Privacy Policy

Article 1 (Purposes of processing)

The Company processes personal data for the purposes below. Personal data is not used for any other purpose; if a purpose changes, the Company takes the measures required by Article 18 of the Act, such as obtaining separate consent.

1. Receiving, reviewing and replying to quote requests, contacting users about confirmed quotes and orders, and sending confirmation emails
2. Receiving and replying to customer enquiries (products, quotes, samples, lead time, partnership) and reviewing attached material
3. Confirming the intent to register, identifying and authenticating members, maintaining membership, password recovery, and notices
4. Providing member services such as saved combinations (My Collection), quote history and the cart
5. Verifying identity for non-member lookup of quotes and enquiries
6. Preventing misuse of the Services, managing access logs, and keeping records in case of disputes

Article 2 (Personal data processed)

The Company processes the following items. Personal data is entered by users in the Site's forms or generated automatically while using the Services.

Lookup passwords and member passwords are stored only as one-way hashes; the Company cannot recover the original values.

Label artwork uploaded for preview is used only within the user's browser and is not sent to or stored on the Company's servers.

The Company does not collect personal data from children under 14.

Article 3 (Retention periods)

The Company retains personal data for the period required by law or agreed at collection.

"Handled" means the time the Company replied to the quote or enquiry; if there is no reply record, the time of submission applies.

Article 4 (Provision to third parties)

The Company processes personal data only within the purposes in Article 1 and does not provide it to third parties except with separate consent or where Articles 17 and 18 of the Act apply. The Company currently provides no personal data to third parties.

Article 5 (Outsourcing of processing)

The Company outsources the following processing to provide the Services.

Under Article 26 of the Act, the Company's contracts with processors prohibit processing beyond the outsourced purpose and set out technical and organisational safeguards, restrictions on sub-processing, supervision and liability; the Company supervises processors to ensure personal data is handled safely.

Changes to the outsourced work or processors are published through this policy without delay.

Article 6 (Cross-border transfer)

The Company does not transfer personal data abroad. Its servers and storage are located in the Republic of Korea (AWS Seoul region). Should a transfer become necessary, the Company will disclose the recipient, country, timing and method, items, purpose and retention period and obtain the consent required by Article 28-8 of the Act.

Article 7 (Destruction)

1. The Company destroys personal data without delay once it is no longer needed, such as when the retention period ends or the purpose is achieved.
2. Where data must be kept under other laws after the agreed period or purpose has ended, it is moved to a separate database or storage location.
3. Procedure: the Company selects data that must be destroyed and destroys it with the approval of the privacy officer. Enquiry attachments are deleted by an automated process when their retention period ends.
4. Method: electronic files are permanently deleted so they cannot be recovered; paper records are shredded or incinerated.

Article 8 (Rights of data subjects and legal representatives)

1. Data subjects may at any time request access to, correction or deletion of, or suspension of processing of their personal data, and may withdraw consent.
2. Requests may be made in writing, by email or by phone under Article 41(1) of the Enforcement Decree of the Act, and the Company acts on them without delay. Members can view and change their details on the My Page screen.
3. Requests may also be made through a legal representative or an authorised agent, with a power of attorney in the form prescribed by the Notice on Personal Information Processing Methods.
4. Requests for access or suspension may be limited under Articles 35(4) and 37(2) of the Act.
5. Deletion cannot be requested for data that other laws designate as subject to collection.
6. The Company verifies that the person making a request is the data subject or an authorised agent.

Article 9 (Security measures)

The Company takes the following measures to keep personal data secure.

1. Organisational: an internal management plan, minimising and training staff who handle personal data
2. Technical: one-way hashing of passwords and lookup passwords; server-managed login sessions ended immediately on sign-out or password change; access control on administrator screens (administrator authentication, request forgery protection); encryption in transit (HTTPS); private storage and format checks for attachments; installation and updating of security software
3. Physical: servers and storage operated in access-controlled data centres (AWS Seoul region)
4. Access logs: records of access to personal data processing systems are kept and managed

Article 10 (Cookies)

1. The Company uses cookies, small pieces of information the server sends to the user's browser and stores on the user's device, to provide individual services.
2. The cookies used are a session cookie that keeps users signed in and a cookie that identifies a non-member cart. The Company uses no advertising or behavioural-analytics cookies and no external web analytics; if introduced, this policy will say so.
3. Users may refuse cookies in their browser settings, but signing in and the cart may then not work properly.

Article 11 (Privacy officer)

The Company designates the following privacy officer to take overall responsibility for personal data processing and to handle complaints and remedies.

Data subjects may direct any privacy-related enquiries, complaints or remedy requests arising from use of the Services to the privacy officer, who will respond without delay.

Article 12 (Access requests)

Data subjects may submit access requests under Article 35 of the Act to the privacy officer: phone 032-216-2300, email proscent@proscent.co.kr. The Company will handle such requests promptly.

Article 13 (Remedies)

Data subjects may seek dispute resolution or advice from the following bodies regarding personal data infringements.

1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center (KISA): 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
4. Korean National Police Agency: 182 (ecrm.police.go.kr)

A person whose rights or interests are infringed by a disposition or omission of the head of a public institution in response to a request under Articles 35, 36 or 37 of the Act may file an administrative appeal under the Administrative Appeals Act.

Article 14 (Changes to this policy)

1. This policy applies from September 5, 2026.
2. Additions, deletions or amendments due to changes in law, policy or security technology are announced on the Site from 7 days before they take effect.