Maypure Privacy Policy

The Company processes personal information for the following purposes only. It will not use the information for any purpose other than those specified below. If the purpose of use changes, the Company will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Membership Registration and Management

• Confirming membership registration intent
• Identifying and authenticating members for membership-based services
• Maintaining and managing member status
• Preventing fraudulent use of services
• Verifying legal guardian consent for children under 14
• Sending notices and handling complaints

2. Provision of Goods or Services

• Delivery of goods and provision of services
• Sending contracts and invoices
• Providing content and personalized services
• Identity and age verification
• Processing payments and settlements
• Collecting outstanding debts

3. Handling Complaints

• Verifying the identity of complainants
• Checking complaint details and notifying results

1. The Company retains and uses personal information within the period stipulated by law or agreed upon by the data subject.
2. The processing and retention periods are as follows:

• Membership Registration and Management: Until membership is withdrawn
  • However, information may be retained until the end of the following situations:
    1. If under investigation for legal violations: until the investigation ends
    2. If there are unresolved financial obligations related to service use: until settlement is complete

1. The Company processes personal information only within the scope specified in Article 1 and will provide it to third parties only when consent is given or as permitted under Articles 17 and 18 of the Personal Information Protection Act.
2. If necessary for service provision, the Company may provide personal information to third parties with the data subject’s consent, and only to the minimum extent required.

• Recipient: (e.g.) OOO Card Co., Ltd.
• Purpose of Use: (e.g.) Joint event operation and affiliated credit card issuance
• Information Provided: (e.g.) Name, address, phone number, email address, card account info
• Retention and Use Period: (e.g.) During the term of the credit card issuance contract

1. Data subjects may exercise the following rights at any time:

• Request access to personal information
• Request correction of errors
• Request deletion
• Request suspension of processing

1. Rights may be exercised via written request, telephone, email, or fax, and the Company will respond promptly.
2. When correction or deletion is requested, the Company will not use or provide the data until the request is fulfilled.
3. Rights may be exercised through a legal representative or an authorized agent with a valid power of attorney (as per Form No. 11 of the Enforcement Rules).
4. Data subjects must not infringe upon the privacy or personal information of themselves or others in violation of related laws.

The Company processes the following personal information for member identification and customer support (e.g., event participation, customer inquiries by fax, mail, phone, or help center):

• Membership Registration and Management
  • Required items: Account information set by the user via external services such as Kakao or Naver
    • Includes: Email, phone number

1. The Company will promptly destroy personal information when the retention period expires or processing is no longer necessary.
2. Destruction procedures and methods:

• Procedure: Subject to approval by the Data Protection Officer
• Method:
  • Permanently delete electronic files to prevent recovery
  • Shred or incinerate physical documents

The Company takes the following measures to ensure data security:

1. Administrative Measures: Internal management policies, regular employee training
2. Technical Measures: Access control, encryption, security software installation
3. Physical Measures: Restricted access to data centers and archives

1. The Company operates a dedicated personal information protection team and appoints the following Personal Information Protection Officer:

▶ Personal Information Protection Officer

• Name: Seunggyun Na
• Position: CEO
• Contact: revibio@naver.com

1. You may also contact the following agencies for reports or consultation regarding personal data breaches: