Privacy Policy

Privacy Policy

DPromotion Inc. (hereinafter referred to as the “Company”) places great importance on the protection of users’ personal information and makes every effort to ensure that users’ personal information is protected when they use the Company’s DPromotion service (hereinafter referred to as the “Service”).

Article 1: Consent to the Collection of Personal Information

The company provides a procedure where users can select “Agree” or “Disagree” regarding the Privacy Policy or Terms of Service. If a user clicks the “Agree” button, it is considered as consent to the collection of personal information.

Article 2: Collected Personal Information and Purpose of Use

Personal Information refers to information related to a living individual that can identify the person based on details such as company name (full name) and contact person’s name.
Essential information is collected to ensure the core functionality of the service. If a user chooses not to provide this information, access to the service may be restricted. Additional information is collected to provide enhanced and personalized services. However, users may still use the service even if they choose not to provide this additional information.
The company processes personal information only for the purposes specified below and does not use it for any other purposes. Personal information is processed and used only within the retention period agreed upon by the user or permitted by law.

1. Collected Personal Information Items
Collection
Timing
Purpose of Collection Collected Personal Information Items Retention
Period
During Service Sign-up Registration User authentication, service provision, and account management [Individual Members]
(Required) ID, password, email, name, mobile phone number
(Optional) Address

[Business Members]
(Required) ID, password, email, name, mobile phone number, business registration number, company name, representative name, copy of business registration certificate
(Optional) Company phone number, address
Personal information is retained until membership withdrawal or until the legally required retention period expires, whichever is longer.
When Making a Payment Payment processing, billing, and transaction verification (Required) ID, email, name, mobile phone number, payment method, payment date Personal information is retained until the legally required retention period expires, in accordance with applicable laws and regulations.
When Submitting a 1:1 Inquiry Customer support, inquiry response, and issue resolution (Required) ID, email, name, mobile phone number Personal information is retained until the legally required retention period expires, in accordance with applicable laws and regulations.
During Assisted Setup Configuration support and service customization (Required) Email, name, mobile phone number Personal information is retained until the legally required retention period expires, in accordance with applicable laws and regulations.
When Submitting a Campaign Production Inquiry Service consultation and project management (Required) Email, name, mobile phone number, inquiry subject, inquiry details
(Optional) Company name, domain, industry, budget, project scope, preferred completion date, file attachments
Personal information is retained until the legally required retention period expires, in accordance with applicable laws and regulations.
When Submitting a Partnership Inquiry Partnership evaluation and business communication "Required: Name, mobile phone number, email, subject, details
Optional: Company name, partnership type, partner company details, file attachments"
Personal information is retained until the legally required retention period expires, in accordance with applicable laws and regulations.
When Accessing the Website Security monitoring, fraud prevention, and service analytics Service usage and suspension records, Access logs, Cookies (Cookie data), Access IP information, Service suspension records Personal information is retained until membership withdrawal or until the legally required retention period expires, whichever is longer.

※ During the service usage process, certain data—including service usage records, visit history, records of inappropriate use, cookies, and access device information—may be automatically generated, collected, and utilized for security, service improvement, and compliance purposes.

Article 3: Methods of Collecting Personal Information

The company collects users' personal information through the following methods:
1. Collection via the website
2. Collection through email, phone, fax, written application forms, or in-person interactions necessary for service provision.
3. Collection of automatically generated data through log analysis programs and cookies (Cookie-based information collection)

※ During surveys or promotional events within the service, users may be selectively requested to provide personal information for statistical analysis or prize distribution. However, the company does not collect sensitive personal information that may infringe on users' fundamental rights, such as race, ethnicity, ideology, beliefs, place of origin, political orientation, criminal records, health status, or sexual life. If such data must be collected due to unavoidable circumstances, the company will obtain prior user consent. Additionally, any collected information will only be used for the purpose explicitly disclosed to users and will not be used for any other purpose or disclosed externally. The company does not allow membership registration for children under the age of 14, as it requires consent from a legal guardian.

Article 4: Operation of Cookies (Cookie Policy)

The company uses cookies to identify users’ web browsers for providing personalized services such as service applications, personal information updates, and service verification. Cookies do not contain any personally identifiable information. Authentication cookies are only valid while a user is logged in, and the company’s web server can only recognize individual users when connected to server-stored data. Once a user logs out, the cookies are immediately deleted.


- Users have the option to manage cookie settings. By adjusting their web browser settings, users can allow all cookies, receive a prompt before storing cookies, or block all cookies.
- However, if cookie storage is disabled, some Dpromotion services that require login may not function properly.
[How to Configure Settings]
- Internet Explorer: Select Tools Menu > Click Internet Options > Go to the Privacy Tab > Click Advanced Privacy Settings > Adjust Cookie Level
- Chrome: Select Settings Menu > Go to Privacy and Security > Click Cookies and Other Site Data > Adjust Cookie Level
- Safari: Select Preferences Menu > Go to Privacy > Adjust Cookies and Website Data Settings

Article 5: Provision of Personal Information to Third Parties

The company does not use or disclose users' personal information beyond the scope outlined in Article 2: Collected Personal Information and Purpose of Use. However, exceptions apply in the following cases:
- When users have given prior consent for disclosure.
- When required by law or when a law enforcement agency formally requests information for investigative purposes in accordance with legal procedures.

Article 6: Delegation of Personal Information Processing

회The company may entrust the processing of users' personal information to external professional service providers to improve service quality. In accordance with applicable laws, the company ensures that personal information is securely managed under contractual agreements with entrusted parties.
If the company needs to entrust additional personal information processing beyond the designated recipients and entrusted tasks, users will be notified in advance about: The entrusted party (data processor), The purpose and scope of the entrusted data processing. When required, the company will obtain user consent before proceeding with the additional delegation. The company’s current entrusted parties and the scope of entrusted processing are as follows:
Entrusted Parties for Personal Information Processing Entrusted Tasks for Personal Information Processing Retention and Usage Period
Payletter Inc. (페이레터 주식회사) Payment Processing Services (Credit Card, Virtual Account) Personal information entrusted to third parties is retained and used until membership withdrawal or until the termination of the entrusted contract, whichever occurs first.
NICE Information Service Co., Ltd. (NICE평가정보(주)) Mobile Phone Authentication Service
NHN Cloud Corp. (엔에이치엔클라우드(주)) Notification Delivery Services (SMS, notification messages, email)
D&D Lab Co., Ltd. (주식회사 디앤디랩) Customer Support, Telemarketing (TM) Operations, Data Processing, Website Maintenance, AWS Service Operations
Amazon Web Services, Inc. Provision of Cloud Infrastructure for Dpromotion Service Operations
KT Alpha Co., Ltd. (주)케이티알파 Mobile Coupon and Mobile Gift Certificate Distribution
Daou Technology Inc. (주)다우기술 Mobile Coupon and Mobile Gift Certificate Distribution
Channel Corporation (주식회사 채널코퍼레이션) Dpromotion Customer Support
Google Analytics, Google Tag Manager, Google Ads, Microsoft Clarity Service Usage Data Analysis

Article 7: Retention and Usage Period of Personal Information

While users remain registered members and continue to use the company's services, the company retains and processes their personal information to provide the service. However, in accordance with the procedures outlined in Article 8: Procedures and Methods for Disposal of Personal Information, if a member deletes their data or requests account termination, the information will be permanently erased from the system in an irrecoverable manner and will no longer be accessible or usable.
Additionally, as stated in Article 2: Collected Personal Information and Purpose of Use, personal information collected for temporary purposes (such as customer inquiries, surveys, events, or identity verification) will be irreversibly deleted once the intended purpose has been fulfilled, ensuring that it cannot be recovered or reused.
The company follows the principle of destroying personal information once the purpose of its collection has been fulfilled. However, to prevent the recurrence of fraudulent or improper use by banned members, the company may retain personal information for up to one year after account termination. Additionally, if retention is required by law, such as under the Commercial Act, the Consumer Protection Act in E-commerce, or other relevant regulations, the company stores personal information strictly for compliance purposes and only uses it within the legally mandated retention period. The specific retention periods for such cases are outlined below.

1. Retention of Information Based on Internal Policies
Category Reason for Retention Retention Period
Records of fraudulent or abusive users Prevention of fraudulent or improper use 1 year

2. Retention of Information Based on Relevant Laws
Category Retention Reason Retention Period
Service usage records, access logs, access IP information Communications Privacy Protection Act 3 months
Records related to advertisements and promotional displays Act on Consumer Protection in Electronic Commerce 6 months
Records of contracts or withdrawal of subscriptions Act on Consumer Protection in Electronic Commerce 5 years
Records of payments and supply of goods or services Act on Consumer Protection in Electronic Commerce 5 years
Records of consumer complaints or dispute resolutions Act on Consumer Protection in Electronic Commerce 3 years

Article 8: Procedures and Methods for Disposal of Personal Information

The company, in principle, immediately disposes of personal information once the purpose of collection and use has been fulfilled or when the retention period has expired. However, if a user has not accessed the service for one year, the company will notify the user in advance and separately store and manage the personal information for one additional year before permanently deleting it.

1. Disposal Procedure
   - Personal information provided by users during registration or service use is transferred to a separate database (DB) (or, in the case of physical records, stored in a separate document storage) after fulfilling its intended purpose. It is then retained for a certain period in accordance with internal policies and relevant laws (refer to the retention and usage period) before being permanently disposed of.
  - The retained personal information will not be used for any purpose other than those required by law.

2. Disposal Methods
  - Personal information printed on paper is shredded or incinerated to ensure complete destruction.
  - Personal information stored in electronic files is deleted using technical methods that make the records irrecoverable.

Article 9: Management of Personal Information (Access, Correction, and Deletion, etc.)

Users have the right to request access to and correction of their personal information registered during membership sign-up. The company provides relevant services and methods to facilitate such requests.
Users may also withdraw their consent to provide personal information or request deletion of their data by canceling their membership. Membership withdrawal can be processed by logging into the registered account and navigating to [Account Settings > Membership Withdrawal]. Business members may need to submit relevant documents verifying their registration before completing the withdrawal process. However, if a user has outstanding financial obligations (e.g., unpaid service fees), membership withdrawal and data deletion may be restricted until such obligations are settled. The company handles account termination and data deletion requests in accordance with Article 7: Retention and Usage Period and ensures that deleted or deactivated personal information cannot be accessed or used for any other purpose.

Article 10: Measures to Ensure the Security of Personal Information

The company implements the following security measures to prevent loss, theft, leakage, alteration, or damage of users' personal information:
  1. Administrative Measures: Establishment and enforcement of internal management policies, minimization of personnel handling personal information, and regular training for employees.
  2. Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, and implementation of security programs.
  3. Physical Measures: Access control for data storage facilities and secure locations where sensitive information is stored.
The company continuously monitors the implementation of its privacy protection policies and ensures that responsible personnel comply with regulations. If any issues are identified, the company makes immediate corrections to address them.
However, the company is not responsible for any issues arising from the user’s negligence or internet security vulnerabilities that lead to the disclosure of personal information such as ID and passwords.

Article 11: Consent of Legal Guardian for the Provision of Personal Information

In accordance with guidelines set by the Ministry of Information and Communication and personal information protection regulations, the company only collects personal information from users under the age of 14 with the consent of their legal guardian. The withdrawal or consent procedures for such cases follow the same policies as the company's general privacy protection policy.
If a member requests a correction of their personal information due to an error, the company will not use or disclose the incorrect information until the correction is complete. If the incorrect information has already been provided to a third party, the company will immediately notify the third party of the correction request to ensure that the necessary modifications are made. Personal information deleted or deactivated at the request of the user or their legal guardian is handled in accordance with the retention and usage period outlined in the company’s privacy policy and will not be accessed or used for any other purposes.

Article 12: Online Targeted Advertising and Analytics Services

The company allows online advertising providers and analytics service providers to collect behavioral data as follows:
To enhance service quality, the company captures user interactions through behavioral metrics, heatmaps, and session replays to analyze how users navigate and engage with the service.
Service usage data is collected using first-party and third-party cookies. This data is utilized for service optimization, fraud prevention, security enhancements, and advertising purposes.
1. Behavioral Data Collection and Processing Providers: Google, Microsoft Clarity
2. Behavioral Data Collection Method: Automatically collected and transmitted when users interact with the company's services.
※ For more details on how Microsoft collects and uses your data, please refer to the Microsoft Privacy Policy.

Article 13: Personal Information Manager and Contact Information

To protect customers' personal information and handle any privacy-related complaints, the company has designated a responsible department and a personal information manager.


- Phone Number: +82 1533-2771
- Email: help@dpromotion.io


- Name: Eunsik Kim
- Phone Number: +82-02-523-9626
- Email: dev@dpromotion.io

If you need to report a personal information breach or seek consultation regarding privacy violations, please contact the following organizations:
1. Personal Information Dispute Mediation Committee (www.kopico.go.kr)
2. Personal Information Infringement Report Center (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office Cyber Crime Investigation Center (www.spo.go.kr)
4. National Police Agency Cyber Bureau (cyberbureau.police.go.kr)

Article 14: Obligation to Notify Changes

This Privacy Policy may be updated due to changes in government regulations or company policies. If any modifications, additions, or deletions are made, the company will notify users via the ‘Notices’ section on the website at least 7 days before the changes take effect.
However, if there are significant changes that affect users’ rights—such as modifications to the types of collected personal information or purposes of use—the company will provide notice at least 30 days in advance. In some cases, the company may also require users to reconfirm their consent to the updated policy.

Announcement Date: October 5, 2026
Effective Date: October 12, 2026

Support

Reliable support
that will empower you.

From free testing to production setup and design.
We support the entire process needed to run your promotion.

Free test support that
lets you experience the
promotion in advance

FREE

Lightning-fast
communication that answers
all your questions

Submit a 1:1 Inquiry

Promotion
planning
for your brand

With our technology and
creativity
we are ready to plan and launch
online and offline promotions
tailored to your brand.

Inquire

Promotions
for your partners

We are confident that
DPromotion can be useful
for your advertisers.

Inquire

For all of us and the planet

3.745
MTCO2e

Carbon emissions reduced by DPromotion from November 2020 to June 2025.
(1 metric ton of CO₂e is equivalent to the amount of carbon absorbed by 16.5 tree seedlings grown for 10 years.)

Join us in taking steps toward a better digital environment.