Boram Group will be withcustomers at every precious moment.

Personal Information Handling Policies

General Rules

In accordance with the Privacy Act and the Act on Promotion of Information and Communications Network Utilization, Boram Group Homepage has established the following policies to protect the users’ personal information and rights and to conveniently handle their issues regarding personal information. Boram Group Homepage will notify you through the website announcement (or individual notice) when the privacy policy is revised.

Article 1 Purpose of the processing of personal information

Boram Group Homepage processes personal information for the following purposes:
Personal information processed shall not be used for any other purpose than the following, and prior consent will be sought if the purpose of use is changed.

  • Conclusion of contract, performance of contract, and provision of goods and services to customers

    Personal information is processed in regards of the service provision, such as application for subscription, service contract settlement, name change, payment management, notification of payment status by individual, notification of payment status, implementation of the contract, satisfaction survey, statistics on service use, event information, and delivery of goods.

  • Handling of civil service

    Personal information is processed for the purpose of verifying the identity of the applicant, checking the details of the complaint, and notifying of the contact, notification, and processing results for investigation of the facts.

  • Information change and promotion activities

    Personal information is processed for the purpose of updating the information in possession, guiding and using product services, research and development in market research and product services, promotion activities, and sending (delivery) gifts.

  • Subscription and management the homepage

    The company processes personal information for the purpose of verifying the client's intention to sign up, identifying, certifying, preventing service use, and notifying various notices and notices.

Article 2 The processing and retention period of personal information

Boram Group Homepage holds and retains personal information within the period of use or personal information that is agreed upon in the collection of personal information from the information subject, in accordance with the Act.

  • Items collected for personal information collection

    ※ How to collect personal information: Apply for contracts for online add-on products on the website, online subscription counseling, customer's voice, employee bulletin board, etc.

  • Web membership
    ·Required items: User ID, name, date of birth, gender, mobile phone, email
    Free consultation application
    ·Required items: Name, mobile phone
    Online counseling
    ·Required items: Name, mobile phone, e-mail
    Review of events
    ·Required items: Name, mobile phone, e-mail, gender
    Subsidiary product subscription
    ·Required items: Name, date of birth, sex, mobile phone, emergency contact, email, address (home address or work address), relationship (parent, spouse, child, sibling, relatives, acquaintances), subscription route, payment record, CMS information (personal information: name, date of birth, gender, financial institution name, account number or card number, card validity period), Korean (foreigner)
    ·Optional items: Additional information such as general phone calls
    Funeral Event Illegal Transactions Report Center
    ·Required items: Name, mobile phone, e-mail
    Obituary information service
    ·Required items: Name, gender, deathbed, date of birth, funeral hall, burial site, resident status, and family information (relationship, name, mobile phone)
    Invitation letter-making service
    ·Required items: Name, mobile phone, gender, and family relationships
    ·Optional: Parent's name, wedding picture
    Boram Mall Service
    ·Required items: Access number, customer number, name, date of birth, mobile phone
    Job application
    ·Required items: Photo, name (Korea, Chinese, English), date of birth, mobile number, house number, age, email, address, hobby, specialty, field of application, academic background (school name and address, entrance/graduation year and month, degree, major, GPA), experience (company name, duties, work period (year, month, and date), position, final salary, cause of leaving), personal statement (work experience), disability, military, past medical history, health, preferred salary, referrals, relationship, color blindness
    ·Optional: Military service (by military service, disease, rank, service period), qualification/license (qualification type, acquisition date, expiration date, issuing agency, license number), O/A capacity (Excel, word, power point)
    Access information on the website and service use information
    The following personal information items can be automatically generated and collected during the Internet service use process: - Cookie, connection log, connection IP information.
    • * Failure to agree to the required items may limit the use of the above service and may not restrict the use of the service due to the reason that the user has not agreed to the option.
  • Personal information handling and retention period

    The member information is kept for a certain period of time in accordance with the provisions of the relevant statutes (Commercial Law, the National Tax Act, the Corporate Tax Act, the Act on the Protection of Consumers in Electronic Commerce, etc.).

    - Records on contract or withdrawal of subscription: 5 years from the end of transaction (Act on Consumer Protection in e-commerce, etc.)
    - Records on payment and supply of goods: 5 years from the end of the transaction (Act on the Protection of Consumers in Electronic Commerce, etc.
    - Records of consumer complaints or dispute handling: 3 years from the end of the transaction (Act on Consumer Protection in e-Commerce, etc.)
    - Reasons for service (coordination, wedding, cruise) guidance and use: 5 years from the end of the transaction (Act on Consumer Protection in Electronic Commerce, etc.)
Article 3 Matters Concerning the Provision of Personal Information to Third Parties

Boram Group Homepage provides personal information to a third party only if it is subject to Article 17 and 18 of the Privacy Act, including the consent of the information subject and special provisions of the law.
Boram Group Homepage provides personal information to third parties as follows:

  • Recipient provided

    Boram Sangjo Development Co., Ltd., Boram Sangjo Life Co., Ltd., Boram Sangjo Anycall Co., Ltd., Boram Sangjo People Co., Ltd., Boram Information Industry Co., Boram Carnegie Co., Ltd. ETBS Co., Ltd., Korea Mutual Aid Association, Korea Financial Telecommunications and Clearings Institute, Ucess Partners Co., Ltd., and I-Heart Co., Ltd.

    Personal information handling request for service implementation consignment of personal information handling consignment is made only through the concerned company to provide the requested service. The above providers will also be subject to change in their corporate name.

  • Evidence and purpose of delivery

    Information service provision, purchase and fee payment item delivery or claim sheet, personal identification, prevention of unauthorized use of the member's service, confirmation of the intention of subscription, delivery of notice, development of new service (product) etc. in the event of payment of contents, payment of purchase and payment service, maintenance of customer service, etc. reaction notification, text notification, information security management, etc.

  • Personal information items provided

    Name (name), gender, date of birth, mobile phone (phone number), address, email, member (employee) number, account number (or card number), financial institution name, commodity contract information (contract name, payment date, total payment amount, balance, etc.) and commodity settlement information

  • Retention and use period

    From the date of consent to the provision of personal information until the end of the contract (however, in case of civil service handling and mandatory fulfillment under the Act, they are kept, used, used, and stored)

    ※The recipients of the above shall apply the same if the legal name of the respective corporation is changed. Personal information shall be retained and used from the date provided until the consent is withdrawn or the purpose provided is fulfilled. Upon withdrawal of the agreement or achievement of the purpose provided, the agreement shall be retained and used only to the extent necessary for accident investigation, dispute settlement, civil action and fulfillment of the obligations under the Act related to the use purpose listed above.

    ※(Korea Mutual Aid Association) has the right to refuse consent for the provision of personal information above. However, even if you do not agree, we inform you that information can be provided for the protection of consumer rights (consumption, insurance coverage, and maintenance) pursuant to Article 27 of the act on installment transactions.

Article 4 Matters Concerning Consignment of Personal Information Processing

In order to facilitate the handling of personal information, Boram Group Homepage consigns the following personal information processing activities:

Consigned company: Boram Sangjo Development Corporation
Contents of Consignment: Contract for Consignment of Center and Customer Care
Retention and Utilization Period: Until the end of consignment contract
Consigned company: Boram Information Industry Co., Ltd.
Contents of consignment: Development and maintenance of computer system, personal information processing, etc.
Retention and use period: From the date of consent to the provision of personal information to the end of the contract up to five years (however, in case of civil service handling and mandatory fulfillment under the Act, only hold, use, and separately store)
Consigned company: Nice Investors Service Co., Ltd.
Contents of consignment: Simple authentication (name, date of birth), mobile phone identification (CI, DI generated)
Retention and use period: From the date of agreement to the provision of personal information to the end of the contract up to five years (however, in case of civil service handling, execution of statutory duties, only keep, use, and separate storage)
Consigned company: Korea Mutual Aid Association
Contents of consignment: Deduction of members with compensation payments
Retention and use period: From the date of consent to the provision of personal information to the end of the contract up to five years (however, in case of civil service handling and mandatory fulfillment under the Act, only hold, use, and separately store)
Consigned company: Ucess Partners Corporation
Contents of consignment: Contract for consignment of call center and customer management work
Retention and use period: From the date of consent to the provision of personal information to the end of the contract up to five years (however, in case of civil service handling and mandatory fulfillment under the Act, only hold, use, and separately store)
Consigned company: I-Heart Corporation
Contents of consignment: SMS, LMS, MMS
Retention and use period: From the date of consent to the provision of personal information to the end of the contract up to five years (however, in case of civil service handling and mandatory fulfillment under the Act, only hold, use, and separately store)
Consigned company: Financial Telecommunications & Clearings Institute, a divisional corporation
Details of consignment operation: CMS withdrawal transfer
Retention and use period: From the date of consent to the provision of personal information to the end of the contract up to five years (However, in case of civil service handling and mandatory fulfillment under the Act, they are only to be held, used, and separately stored)

The company clearly stipulates compliance with the laws related to personal information protection, prohibition of providing personal information to third parties, and liability for consignment contracts, and keeps the details of the contract in writing and electronic storage. The above Consigned companys will also apply to changes in the corporate name of the entity.
Article 5 Rights, Duties and Methods of Exercise of Information Entities

Information holder (the legal representative for those under 14 years of age) may exercise the following personal information protection rights on the Boram Group homepage at any time:

- Require access to personal information
- Correct errors, etc.
- Requires deletion of personal information on documents with expired retention periods
- Requires stop processing
The rights can be exercised through written, e-mail, or FAX in accordance with Annex 8 of the Enforcement Rules of the Privacy Act, and Boram Group Homepage will take action without delay.
If the information subject requires correction or deletion of personal information errors, etc., Boram Group Homepage does not use or provide such personal information until correction or deletion is completed.
Rights events can be performed through agents such as legal representatives of the information subject or those who have been delegated. In this case, you shall submit a letter of attorney according to the form No. 11 of the Enforcement Rules of
Requests for access to personal information and suspension of processing may limit the rights of the information subject to Article 35 para 5 and Article 37 para 2 of the Personal Information Protection Act.
The request for correction and deletion of personal information shall not be required if the personal information is specified for collection under other statutes.
Check whether the person who made the request is the person or a legitimate agent, such as the request for access, correction or deletion, and suspension of processing.
Article 6 Personal Information Items Handled

Boram Group Homepage handles the following personal information items:

Collection information: name, date of birth, gender, deducted member number, voice DATA, mobile phone authentication Purpose of collection: To be used for identification procedures according to service use, etc.
Collection information : Address (home, workplace), contact (cell phone, home, workplace), e-mail Purpose of collection: To send a contract, deliver a notice, confirm your intention, handle complaints, etc.
Collection information: Financial transaction information such as account (card) number Purpose of collection: Automatic transfer of paid amount (CMS, credit card, etc.)

※The above information includes information that was changed by modifying information as well as information at the time of subscription.
Article 7 Procedures and Methods for the Destruction of Personal Information

Boram Group's homepage destroys the personal information without delay when the personal information becomes unnecessary, such as the expiration of the period of personal information retention and the purpose of processing.

In the event that personal information is kept under other statutes despite the expiration of the period of personal information retention agreed by the information subject or the processing purpose has been achieved, the personal information (or personal information file) shall be transferred to a separate database (DB) or kept in a different location.

Procedure and method for personal information destruction are as follows.

  • Destruction procedures
    The information entered by the user is transferred to a separate DB after attaining the purpose (separate documents in case of paper) and is stored for a certain period of time in accordance with the internal policy and other relevant statutes and destroyed immediately.
    In this case, personal information transferred to the DB is not used for any other purpose other than by law.
  • Destruction period
    The personal information of the users shall be destroyed within five days of the end of the period of their personal information, and within five days of the date when the personal information is deemed unnecessary, such as the purpose of personal information handling, the abolition of the service or the termination of the project.
  • Destruction methods
    Information in the form of electronic files uses a technical method that prevents recording from replaying.
    Personal information printed on paper is destroyed by grinding or incineration.
Article 8 Measures to Secure Personal Information Safety

In accordance with Article 29 of the Personal Information Protection Act, Boram Group's website takes the following technical, administrative and physical actions to ensure the safety of personal information:

  • Minimize and train employees handling personal information
    We implement measures to manage personal information by designating employees who handle personal information and minimizing them by limiting the number of people in charge.
  • Establish and implement an internal management plan
    The company has established and implemented an internal management plan for safe personal information handling
  • Technical measures against hacking, etc.
    To prevent leakage and damage of personal information by hacking or computer viruses, the company installs security programs, performs periodic updates and inspections, installs systems in areas with restricted access from outside, and monitors and blocks them technically and physically.
  • Storage of access records and prevention of forgery
    We store and manage records that have been connected to the personal information processing system for at least six months. We use the security function to prevent falsification, theft, and loss of connection records.
  • Restrict access to personal information
    The company takes necessary measures to control access to personal information through granting, changing, or removing access to the database system that processes personal information, and uses the intrusion prevention system to control unauthorized access from outside.
  • Use of lock for document security
    In order to prevent leakage and damage of personal information by hacking or computer viruses, the company installs security programs, performs periodic updates and inspections, installs systems in areas with restricted access from outside, and monitors and blocks them technically and physically.
  • Restrict access to unauthorized personnel
    The access control procedures are established and operated for the physical storage location where personal information is stored.
Article 9 Methods to Relieve Infringement of Rights and Interests

Personal information entities can apply for dispute resolution or consultation with the Personal Information Dispute Settlement Committee, the Korea Internet & Security Agency, and the Personal Information Violation Reporting Center to receive relief from personal information infringement.

Personal Information Infringement Reporting Center: (Without area code) 118 (privacy.kisa.or.kr)
Personal Information Dispute Settlement Committee: 1833-6972 (kopico.go.kr)
Cyber Investigation Division of the Supreme Public Prosecutor's Office: 1301 (without area code) (www.spo.go.kr)
National Police Agency Cyber Security Agency: (Without area code) 182 (cyberbureau.police.go.kr)
Article 10 Contacts of the Director and Personnel of Personal Information Protection

Boram Group's website is responsible for the handling of personal information, and designated the person in charge of personal information protection as shown below for handling complaints and damage relief of information subjects related to personal information processing.

  • Responsible for personal information protection of Boram Group's homepage
    Member: Boram Sangjo Development Co., Ltd.
    Name / Title: CEO Oh Joon Oh
    Email: boram7979@boram.com
    Phone: 1588-7979, Fax: 02-779-7697
    Address: 73rd floor Sejong-daero, Jung-gu, Seoul, 24th floor to 27th floor
  • Personal Information Protection Officer
    Department name: Computing team
    Name/Decision: Director Jin-bo Choi

Information subject can contact the personal information protection manager and the department responsible for all personal information protection related inquiries, complaints and damage relief that occurred while using the service of Boram Group's website. Boram Group's homepage will answer and process inquiries from the information subject without delay.

Article 11 Personal Information Access Claim

In accordance with the Privacy Act, the information subject can request the following departments to view personal information: Boram Group's homepage will make efforts to expedite requests for access to personal information of the information subject.

- See the topic "Receiving and processing requests for personal information access" (www.privacy.go.kr) > Personal information file details.

Information subject protects personal information in addition to the above reading and processing department.

- Personal information can also be requested through the Personal Information Protection Comprehensive Support Portal (www.privacy.go.kr).
Article 12 Protection of the Personal Information of Children
Boram Group Homepage takes protective measures to prevent children and legal representatives from being disadvantaged by personal information provided by children under the age of 14 (hereinafter referred to as 'children').
Boram Group Homepage requires the consent of the legal representative of the child in the event of the following actions regarding the personal information of the child. In case of collecting personal information for children to sign up for services, or using or providing personal information of movements beyond the scope notified at the time of service sign-up, or the scope specified in the Terms of Service, to third parties;
The person who receives the child's personal information uses the personal information for purposes other than those provided or provides it to a third party;
Boram Group Homepage may require the minimum necessary information, such as the name and contact number of the legal representative, to obtain the consent of the legal representative.
In such a case, the purpose of collecting, using, or providing personal information and obtaining consent from legal representatives shall be notified to the child in plain terms that the child can easily understand.
The personal information of the legal representative collected for the consent of the legal representative shall not be used or provided to a third party for purposes other than verifying the consent of the legal representative.
Article 13 Cookie Operation (According to the Installation and Operation of Automatic Collection Devices and their Rejection)
Cookie Operation (According to Installation and Operation of Automatic Collection Devices and their Rejection)
Boram Group Homepage uses 'cookies' in some services. A cookie is a package of data that the Web server sends to the subject computer, which is stored on the main computer's memory or on a hard disk.
Boram Group Homepage uses cookies to find information about the subject's name, ID, email, and etc., which can be used to identify the user characteristics of visiting the Boram Sangjo website. It can also be used for targeted advertising and events.
Specify whether to allow cookies to be installed
- For Internet Explorer : Tools menu at the top of the web browser > Internet options > Privacy > settings
- Chrome: Settings menu on the right side of the web browser > Display advanced settings at the bottom of the screen > Set personal information button > Cookies
Boram Group Homepage may require the minimum necessary information, such as the name and contact number of the legal representative, to obtain the consent of the legal representative. In such a case, the purpose of personal information collection, use or provision, and the purpose of obtaining consent from legal representatives shall be notified to the child in plain terms that the child can easily understand.
The personal information of the legal representative collected for the consent of the legal representative shall not be used or provided to a third party for purposes other than verifying the consent of the legal representative.
14. Changing the Privacy Policy
- This policy will take effect on 16 December 2019.