DreamCraft Privacy Policy

DreamCraft complies with the Personal Information Protection Act and related laws to protect the rights and freedom of data subjects. We process personal information lawfully and manage it safely.

In accordance with Article 30 of the Personal Information Protection Act, we establish and disclose the following privacy policy to guide data subjects on procedures and standards related to personal information processing and to quickly and smoothly handle any complaints related to personal information.

Purpose of Processing Personal Information

DreamCraft processes personal information for the following purposes.

The personal information being processed will not be used for purposes other than those stated, and if the purpose of use changes, we will obtain separate consent according to Article 18 of the Personal Information Protection Act and take necessary measures.

1. Membership Registration and Management

We process personal information to confirm membership intention, identify members, manage members, and prevent fraudulent use of services.

2. Provision of Goods or Services

We process personal information for purposes such as providing services, sending contracts and invoices, verifying identity and age, and processing payments.

Processing and Retention Period of Personal Information

DreamCraft, in principle, destroys personal information without delay once the purpose of processing is achieved.

However, the following information is retained for the specified period for the following reasons.

1. Membership Registration and Management: Until the withdrawal of membership from the operator/organization's website. However, if any of the following reasons apply, until the reason is resolved.

1) If there is an ongoing investigation due to a violation of relevant laws, until the investigation is completed.

2) If there are outstanding obligations or debts related to the use of the website, until the obligations or debts are settled.

2. Provision of Goods or Services: Records related to the supply of goods or services or cancellation of a contract.

1) Records related to contracts or cancellations: 5 years

2) Records related to payments and supply of goods: 5 years

3) Records related to customer complaints or dispute resolution: 3 years

Personal Information Items Processed

DreamCraft processes the following personal information items:

1. Membership Registration and Management: Required items: Email

Provision of Personal Information to Third Parties

DreamCraft does not sell personal information. We may provide limited personal information to third-party service providers where necessary for payment processing, refunds, tax calculation, customer support, AI-assisted features, hosting, and legal compliance.

Approved merchant of record / payment processing provider: an approved MoR or payment processing provider and related group entities. Purpose: payment processing, order and subscription management, tax calculation, payment confirmation, refunds, settlement, and payment-related support. Data: email, order/payment identifiers, payment status information. Retention: according to applicable law and the provider privacy policy.

Destruction of Personal Information

1) DreamCraft, in principle, destroys personal information without delay once the purpose of processing is achieved.

2) If the retention period of personal information agreed by the data subject has expired or the purpose of processing has been achieved, the personal information is moved to a separate database (DB) or stored in a different location and preserved under other applicable laws.

3) The procedure and method of destroying personal information are as follows:

1. Destruction Procedure: Personal information selected for destruction is approved by DreamCraft's personal information protection officer and then destroyed.

2. Destruction Method: Personal information recorded or stored in electronic form is destroyed using technical methods that make it impossible to recover the records. Personal information recorded or stored in paper form is shredded or incinerated.

Measures for the Protection of Inactive Users' Personal Information

1) Users who have not used the service for one year will be converted to inactive accounts and their personal information will be stored separately. The separated personal information will be destroyed without delay after one year.

2) DreamCraft informs inactive users 30 days in advance of the scheduled separation of their personal information via email or SMS.

Approved merchant of record / payment processing provider - transfer countries: countries where the approved MoR or payment processing provider operates, such as the United States and the United Kingdom / transfer items: email, order/payment identifiers, payment status information / transfer purpose: payment processing, order and subscription management, tax calculation, payment confirmation, refunds, and settlement / timing and method: network transfer during payment processing.

Rights of Data Subjects and Legal Representatives

As the subject of personal information, data subjects have the following rights:

1. Request to view personal information
2. Request correction if there is an error
3. Request deletion
4. Request the suspension of processing
5. Request withdrawal of consent

Ensuring the Security of Personal Information

DreamCraft takes the following measures to ensure the security of personal information:

1. Administrative Measures: Establishment and implementation of an internal management plan, regular employee training to raise awareness of personal information protection.
2. Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, and use of intrusion prevention devices to protect personal information securely.
3. Physical Measures: Storing documents containing personal information and auxiliary storage media in secure locations with lock devices.

Installation, Operation, and Rejection of Automated Personal Information Collection Devices

DreamCraft uses cookies to provide personalized services to users. Cookies are small text files sent to the user's browser by the server used to operate the website and stored on the user's computer hard drive. Users have the right to choose whether to accept cookies by configuring their web browser settings to allow all cookies, reject all cookies, or notify users whenever a cookie is stored.

Criteria for Additional Use and Provision

DreamCraft may use or provide personal information without the consent of the data subject for additional purposes according to Article 15(3) and Article 17(4) of the Personal Information Protection Act and Article 14-2 of the Enforcement Decree. The following conditions will be considered:

1. Item: Email
2. Purpose of Use/Provision: Additional service-related announcements
3. Retention and Use Period: The customer's personal information is destroyed immediately upon request for service withdrawal or account deletion.

Personal Information Protection Officer

DreamCraft designates the following personal information protection officer to handle complaints and damage relief related to personal information protection.

Personal Information Protection Officer

Name: Mi-Kyung Seol

Position: Personal Information Protection Officer

Contact: 070-8095-9262

Email: smkmk2351@gmail.com

??Connected to the department responsible for personal information protection.

Remedies for Infringement of Rights

If you believe your rights related to personal information have been infringed, you have the right to seek remedies. Depending on your country of residence, you may contact the relevant data protection authority or privacy regulatory body for assistance. Below are examples of global authorities you can reach out to:

1. European Union: European Data Protection Board (EDPB) - https://edpb.europa.eu
2. United States: Federal Trade Commission (FTC) - https://www.ftc.gov
3. Canada: Office of the Privacy Commissioner of Canada - https://www.priv.gc.ca
4. Australia: Office of the Australian Information Commissioner (OAIC) - https://www.oaic.gov.au
5. United Kingdom: Information Commissioner's Office (ICO) - https://ico.org.uk
For other regions or countries, please consult your local data protection authority or legal advisor.

Changes to the Privacy Policy

This privacy policy will be effective as of April 29, 2024.

You can view the previous privacy policy at the link below.

No changes recorded.