Privacy Policy

Manbok (the “Company”) complies with the Personal Information Protection Act and related laws, and publishes this privacy policy to protect users’ personal information and handle related concerns promptly.

• Sign-up and account: email address, password (stored encrypted), name (optional), mobile number (optional), profile photo (optional) — identity verification, sign-in, password reset, fraud prevention
• Orders, delivery and pickup: recipient name, phone number, address (postcode, road or lot address, detail), delivery and order requests — preparing, delivering and handing over orders, and order status messages by SMS and email
• Payment: payment method type, approval and cancellation records — payment, refunds and transaction checks. Card numbers and other payment details are handled by the payment gateway and never stored by the Company.
• Customer support: the enquiry and contact details — handling complaints and disputes
• Collected automatically: access times and logs, browser information, a sign-in cookie, IP address (as a hash, for security) — service security, preventing unauthorised sign-in, error analysis

The Company does not collect personal information from children under 14.

Member information is kept until the account is closed and destroyed without delay once closure is requested, except for the following, which the law requires us to keep for the periods shown.

• Records of contracts and withdrawals: 5 years (E-Commerce Act)
• Records of payments and supply of goods: 5 years (E-Commerce Act)
• Records of consumer complaints and disputes: 3 years (E-Commerce Act)
• Records of labelling and advertising: 6 months (E-Commerce Act)
• Website access logs: 3 months (Protection of Communications Secrets Act)

The Company processes personal information only for the purposes in section 2 and does not provide it to third parties unless the user consents or the law specifically requires it.

The Company entrusts the following processing to others to run the Service, and its contracts with them require the information to be kept secure.

• Korea PortOne Co., Ltd. (PortOne): payment integration and payment verification
• Payment gateway (PG): payment processing and cancellation
• SOLAPI: order status and verification code text messages
• Courier: delivery of products (delivery orders only)
• Resend, Inc.: verification code and order emails

The Company transfers personal information abroad as follows to run the Service. Transfers happen over the network when the Service is used, and the information is kept until the processing contract ends or the account is closed. Users may refuse the transfer, but the Service cannot then be used.

• Resend, Inc. (United States) — email address, name, order number — sending email

Personal information is destroyed without delay once its retention period ends or its purpose is fulfilled. Electronic files are deleted so they cannot be recovered, and information kept under the law is stored separately from other information.

Users may at any time ask to see, correct, delete or stop the processing of their personal information, either directly on the account page or through customer service (to be announced, manbok.business@gmail.com). The Company acts on a request within 10 days of receiving it.

• One-way encryption of passwords and hashing of verification codes
• HTTPS encryption end to end
• Minimal administrator access and a record of administrator actions
• Sign-in attempt limits and other blocks on unauthorised access

The Company uses only the essential cookies needed to keep users signed in and to hold the cart, and no advertising or behavioural-tracking cookies. Users can refuse cookies in their browser settings, but signing in and ordering may then not work.

Privacy officer: to be announced

Contact: to be announced / manbok.business@gmail.com

To report or seek advice about a privacy violation, you can contact the following bodies.

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
• Korean National Police Agency: 182 (ecrm.police.go.kr)

This privacy policy applies from 09/29/2026. Any change is announced in the Shop at least 7 days before it takes effect.