Privacy Policy

SHUSHU CHERRY (hereinafter “Company”) establishes and discloses this Privacy Policy in accordance with Article 30 of the 「Personal Information Protection Act」 to protect the personal information of data subjects and to handle related grievances promptly and smoothly.

1. Purpose of Processing Personal Information
The Company processes personal information for the following purposes and will not use it for any purpose other than those specified. If the purpose of processing changes, we will obtain separate consent in accordance with relevant laws.

• Membership Registration and Management
  User identification/authentication, maintenance/management of membership, prevention of unauthorized use, delivery of notices, and grievance handling.

• Provision of Goods or Services
  Product delivery, payment and settlement, contract fulfillment, content provision, identity/age verification, etc.

• Grievance Handling
  Verification of the complainant, verification of grievance details, and notification of processing results.

2. Processing and Retention Period of Personal Information
The Company processes and retains personal information during the retention period stipulated by law or the period agreed upon by the data subject.

• Membership Management
  Until membership withdrawal
  (unless an investigation or dispute is ongoing).

• Provision of Goods/Services
  Until supply and payment/settlement are completed.
  (Retention Periods by Law)

  • Records of display/advertisement: 6 months

  • Records of contracts, payments, and supply: 5 years

  • Records of consumer complaints/disputes: 3 years

  • Communication confirmation data: Up to 1 year

  • Access logs, etc.: 3 months

3. Entrustment of Personal Information Processing
To provide smooth services, The Company entrusts personal information processing tasks as follows:

• Imweb: Shopping mall hosting, system provision, notification/SMS delivery

• INIpay (PG): Payment and escrow services

• Logen Logistics: Product delivery

※ Re-entrustment: Imweb → Infobip (Ltd.), LunaSoft

(Sending SMS and KakaoTalk Notification/FriendTalk)

The Company specifies matters related to personal information protection in the entrustment contract and manages and supervises the entrusted parties.

4. Rights of Data Subjects
Data subjects may exercise the following rights at any time

• Request to access personal information

• Request for correction/deletion

• Request for suspension of processing

Rights may be exercised in writing, via email, etc., and the Company shall take action without delay.

5. Personal Information Items Processed

• Membership Registration
  Required: Name, ID, Password, Email
  Optional: Phone number

• Order and Payment
  Required: Name, Address, Phone number, Email, Payment information
  Optional: Purchase history

6. Destruction of Personal Information Personal information shall be destroyed without delay upon the expiration of the retention period or the achievement of the processing purpose.

• Electronic files: Deleted in a way that cannot be recovered.

• Paper documents: Shredded or incinerated.

7. Measures for Ensuring the Security of Personal Information

The Company implements the following measures to protect personal information.

• Administrative measures: Establishment of an internal management plan, employee training.

• Technical measures: Management of access rights, encryption, installation of security programs.

• Physical measures: Control of access to data storage areas.

8. Use of Cookies

The Company uses cookies to provide customized services.
Users may refuse the storage of cookies through their browser settings, but please note that this may limit the use of some services.

9. Personal Information Protection Officer 

• Personal Information Protection Officer
  Name: Kim Da-seul / Position: CEO
  Email: shushucherry.official@gmail.com

• Personal Information Protection Department
  Department: SHUSHU CHERRY CS Team
  Email: shushucherry@naver.com
  
  

10. Remedies for Infringement of Rights

• Personal Information Dispute Mediation Committee: 1833-6972

• Personal Information Infringement Reporting Center: 118

• Supreme Prosecutors' Office: 1301

• National Police Agency: 182

11. Effective Date
This Privacy Policy shall be effective from December 12, 2025.