BUKCS (hereinafter referred to as the "Company") establishes and discloses the following personal information processing policy to protect the personal information of the data subject and to promptly and smoothly handle the related grievances pursuant to Article 30 of the Personal Information Protection Act.
Show key privacy processing (labeling)
• Processing Item
Name, email, mobile phone number, ID, password,
Address, etc
Details are found in the body of the personal information processing policy
• Retention period
Personal information is immediately destroyed upon withdrawal
Records of grievances, etc. are based on the Act
Store for more than 3 years
The retention period for each detailed item of personal information is personal information processing
Check in the body of the policy
• request for access to personal information
Phone number: +82-10-9101-0910
E-mail : admin@bukcs.com
• Items and methods of collecting personal information
• Purpose of collection and use of personal information
• Processing and retention period of personal information
• Matters concerning the provision of personal information to third parties
• Matters concerning the transfer of personal information abroad
• Rights and obligations of data subjects and methods of exercising them
• the protection of children's personal information
• Matters concerning the installation and operation of automatic personal information collection devices and their refusal
• Matters concerning the destruction of personal information
• Measures to ensure the safety of personal information
• Matters concerning the personal information protection officer and the handling of complaints related to personal information
• Change of personal information processing policy
1. Items and methods of collecting personal information
• (1) Collecting personal information
o 1) The company collects the following personal information for membership registration, smooth customer consultation, and service provision.
- a must-have item
· When signing up for membership: Name, mobile phone number, email, ID, password, personal verification result (CI), date of birth, gender
· When ordering: name, mobile phone number, delivery address, personal customs clearance code (when ordering overseas direct delivery products requiring personal customs clearance)
※ Personal information collected during payment is collected and stored by the payment agency (PG company), and the company is only provided with transaction details provided by the payment agency.
- Optional
· Agree to receive marketing from SMS, email, DM, and TM
· Customer body information (online): height, weight, waist size, usual top size, usual bottom size, usual shoe size
· Diver nicknames, profile pictures
· Refund account number, bank name
· ID of the recommender
- a must-have item
· Membership registration: name, mobile phone number, email, ID, password
· Identification and ordering: Personal verification result value (CI), date of birth, gender, recipient name, mobile phone number, address, and personal customs code provided by the identification agency (when ordering overseas direct delivery products requiring personal customs clearance)
※ Personal information collected during payment is collected and stored by the payment agency (PG company), and the company is only provided with transaction details provided by the payment agency.
- Optional
· Agree to receive marketing from SMS, email, DM, and TM
· Body size (height, weight, waist size) and usual top size, usual bottom size, usual shoe size
· Diver nicknames, profile pictures
· Refund account number, bank name
- Mandatory requirements: Order information (name, mobile phone number, e-mail), recipient information (name, mobile phone number, delivery address, personal customs clearance code (when ordering overseas direct delivery products requiring personal customs clearance)
※ Personal information collected during payment is collected and stored by the payment agency (PG company), and the company is only provided with transaction details provided by the payment agency.
- Mandatory: Name, answer email
- Mandatory: Contact name, contact information, email
o 2) The following information may be generated/collected during product purchase, restock notification service, and consultation.
- Purchase, Exchange, Refund, Repair, Consultation History
- When using restock notification service: mobile phone number (required)
o 3) We collect the following personal information when signing up for membership through Kakao and Apple.
- Kakao Simple Membership: Kakao User Identification ID, name, mobile phone number, e-mail, personal authentication result value (CI) provided by the identification agency, date of birth, gender, and delivery destination information (optional)
- Apple Easy Membership: Apple User Identification ID, Apple ID
o 4) We collect the following personal information when simply logging in through Kakao, Naver, and Apple.
- Kakao Easy Login: Kakao User Identification ID, CI
- Naver Simple Login: Naver User Identification ID, email
- Apple Easy Login: Apple User Identification ID
o 5) The following information may be automatically generated and collected during service use or processing.
- Service history, access log, cookie, access IP information, app ID, app version, app installation date, app update date, device name, OS name, OS version, network operator code, country code, language used, user number
※ If additional personal information is to be collected for events, etc., the company will distinguish between required/selected items and notify the customer of the purpose and retention period of the personal information on the page and in writing, and obtain additional consent.
• (2) Methods of collecting personal information
o · Membership registration and service use through online and mobile websites
o · Other phone calls, written documents, e-mails, event entries, etc
o · Use simple login service through Naver, Kakao, and Apple
o · Collecting generated information through log analysis collection tools and collecting information through 'cookie'
2. Purpose of collection and use of personal information
The company processes personal information for the following purposes. The personal information collected by the company will not be used for any purpose other than the following purposes, and if the purpose of use changes, the company will take necessary measures, such as obtaining separate consent from customers, in accordance with relevant laws such as the Personal Information Protection Act.
• (1) Subscription and management on the website: (limited to membership registration) Identification of the use of membership services, prevention of illegal use and unauthorized use of rogue members, confirmation of intention to join, restriction on the number of subscriptions and subscriptions, prevention of overlapping provision of new subscription benefits (e.g., points, etc.) upon re-registration after withdrawal, maintenance of membership • Repository of records for management, dispute mediation, handling of civil complaints such as complaint handling, and delivery of notices
• (2) Provision of goods or services: Implementation of contracts and provision of charge settlement contents based on provision of services, delivery of goods (goods or prizes) or sending bills, financial transactions, personal verification, purchase and payment, collection of charges, new service information, guidance on new products or events, restock notification service, overseas delivery customs clearance, and provision of Sesapae Divers Community Service
• (3) Complaint handling: Identification of the complainant, requesting • Inquiries • Confirmation of reports, contacting for fact-finding • Notification, notification of processing results, etc
• (4) Use in marketing and advertising: Advertising information such as event information (CRM), DM, SMS, smartphone messenger, mail, gift delivery and event guidance, customized service to customers, development and specialization of new services (products), service provision and advertising according to demographic characteristics, frequency of access, various surveys to improve service quality, statistics on the use of services by members, events, etc
• (5) Application for entry into a shopping mall: The purpose of providing services and performing contracts, purchasing and payment, delivery of goods or sending bills, membership management, etc
• (6) Purpose of responding to product inquiries and inventory inquiries
• (7) A/S processing: Purpose of receiving A/S and managing history of purchased products
• (8) Prevention of member/non-member fraud: Prevention of fraudulent transactions that do not conform to ordinary e-commerce practices, such as making unfair profits using BUKCS app-based SHOPs
3. Processing and retention period of personal information
The company processes and retains personal information within the period of use of personal information in accordance with the law or the period of use of personal information agreed upon when collecting personal information from customers.
• (1) Processing and Retention Period of Personal Information Consented by the Company
o - The company shall retain and use the customer's personal information for the period from the time of collection of personal information to the time when the purpose of collection and use of personal information is achieved, and destroy the personal information without delay.
□ Subscription and management of members on the website: Until the withdrawal of membership: Provided, That if (i) an investigation, etc. is in progress due to violation of related laws and regulations, it will be until the end of the investigation, and (ii) if the bond debt relationship remains due to the use of membership, it will be until the settlement of the bond debt relationship
□ Direct overseas delivery customs clearance: 5 years from the time of collection of personal customs clearance codes
□ Complaint handling: Until the day three years have passed since the grievance was dealt with
□ Use in marketing and advertising: Until withdrawal of membership
□ Applicant to enter the shopping mall: Until the completion of the purpose or until the expiration of the contract
□ Receipt of product repair: Member (until withdrawal of member), non-member (five years from the time of collection)
□ Reminder for restocking: Discard it immediately after notification of restocking / If it is not restocked, keep it for one year and destroy it
□ Cheating member: Cheating member separately processes withdrawal after five years of suspension of use and five years of data storage after withdrawal, before destroying it
- Cheating: Unlawful conduct in transactions that do not conform to the usual e-commerce practices, such as making unfair profits using BUKCS app-based SHOPs
· Any act of intentionally obstructing the normal business activities and service operation of the "Company", such as habitually or repeatedly canceling or returning goods, etc. without justifiable reasons after purchasing goods, etc. using BUKCS App-based SHOP
· To prevent repeated withdrawal and rejoin of membership (membership members, online members) or fraudulent accumulation and use of membership points, purple coins, and discount coupons using multiple IDs, CI values are stored for up to one year after withdrawal from membership and destroyed
· Other acts of using BUKCS App-based SHOP to gain unfair advantage
- Archive collection items: Name, mobile phone number, e-mail (if present), ID (only if you are a member), delivery address (if you have an order history) Personal authentication result value (CI) provided by the identity verification agency
• (2) Period of retention of personal information required by relevant laws and regulations
o - Notwithstanding the preceding paragraph, if the company is obliged to preserve personal information pursuant to the provisions of relevant laws and regulations such as the Commercial Act, it shall keep the customer's personal information only for the purpose of storage required, and the retention period is as follows.
□ Record of contract or withdrawal of subscription, etc
- Grounds for preservation: Article 6 of the Act on the Protection of Consumers in Electronic Commerce, etc. and Article 6 of the Enforcement Decree
- Preservation period: 5 years
□ Record of payment and supply of goods, etc
- Grounds for preservation: Article 6 of the Act on the Protection of Consumers in Electronic Commerce, etc. and Article 6 of the Enforcement Decree
- Preservation period: 5 years
□ Record of consumer complaints or dispute settlement
- Grounds for preservation: Article 6 of the Act on the Protection of Consumers in Electronic Commerce, etc. and Article 6 of the Enforcement Decree
- Preservation period: 3 years
□ Records on collection, processing, use, etc. of credit information
- Basis for preservation: Act on the Use and Protection of Credit Information
- Preservation period: 3 years
□ Keep records about access
- Grounds for preservation: Article 15-2 of the Communications Secret Protection Act and Article 41 of the Enforcement Decree
- Preservation period: 3 months
□ Where transaction records, etc. need to be kept
- Basis for preservation: Framework Act on National Taxes
- Preservation period: 5 years
□ records on the supply of goods
- Product Liability Act
- Preservation period: 10 years
4. Matters concerning the provision of personal information by three parties
The company uses the customer's personal information only within the scope specified in Article 2 of this policy, "Purpose of Collecting and Using Personal Information", and (i) the person who receives the personal information from the customer (iii) the item of the personal information provided (iv) the person who receives the personal information (iii) informs the person who receives the personal information and receives consent, or provides the personal information to a third party only within the scope permitted by relevant laws and regulations.
5. Matters concerning the provision of personal information to foreign parties
The Company shall transfer the customer's personal information abroad only when (i) the items of personal information transferred to the customer, (ii) the country where the personal information is transferred, (iii) the name of the person who receives the personal information (in the case of a corporation, its name and contact information of the information management officer), and (iv) the purpose, retention, and duration of use of the customer's personal information are notified and consent is obtained.
Your personal information may be transferred to SUITSUPPLY B.V. (Only for customers who purchase suitsupply offline stores) located outside the country only if they agree to do so in the offline store, and in such cases, the provided company may retain and use the personal information for the purposes listed below. You can refuse to transfer your personal information abroad through the Suit Supply offline store, and if you refuse, you will not receive marketing information provided directly by the company you receive.
BUKCS PTE. LTD., to be transferred
Transfer personal information item name, email address, phone number, address, nationality, date of birth, gender, purchase history, purchase preference, site subscription and withdrawal ※ However, this information is limited to Hackers Holdings offline store customers who 'agree' to 'collect and use personal information for marketing and advertising purposes (optional)'
11th floor of Hana Financial Investment Building, 800 Parliament House-daero, Yeongdeungpo-gu, Seoul, where the company is transferred
Date and Time of Transfer and Method of Transfer Uploading Pre-registered Personal Information to Hackers Holdings System and Mobile App manually from Hackers Holdings offline store
Director of Information Management and Contact BUKCS PTE. LTD
Contact: Roy Kim
Position: Chief Information Officer
e-mail: roy@bukcs.com
Purpose of Use Marketing, Advertising Purpose
To the extent permitted by Acts and subordinate statutes related to the period of retention and use, until the time when a member withdrawal is requested or the member status is lost
6. Rights and obligations of data subjects and methods of exercising them
• (1) The customer may exercise the following privacy rights against the company at any time.
o - Viewing personal information
o - Correct or delete errors, etc
o - Request and reject suspension of personal information processing
o - Objections to the processing of personal information
• (2) The customer may exercise his/her rights under paragraph (1) in the following ways.
o - Online, you can view, correct, delete and withdraw (withdraw consent) your information directly from the Membership Management menu on the My Page after logging in to the BUKCS app-based SHOP. It can also be exercised by calling through the customer center, 1:1 inquiry or chat consultation through each of the company's websites, and by contacting the person in charge of personal information and the person in charge of personal information disclosed in 12. Matters concerning the handling of complaints related to personal information. Offline users can exercise it by contacting the customer center or the company's personal information management manager via written, telephone or e-mail.
o - Any objections to personal information may also be made by contacting the person in charge of personal information protection and the person in charge of personal information protection through the customer center, 1:1 inquiry or chat consultation, and "12. Matters concerning the handling of personal information and complaints related to personal information".
• (3) When a customer requests correction or deletion of an error in personal information, the company will not use or provide such personal information until the correction or deletion is completed.
• (4) The exercise of rights under paragraph (1) may be carried out through the client's legal representative or through an agent, such as a person who has been delegated. In this case, you must submit a power of attorney in accordance with the attached Form 11 of the Notice on the Method of Processing Personal Information.
• (5) In principle, the company shall destroy personal information without delay when a customer withdraws his/her consent (subscription), but in the case of mandatory retention by relevant laws and regulations, it shall be processed in accordance with the "Processing and Retention Period of Personal Information" in Article 3 of this policy and shall be read or used only when necessary.
• (6) A customer shall not infringe on the personal information and privacy of the customer himself/herself or others handled by the company in violation of relevant laws such as the Personal Information Protection Act.
7. the protection of children's personal information
We do not accept membership of children under the age of 14 and do not collect personal information.
8. Matters concerning the installation and operation of automatic personal information collection devices and their refusal
• (1) Use of cookies
o - The company uses 'cookie' that stores and frequently brings users' information to provide personalized and customized services.
• - Cookies are collected when accessing and using the website and using a web analysis service called Google Analytics.
• (2) Purpose of use of cookies, etc
• - A cookie is a tiny text file sent by the server used to run the website to the user's browser and is stored on the user's computer's hard disk. Later, when a user visits the website, the website server reads the contents of the cookies stored on the user's hard disk to maintain the user's preferences and provide customized services.
• (3) Installation and rejection of cookies
• - The user has the option to install cookies. Users can accept all cookies by setting the options for the web browser they use, go through a check each time cookies are saved, or they can refuse to save all cookies.
• [Examples of how to set up]
Microsoft Edge : Click [····] at the top of the web browser > Settings > Cookies and Site Rights > Manage and Delete Cookies and Site Data > Select whether to Block Cookies
Mobile Safari: Settings > Safari > Whether Cookies are blocked or not
9. Matters concerning the destruction of personal information
Unless otherwise specified in the relevant laws and regulations, the company will destroy the personal information without delay when the purpose of collecting and using personal information is achieved. However, if the personal information must be preserved continuously pursuant to other laws and regulations despite the expiration of the period of holding personal information agreed by the data subject or the achievement of the purpose of processing, the relevant personal information shall be stored separately and preserved. The specific procedures, deadlines and methods for destroying personal information of the company are as follows.
• (1) Procedures for destruction
o - The personal information provided by the customer to the company will be transferred to a separate DB after the "Purpose of Collecting and Using Personal Information" in Article 2 of this policy is achieved (in the case of paper, a separate document box) and stored for a certain period of time in accordance with the relevant laws and regulations (see Article 3 of this policy "Processing and Retention Period of Personal Information").
o - Personal information transferred to a separate DB will not be used for any purpose other than the purpose of holding it unless it is by law.
• (2) Deadline for destruction
o - Personal information that has passed the retention period shall be destroyed within five days from the end of the retention period when personal information becomes unnecessary, such as achieving the purpose of processing personal information, abolishing the service, or terminating the project.
• (3) Method of destruction
o - Delete information stored in the form of an electronic file using a technical method that cannot play the record.
o - Personal information printed on paper is shredded or destroyed through incineration.
10. Measures to ensure the safety of personal information
The Company is taking the necessary technical and physical measures to ensure safety as follows.
• (1) Management Measures
o - Establishment and implementation of personal information protection guidelines (internal management plans), operation of dedicated organizations, regular employee training, etc
• (2) Technical measures
o - Management of access rights to personal information processing systems, etc. Installation of access control systems, encryption of personal information, installation and update of security programs
• (3) Physical measures
o - Control access to computer rooms, communication rooms, CCTV situation rooms, etc
11. Matters concerning the personal information protection officer and the handling of complaints related to personal information
• (1) The company is responsible for the handling of customers' personal information and designates a person in charge of personal information protection as follows to handle customers' complaints and remedy damages related to personal information processing.
o Personal Data Protection Officer
o - Name: Representative Kim Roy
o - Property: BUKCS PTE. LTD.
o - E-mail : admin@bukcs.com
• (2) If a customer raises an opinion or complaint regarding the company's privacy to the above customer service department or personal information protection officer, the company will take prompt and sincere action to resolve the issue.
• 12. Change of personal information processing policy
• (1) When changing this personal information processing policy, the company will immediately announce the reason and changes through the notice section of the website or through a separate window.
• (2) You can check the previous personal information processing policy through the top link.
o - Effective date: December 27, 2024
