Privacy Policy

Spotlite Privacy Policy

Spotlite Global Ltd. (hereinafter referred to as "the Company") complies with domestic privacy protection laws such as the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Personal Information Protection Act, the Act on the Protection and Use of Location Information, and the Act on the Protection of Communications Secrets, and is committed to protecting user rights. To address related grievances quickly and smoothly, the Company has established and disclosed the following Privacy Policy.

Article 1: Personal (Location) Information Processed

(1) The Company processes the following personal information items without the data subject's consent:

Relevant Law	Purpose of Processing	Processing Items	Retention Period
Personal Information Protection Act Article 15(1)(2) (Special Provisions in Law), Consumer Protection in Electronic Commerce, etc. Act Article 6 (Preservation of Transaction Records, etc.)	Records of contracts or withdrawal of subscription	Consumer identification information, contract/withdrawal records	5 years
	Records of payment and supply of goods
	Records of consumer complaints or dispute resolution	Consumer identification information, dispute resolution records	3 years
Personal Information Protection Act Article 15(1)(2) (Special Provisions in Law), Value-Added Tax Act Article 32 (Issuance of Tax Invoices, etc.)	Books, tax invoices, import tax invoices, receipts, settlement, and tax payment	VAT taxable standards, tax reporting materials, business registration certificate, resident registration number	5 years
Personal Information Protection Act Article 15(1)(2) (Special Provisions in Law), Protection of Communications Secrets Act Article 15(2) (Obligation of Cooperation by Telecommunications Operators)	Communication fact verification data	Records related to service use	3 months
Personal Information Protection Act Article 15(1)(4) (Contract Fulfillment)	Identity verification and age verification	Identity verification information (name, date of birth, gender, telecom company name, phone number, CI, DI, nationality)	Until membership withdrawal
	Business registration status and payment information verification	Business registration certificate, bankbook copy (for individual businesses: representative's name, for corporate businesses: corporate name)	Until membership withdrawal

(2) The Company collects only the minimum personal information necessary for service use and informs users of this fact, obtaining prior consent. The personal information processed by the Company is as follows:

Purpose of Processing	Processing Items	Retention and Use Period
Membership registration and management	Mandatory

Kakao Account: Email address, nickname, (for foreigners) visa information (visa type, date, duration)
Facebook: Name, email address, (for foreigners) visa information (visa type, date, duration)
Google: Name, email address, (for foreigners) visa information (visa type, date, duration) | 6 months after membership withdrawal However, if retention is required by relevant laws, until the end of that period | | Service provision | Mandatory
Name, phone number, ID, email address, personal location information, credit card number, (for foreigners) alien registration number | Until membership withdrawal However, if retention is required by relevant laws, until the end of that period | | Providing profiles for customer connections | Mandatory
Name, nationality, gender, height, chest circumference, waist circumference, hip circumference, shoe size, hair color, eye color, top size, bottom size, model photos, model videos, model career information | Until membership withdrawal However, if retention is required by relevant laws, until the end of that period | | Customer support | Mandatory
ID, inquiry and response history | Until membership withdrawal However, if retention is required by relevant laws, until the end of that period | | Promotion and marketing | Optional
Name, date of birth, phone number, ID, email address | Until membership withdrawal However, if retention is required by relevant laws, until the end of that period |

(3) The Company collects the minimum personal location information necessary for service use and informs users of this fact, obtaining prior consent. The personal location information processed by the Company is as follows:

Service	Purpose of Processing	Retention and Use Period
Spotlite	Providing profiles for customer connections	Until membership withdrawal

(4) The Company automatically records and retains location information collection, use, and provision confirmation data in accordance with Article 16(2) of the Act on the Protection and Use of Location Information, and retains this data for 6 months.

Article 1: Personal (Location) Information Processed

Article 2: Personal Information of Children Under 14