The SAL Privacy Policy
Subverted Anatomical Landscape (“The SAL”) protects Users’ personal information and handles privacy inquiries and complaints in accordance with the Personal Information Protection Act and other applicable laws of the Republic of Korea.
1. Purposes of Processing
The SAL processes personal information necessary for orders and delivery, facility rental reservations, Workshop registration and administration, Support Payments and their administration, mobile phone verification, payment confirmation, cancellations, exchanges, returns, refunds, and customer inquiries. Where a donation receipt is requested, information necessary for issuance is processed to the extent that the applicable statutory issuance requirements are met.
2. Personal Information Processed
· Orders, reservations, and registrations: name, phone number including country calling code, email address, country or region, city, state or province, street address and postal code entered on the relevant form, and order, reservation, or registration details.
· Delivery: recipient’s name, phone number, and delivery address.
· Support Payments: name, phone number including country calling code, email address, verification code, one-time or recurring payment selection, support amount, and support and payment records.
· Transactions and inquiries: payment method, payment amount, payment confirmation information, cancellation, exchange, return and refund records, inquiry contents, and related transaction information.
The SAL processes only the items necessary for the relevant Service. Authentication information specific to a payment method is handled through the payment provider’s procedures. The items above do not imply that The SAL collects or stores all card information.
If additional personal information is required to issue a donation receipt, the items, purpose, retention period, and legal basis will be separately disclosed. Resident registration numbers are processed only where a lawful basis specifically permits such processing.
3. Legal Bases for Processing
The SAL processes personal information on a lawful basis, including consent, processing necessary to enter into or perform a contract, or a legal obligation. Where separate consent is required, the relevant details are disclosed and consent is obtained. Publication of this Privacy Policy or agreement to the Terms and Conditions does not replace separately required consent to personal information processing.
4. Retention Periods
Personal information is destroyed without delay when its processing purpose has been fulfilled. Records that must be retained under applicable law are kept for the following periods:
· Records of contracts or withdrawal: 5 years.
· Records of payments and supply of goods or services: 5 years.
· Records of consumer complaints or dispute resolution: 3 years.
· Records of display or advertising: 6 months.
· Donation receipt issuance records subject to statutory retention: 5 years from issuance.
Other tax and accounting records are retained for the period required by the applicable law. Information retained under a legal obligation is not used for unrelated purposes and is separately managed as required. Verification codes are destroyed without delay when verification is completed or the code expires.
5. External Services and Outsourced Processing
The SAL uses the following external services to provide its Services:
· Toss Payments: payment processing and related services.
· SOLAPI: mobile verification messages and service-related text messages.
· CJ Logistics: product delivery.
· GitHub: website hosting.
To the extent that a provider processes personal information on behalf of The SAL, The SAL fulfills the applicable contracting and supervision obligations for outsourced processing. For activities performed independently by a payment provider or another external provider, that provider’s privacy policy and applicable law apply. Necessary changes to providers, including delivery providers, or entrusted tasks will be disclosed through this Policy.
6. Disclosure to Third Parties
The SAL provides personal information to third parties only on a lawful basis, including a legal provision or the required consent. Where separate consent is required, The SAL discloses the recipient, purpose, information provided, retention period, right to refuse, and any resulting limitation before obtaining consent.
7. Destruction and Protection
The SAL destroys personal information without delay when its retention period ends or its processing purpose is fulfilled, unless continued retention is required by law. Electronic records are deleted to prevent recovery, and paper records are shredded or otherwise securely destroyed. The SAL implements the administrative, technical, and physical safeguards required by applicable law.
8. Users’ Rights and How to Exercise Them
Users may request access to, correction or deletion of, or suspension of processing of their personal information, and may withdraw consent in accordance with applicable law. Requests may be submitted by the User or an authorized representative to info@thesal.org. Identity or representative authority may be verified to the extent necessary.
The SAL handles requests according to the procedures and periods required by law. If a request is limited because of a statutory retention obligation or another lawful reason, The SAL explains the reason. Refusal of optional processing does not restrict access to unrelated Services.
Where consent from a legal representative is required for processing the personal information of a child under 14, The SAL obtains that consent and completes the necessary verification in accordance with applicable law.
9. Privacy Officer and Contact
Privacy Officer: Jinho Bae.
Operator: Subverted Anatomical Landscape.
Business Registration Number: 268-15-01725.
Email: info@thesal.org.
Privacy inquiries, complaints, and rights requests may be submitted to the email address above.
10. Changes to This Policy
Changes to this Privacy Policy will be announced on the website with the changes and their effective date. Where separate notice or consent is required, The SAL follows the applicable legal requirements.