Whitestone Privacy Policy

WE ALWAYS PUT OUR BEST EFFORTS TO PROTECT THE PERSONAL INFORMATION OF OUR USERS. THE COMPANY CONSIDERS THE PROTECTION OF PERSONAL INFORMATION SAVED UNDER THE WHITESTONE (KNOWN AS SERVICE) AS A SIGNIFICANT NECESSITY. THIS PERSONAL INFORMATION POLICY EXPLAINS WHY THIS SERVICE COLLECTS INFORMATION AS WELL AS WHAT MEASURES ARE TAKEN TO HANDLE THE COLLECTION AND CONTENTS OF USER DATA.

Personal Information Collection Items
The Company collects and saves information to provide better service to the users.

① Information provided by users.
The Company collects information from members when they register for membership for Personal Service and Business Service.
1. Personal Service
- Collected Information (Required) : Name, Email address, password.
2. Business Service
- Collected Information (Required) : Name, email address, company name, country, phone number, device model name.
② Information collected during use of service
- Collect information on user contact information, device information (mobile, computer), type and version of OS, type of browser, service utilization record, IP address, nation, language, program installation, operation of major functions, and basic data on usage.
- Collect information about the files and the contents of the files in user storage of Whitestone Service. This information is only for the service which user has chosen to adopt in, and not used for any other service or for anyone other than the user or provided to any other party.
③ It may be necessary to collect transaction information during optional payment processes. Information would include but is not limited to credit card information, billing address, and other related information.

Purpose of Utilizing Personal Information
The Company only utilizes user’s personal information as it is referred below. If the purpose of using personal information changes, the Company will request the user’s consent in advance.

① User information will be used for the registration and creation of accounts.
② Identify authorized users and prevent dishonest use by unauthorized users and unauthorized utilization.
③ To provide a promised service to the users and settle fares in the event a user makes a purchase or uses charged services.
④ When a user shares documents, or has documents shared with them in an individual or group capacity, account information including, but not limited to, name, email, or Whitestone profile picture will be shown to all users involved in that sharing instance.
⑤ To provide various services of Whitestone to users and disseminate a notification after dealing with matters of inquiry and processing complaints requested during use of the services.
⑥ The Company may provide product and promotion information such as a market event, and advertising event information to users who agreed when register for membership. Information are used when developing new service, delivering promotion information such as a market event, and advertising. Users may decline to receive such information in their Whitestone account settings at event and service notification.
⑦ Under data anonymized, user behavior may be monitored to gather data by analyzing patterns, frequency of access, and use of service for future reference to improve service and development of new services.

Provision of Personal Information
The Company will only use personal information of users within a scope mentioned under the section entitled "Purpose of Utilizing Personal Information," and moreover, in principle, the Company does not disclose personal information. However, below references are exceptions.

① Agreement made by the users in advance
- Although users have agreed to certain uses of personal information, the Company will give prior notice and request consent from users explicitly and individually regarding details of the information’s use including but not limited to the recipient(s) of the personal information, usage and types of information provided, and the period of possession and usage of the provided information.
② If there is special requlation to the law.

Correction of Personal Information
① Users may always either read or edit their registered personal information. Users can directly read and edit personal information by clicking "Account Settings."
② Users may always rescind their agreement to terms regarding any information provided as specified under the sections regarding personal information collection, utilization, and provisional clauses. By clicking "Membership Cancellation," users can remove all of their personal information. Furthermore, users can cancel their membership by contacting the Personal Information Management team for their cancellation via written notice, telephone, or e-mail at the Contact Information set forth below. The Company will do everything to the best of their ability to help the users. The Company will send a notification to the users who take actions such as cancellation and annulment of a contract without delay.

Period of Possession
The Company restrictedly utilizes users' personal information while providing a service once registration is completed. The personal information will be eliminated without delay if (i) users request a cancellation of an agreement of personal information collection and utilization; (ii) when the purpose of collections and utilizations is accomplished; or (iii) the period of utilization is terminated.

Personal Information Deletion
In principle, the personal information of users will be deleted without delay once the purpose of personal information collection and utilization is achieved. The procedures and measures of personal information deletion are as follows:

① Procedures
A. Information provided by users for the registrations will be deleted after being saved for a certain time based on information protection reasons (refer to periods of possession and utilization) in accordance with Company policies and other applicable law by moving to the special DB (special cabinets for paper documents) after accomplishing the purposes.
B. Personal information of users will not be used for purposes other than ones mentioned unless required by applicable law.
② Measures
A. Paper documents will be shredded by a grinder or incinerated.
B. Personal Information saved as electronic files will be deleted by using tactical measures thus the electronic files will be irreproducible.
③ Cases where the statute for retaining information for a certain period of time are such as the Consumer Protection Act, Electronic Financial Transactions Act, and the Communications Privacy Protection Act. Company keeps personal information in accordance with the provisions of the Act during this certain period of time and never uses this information for any other purposes.
A. Act on Consumer Protection in Electronic Commerce
- Records on contract or withdrawal of subscription: kept for 5 years
- Record of payment and supply in goods: kept for 5 years
- Records of customer complaints or disputes: kept for 3 years
B. Electronic Financial Transactions Act
- Records of electronic financial relations: kept for 5 years
C. Communications Privacy Protection Act
- Records of login history: kept for 3 months

Change of Personal Information Outsourcing Policy
The Company may modify its privacy policy in order to reflect changes in related laws or services. Members will be notified of any addition, deletion, or modification to the current privacy policy via announcement or email at least seven days before the amendments take effect. However, the company will notify members at least 30 days in advance if there are vital revisions regarding users' rights, including collections and utilizations of personal information and provision to third persons.

Security
The Company makes great efforts to protect information from illegal access, change, exposure, or deletion. Passwords are mandated to access user data for the service, and sensitive data input for payment of premium services will be encrypted by SSL. Nevertheless, it is not guaranteed that the information sent to others by your choice are 100% safe because the cable and wireless internet does not provide 100% safe conditions. Accordingly, despite the security procedures implemented by the Company, there is a possibility of information being accessed, exposed, changed, or damaged because of one of physical, technical, or management safety devices are destroyed or have been compromised.

Do Not Track
Company does not track its customers over time and across third party websites to provide targeted advertising and therefore does not respond to Do Not Track (DNT) signals.

Minor or Under Age User Policy
The service is not to be used by children under the age of a full 14 years old. The Company will not gather personal information from children under 14 years old. The Company will take actions to delete information if the Company discovers that it has collected personal information from a user under the age of 14.


Contact Information

For any inquiries or comments regarding our Personal Information Policy, please send an email to:

E-Mail: [email protected]
Date of Notification: August 01, 2017
Date of Enforcement: August 01, 2017