IPX Corporation (hereinafter referred to as 'IPX' or the 'Company') complies with the personal information protection regulations of relevant laws that the Company must observe, such as the Act on Promotion of Information and Communications Network Utilization and Information Protection (hereinafter the 'Information and Communications Network Act'), the Personal Information Protection Act, the Protection of Communications Secrets Act, and the Telecommunications Business Act. The Company is doing its best to protect the rights and interests of users by establishing a privacy policy in accordance with relevant laws and regulations.
The Company collects the following personal information and collects and uses personal information within the minimum necessary scope.
| Type | Purpose | Items Collected | Retention Period | Legal Basis |
|---|---|---|---|---|
| Mandatory | Receipt of business partnership proposals, verification of applicant's identity, securing a smooth communication channel | Company name (can be omitted for individual applications), contact person's name, contact information, email address, full text of chatbot conversation messages | Destroyed automatically 365 days after the receipt date | Personal Information Protection Act Article 15, Paragraph 1, Item 1 (Collection and Use of Personal Information) |
| Optional | Company/individual website URL, collaboration details, attached materials, reference URL | |||
| Mandatory | Receipt of reports on unfair business practices or unreasonable demands using status | Email address | Destroyed 6 months after the receipt date | Personal Information Protection Act Article 15, Paragraph 1, Item 1 (Collection and Use of Personal Information) |
In addition, the following information may be automatically generated and collected during the service usage process.
The Company collects personal information through user input via web documents on the homepage (https://www.linefriends.com), and in some cases, some information may be collected via electronic documents or email.
However, for the receipt of business partnership proposals, personal information is collected through conversations with the AI chatbot (Partnership Chatbot) embedded on the website. The AI responses are provided for reference purposes only, and the proposal review and final decision are carried out by the person in charge.
The Company processes personal information within the scope notified in "1. Purpose of Collection and Use of Personal Information," and provides personal information to a third party only if it falls under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or special provisions of the law. Otherwise, the Company does not provide the data subject's personal information to a third party.
Occasionally, a partnership proposal may be presented to a company in a special relationship (affiliates, overseas corporations, etc.) with the company proposing the partnership. In this case, we will contact the proposer individually in advance to go through the consent process before transferring the partnership proposal to the respective company.
■ Domestic Outsourcing of Personal Information Processing
The Company outsources personal information processing as follows for smooth business operations, and stipulates necessary matters and manages/supervises the outsourced companies to ensure that personal information is safely managed when signing an outsourcing contract in accordance with relevant laws.
| Outsourced Company | Outsourced Tasks | Retention and Usage Period of Personal Information |
|---|---|---|
| LINE Plus Corporation | System maintenance and operation | Until the purpose of the work is achieved |
■ Overseas Outsourcing of Personal Information Processing and Overseas Transfer Status
For the smooth provision of services, the Company outsources personal information processing to companies located overseas as follows. If you do not want your personal information to be transferred overseas, you can contact the Customer Center (1544-5921) or the department in charge of personal information protection (dl_lfsec@linefriends.com). However, since the Company outsources personal information processing overseas for stable service provision, you may experience difficulties in using the service if you refuse the overseas transfer.
| Overseas Outsourced Company | LY Corporation | Amazon Web Services, Inc. |
|---|---|---|
| Items of Personal Information Outsourced | Information within a technically accessible scope according to system maintenance and operation tasks | Company name, contact person's name, contact information, email address, full text of chatbot conversation messages, website URL, collaboration details, attached materials, reference URL, IP address |
| Destination Country | Japan | Japan, USA, EU |
| Timing and Method of Transfer | Transmitted via network at the time of service use | Transmitted via network at the time of service use |
| Outsourced Tasks | System maintenance and operation | Business partnership proposal chatbot infrastructure operation, AI model inference |
| Retention and Usage Period of Personal Information | Until the purpose of the work is achieved | Until the purpose of the work is achieved |
| Contact Information of Information Management Officer | Tokyo Garden Terrace Kioi-cho Tower, 1-3 Kioi-cho, Chiyoda-ku, Tokyo, 102-8282, Japan | Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA |
| Legal Basis | Personal Information Protection Act Article 28-8, Paragraph 1, Item 3 (Outsourcing/storage of processing for contract execution) | Personal Information Protection Act Article 28-8, Paragraph 1, Item 3 (Outsourcing/storage of processing for contract execution) |
In principle, the user's personal information is destroyed without delay when the purpose of collection and use of personal information is achieved. However, if it is necessary to preserve it in accordance with the provisions of relevant laws such as the Commercial Act and the Act on the Consumer Protection in Electronic Commerce, etc., the Company retains member information for a certain period stipulated in the relevant laws. In this case, the Company uses the kept information only for the purpose of its preservation, and the preservation period is as follows.
Website visit records
In principle, the user's personal information is destroyed without delay when the purpose of collection and use of personal information is achieved. The procedure and method of destruction of personal information by the Company are as follows.
A. Destruction Procedure
B. Destruction Method
Users and legal representatives can inquire about or request the deletion of their registered personal information at any time.
The Company does not use 'cookies' that store and retrieve user usage information from time to time.
The Company takes the following measures to ensure the safety of personal information.
1. Administrative Measures
2. Technical Measures
3. Physical Measures
You may report all complaints related to personal information protection arising from the use of the Company's services to the department in charge of personal information protection.
The Company will provide prompt and sufficient answers to users' reports.
| Chief Privacy Officer (CPO) | ||
|---|---|---|
| Chief Privacy Officer | Name | Oh Hee-gon |
| Affiliation | IPX Corporation | |
| Phone | 1544-5921 | |
| dl_lfsec@linefriends.com | ||
This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of Korea. This Privacy Policy is executed in the Korean language. Even if the Company provides a translation of this Privacy Policy for the user's convenience, the Korean original version shall prevail in the event of any conflict or inconsistency between the Korean original and the translation.
If there are additions, deletions, or modifications to the contents of the current Privacy Policy, we will notify you through the website at least 7 days prior to the revision, and at least 30 days prior for significant changes.
Announcement Date: September 14, 2026
Effective Date: September 21, 2026
IPX Corporation (hereinafter referred to as 'IPX' or 'the Company') hereby informs you of how the video data processed by the Company is used and managed through this Video Data Processing Device Operation and Management Policy.
In accordance with Article 25, Paragraph 1 of the Personal Information Protection Act, the Company installs and operates video data processing devices for the following purposes:
- Facility safety and fire prevention
- Prevention of crime for customer safety
| Classification | Number of Devices | Installation Locations and Shooting Range |
|---|---|---|
| CCTV | 55 | Inside store and storage area |
In order to protect your video data and handle complaints related to personal video data, the Company designates a Personal Video Data Management Supervisor and Persons with Access Authority as follows:
| Classification | Name | Position | Department | Contact |
|---|---|---|---|---|
| Management Supervisor | Hee-gon Oh | CISO | Security | 02-1600-8113 |
| Person with Access Authority | Min-ji Kim | Senior Manager | Hongdae Store | 02-322-9631 |
| Hyun-ju Moon | General Manager | Myeongdong Store | 070-4060-3534 |
| Shooting Time | Retention Period | Storage Location |
|---|---|---|
| 24 Hours | 30 days from the shooting date | Office inside the store |
- Processing Method: Matters regarding requests for use beyond the intended purpose, provision to a third party, destruction, and inspection of personal video data are recorded and managed. Upon expiration of the retention period, the data is permanently deleted using a method that prevents restoration (printed materials are shredded or incinerated).
The Company outsources the installation and management of video data processing devices as follows, and stipulates necessary matters to ensure that personal video data is safely managed during the outsourcing contract in accordance with relevant laws and regulations.
| Contractor | Person in Charge | Contact | Classification (Scope) |
|---|---|---|---|
| S-1 | Seok-ju Lee | 1588-3122 | Hongdae Store, Myeongdong Store |
- Method: You can check the data by contacting the Video Data Management Supervisor or the Person with Access Authority at each store in advance and visiting our facility.
- Location: Office inside the store where you wish to check the personal video data.
If you wish to inspect, confirm the existence of, or delete your personal video data, you may request it from the video data processing device operator at any time. However, this is limited to personal video data in which you are shot, or personal video data clearly necessary for the urgent interest of the data subject's life, body, or property. The Company will take necessary measures without delay when a request for inspection, confirmation of existence, or deletion is made.
The Company safely manages processed video data through encryption measures, etc. In addition, as a managerial measure for the protection of personal video data, the Company grants differential access rights to personal information. To prevent forgery and alteration of personal video data, the Company records and manages the creation date and time of personal video data, the purpose of inspection, the inspector, and the inspection date and time. Furthermore, locking devices are installed for the secure physical storage of personal video data.
If any additions, deletions, or corrections are made to this Video Data Processing Device Operation and Management Policy due to changes in laws, policies, or security technology, the Company will notify the reasons and contents of the change through the Company's website at least 7 days prior to implementation.
Announcement Date: June 15, 2026
Effective Date: June 22, 2026
