Skip to content

Privacy Policy

Dongwon Home Food Co., Ltd. (hereinafter referred to as the “Company”) complies with applicable laws and regulations concerning the protection of personal information, including the Personal Information Protection Act, and makes every effort to protect the rights and interests of users.

Pursuant to Article 30 of the Personal Information Protection Act, the Company establishes and discloses this Privacy Policy to inform users of the purposes and methods by which their personal information is processed and the measures taken to protect such information.

The contents of this Privacy Policy are as follows:

1. Purposes of Collecting and Using Personal Information

The Company collects and uses personal information for the following purposes: Personal information collected by the Company will not be used for any purpose other than those specified below. If the purpose of use changes, the Company will obtain prior consent from the user.

  • - Responding to customer inquiries and handling complaints

2. Categories of Personal Information Collected

① Based on the consent of users, the Company processes the following categories of personal information. (Legal basis: Article 15(1)1 of the Personal Information Protection Act regarding the collection and use of personal information)

1) Inquiries and complaints submitted by email
  • - Required: Company name, company address, name, mobile phone number, email address
2) Inquiries and complaints submitted by telephone
  • - Required: Contact number
  • - Optional: Email address, name and address

② The following personal information may be automatically generated and collected during the use of the Company’s services. (Legal basis: Article 15-2(2) of the Protection of Communications Secrets Act)

  • - IP address and date and time of visit

3. Processing and Retention Period of Personal Information

① The Company processes and retains personal information within the retention and use period prescribed by applicable laws and regulations or within the period consented to by the Data Subject at the time the personal information is collected. When personal information is no longer necessary due to the expiration of the retention period, fulfillment of the purpose of processing or other reasons, the Company will destroy such personal information without delay. However, where any of the following circumstances apply, the Company may process and retain the relevant personal information for the specified period.

② The following personal information is retained for the periods required by applicable laws and regulations.

1) Records concerning consumer complaints or dispute resolution
  • - Legal basis: Article 6(3) of the Act on Consumer Protection in Electronic Commerce, Etc. and Article 6(1) of its Enforcement Decree)
  • - Retention period: Three years
2) Records of website visits
  • - Legal basis: Article 15-2(2) of the Protection of Communications Secrets Act regarding the duty of telecommunications service providers to cooperate
  • - Retention period: Three months

4. Provision of Personal Information to Third Parties

① The Company uses users’ personal information only within the scope specified in Section 1, “Purposes of Collecting and Using Personal Information.” In principle, the Company does not use personal information beyond this scope or provide personal information to a third party without the user’s prior consent. However, an exception may apply in the following case:

  • 11) Where the Company has obtained separate consent from the user
  • 21) Where otherwise specifically provided for by applicable laws and regulations
  • 31) Where it is clearly deemed necessary to protect the urgent interests of the life, body, or property of the user or a third party

② Where it is otherwise necessary to provide personal information to a third party, the Company may do so through lawful procedures, including obtaining the user’s consent.

5. Outsourcing of Personal Information Processing

① To facilitate the efficient performance of its business operations, the Company outsources personal information processing as follows:

Contractor Services Entrusted Services Subcontractor Subcontracted
Dongwon Industries Co., Ltd. Website operation and management PCN Co., Ltd. Website maintenance
Bespin Global Inc. Cloud operation and management
SK Shieldus Co., Ltd. Security monitoring,
including firewall monitoring
CJ Logistics Corporation Product delivery - -

② When entering into an outsourcing agreement, the Company specifies in the agreement or other written documents the matters required under Article 26 of the Personal Information Protection Act, including prohibition against processing personal information for purposes other than the performance of the outsourced services, technical and administrative safeguards, restrictions on subcontracting, management and supervision of contractors, liability for damages. The Company also supervises its contractors to ensure that personal information is processed securely.

③ If the scope of the outsourced services or the identity of a contractor changes, the Company will disclose such changes without delay through this Privacy Policy.

6. Rights and Obligations of Data Subjects and Methods of Exercising Such Rights

① A Data Subject may exercise the following rights regarding the protection of personal information at any time:

  • 1) Request access to personal information
  • 2) Request correction of inaccurate or incomplete personal information
  • 3) Request deletion of personal information
  • 4) Request suspension of personal information processing

② The rights specified in Paragraph ① may be exercised by submitting a request to the Company in writing, by email or by fax in accordance with Form No. 11 attached to the Notification on Methods for Processing Personal Information (No. 2020-7). The Company will take the necessary action without delay.

③ Where a Data Subject requests the correction or deletion of inaccurate personal information, the Company will not use or provide the relevant personal information until the requested correction or deletion has been completed.

④ The rights specified in Paragraph ① may be exercised through a legal representative or an authorized agent of the Data Subject. In such cases, a power of attorney prepared in accordance with Form No. 11 attached to the Enforcement Rule of the Personal Information Protection Act must be submitted.

7. Destruction of Personal Information

① When personal information is no longer necessary due to the expiration of the retention period, fulfillment of the purpose of processing or other reasons, the Company will destroy the relevant personal information without delay.

② Where personal information must continue to be retained pursuant to other applicable laws and regulations even after the retention period consented to by the Data Subject has expired or the purpose of processing has been fulfilled, the Company will transfer such personal information to a separate database or store it in a separate location.

③ The procedures and methods for destroying personal information are as follows:

  • 1) Destruction procedure
  • The Company identifies the personal information subject to destruction and destroys it after obtaining approval from the person responsible for the relevant personal information management department.
  • 2) Destruction method
  • Personal information recorded and stored in electronic file format is permanently deleted using methods that prevent the information from being restored or reproduced. Personal information recorded and stored in paper documents is destroyed by shredding or incineration.

8. Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information:

  • 1) Administrative measures: Establishment and implementation of an internal management plan, regular employee training and other relevant measures
  • 2) Technical measures: Management of access rights to personal information processing systems, installation and operation of access control systems, retention of access logs and prevention of their alteration or falsification
  • 3) Physical measures: Designation of server rooms, document storage rooms and other relevant locations as restricted areas, access control for restricted areas

9. Chief Privacy Officer

① The Company has appointed the following Chief Privacy Officer to oversee and assume responsibility for matters concerning the processing of personal information and to handle complaints and provide remedies for damages relating to personal information.

  • ▶ Chief Privacy Officer
  • Name: Kim Seong-pil
  • Position: Head of the Information Security Office
  • Telephone: +82-2-589-6574
  • ※ Calls will be directed to the department responsible for personal information protection.

  • ▶ Department Responsible for Personal Information Protection
  • Department: Information Security Office
  • Telephone: +82-2-589-6574
  • Email: leehy@dongwon.com

② Data Subjects may contact the Chief Privacy Officer or the department responsible for personal information protection regarding any inquiries, complaints or requests for remedies arising from their use of the Company’s services. The Company will respond to and address such inquiries without delay.

10. Remedies for Infringement of Rights

Data Subjects may contact the following institutions for consultation or remedies regarding the infringement of personal information rights:

  • - Personal Information Infringement Report Center: privacy.kisa.or.kr / 118 without an area code
  • - Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
  • - Supreme Prosecutors’ Office: www.spo.go.kr / 1301 without an area code
  • - National Police Agency Cybercrime Reporting System: ecrm.police.go.kr / 182 without an area code

11. Changes to the Privacy Policy

① This Privacy Policy is effective as of september 4, 2026.

② Previous versions of the Privacy Policy can be found below.

TOP