Privacy Policy
Article 1 (Purposes of Processing and Items Collected)
The Company processes personal information for the following purposes and will obtain separate consent if these purposes change.
| Type | Items Collected | Purpose of Processing | Collection Method |
|---|---|---|---|
| Sign-up (required) | Name, email address, password (for email sign-up; stored with one-way encryption), consent history for Terms of Service and privacy | Member identification and management, login, handling customer inquiries, providing first-sign-up benefits | Sign-up page; linking Kakao, Google or Apple accounts (limited to consented items) |
| Member information (optional) | Gender, date of birth, mobile number, shipping information (recipient, address, contact), marketing consent status | Mobile identity verification, account recovery, linking existing orders, auto-filling shipping addresses, notices of events and new products | Sign-up page, My Page, Kakao shipping address linking (with consent) |
| Checkout | Orderer and recipient information (name, contact, address), order and payment history | Contract performance (product delivery), payment and refund processing, customer support | Order form page |
| Automatically collected | Access IP, access country and city (estimated from IP), access date and time, browser and device information (including device time zone and language settings), login session cookies, web analytics (Google Analytics) cookies and identifiers | Service provision, account security, fraud prevention, service usage statistics (including usage analysis by country) | Generated automatically during service use |
※ The Company does not collect unique identifiers such as Korean resident registration numbers or CI (connecting information). Children under 14 may not sign up as members.
Article 2 (Retention and Use Period of Personal Information)
- Member information: until membership withdrawal (destroyed immediately upon withdrawal)
- However, in accordance with applicable laws, the following records are retained for the periods below — records of contracts and withdrawal of offers: 5 years; records of payment and supply of goods: 5 years; records of consumer complaints and dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.); access logs: 3 months (Protection of Communications Secrets Act)
- Access IPs recorded with orders are automatically destroyed 90 days after the order date; thereafter, only country- and city-level information that cannot identify individuals is retained for statistical purposes
Article 3 (Outsourcing of Personal Information Processing)
| Contractor | Outsourced Tasks |
|---|---|
| KG Inicis | Electronic payment processing (payment authorization and cancellation) |
| SOLAPI Inc. | Mobile identity verification; sending order/shipping notification texts and KakaoTalk notification messages |
| Designated courier | Product delivery |
Article 4 (Cross-border Transfer of Personal Information)
| Recipient | Country | Items Transferred | Transfer Method · Timing | Purpose of Use · Retention Period |
|---|---|---|---|---|
| Render Services, Inc. | United States | All member and order information necessary for service operation | Transmitted via information and communications networks when using the service | Cloud server operation and data storage / retention period under Article 2 above |
Data subjects may refuse the cross-border transfer; however, in that case, use of the service may be restricted.
Article 5 (Provision of Personal Information to Third Parties)
The Company does not provide personal information to third parties except with the consent of the data subject or as required by law.
Article 6 (Rights and Obligations of Data Subjects and How to Exercise Them)
Data subjects may at any time request access to, correction, deletion or suspension of processing of their personal information. You can view, edit or withdraw your membership directly on My Page, or submit a request in writing or by email to the Chief Privacy Officer below. The Company will act on requests without delay from the date of receipt.
Article 7 (Destruction of Personal Information)
Personal information is destroyed without delay once the retention period expires or the purpose of processing is achieved. Electronic files are deleted using methods that make recovery impossible, and printed materials are shredded or incinerated.
Article 8 (Security Measures)
- Passwords stored with one-way encryption (PBKDF2-SHA256); all transmissions encrypted end to end with SSL/TLS
- 관리자 권한 등급 분리 및 접근·처리 기록(감사로그) 보관, 로그인 시도 제한
- Minimizing and training personnel who handle personal information
Article 9 (Use of Cookies)
The Company uses essential cookies to maintain login sessions and web analytics (Google Analytics) cookies for service usage statistics, and does not use tracking cookies for advertising purposes. You may refuse cookies in your browser settings, but login services will then be restricted.
Article 10 (Chief Privacy Officer)
| Type | Details |
|---|---|
| Chief Privacy Officer | Hwang In-beom (Co-CEO) |
| Phone | Email: cx@mealzip.kr / Phone: 010-8176-8525 |
For other reports or consultations on personal information infringement: Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118 with no area code), Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972)
Article 11 (Changes to the Privacy Policy)
Any additions, deletions or amendments to this Policy will be announced via website notices starting 7 days before they take effect.