1. Information and purposes
| Service | Purpose | Information |
|---|---|---|
| Email registration and accounts | Identification, sign-in, recovery and member services | Name, email, internal account identifier and one-way password hash |
| Google sign-in | Authentication, registration and account linking | Google account identifier, email, email verification status and profile name |
| Optional telephone contact | Service-related telephone contact requested by the member | Telephone number provided with separate optional consent |
| Addresses and orders | Address management, orders, payment confirmation, delivery, refunds and disputes | Buyer and recipient names, telephone, email, country, city, postal code, address and transaction records; hashed lookup password for guest orders |
| Inquiries and posts | Responses, content management and reports | Contact details, text and attachments submitted by the user |
| Authentication and consent | Security, abuse prevention and consent records | IP address, hashed attempted account identifier, request time, accepted document, language, version and consent time |
Information is collected from registration, address, order and inquiry forms and authentication. Refusing required information may prevent the relevant service. Optional telephone contact is not required for basic membership.
2. Google information: use and storage
Google sign-in requests openid, email and profile permissions. The account identifier, email and name are used for authentication, registration and linking. Email verification status and authentication validity are checked.
The service database stores the linked Google identifier and member email and name. It does not collect Google passwords or retain profile pictures, Google authentication tokens or access tokens in the member database. It does not request Gmail messages, Drive files or contact lists.
Google information is not sold or used for advertising targeting or training general-purpose AI models. Processing is limited to the requested account service, security and legal obligations, in accordance with the Google API Services User Data Policy and applicable Limited Use requirements.
3. Retention
- Account identifiers and Google links: until withdrawal or completion of the purpose. Legally required records are retained separately.
- Optional telephone: until deletion, withdrawal of optional consent or account withdrawal, whichever occurs first.
- Saved addresses: until address deletion or account withdrawal. Addresses included in orders follow transaction retention rules.
- Sign-in and account-recovery attempt logs: up to 30 days. Linked authentication attempt records are cleaned up upon withdrawal.
- Korean statutory e-commerce records, where applicable: contract/withdrawal and payment/supply records for five years; consumer complaint/dispute records for three years.
- Inquiries and posts: until their response or publication purpose is fulfilled, with deletion requests and withdrawal handled accordingly. Any legally required or dispute-related retention is limited to its purpose and period.
4. Deletion and account withdrawal
Information is deleted or made non-identifying without delay when its purpose and retention period end. Electronic files are deleted to prevent recovery; paper records, if any, are shredded or otherwise destroyed.
Withdrawal removes account identifiers, saved addresses and Google account links. Legally required transaction records are separated from ordinary membership data with restricted access. Backup copies are restricted to recovery use and removed through backup replacement and deletion procedures. Withdrawal and deletion requests are reapplied after recovery.
Deleting a site account or its Google link does not delete the Google account itself. Access to this service can also be managed in Google account security settings.
5. Sharing and external services
Personal information is not sold or shared for another business’s independent purposes without consent or a legal basis. Google provides the authentication service; processing within Google is also governed by Google’s privacy policy.
Where an external payment or delivery service is used, the actual service and relevant information are disclosed in the order process or a separate notice. Required sharing, processing and international-transfer notices and procedures depend on the actual service conditions. Registering test credentials alone does not transmit customer payment or delivery information.
If a processor is engaged, its identity and assigned work are disclosed and privacy obligations are managed through contracts and supervision. This policy does not request blanket consent to undisclosed recipients.
6. Services outside Korea
Choosing Google sign-in redirects the browser to Google and communicates with its authentication service. The site receives the authentication information described above to identify the account. Google’s account processing and service environment are described in its policies.
If other payment or delivery processing involves international transfers, recipient, country, information, purpose, timing, method, retention and refusal options and consequences are separately disclosed as required. Email registration and sign-in are available as an alternative to Google sign-in.
7. Your rights
You can view, change or delete member information and saved addresses in My Account. Withdrawal, optional consent withdrawal, access, correction, deletion, restriction and consent-record inquiries can be requested in My Account or through support below.
Requests are processed after verifying identity or valid authority. If a request cannot be fully fulfilled because of a legal retention requirement, the reason is explained. Withdrawal of optional telephone consent does not restrict basic membership.
8. Cookies and sessions
Session and language-preference cookies support sign-in, request-forgery prevention and language selection. You may delete or block cookies in your browser. Blocking them may prevent sign-in, ordering or other functions from working correctly.
9. Safeguards
Safeguards include one-way password hashing, authentication verification, access restrictions and request-forgery prevention. Please protect passwords and account access methods from other people.
10. Contact and policy changes
Privacy inquiries and rights requests can be submitted through support below. Changes and their effective date are announced on the site. New purposes or sharing that require separate consent are disclosed and the necessary consent obtained before processing.
Privacy and service inquiries
Contact customer support below for access, correction, deletion, restriction of processing, Google account connections or service inquiries.
- marathon@saeyang.com
- Telephone
- +82-53-582-9000