Privacy Policy

Last updated: 30 June 2026

DAL FACTORY Co., Ltd. (the “Company,” “we,” “us”) establishes and discloses this Privacy Policy to protect the personal information of data subjects and to handle related grievances promptly, in accordance with the Personal Information Protection Act (PIPA) of the Republic of Korea. This Policy also describes the rights available to customers in the United States and other regions who use K-Yakguk (k-yakguk.com).

BY CREATING AN ACCOUNT, MAKING A PURCHASE, OR OTHERWISE SUBMITTING YOUR PERSONAL INFORMATION TO US, YOU CONSENT TO THE COLLECTION, USE, DISCLOSURE, RETENTION, AND DESTRUCTION OF YOUR PERSONAL INFORMATION IN ACCORDANCE WITH THIS PRIVACY POLICY, TO THE EXTENT PERMITTED BY APPLICABLE LAW.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the purposes below and will not use it for other purposes. If the purpose changes, we will take necessary measures, such as obtaining separate consent under Article 18 of PIPA.

• Membership registration & management — confirming intent to join, identification and authentication, maintaining membership, preventing fraudulent use, verifying legal-guardian consent for children under 14, notices, and grievance handling.
• Provision of goods or services — delivery of goods, provision of services, invoices, content, customized services, identity and age verification, payment and settlement, and debt collection.
• Grievance handling — verifying the complainant, confirming and investigating the matter, contact/notification, and notifying results.

Article 2 (Processing and Retention Period)

We retain personal information within the period required by law or agreed upon at the time of collection. Principal retention periods:

• Membership registration & management: until withdrawal of membership (or until the end of any related investigation or unsettled obligation).
• Provision of goods/services: until completion of supply and payment/settlement.
• Under the Act on Consumer Protection in Electronic Commerce — records on advertising: 6 months; records on contracts or withdrawal of subscription, payment, and supply of goods: 5 years; records on consumer complaints or dispute handling: 3 years.
• Under the Protection of Communications Secrets Act — internet log/access records: 3 months.

Article 3 (Provision to Third Parties)

We do not sell your personal information, and we do not provide it to third parties except with your consent or where required by law (Articles 17 and 18 of PIPA). Sharing of limited data with advertising and analytics partners for online advertising is addressed in Article 11 (Your U.S. Privacy Choices).

Article 4 (Entrustment / Service Providers)

To operate our services, we entrust the processing of personal information to the following, only to the extent necessary:

• I-Web Co., Ltd. (Imweb) — shopping-mall hosting, mobile app, and messaging (SMS / KakaoTalk Alimtalk) services.
• PayPal — payment processing and escrow services.
• PASSTO Co., Ltd. — product delivery services.
• Advertising & analytics partners (e.g. Google, Meta) — website analytics, conversion measurement, and interest-based advertising via cookies and similar technologies.

When entering into entrustment contracts, we specify safeguards under Article 26 of PIPA — restrictions on processing beyond the entrusted purpose, technical and managerial protections, and supervision of the trustee. If the entrusted work or trustee changes, we will disclose it through this Policy without delay.

Article 5 (International Transfers)

The Company is based in the Republic of Korea, and your personal information is processed in Korea. If you access our services from outside Korea, your information is transferred to and processed in Korea, and may be processed by our service providers in other countries. Where required, we take appropriate steps to safeguard such transfers.

Article 6 (Items of Personal Information Processed)

• Membership — required: name, ID, password, email, mobile number, address; optional: areas of interest.
• Orders & delivery — required: name, email, mobile number, shipping address, and payment information (processed by our payment provider); optional: purchase history.
• Collected automatically — IP address, device and browser type, and cookie/usage data.

Article 7 (Destruction of Personal Information)

When personal information becomes unnecessary — through expiry of the retention period or achievement of the purpose — we destroy it without delay. Information that must be preserved under other laws is stored separately. Electronic files are destroyed so they cannot be reproduced, and paper documents are shredded or incinerated.

Article 8 (Measures to Ensure Safety)

• Managerial — internal management plans and regular staff training.
• Technical — access control for processing systems, access-control systems, encryption of unique identifiers, and security programs.
• Physical — access control to server and data storage areas.

No method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security. Please keep your account credentials confidential and notify us promptly of any suspected unauthorized access.

Article 9 (Cookies)

We use cookies and similar technologies to operate the site, remember preferences, analyze usage, and deliver relevant advertising. You can allow or block cookies through your browser settings; blocking some cookies may affect certain features. Where required by law, we honor browser-based opt-out signals such as Global Privacy Control (GPC).

Article 10 (Rights of Data Subjects — Korea)

You may, at any time, request to inspect, correct, delete, or suspend the processing of your personal information. Requests may be made in writing, by phone, or by email, and we will act without delay. If you request correction or deletion of errors, we will not use or provide the information until completed. Requests may be made through a legal representative or agent with a power of attorney under the PIPA Enforcement Rules.

Article 11 (Your U.S. Privacy Choices & State Rights)

We do not sell your personal information for money. However, we share certain information (such as identifiers and online activity) with advertising and analytics partners to measure and deliver interest-based advertising — which may be considered “sharing” for cross-context behavioral advertising under U.S. state laws.

Depending on your state of residence, you may have the right to:

• Know / Access the personal information we collect, use, and disclose about you;
• Delete your personal information, subject to legal exceptions;
• Correct inaccurate personal information;
• Opt out of the sale or sharing of your personal information for targeted or cross-context behavioral advertising; and
• Non-discrimination for exercising these rights.

To opt out of sharing for advertising, or to exercise any right above, email us at junkim@dalfactory.net. We will verify your identity (typically via your name, email, and order details) and respond within the time frame required by applicable law (generally within 45 days). An authorized agent may submit a request with your signed permission.

Article 12 (Children’s Privacy)

Our services are not directed to children. We do not knowingly collect personal information from children under 14 (Korea) or under 16 (United States), and we do not sell or share such information. If you believe a child has provided us personal information, please contact us and we will delete it.

Article 13 (Personal Information Protection Officer)

We have designated a Personal Information Protection Officer to oversee processing and to handle complaints and remedies:

• Officer — Kim Jun-woo, Privacy Officer
• Department — CS Team
• Contact — junkim@dalfactory.net

Article 14 (Remedies for Rights Infringement — Korea)

Data subjects in Korea may contact the following for dispute resolution or consultation:

• Personal Information Dispute Mediation Committee — (+82) 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center — (+82) 118 (privacy.kisa.or.kr)
• Supreme Prosecutors’ Office — (+82) 1301 (www.spo.go.kr)
• National Police Agency — (+82) 182 (ecrm.police.go.kr)

Article 15 (Changes to This Policy)

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest revision, and material changes will be posted on this page or otherwise notified where required by law.

This Privacy Policy is effective as of 30 June 2026.