Privacy Policy

PAPER ME (hereinafter referred to as the “Company”) complies with the Personal Information Protection Act and other applicable laws and regulations and processes users’ personal information as described below.

1. Personal Information We Collect and How We Collect It

For orders and delivery
Name, contact information (email address and mobile phone number), shipping address, and order details

For payment
Payment method information. Sensitive payment information, such as full credit card numbers, is processed by the payment gateway provider (PG) and is not stored by the Company.

Automatically collected information
Access logs, cookies, device information, and browser information generated automatically while using the service

Methods of collection
Information entered directly by users during the ordering or inquiry process, and information automatically collected while using the service

2. Purposes of Using Personal Information

The Company uses personal information for the following purposes:

• Providing e-commerce services, including order processing, payment, and delivery, and fulfilling contractual obligations
• Responding to customer inquiries, resolving disputes, and delivering notices
• Preventing fraudulent or unauthorized use and improving the service
• Sending marketing information such as events and special offers, where the user has provided consent

3. Retention and Use Period of Personal Information

In principle, personal information is deleted without delay once the purpose for which it was collected and used has been fulfilled.

However, where retention is required by applicable laws and regulations, records will be retained for the following periods:

• Records relating to contracts or withdrawal of offers: 5 years
  (Act on the Consumer Protection in Electronic Commerce, Etc.)
• Records relating to payments and the supply of goods or services: 5 years
  (Act on the Consumer Protection in Electronic Commerce, Etc.)
• Records relating to consumer complaints or dispute resolution: 3 years
  (Act on the Consumer Protection in Electronic Commerce, Etc.)
• Records relating to labeling and advertising: 6 months
  (Act on the Consumer Protection in Electronic Commerce, Etc.)
• Access logs and similar records: 3 months, where required under applicable communications laws

4. Outsourcing of Personal Information Processing

The Company entrusts certain personal information processing activities to the following service providers in order to provide its services:

Shopify Inc. — Online store hosting and processing of order and customer account data
Cloudflare, Inc. — Serverless processing for order routing and price verification
Payment gateway providers (PG) — Payment processing and fraud prevention
Delivery service providers — Product delivery

5. Overseas Transfer of Personal Information

To provide its services efficiently, the Company may transfer personal information overseas as described below.

Users may refuse overseas transfer of their personal information; however, doing so may restrict access to certain services, including order processing.

Payment gateway processing conducted domestically is not included in the overseas transfer described below.

Shopify Inc.

Contact: privacy@shopify.com

• Countries of transfer: Canada, the United States, and other applicable locations
• Method and timing of transfer: Transmitted electronically through information and communications networks when the service is used
• Information transferred: Name, contact information, shipping address, and order- and payment-related information
• Purpose: Store hosting and order/customer account management
• Retention period: Until termination of the service agreement or expiration of the applicable retention period

Cloudflare, Inc.

Contact: privacy@cloudflare.com

• Countries of transfer: United States and other applicable locations
• Method and timing of transfer: Transmitted electronically when an order creation request is made
• Information transferred: Order items, order amount, and other information necessary for processing
• Purpose: Order routing and price verification
• Retention period: Processed immediately and not separately stored

6. Provision of Personal Information to Third Parties

As a general rule, the Company does not provide users’ personal information to third parties.

Exceptions may apply where the user has given prior consent or where disclosure is required or permitted by applicable law.

7. Destruction of Personal Information

When the retention period expires or the purpose of processing has been fulfilled, personal information will be destroyed without delay.

Electronic files are permanently deleted using methods that prevent recovery, and printed materials are shredded or incinerated.

8. Rights of Users and Legal Representatives

Users may request access to, correction of, deletion of, or suspension of processing of their personal information at any time.

The Company will respond to such requests without delay in accordance with applicable laws and regulations.

Requests may be submitted using the contact information provided below.

9. Measures to Protect Personal Information

The Company implements appropriate administrative and technical safeguards to protect personal information, including:

• Management of access permissions
• Retention and management of access records
• Encrypted transmission using SSL and other security technologies

10. Use of Cookies

The service may use cookies to improve usability and collect statistical information.

Users may configure their browser settings to refuse cookies. However, disabling cookies may limit the use of certain features or services.

11. Personal Information Protection Officer and Contact Information

Personal Information Protection Officer
Cho Young In, Representative
070-4821-4257
paper.me.seoul@gmail.com

Customer Service
Phone: 070-4821-4257
Tue–Sat 12:00–19:50
Email: paper.me.seoul@gmail.com

Seller Information
Business Name: Design Whale (Brand: PAPER ME)
Representative: Cho Young In
Business Registration No.: 105-17-46309
Address: 108 Changdeokgung-gil, Jongno-gu, Seoul, Republic of Korea
Mail-Order Business Registration No.: 2026-Seoul Jongno-1028

12. Notice of Changes

If this Privacy Policy is amended by adding, deleting, or modifying any provision, notice will be provided through the website at least 7 days before the effective date.