Byte Privacy Policy
"Byte Corporation" (hereinafter referred to as "the Company") complies with relevant laws and regulations related to the protection of personal information, such as the "Electronic Financial Transactions Act," "Act on Promotion of Information and Communications Network Utilization and Information Protection," "Personal Information Protection Act," and other related laws. The Company is committed to protecting the rights and interests of its users by establishing and adhering to the following privacy policy.
1. Collection and Methods of Personal Information
The Company collects the following personal information from users for smooth service provision:
Collected Personal Information:
-
When registering:
-
ID, password, phone number, profile photo, nickname, service usage records, fraudulent usage records, IP address, device information (OS, screen size, device identification value).
-
-
When verifying identity:
-
Name, phone number, date of birth, gender, CI, DI, mobile carrier, nationality.
-
-
When registering a bank account:
-
Financial institution name, account number, account holder name, automatic transfer withdrawal consent.
-
-
When registering a card:
-
Card number, expiration date, CVC, two digits of the card password, card issuer information.
-
-
When using services:
-
Service usage records (financial transaction history, IP, device information).
-
-
When consulting with customer service:
-
Customer consultation details, identity verification details (name, date of birth, phone number, ID copy with masked resident registration number).
-
Methods of Collecting Personal Information:
-
During the user registration and service use process, when users agree to the collection and directly input information.
-
When receiving information from partner services or organizations.
-
When collecting information through customer service interactions via app, email, phone, fax, etc.
-
When collecting information during the service use process.
-
When users agree to receive marketing information.
2. Purpose of Processing Personal Information
The Company processes users' personal information for the following purposes:
-
User registration, identification, and verification for service use.
-
Individual notifications to users.
-
Customer support related to service use, dispute resolution, and membership termination.
-
Account/card verification and registration required for using Byte services, providing easy payment and transfer services.
-
Providing customized services based on demographic characteristics and service usage records analysis.
-
Verifying credit information through identity verification services.
-
Collecting information necessary for customer verification, contract conclusion, maintenance, execution, management, and improvement.
-
Detecting abnormal transactions for fraud detection purposes.
-
Sending promotional information through app notifications, SMS, and email.
-
Fulfilling obligations stipulated by law.
-
Preventing wrongful actions that may harm users as per law or terms of use.
-
Providing partnership services, updating Byte member information, and increasing limits.
3. Provision of Personal Information to Third Parties
The Company provides personal information to third parties only when users have agreed to it during the service use process. However, the Company may provide personal information without user consent in the following cases:
-
When required by law.
-
When urgently necessary for the protection of life, body, or property of the user or a third party.
-
When required for public health and safety.
-
When requested by investigative agencies following legal procedures and methods.
4. Entrustment of Personal Information
The Company may entrust the processing of personal information to third parties for smooth service provision. The entrusted companies are managed and supervised to ensure compliance with relevant laws. The retention and use period of personal information is until membership withdrawal or the end of the entrustment contract.
Entrusted Companies:
-
Amazon Web Services, Inc.: Information storage.
-
Nice Payments Co., Ltd., NHN KCP Co., Ltd.: Electronic payment services.
-
Korea Credit Bureau Co., Ltd.: Identity verification services.
5. Destruction of Personal Information
The Company promptly destroys personal information once the collection and use purposes are achieved. If there are legal obligations for retention, the information is stored for the required period before destruction.
Destruction Methods:
-
Personal information printed on paper is shredded or incinerated.
-
Electronic files are deleted using technical methods to ensure the records cannot be restored.
6. Users' Rights and Exercise Methods
Users can view or modify their personal information at any time and may withdraw their consent to the collection and use of personal information or request membership cancellation.
Contact Information for Inquiries and Requests:
-
1:1 Inquiry: Byte > Settings > 1:1 Inquiry
-
Customer Service Center: 1877-9735 (Operating hours: 10:00~19:00)
7. Measures to Ensure the Security of Personal Information
The Company implements the following measures to ensure the security of personal information:
-
Minimization and Training of Personal Information Handlers: Only a limited number of employees handle personal information, and all employees are regularly educated on personal information protection and security.
-
Access Control: Access to personal information processing systems is restricted, and unauthorized access from outside is controlled using intrusion detection systems.
-
Storage and Protection of Access Records: Access records are stored and managed for at least two years, with security measures to prevent tampering or loss.
-
Encryption of Personal Information: Important information such as passwords is encrypted for storage and transmission.
-
Technical Measures Against Hacking: Security programs are installed and regularly updated and inspected to prevent personal information leakage and damage caused by hacking or viruses.
8. Personal Information Protection Officer
The Company designates the following person as the Personal Information Protection Officer to handle inquiries and complaints related to personal information.
-
Name: Sang Won Kim
-
Position: Chief Executive Officer
-
Contact: info@hellobyte.co.nz