Privacy Policy
This English text is a reference translation provided for convenience. kory operates under the laws of the Republic of Korea, and the Korean version prevails in the event of any discrepancy or dispute. The Korean original is available at kory.kr/privacy.html.
kory (YIDING COMPANY) · Effective 2026-08-20
YIDING COMPANY (brand name "kory", hereinafter the "Company") complies with the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and other applicable laws, and adopts the following policy to protect users' personal information.
1. Personal information collected and how
The Company collects the following information to process orders, deliveries and customer enquiries.
| Category | Items collected |
|---|---|
| Sign-up | Email, encrypted authentication data |
| Member details · delivery address | Name, phone number, postal code, road-name address, address detail |
| Order · payment | Name, phone number, email, delivery address, ordered items, payment method and authorization data |
| Customer enquiry | Name, email, enquiry content |
| Collected automatically | Access IP, cookies, service usage records (to prevent misuse and for statistics) |
※ Payment data is processed through a payment gateway (PG). The Company does not itself store sensitive payment data such as card numbers.
2. Purposes of collection and use
- Receiving orders for goods and services, processing payment, and delivering products
- Responding to enquiries, handling disputes and sending notices
- Preventing misuse, improving the service and statistical analysis
3. Retention and use period
As a rule, information is destroyed without delay once the purpose of collection and use has been achieved. However, the following is retained as required by law.
| Retained item | Legal basis | Period |
|---|---|---|
| Records of contracts and withdrawal of subscription | Electronic Commerce Act | 5 years |
| Records of payment and supply of goods | Electronic Commerce Act | 5 years |
| Records of consumer complaints and dispute handling | Electronic Commerce Act | 3 years |
| Access logs | Protection of Communications Secrets Act | 3 months |
4. Outsourcing of personal information processing
| Processor | Outsourced work | Retention and use period |
|---|---|---|
| Supabase, Inc. | Member authentication, database and image storage | Until withdrawal of membership or termination of the outsourcing agreement, excluding information retained by law |
| PortOne (Korea PortOne Inc.), Korea Payment Networks (KPN), and the selected card issuer or simple-payment provider | Payment authorization, transaction lookup, cancellation and refund | As required by the Electronic Commerce Act and other applicable law, and the retention period of each payment provider |
| Kakao (Daum postal code service) | Road-name address lookup | For the period necessary to provide the address lookup service |
| Resend, Inc. | Sending member, order, delivery and cancellation emails | Until the end of the sending-record retention period or termination of the outsourcing agreement |
| The courier shown on the order screen | Product delivery and tracking | Until delivery is complete and for the retention period required by law |
| Google LLC (Google Analytics) | Website usage analytics (referral path, page views, device and approximate region — non-identifying statistics) | Per Google Analytics retention policy (14 months by default) |
The Company displays the courier actually used and the tracking number in your order history. Where services of overseas providers are used, personal information may be processed on servers outside Korea; the Company applies the protective measures required by applicable law.
5. Website usage analytics
To improve the service, the Company uses Google Analytics (GA4) from Google LLC to collect website usage statistics. Items collected include referral path, page views, time on page, device and browser type and approximate region; information that could identify an individual, such as name or phone number, is not collected. The information is processed through cookies. Users may block cookies in their browser settings or opt out by installing Google's Analytics opt-out browser add-on. Note that blocking cookies may prevent some functions, such as login and the shopping cart, from working correctly.
6. Information stored in your browser
Cart items are kept in your browser's local storage so they are still there when you return. Name, phone number, email and delivery address are held temporarily only in the browser session during checkout and are deleted once the order is complete. On a shared device, please close the browser after use.
7. Your rights
You can view and correct your member details and default delivery address on the account page, and request withdrawal of membership there. Other requests for deletion or suspension of processing can be sent to hello@kory.kr.
8. Personal information protection officer
Name HEEWAN KOO · Email hello@kory.kr
You may raise enquiries or complaints about personal information with the officer above, and the Company will respond and act promptly.
9. Changes to this policy
This policy may be revised as laws or policies change. Any change will be announced through the Mall.