English
日本語 Filipino

Privacy Policy

Effective Date: (TBD)

Santa Here (business name: Nadle (나들), hereinafter the "Company") values your personal information and complies with the Personal Information Protection Act and related laws.

1. Purposes of processing personal information

  • The Company processes personal information for the following purposes, and will obtain your prior consent if the purpose changes:
    • Receiving and processing orders, and payment
    • Purchasing, inspecting, packaging, and internationally shipping products
    • Customs declaration in the destination country
    • Providing shipping status updates
    • Receiving and responding to inquiries
    • Processing order cancellations and refunds
    • Sending news about new products and discounts, only where you have consented

2. Personal information collected

  • The Company collects the following items.
  • Order
    • Required items
      • Name
      • Email address
      • Phone number
      • Shipping address
      • Order lookup PIN
    • Additional items collected if you pick up in Korea
      • Required: pickup location name
      • Optional: unit/room number, delivery memo, emergency contact messenger type and ID
  • Inquiry
    • Required items
      • Inquiry content
    • Optional item — if you wish to receive a reply
      • Email address
  • Information automatically generated and collected
    • Access logs
    • Browser type
    • Language setting
  • The Company does not require account registration and does not collect resident registration numbers or equivalent national ID numbers.
  • Payment method information (such as card numbers) is processed directly by the payment provider and is not retained by the Company.

3. Retention and use period of personal information

  • The Company retains personal information for the following periods:
    • Records relating to orders and order cancellations: 5 years
    • Records relating to payment and shipping: 5 years
    • Records relating to inquiries and complaint handling: 3 years
    • Access logs: 3 months
    • Marketing consent information: until consent is withdrawn

4. Outsourcing of personal information processing

  • The Company outsources personal information processing as follows to provide its services:
Recipient of outsourcing Outsourced task
PayPal Payment processing
Google Cloud Application server operation; database storage and management
Google Automatic translation of chat content
  • Each recipient of outsourcing manages personal information under its own security policy.
  • The Company will notify you on the site if the outsourced task or the recipient of outsourcing changes.

5. Overseas transfer of personal information

  • For international shipping orders only, the Company transfers personal information overseas as follows in order to ship products internationally. Orders picked up in Korea involve no international shipping, so this overseas transfer does not occur.
    • Recipient of transfer: international courier companies, and the customs authority and local delivery company of the destination country
    • Country of transfer: the destination country you entered
    • Items transferred: recipient's name, phone number, shipping address
    • Purpose of transfer: international transport, customs declaration, local delivery
    • Method of transfer: electronic transmission via shipping labels and customs documents
    • Retention period: the period set by the customs-related laws of the destination country
  • You may refuse the overseas transfer of your personal information for shipping purposes. However, in that case international shipping is not possible and your order cannot be completed. (For orders picked up in Korea, there is no overseas transfer to begin with, so this right of refusal does not apply.)
  • Overseas transfer for system operation is essential to providing the service and cannot be refused separately.
  • Under Article 4 (Outsourcing of personal information processing), some of the Company's outsourcing recipients are located overseas, and personal information is processed overseas to the extent necessary to perform that work.

6. Destruction of personal information

  • The Company destroys personal information without delay once the retention period has passed or the processing purpose has been achieved.
  • Personal information stored in electronic file form is deleted using a method that prevents recovery, and personal information printed on paper is shredded or incinerated.
  • Personal information that must be retained under applicable law is stored separately from other personal information.

7. Data subject rights and how to exercise them

  • You may exercise the following rights at any time:
    • Request to access your personal information
    • Request to correct inaccurate information
    • Request for deletion
    • Request to suspend processing
    • Withdrawal of consent
  • If you are logged in with an account, you can check your order information in "My Space." If you ordered as a guest, you can check it directly on your order detail page using your order number and order lookup PIN.
  • For other rights requests, please contact the Data Protection Officer (Section 10).
  • The Company will take action and inform you of the outcome within 10 days of receiving your request.
  • However, the Company cannot comply with a deletion request for personal information that applicable law requires it to retain, and will inform you of the reason in that case.
  • Where the laws of your country of residence recognize broader rights than those above, those laws govern.

8. Automatic data collection devices

  • The Company uses cookies to the extent necessary for the operation of the service.
    • Cookies to keep the products you have added to your cart
    • Cookies to remember your selected language
    • Cookies to continue your order lookup and inquiry/chat sessions
    • Cookies to keep you signed in when logged in with an account
    • If you arrive via a promotional partner's link, a cookie recording which partner referred you
  • You may refuse cookies through your browser settings.
  • However, if you do so, you will not be able to use the cart, order lookup, and login persistence features.

9. Measures to secure the safety of personal information

  • The Company takes the following measures to secure personal information:
    • Encryption of personal information in transit
    • Access control over systems that process personal information
    • Minimizing the number of personnel with access to personal information
    • Retention of access logs

10. Data Protection Officer

  • The Company has designated a Data Protection Officer who oversees personal information processing and handles your inquiries and complaints.
    • Data Protection Officer: Kang Tae-su (강태수)
    • Email: 88santahere@gmail.com
    • Address: (TBD)
    • Phone: (TBD)
  • You may direct inquiries, complaints, and requests for remedy relating to personal information to the contact above.
  • The Company will respond within 10 days of receiving your inquiry.

11. Remedies for infringement of rights

  • If you wish to seek remedy for damage caused by a personal information infringement, you may request dispute resolution or consultation from the following organizations:
    • Personal Information Dispute Mediation Committee (privacy.go.kr, 1833-6972 domestically)
    • Personal Information Infringement Report Center (privacy.kisa.or.kr, 118 domestically)
    • Supreme Prosecutors' Office Cyber Investigation Division (spo.go.kr, 1301 domestically)
    • National Police Agency Cyber Investigation Bureau (ecrm.police.go.kr, 182 domestically)
  • You may also report to the personal information supervisory authority of the country in which you reside.

12. Changes to this Privacy Policy

  • If the Company changes this Policy, it will announce the change and its effective date on the site in advance.
    • Announcement date: (TBD)
    • Effective date: (TBD)