Privacy Policy

Article 1 (Purposes of Processing)

WOW3D Co., Ltd. (the “Company”) processes personal information for the purposes below. Information is not used for other purposes, and if the purpose changes the Company will take required steps such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

• Membership & account management: Sign-up and account management, identity verification, abuse prevention, records of misuse or refusal, dispute records, complaint handling, and notices
• Quotes, orders, payment & shipping: 3D printing quotes, order intake and fulfillment, payment and settlement, shipping address management, and production/shipping notices
• Guest orders: Guest quote, order, payment, and shipping; order/shipping contact; disputes, refunds, and after-sales
• Customer support & inquiries: Inquiry intake and replies, consultation records, and statistics for service improvement (when de-identified/anonymized)
• Marketing & advertising: Events, promotions, and new service notices (only with consent); optional personalized ads
• Service improvement & security: Usage analytics, security and fraud prevention, incident response, and legal obligations

Article 2 (Categories of Personal Information)

The Company may collect and use personal information as follows to provide the service.

If required fields are not provided, related services (sign-up, order, inquiry, etc.) may be unavailable. Optional fields may be refused; some convenience features may be limited.

Article 3 (Processing and Retention Period)

The Company retains and uses personal information for the period required by law or until the purpose is achieved, then destroys it without undue delay. Where other laws require retention, data is kept for that period.

• Member data: Until withdrawal. After withdrawal, transaction/claim/dispute records may be kept for 5 years; contract/withdrawal 5 years; payment/supply 5 years; consumer complaint/dispute 3 years; display/ads 6 months under consumer e-commerce laws.
• Orders, payment & shipping: Until the statutory retention period after production and delivery are complete.
• Inquiries: 3 years after the inquiry is closed (may vary by law or company policy).
• Logs / access records: 12 months under the Protection of Communications Secrets Act.
• Instant quote records: Automatically destroyed 1 year after last use. If you saved the quote or placed an order, that quote/order data follows the rules above.
• Site search records: Automatically destroyed 1 year after the search.
• Quote email requests: Automatically destroyed 90 days after the request. If you unsubscribe, reminder emails stop immediately.
• Tax-related: 5 years under the Framework Act on National Taxes and related laws.

Article 4 (Provision to Third Parties)

The Company processes personal information only within Article 1 purposes and does not provide it to third parties without prior consent, except: (1) where required by law; (2) where the user or legal representative consents in advance; (3) where the user cannot express intent, obtaining legal-representative consent is difficult, and disclosure is necessary for the user’s or a third party’s life, body, or property. When processing is entrusted to third parties (carriers, payment processors, cloud/hosting, etc.) for shipping, payment, settlement, or support, the Company clarifies scope, sub-delegation limits, oversight, and liability by contract and discloses this in the privacy policy.

Article 5 (Destruction of Personal Information)

• When: Personal information whose retention period has ended or whose purpose is achieved is destroyed without undue delay, unless other laws require separate retention first.
• How: Electronic files are securely deleted so they cannot be recovered; paper records are shredded or incinerated.

Article 6 (Data Subject Rights and How to Exercise Them)

• Users may request access (Art. 35), correction/deletion (Art. 36), and suspension of processing (Art. 37) under the Personal Information Protection Act. For children under 14, a legal representative may exercise these rights.
• Rights may be exercised in writing, by email, or by fax; the Company will act without undue delay. Applications may follow Company forms and identity checks.
• Correction/deletion requests do not apply to information that must be retained under other laws. Suspension requests may be subject to statutory exceptions (e.g., legal duties, risk to others’ life or body).
• Users must protect their own information. The Company is not liable for issues caused by user negligence or disclosing credentials to third parties.

Article 7 (Privacy Officer)

The Company designates a privacy officer and team to oversee personal information processing and handle user complaints. For access, correction, deletion, suspension, or withdrawal of consent, contact:

Users may also seek remedies via the Personal Information Dispute Mediation Committee, KISA Personal Information Infringement Report Center, the Supreme Prosecutors’ Office Cybercrime Investigation Division, or the National Police Agency Cyber Bureau.

Article 8 (Security Measures)

To secure personal information, the Company takes measures under Article 29 of the Personal Information Protection Act and Article 30 of its Enforcement Decree, including:

• Access control (permission management, passwords, etc.)
• Encryption of important information such as passwords in storage and transit
• Security programs and system checks against hacking and credential leaks
• Minimizing and training staff who handle personal information
• Access control and entry logs for storage/processing areas
• Preventing loss, theft, or damage of records and media

Article 9 (Cookies and Opt-Out)

• The Company may use cookies to provide personalized services. Cookies are small data sent to the user’s device, stored by the browser, and read by the server on later visits.
• Cookie purposes: login/session continuity, convenience (language/settings), usage statistics and improvement, and security/abuse prevention. Cookie data is used only within the Company’s defined scope.
• Users may refuse cookies in browser settings. Doing so may limit stay-signed-in and some personalized features. Path: Browser → Settings/Options → Privacy/Cookies → block cookies or delete all cookies.

Article 10 (Changes to this Policy)

This Privacy Policy applies from January 1, 2025. Content may change with laws, policy, or services. Changes will be posted with the effective date and details at least 7 days in advance (30 days for changes adverse to users). The revised policy takes effect on the announced date.