in cases where it is permitted under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or as required by special provisions of law. The company does not provide personal information to third parties under any other circumstances.
5. Delegation of Personal Information Processing Tasks
  1. The company does not entrust the processing of collected personal information to any third party.
  2. If the company entrusts personal information processing in the future for business purposes, it will specify in the contract, in accordance with Article 26 of the Personal Information Protection Act, matters such as prohibition of processing for purposes other than the entrusted tasks, technical and managerial safeguards, restrictions on subcontracting, management and supervision of the trustee, and liability for damages, and will supervise the trustee to ensure personal information is handled safely.
6. Transfer of Personal Information Overseas
    The company does not provide or entrust the processing of collected personal information to any party outside of Korea.
7. Measures to Ensure the Security of Personal Information
    In handling users’ personal information, the company takes the following technical and managerial measures to ensure security and prevent loss, theft, leakage, alteration, or damage of personal information.
    1. Technical Measures for Protecting Personal Information
      The company implements the following technical measures to ensure the safety of personal information and prevent loss, theft, leakage, alteration, or damage during processing. Security is strengthened through intrusion prevention systems and system monitoring to guard against hacking and other external threats.
    2. Managerial Measures for Protecting Personal Information
      We emphasize compliance with the personal information handling policy through employee training on personal information protection. Additionally, we establish internal management plans and limit access to personal information to a minimum number of authorized personnel.
8. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
  1. The company processes the following behavioral information with the consent of the data subject in accordance with Article 15(1)(1) and Article 22(1)(7) of the Personal Information Protection Act.
  2. Behavioral information is collected and used for the purpose of data analysis to propose optimized services and solutions to users.
  3. To collect behavioral information, the company uses 'cookies' that store and retrieve usage information to provide individualized services and convenience to users.
  4. Cookies are small pieces of data sent to the data subject's browser by the server (http) used to operate the website and are stored on the user’s PC or mobile device.
  5. Data subjects can configure their web browser settings to allow or block cookies. However, if cookie storage is refused, there may be difficulties in using personalized services.
    6. ▶ How to refuse cookie settings
    You can configure your browser options to allow all cookies, require confirmation each time a cookie is stored, or refuse all cookies.
    ▶ Enabling/blocking cookies in web browsers
    • Chrome: Browser Settings > Privacy and Security > Clear Browsing Data
    • Edge: Browser Settings > Cookies and Site Permissions > Manage and Delete Cookies and Site Data
    ▶ Enabling/blocking cookies in mobile browsers
    • Chrome: Mobile Browser Settings > Privacy and Security > Clear Browsing Data
    • Safari: Device Settings > Safari > Advanced > Block All Cookies
    • Samsung Internet: Mobile Browser Settings > Browsing History > Clear Browsing Data
9. Rights and Obligations of Data Subjects and Their Legal Representatives, and How to Exercise Them
  1. The company uses 'cookies' that store and retrieve usage information from time to time to provide personalized services to users.
  2. Cookies operate the website. It is a small amount of information that the server (http) used to send to the user's computer browser and is also stored on the hard disk of the user's PC computer.
    • . Purpose of use of cookies: It is used to provide optimized information to users by identifying the types of visits and use of each service and website visited by the user, popular search keywords, secure access, etc.
    • me. Installation, operation and rejection of cookies: You can refuse to save cookies by setting the options in the Tools>Internet Options>Personal Information menu at the top of the web browser. all. If you refuse to save cookies, you may experience difficulties in using customized services.
10. Contact Information of the Personal Information Protection Officer and the Department in Charge of Handling Inquiries and Complaints
  1. The company is fully responsible for the management of personal data processing and has designated the following Personal Information Protection Officer to handle complaints and remedies related to personal data processing.
    Personal Information Protection Officer / Department: Team Leader Jaesung Kim / Information Security Team
    Contact: 02-2135-6239
    Email: privacy@everspin.co.kr
  2. Data subjects may direct any inquiries, complaints, or requests for remedies related to personal data protection arising from participation in the company’s marketing activities to the Personal Information Protection Officer and the responsible department. The company will promptly respond to and handle such inquiries.
11. Remedies for Infringement of Data Subject’s Rights
  1. Data subjects may request dispute resolution or consultation regarding personal information infringement through the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency’s Personal Information Infringement Report Center, and other related organizations. For other reports or consultations regarding personal information infringement, please contact the institutions listed below.
    1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
    2. Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
    3. Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
    4. National Police Agency: 182 (ecrm.cyber.go.kr)
  2. The company guarantees the data subject’s right to self-determination of personal information and strives to provide consultation and remedies for personal information infringements. If you need to report or consult, please contact the department below.
    ▶ Customer Service for Personal Information Protection Inquiries and Reports
    Department: Information Security Team
    Contact: privacy@everspin.co.kr
This Privacy Policy is effective as of May 19, 2025.