PruitPruit (Representative: Seunghwan Lee, Service Name: Collable, hereinafter referred to as the "Company") complies with the Personal Information Protection Act and is doing its best to ensure that users' personal information is protected. Accordingly, pursuant to Article 30 of the Personal Information Protection Act, the Company establishes and discloses the following Privacy Policy to guide the procedures and standards for processing personal information and to handle grievances related thereto promptly and smoothly.
This Policy is subject to change according to changes in relevant laws and guidelines and changes in internal operation policies.
The Company collects minimum personal information of users and utilizes it only for the following purposes.
- Provision of member services, personal identification, and identity verification (verification of legal representative consent for children under the age of 14), prevention of fraudulent use by rogue members and unauthorized use, and confirmation of intent to join.
- Fee settlement, purchase, and fee payment according to the provision of "Paid Services."
- Global payment processing and tax processing through payment agencies and Resellers (Merchant of Record).
- Fraud Prevention and securing transaction stability.
- Handling inquiries.
- Recommendation of customized content based on estimation of user interests and propensities, development of new services and products, provision of event information and advertising information, marketing promotions, identification of access frequency, and statistics on service usage.
The Company collects the following personal information for service provision.
1. Sign-up and Management: [Required] Email address, Password, Name, Mobile phone number / [Optional] Profile image, Company name, Job title.
2. When Paying for Paid Services:
- Credit Card Payment: Payment approval information such as card company name, card number (partial), validity period, etc.
- Bank Transfer/Deposit without Bankbook: Bank name, account number, account holder name.
- Tax Invoice Issuance: Business registration number, representative name, business address, business type/item, contact person information.
- Note: When paying through a PG company or Reseller (e.g., Paddle), the Company receives only minimal information required for order fulfillment, such as 'Payment Status' and 'Transaction ID' from the relevant company and does not store sensitive payment information (such as CVC).
3. In the Process of Service Usage: IP address, Cookies, visit date and time, service usage records, bad usage records, device information.
- IP address and device information may be collected for Fraud Detection and license management.
- Collection through homepage sign-up, service usage, payment information entry, and automatic information generation tools.
- The Service is not provided to children under the age of 14. If it is determined that a child under the age of 14 has provided personal information, such information will be destroyed without delay.
- Records on contract or withdrawal of subscription, etc. (Act on the Consumer Protection in Electronic Commerce, Etc.: 5 years)
- Records on payment and supply of goods, etc. (Act on the Consumer Protection in Electronic Commerce, Etc.: 5 years)
- Records on consumer complaints or dispute handling (Act on the Consumer Protection in Electronic Commerce, Etc.: 3 years)
- Records on display/advertising (Act on the Consumer Protection in Electronic Commerce, Etc.: 6 months)
- Records on electronic financial transactions (Electronic Financial Transactions Act: 5 years)
- Service visit records (Protection of Communications Secrets Act: 3 months)
- Electronic file format: Safely deleted using technical methods that cannot be reproduced/restored.
- Personal information printed on paper: Destroyed by shredding or incineration.
- If provision of the user's personal information is necessary, the Company notifies the user in advance of the 'Recipient of personal information, Purpose of provision, Items of personal information provided, and Retention and usage period of the recipient' and obtains separate consent.
- However, providing personal information without the customer's consent is possible if otherwise stipulated by relevant laws and regulations.
The Company transfers (provides) personal information abroad as follows for global payment processing and Tax Compliance.
- Recipient: Paddle.com Market Ltd / Paddle.com Inc
- Transferred Countries: United Kingdom (UK), United States (US)
- Purpose of Provision: Global payment agency (Merchant of Record), Fraud Prevention, Tax reporting and payment.
- Items Provided: Email address, payment information (partial card info, transaction history), IP address, country information.
- Retention and Usage Period: Until membership withdrawal or the retention period required by relevant laws and regulations.
The Company entrusts personal information processing tasks to external specialized companies for service improvement as follows.
- Upon concluding an entrustment contract, the Company specifies in documents such as contracts matters regarding the prohibition of personal information processing other than for the purpose of performing entrusted tasks, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the trustee, and liability for damages, etc., in accordance with Article 26 of the 「Personal Information Protection Act」, and supervises whether the trustee processes personal information safely.
- If the contents of the entrusted task or the trustee change, the Company will disclose it without delay through this Privacy Policy.
[Details of Entrustment]
- Payment
Trustee: Toss Payments
- Mail Sending
Trustee: Google LLC, AWS SES
- Provision of Cloud IT Infrastructure
Trustee: Amazon Web Services (AWS)
※ Retention and usage period of personal information: Until membership withdrawal or termination of the entrustment contract.
※ Notices regarding personal information related to one-time or short-term entrustment will be notified separately in 'Entrustment of Personal Information Processing (One-time)'.
- Users may exercise rights such as requesting access, correction, deletion, and suspension of processing of their personal information to the Company at any time.
- However, requests for access, etc., to personal information regarding children under the age of 14 must be made directly by their legal representative. Users who are minors aged 14 or older may exercise their rights regarding their personal information themselves or through a legal representative.
The Company may collect ‘cookies’ to provide personalized services.
- It is a small amount of information sent by the server used to operate the Company's website to the user's computer browser and may also be stored on the hard disk of the user's PC computer.
- It is used to provide personalized services by identifying the user's tastes and interests.
- It reads the contents of cookies stored on the user's device to maintain the user's preferences and provide optimized services.
- Users have the option to install cookies. Therefore, users may allow all cookies, go through confirmation every time they are saved, or refuse the storage of all cookies by setting options in the web browser.
- However, if the storage of cookies is refused, there may be difficulties in providing the service.
- You may inquire by referring to the contents described in Article 10 (Customer Service for Personal Information).
- Items of Behavioral Data Collected
Service visit history, usage history, purchase and search history, device information, Advertising IDs (ADID/IDFA), and other online activity information.
- Method of Collecting Behavioral Data
Automatically collected and transmitted through analysis tools when a user visits the website.
- Purpose of Collecting Behavioral Data
Statistical analysis for service quality improvement, provision of customized services and benefits, and provision of online customized advertisements.
- Retention/Usage Period and Processing Method Thereafter
Destruction within a maximum of 18 months (destroyed or processed to be unviewable after the retention period).
- Advertising Operators Intending to Collect and Process Behavioral Data
- Method of Collecting Behavioral Data
Automatically collected and transmitted through analysis tools when a user visits the website.
- Items of Behavioral Data Collected and Processed
Service visit history, usage history, access and sign-up paths, device information, Advertising IDs, and other online activity information.
- Retention and Usage Period
Destruction within a maximum of 18 months (destroyed or processed to be unviewable after the retention period).
The Company takes technical, administrative, and physical measures to ensure safety so that personal information is not lost, stolen, leaked, falsified, or damaged in processing customers' personal information.
- Users' personal information is transmitted using encrypted communication channels (SSL/TLS), and important information such as passwords is stored in encrypted form.
- Measures are taken to prevent damage caused by computer viruses using antivirus software.
- Security is strictly maintained using vulnerability analysis, etc., in preparation for external intrusions such as hacking.
- Access rights to personal information are restricted to a minimum number of personnel. In addition, information leakage is prevented in advance through security pledges and regular training and campaigns for relevant employees.
- An internal management plan for the safe processing of personal information has been established, and internal procedures are in place to monitor implementation and employee compliance.
- Access control to computer rooms, etc.
- Chief Privacy Officer (CPO): Seunghwan Lee
- Department in Charge: Development Team
- Inquiry Email: help@collable.co
- Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972)
- KISA Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
- Supreme Prosecutors' Office Cyber Investigation Division (www.spo.go.kr / 1301)
- Korean National Police Agency Cyber Investigation Bureau (ecrm.cyber.go.kr / 182)
This Privacy Policy shall be effective from March 1, 2026.