www.gentlemonster.com (the “Website”) is owned and operated by IICOMBINED Co., Ltd., a global corporation based in Seoul, Republic of Korea. (Collectively the “Company”, “we”, “our”, or “us”). This Privacy Policy (the "Policy") explains how the Company collects, stores, uses, discloses, or otherwise processes personal information of its customers, visitors, prospects and other users (“user(s)”, “you”, or “your”) while you visit or use the Website. This Policy also applies to other services, including stores, that display or link to these terms.

Effective: September 7, 2022.

1. Information Collection

A. Information Collected
“Personal Information” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Personal information to be collected by us are as follows:

• Information Provided by You

We may collect the following information directly provided by you.

Membership Registration
i) When you register in the Website directly
[Required] Name, E-mail address, phone number, password, encoded identification information (“CI”)
[Optional] gender, birth date, national information

ii) When you register through Google or Facebook
[Required] ID, Name, E-mail address, phone number, gender, birth date, CI
[Optional] gender, birth date

iii) If you are minor
[Required] Information of legal representatives (name, birth date, CI of legal representatives)

Provision of Services or Products

[Required] Information of ordering and/or receiving person (name, e-mail address, phone number, address)

Customer Services (inquiry, reservation, return and/or repair of the products)

[Required] Name, E-mail address, details of the inquiry (purchase and payment records, repair records, reservation records)
[Optional] Birth date, gender, national information, phone number, address, purchase location and date

Payment

[Required] Credit card details, bank account details, CI

Refund

[Required] Name, history for shipping and billing, bank account details

Marketing and Advertising (including events, contest or sweepstakes)

[Optional] Name, E-mail address, phone number, birth date, cookies, IP address, CI

Contents

Image information taken and uploaded by the customer from participatory content

Items created automatically and collected while using the services

Operating system, Application Version Number (OS version), device model, member identifier (member serial number), UUID, UDID

​

 

• Information Collected When You Use Our Website

Besides of information directly provided by you, we may collect information in the course when you use the service provided by us.

Log information
IP address, log data, use time, search word input by user, visited pages, internet protocol address, cookies, purchase and payment records, access suspension records

B. Method of Collection
We may collect your information by the following ways:

• webpage, written form, fax, telephone calling, e-mail, tools and cookies for collection of created information

• provided by partner companies

​

C. Retention Period of Personal Information

• We keep and use personal information for the period mentioned when we collected your personal information. However, we may retain such information as per the applicable law.

• We retain and use personal information for members from the date of entering into the service contract(when creating an account) until the service contract is terminated(including withdrawing from membership or being suspended).

• Unless a determined as per applicable law or upon a request made by you, we will dispose information we do not re-use for the period(1 year) as per applicable law, or will keep and manage sleeper member’s information separately from other members. We will notify you 30 days before the date the information is disposed, or kept and managed by means of email, writing, phone or other similar methods.

• Items of personal information that need to be destroyed or kept separately as per the above is as below.

Kept Separately

ID, PW, Phone Number, Optional Information (Gender, Date of Birth), Marketing Consent

• The retention period as per the applicable law is as below:

Records on display/advertisements

6 months

Act on the Consumer Protection in Electronic Commerce Article 6, Enforcement Decree Article 6
Records on contract, withdrawal

5 years

Act on the Consumer Protection in Electronic Commerce Article 6, Enforcement Decree Article 6
Record on payment, supply of goods, etc.

5 years

Act on the Consumer Protection in Electronic Commerce Article 6, Enforcement Decree Article 6
Record on consumer complaints, disputes

3 years

Act on the Consumer Protection in Electronic Commerce Article 6, Enforcement Decree Article 6
Record on computer communications, internet access

3 months Protection of Communications Secrets

Act Article 15-2, Enforcement Decree Article 41

• We may keep such information in accordance with company policy to prevent material damage, crimes, lawsuits, etc. even if not provided as per the applicable law. However, we will only keep necessary information and retention period to achieve such purpose. “Fraudulent Use” means any acts that do not conform to the normal e-commerce practices, which may include illegal acts or taking unfair advantage of the site, including but not limited to the examples below.

Ex) Intentionally interfering with the normal business activities and service operation of us, such as habitually or repeatedly canceling or returning goods without a justifiable reason after purchasing goods, repetitive membership withdrawal and re-registration, or participating in sweepstakes using multiple emails, act of taking unfair advantage by using other sites.
Fraudulent Use related Information {Name, Phone Number, Email, Address, Identity verification result value provided by the identity verification agency (CI/DI)}

5 years

Prevention of fraudulent use

2. Use of Collected Information
We use the information collected by you for the following purposes:

• Member management and identification

• To detect and deter unauthorized or fraudulent use of or abuse of the service

• Performance of contract, service fee payment and service fee settlement regarding provision of services demanded by the users

• To provide customer service and other services to you

• Improvement of existing services and development of new services

• Making notice of function of Company sites or applications or matters on policy change

• To help you connect with other users you already know and, with your permission, allow other users to connect with you

• To make statistics on member’s service usage, to provide services and place advertisements based on statistical characteristics

• To provide information on promotional events as well as opportunity to participate

• To comply with applicable laws or legal obligation (including any requests by government)

• To use of information with prior consent of the users (for example, utilization of marketing advertisement)

We will obtain consent from you if we need to use Personal Information other than those expressly stated in this Policy.

3. Disclosures of Collected Information
(1) Share of Personal Information
Except for the following cases, we will not disclose Personal Information to a third party:

• Disclosure with affiliates, partners and service providers

- When our affiliates, partners and service providers carry out services such as bill payment, execution of orders, products delivery, communication (live chat, sending messages, etc.), marketing and dispute resolution (including disputes on payment and delivery) for and on behalf of us

• When you provided consent

- when you select to be provided by the information of products and services of certain companies by sharing your Personal Information with those companies
- when you select to allow your Personal Information to be shared with the sites or platform of other companies such as social networking sites
- other cases where you give prior consent for sharing your Personal Information

• Required by law

- if we are required to disclose by laws, regulations, etc.
- if we are required to disclose by investigative agencies for detecting crimes in accordance with the procedure and method as prescribed in the laws and regulations
(2) Sale of Personal Information
We do not sell or rent any of your Personal Information.
(3) Entrust of Personal Information

• We entrust the following scope of work to provide you better services.

Entrusted Company                                                                      Services Entrusted
NAVER PAY                                                                                       Payment, Delivery
KCP                                                                                                     Payment, Delivery
KAKAO PAY                                                                                       Payment
APIBOX                                                                                              Payment
NICEPAY                                                                                           Cash Receipt, Expenditure Receipt
ORANGE MESSAGE                                                                        Kakao message on repair
CJ LOGISTICS                                                                                  Delivery
DHL                                                                                                    Delivery
EMS                                                                                                   Delivery
BA-DAL QUICK                                                                                Delivery
PAY PAL                                                                                             Overseas Payment
ALIPAY                                                                                               Overseas Payment
Powerfront Pte., Ltd.                                                                        Live Chat Service
Matrix Cloud                                                                                     CS Phone calls and chat recording
Maersk Contract Logistics Korea Limited                                   Shipping Agent
Day1 Entertainment                                                                         Game Operation
AFI                                                                                                      Game Date Management
Shine Customs                                                                                 Delivery(Export Declaration)
NICE Information Service                                                               Identity Verification
ISWare                                                                                               Customer Information System Development
Zendesk                                                                                             Zendesk help system
Bespin Global                                                                                   AWS Infra Operation
AFI                                                                                                      Game Services

• When we engage into an agreement with the entrusted company, we will mention in the agreement about the entrusted company’s obligations and responsibilities, including that the entrusted company may only process personal information for the entrusted purpose, restrictions on re-entrustment, entrusted company’s management and supervision, indemnity clause, etc., and we will supervise and manage the entrusted company to see if personal information is processed safely.

• We will notify you through our Policy of any changes to the services entrusted or to the entrusted party.

• We may entrust personal information to third party for the services.

Company Name Contact Info Items of Personal Information Country, Method Purpose/Entrusted work Retention and Use Period
Powerfront Pte Ltd. support@powerfront.com Name, Email, Phone Number, Purchase History, Customer Services History Country – Hong Kong Method – Transferred through the network when using the service To provide live chat service 3 years from the date customer services ended
SAP SAP privacy@sap.com Name, Contact Information, Email, Country, Address Country – Australia Method – Transferred through the network when using the service Product Repair and Product Delivery 5 years from the date the product repair related services is completed
Zendesk Zendesk,Inc
privacy@zendesk.com Name, Phone Number, Address, Purchase History, Customer Services History Country – Japan Method – Transferred through the network when using the service Customer Services 3 years from the date customer services ended

4. Your Rights
You or your legal representatives, as main agents of the information, may exercise the following rights regarding the collection, use and sharing of Personal Information by us:

• Right to access to Personal Information

You or your legal representatives may access information and check the records of the collection, use and sharing of the information under the applicable law.

• Right to rectification

You or your legal representatives may request to correct inaccurate or incomplete information.

• Right to erasure

Your or your legal representatives may request the deletion of information, except that we may retain information to the extent permitted by applicable law.

• Right to restriction of processing

You or your legal representatives may make temporary suspension of treatment of personal information in case of disputes over the accuracy of information and the legality of information treatment, or if necessary to retain the information.

• Right to data portability

You or your legal representatives may request to provide or transfer the information.

• Right to object

Your or your legal representatives may suspend the treatment of Personal Information if the information is used for the purpose of direct marketing, reasonable interests, the exercise of official duties and authority, and research and statistics.

• Right to automated individual decision-making, including profiling

You or your legal representatives may request to cease the automated treatment of personal information, including profiling, which has critical impact or cause legal effect on them.
You also have the right to lodge a complaint with the relevant supervisory authority in the country in which you reside.

5. How to Exercise Your Rights
In order to exercise the above rights, use the menu of 'amendment of “my account” of Website or send e-mails with a required written form (see the details stated hereunder). We will take measures without delay and give notice about the results of such measures to you. We may reject the request of you only to the extent that there exists either proper cause as prescribed in law or equivalent cause. In order to fulfill your request, we will need to verify your identity or the authority of the person whom is authorized to act on your behalf.

Please note that we cannot fulfill your request if we cannot verify your identity or the authority of the person authorized to act on your behalf.

[Required form]
You can see the details here:
[Contact to]
Webpage: https://www.gentlemonster.com/
E-mail: cs@gentlemonster.com

6. Cookies
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and allows us to improve our site. By continuing to browse the site, you are agreeing to our use of cookies.
A. What are cookies?
A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.
Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
Analytical/performance cookies. They allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
Functionality cookies. These are used to recognize you when you return to our website. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
B. What kind of information do we collect by using cookies?
When you visit our website, we may automatically collect the following types of information from you: Your automatic login information when you become a member and the cart ID when placing the order as a guest. Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.
C. How do you block cookies?
You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.

7. Security
We regard the security of Personal Information of uses as very important. We construct the following security measures to protect your Personal Information from any unauthorized access, release, use or modification

• Encryption of Personal Information

Transmit users' Personal Information by using encrypted communication zone
Store important information such as passwords after encrypting it

• Counter measures against hacking

Install a system in the zone the external access to which is controlled so as to prevent leakage or damage of users' Personal Information by hacking or computer virus

• Establish and execute internal management plan

• Install and operate access control system

• Take measures to prevent forging or alteration of access record

​

8. Procedure and Method of Destroying Personal Information
In principle, as soon as the purpose for the collection of Personal Information has been achieved, the applicable information shall be destroyed without delay.

The procedures, deadlines, and methods are specified in detail below.

• Procedure for disposal

Information inputted is transferred to a separate database (separate documents for paper) once the purpose has been achieved. According to the protection of information pursuant to the Company’s internal policies and related laws, it shall be stored for a certain period or disposed without delay.

• Deadline for disposal

Once the retention period of user’s Personal Information has been elapsed or if it is no longer in need due to achievement of goal, revocation of certain service, or business closure, etc. then it shall be disposed within 5 days from the last date of possession.

• Method of disposal

Personal Information in the form of electronic files shall be deleted in a way that it cannot technically be recovered. For those printed on paper shall either be grinded or incinerated.

9. Protection of Personal Information of Children
We do not collect any information from children under the age as prescribed in the laws of applicable jurisdiction. The website or application of us has an age limit function so that children cannot use it and we do not intentionally collect any Personal Information from children through that function. If we obtain knowledge that we have collected any Personal Information from children under the age as prescribed in the laws of applicable jurisdiction, we will delete that information from existing files.

However, if we collect any Personal Information from children under the age as prescribed in the laws of applicable jurisdiction for the services for unavoidable reason, we will go through the additional procedure of the followings for protecting that Personal Information of children:• verify, to the extent that efforts are reasonably made, whether they are children of the age at which consent from their guardian is required and the consenting person is an authorized one.

obtain consent from the parents or guardian of children to collect Personal Information of children or directly send the information of products and services of the Company
give the parents or guardian of children a notice of Company's policy of privacy protection for children including the items, purpose and sharing of Personal Information collected
grant to legal representatives of children a right to access to Personal Information of that children/correction or deletion of personal information/temporary suspension of treatment of Personal Information/ and request for withdrawal of their consent provided before
limit the amount of personal information exceeding those necessary for participation in online activities

10. Modification of Privacy Protection Policy
We have the right to amend or modify this Policy from time to time and, in such case, we will make a public notice of it through bulletin board of its website (or through individual notice such as written document, fax or e-mail).

11. Others
A. Data Transfer to Other Countries
Our business is engaged globally, thus, we may provide your Personal Information to the companies located in other countries for the purpose as expressly stated in this Policy. For the places where the Personal Information is transmitted, retained, or processed, we take reasonable measures protecting Personal Information.

B. Third Party's Sites and Services
The website, product or service of the Company may include links to the ones of a third party and the privacy protection policy of the site of a third party may be different. Thus, it is required for users to check such third party’s policy linked to the site of the Company.

C. Person in Charge of Protecting Personal Information
The Company designates the following CPO (Chief Privacy Officer) to protect Personal Information of users and deal with complaints from users.

Position Name Department Address Contact number Email address
CPO TAEHO JUNG IT Division 41, Eoulmadang-ro 5-gil, Mapo-gu, Seoul, Republic of Korea +82-02-6956-6090 privacy@gentlemonster.com
DPO JAEYOUNG LEE