Personal Information Handling Policies of Alleys

Alleys Wonderlab, Inc. (hereinafter referred to as the “Company”) seriously takes into consideration users’ personal information, complies with the “Act Relating to Promotion of Information Communications Network and Personal Information Protection,” and use its best efforts to protect the members’ rights and interests by setting forth the personal information handling policies pursuant to relevant laws. Through the personal information handling policies, the Company informs users for what purposes and in what ways the Company uses the personal information provided by users, and what measures the Company takes to protect the personal information. These policies are implemented from June 2016.


Article 1 [Items of Personal Information to be Collected]

The Company collects the following personal information for purposes of membership applications, consultation, service applications, etc. Also the Company collects location information through an indoor base station (cell id) or GPS signal or through an outdoor Wi-Fi information, high-frequency data, etc. of wireless APs, from terminals built-in with GPS receivers, Wi-Fi, Bluetooth, mikes, etc. including Smartphone, tablet PCs, or any other similar device owned by the members (hereinafter referred to as “Telecommunication Terminal Device”).
1. Items to be collected: Name, resident registration number, mobile phone number, marriage history, login ID, unique device ID or IMEI, legal representative information, location information, password, home (workplace) phone number/address, email, education backgrounds/schools graduated, job type, job title, position, salary, height and weight, blood type, religion, domicile of origin, family clan, photo, video, family relationship, access log in the course of service use or business transactions, cookies, IP information, credit card information, bank account information, billing information, and past purchase history may be created and collected.
2. Personal information collection method:personal information may be collected through membership application, free consulting application, online consulting, service program implementation and use, giveaway application, or voluntary provisions of personal information, etc.


Article 2 [Purpose of Collection of Personal Information]

The Company utilizes the collected personal information for the following purposes : 1. Data analysis and using personal information for matching algorism for the purpose of providing the services limited to location information ;
2. Performance of agreements on provisions of services, and payment of costs as a result of providing services, providing the content, consulting for the services and membership application
3. Management of the members (verifying identifications, identifying individuals, preventing wrongful uses or unauthorized uses, verifying intents for membership, verifying ages, handling civil petitions including complaints, and conveying notifications)
4. Use for marketing and advertising (conveying advertising information including events, providing the services according to demographic characteristics, and placing advertisements).


Article 3 [Retention and Use Period for Personal Information]

1. The retention and use period under the Company’s internal policies
In the event that a married member applies for membership, the Company retains his or her personal information according to the Company’s internal policies regarding personal information.
1-1. Completion of an agreement with a member (including active or deferred members) (the Company retains personal information of the members as to whom two (2) years has elapsed from the date of membership, but their activities are deferred): two (2) years from the date of membership
1-2. In the event that a member withdraws from membership due to a reason of refund, the records and materials for request of refund: two (2) years
1-3. Records and materials for wrongful uses to prevent wrongful uses (wrongful membership application, abnormal service use, etc.).

2. The retention and use period under relevant laws
In the event that it is necessary to preserve personal information under relevant laws including the Commercial Code, the Act Relating to Consumer Protection in Electronic Commercial Transactions, etc., the Company retains the information of members for a certain period of time prescribed under relevant laws. In this case, the Company uses the personal information it retains only for the purpose of preservation thereof, and the retention period are as follows :

2-1. Records on agreements or withdrawals of offers

2-2. Records on payments and supplies of goods, etc. 2-3. Records on complaints of consumers or dispute resolutions 2-4. Records on identifications 2-5. Records on visitations


Article 4 [Destruction Procedures and Methods for Personal Information]

The Company in principle destroys the personal information of users without delay if the purposes of collection or use of personal information have been fulfilled. The Company’s destruction procedures and methods for personal information are as follows:
1. The personal information saved in an electronic file format is to be deleted with the use of technical methods in which records cannot be regenerated.
2. The personal information printed out in sheets is to be shredded by paper shredders or destroyed by way of incineration.


Article 5 [Provisions of Personal Information to Third Parties]

The Company in principle shall not disclose personal information of customers to the outside; provided, however, that exceptions shall be made in the following cases:
1. In the event that users have given a prior consent to the disclosure; or
2. In the event that the disclosure is required under the provisions of laws or requested by investigative agencies according to the procedures and methods prescribed under the laws for investigation purposes


Article 6 [Matters on Installation, Operation, and Rejection of Automatic Collection Instruments of Personal Information]

The Company operates cookies, etc. that frequently save and find out users’ information. Cookies are very small text files sent to your browser by the server used in operating websites, which are saved to your hard discs. The Company uses cookies for the following purposes:
1. Purpose of using cookies, etc.
Providing targeted marketing and individually customized services by analyzing the access frequencies or visit hours of members and nonmembers, figuring out users’ tastes and interested fields and finding the traces, and figuring out the participations in various events and the visit frequencies, etc. Users have the options to select the installation of cookies. Therefore, you may allow all cookies, pass confirmations whenever cookies are saved, or reject saving of all cookies by selecting the Option in your web browser.
2. Cookie Installation Rejection Method
Users may allow all cookies, pass confirmations whenever cookies are saved, or reject saving of all cookies by selecting the Option in your web browser used by your
- Example of installation method (in case of the Internet Explorer): Tool on the top of the web browser > Internet Option > Personal Information
Provided, however, that when you have refused saving of cookies, you may have difficulties in using services.

Article 7 [Services for Civil Petitions Regarding Personal Information]

Users may at any time get access to and change their own registered personal information and make a request for withdrawal from membership by the Company’s homepage, e-mail, or any other communication means of the Company. The Company shall not approve a membership application of children of no more than fourteen (14) years old, but children may enter their own information and upload their opinions through a forum, bulletin board, or any other communication channel without prior approval of their parents. Therefore, parents shall be informed that it is necessary to give their children a caution not to upload any information relating to privacy without permission.
In the event that a member desires to change his or her membership information, he or she shall check his or her member ID and password, and then change his or her membership information in the mode of change of member information, or if there is no such a function, he or she may request a relevant manager to do so by e-mail. If a member desires to verify his or her member ID or password, he or she may verify relevant content indicated in the column of information verification, or if he or she asks the Company’s manager, the member’s ID and/or password are transmitted to the e-mail existing at the time of membership application. You may at any time withdraw your consent to the collection, use, and provision of personal information through the membership application, etc. You may at any time withdraw your consent thereto by using the Withdrawal from Membership at the Company’s site, of if there is no such function, you may ask a relevant manager to do so by e-mail, etc. The Company will allow the members to withdraw their consent to the collection of personal information (withdrawal from membership) in the same way and procedure as that available at the time of collection of personal information. The Company has appointed the following relevant department and personal information control manager in order to protect personal information of users and handle complaints relating to personal information :

1. Name of Personal Information Control Manager : KIM, Ji Hwan
2. e-mail : alleys@alleys.co

Users may report to the personal information control manger or the relevant department any complaints relating to all personal information protection incurred in using services of the Company. The Company will promptly give sufficient answers as to the reports of users.



If you need other reports or consultations for personal information infringements, please ask inquiries to the following institutions:

1. Personal Information Dispute Mediation Committee (www.1336.or.kr/1336)
2. Information Protection Mark Certification Committee (www.eprivacy.or.kr/02-580-0533~4)
3. Internet Crime Investigation Center of Supreme Prosecutors’ Office (http://icic.sppo.go.kr/02-3480-3600)
4. Cyber Crime Investigative Service of National Police Agency ( www.ctrc.go.kr/02-392-0330 )