B2B Order Portal Privacy Policy
The Founders Inc. (the “Company”) discloses this Privacy Policy in accordance with the Personal Information Protection Act (「개인정보 보호법」) to protect the personal information of users of the B2B Order Portal.
Article 1 (Purposes of Processing, Items Collected and Retention Periods)
The Company collects and uses the following personal information as required for membership registration and order processing.
| Category | Purpose of collection and use | Items collected | Retention and use period |
|---|---|---|---|
| Membership registration and contact management | Identifying and managing members, and contacting them about orders | Contact person's name, email address, phone number | Until the member withdraws from membership |
| Order processing | Receiving orders, invoicing, dispatch, export and delivery, payment confirmation and settlement | Contact person's name, email address and phone number; billing address; delivery contact details; name of the person making the payment | The retention periods required by the Act on the Consumer Protection in Electronic Commerce, etc. (「전자상거래 등에서의 소비자보호에 관한 법률」) and other applicable laws |
Retention under applicable laws
Where a retention obligation under applicable laws applies, the Company keeps the personal information contained in the relevant records separately for the statutory period.
| Legal basis | Records retained | Retention period |
|---|---|---|
| Article 6 of the Act on the Consumer Protection in Electronic Commerce, etc. and Article 6 of its Enforcement Decree | Records on contracts or withdrawal of offers | 5 years |
| Article 6 of the Act on the Consumer Protection in Electronic Commerce, etc. and Article 6 of its Enforcement Decree | Records on payment and the supply of goods | 5 years |
| Article 6 of the Act on the Consumer Protection in Electronic Commerce, etc. and Article 6 of its Enforcement Decree | Records on consumer complaints or dispute resolution | 3 years |
| Article 6 of the Act on the Consumer Protection in Electronic Commerce, etc. and Article 6 of its Enforcement Decree | Records on labeling and advertising | 6 months |
Article 2 (Provision of Personal Information to Third Parties)
The Company processes personal information only within the scope of the purposes it has notified, and provides it to third parties only with the data subject's consent or where the law provides a basis for doing so. Where it provides personal information with consent, the Company separately informs the data subject of the recipient, the purpose, the items, the retention period and the right to refuse consent.
Article 3 (Entrustment of Personal Information Processing)
The Company entrusts the processing of personal information to the following companies for order processing. Entrustment and storage outside Korea are described in Article 4.
| Entrusted party | Entrusted work | Retention and use period |
|---|---|---|
| LX Pantos Co., Ltd. ((주)LX판토스) | Dispatch, export and delivery | Until the entrustment contract ends |
| Lotte Global Logistics Co., Ltd. (롯데글로벌로지스 주식회사) | Dispatch, export and delivery | Until the entrustment contract ends |
| Kukjae Logistics Co., Ltd (국제로지스틱스) | Dispatch, export and delivery | Until the entrustment contract ends |
| DHL | International transport and delivery | Until the entrustment contract ends |
The Company includes the safeguards necessary to protect personal information in its entrustment contracts and manages and supervises its entrusted parties. If an entrusted party or the entrusted work changes, the Company will disclose the change in this Policy.
Article 4 (Transfer of Personal Information Outside Korea)
The overseas service the portal uses to store personal information is as follows.
| Recipient | Country | Contact | Timing and method of transfer | Items transferred | Purpose of use | Retention and use period |
|---|---|---|---|---|---|---|
| Supabase, Inc. | Japan (storage location: AWS Tokyo region) | privacy@supabase.io | Transmitted over the network as needed whenever the portal is used | The personal information items set out in Article 1 (including information contained in files uploaded to the portal, such as order forms) | Storing and operating portal data and files | Until the retention period in Article 1 ends or the entrustment contract ends |
Data subjects may refuse this overseas transfer by notifying the personal information protection department listed in Article 9. If you refuse, you may not be able to use some of the Company's services.
Apart from the transfer described above, the Company does not provide data subjects' personal information to third parties outside Korea or otherwise transfer it abroad. If another overseas transfer is added in the future, the Company will give advance notice through this Policy.
Article 5 (Destruction of Personal Information)
When personal information is no longer needed because the retention period has expired or the purpose of processing has been achieved, the Company destroys it without delay. Information that must be retained under law is stored separately and destroyed when its retention period ends.
After confirming what is to be destroyed and whether any statutory retention applies, the Company deletes electronic information in a way that cannot be recovered, and shreds or incinerates paper documents.
Article 6 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them)
- Data subjects may at any time request the Company to provide access to, correct, delete or suspend the processing of their personal information, or to withdraw consent.
- These rights may be exercised in writing, by email, by fax or by other means under Article 41(1) of the Enforcement Decree of the Personal Information Protection Act (「개인정보 보호법 시행령」), and the Company will act on the request without delay.
- These rights may also be exercised through an agent, such as the data subject's legal representative or a person authorized by the data subject. In that case, a power of attorney in Annex Form No. 11 of the Public Notice on Methods of Processing Personal Information (「개인정보 처리 방법에 관한 고시」) must be submitted.
- Requests for access to personal information or suspension of its processing may be restricted under Article 35(4) and Article 37(2) of the Personal Information Protection Act.
- As to requests for correction or deletion, deletion of personal information cannot be requested where another law specifies that information as something to be collected.
- When a request to exercise these rights is made, the Company verifies that the requester is the data subject or a legitimate agent.
Article 7 (Devices that Automatically Collect Personal Information)
To keep users logged in to the portal, the Company uses cookies, which store usage information and retrieve it from time to time.
- Purpose of cookies: We use cookies only to keep you logged in and to verify secure access. We do not use them to analyze visit patterns or for targeted advertising.
- Installing, operating and refusing cookies: Through your web browser's settings, you can choose to allow all cookies, to be asked each time a cookie is stored, or to refuse all cookies. However, if you refuse to store cookies, you may not be able to use some services that require login.
- Edge: Menu at top right > Settings > Cookies and site permissions > Manage and delete cookies and site data
- Chrome: Menu at top right > Settings > Privacy and security > Site settings > Cookies and other site data
- Safari: Preferences > Privacy > Cookies and website data
- In private browsing mode (InPrivate / Incognito window), cookies are deleted automatically when the session ends.
- Mobile: You can set whether to allow cookies in the same way in your mobile web browser's settings.
Article 8 (Measures to Ensure the Security of Personal Information)
In accordance with Article 29 of the Personal Information Protection Act and Article 30 of its Enforcement Decree, the Company takes the following security measures.
- Administrative measures: establishing and implementing an internal management plan; designating personal information handlers and training them regularly
- Technical measures
- Managing access rights to the personal information processing system, and installing and operating an access control system
- Installing security software and updating and checking it periodically
- Protecting access logs against forgery and alteration, and reviewing them regularly
- Physical measures: controlling access to places where personal information is kept, such as server rooms and record storage rooms
Article 9 (Chief Privacy Officer and Inquiries)
- Chief Privacy Officer: Jongwon Choi (최종원), Part Leader
- Department: Information Security Part (정보보안파트)
- Email: privacy@thefounders.kr
Data subjects may direct any inquiries, complaints or requests for redress relating to personal information protection that arise while using The Founders Inc.'s services to the Chief Privacy Officer and the department responsible for personal information protection. The Company will respond to and handle such inquiries without delay.
Article 10 (Remedies for Infringement of Data Subjects' Rights)
To seek a remedy for an infringement of personal information, data subjects may apply for dispute resolution or counseling to the following organizations.
- Personal Information Dispute Mediation Committee: kopico.go.kr / 1833-6972
- Personal Information Infringement Report Center: privacy.kisa.or.kr / 118 (no area code needed)
- Cyber Investigation Division, Supreme Prosecutors' Office: spo.go.kr / 1301 (no area code needed)
- Cyber Crime Reporting System, Korean National Police Agency: ecrm.police.go.kr / 182 (no area code needed)
Article 11 (Changes to this Privacy Policy)
If anything in this Privacy Policy is added, deleted or modified, the Company will give advance notice through the “Notices” section at least 7 days before the change takes effect. However, for changes that significantly affect data subjects' rights, the Company will give notice at least 30 days in advance.
- Announced: November 1, 2026
- Effective: November 1, 2026
This English version is provided for convenience. If there is any inconsistency, the Korean version prevails.