Duck Place (hereinafter referred to as the "Company" or "Site") has established the following guidelines for the protection of personal information of data subjects and for the handling of related complaints, in accordance with the Personal Information Protection Act.

Article 1 (Purpose of Processing Personal Information) The Company processes personal information for the purpose of providing services, obtaining the consent of the data subject for purposes other than the intended use. The main purposes of processing include website membership registration and management, provision of goods or services, and handling complaints.

Article 2 (Processing and Retention Period of Personal Information) The Company processes and retains personal information in accordance with the requirements of the law, and retains personal information until the specific purpose is achieved. Specifically, it varies depending on the purposes such as member management, service provision, and handling of complaints.

Article 3 (Rights of Users and Legal Representatives) Data subjects have the right to access, correct, delete, and request suspension of processing of their personal information at any time, and the Company shall promptly take measures in response to such requests.

Article 4 (Items of Personal Information Processed) The Company processes necessary personal information for membership registration, service provision, etc. This includes ID, password, contact information, and may also automatically collect IP addresses, visit records, etc., during the process of using the service.

Article 5 (Destruction of Personal Information) After the retention period of personal information has elapsed or the purpose of processing has been achieved, the relevant information shall be promptly destroyed. Destruction methods include electronic file deletion and physical destruction of paper documents

.

Article 6 (Measures to Ensure Security of Personal Information) The Company implements administrative, technical, and physical measures to ensure the security of personal information. This includes establishing internal management plans, managing access rights, and controlling access to computer rooms.

Article 7 (Installation, Operation, and Rejection of Automatic Collection Devices for Personal Information)

The Company may use cookies to provide personalized services, and users have the right to refuse the installation of cookies. However, refusal of cookies may result in restrictions on some services.

Article 8 (Personal Information Protection Manager) The Company appoints a personal information protection manager responsible for handling complaints and providing remedies related to the processing of personal information.