Privacy Policy
KO
/
EN
Version 1.0
Effective Date: October 25, 2026
Wookoorookoo (우쿠루쿠, hereinafter the “Company”) processes personal information necessary to handle product inquiries, orders, payments, and deliveries through the WVL website.
The Company complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws and publishes this Privacy Policy as follows.
Purposes of Processing and Categories of Personal Information
The Company processes only the personal information necessary to provide its services.
Product Inquiries and Responses
We process your name, email address, and inquiry details. The volume title, product name, and model number are also transmitted to identify the product concerned.
Order Processing and Delivery
We process the recipient’s name, email address, phone number, postal code, street address, and additional address details. Delivery instructions may be provided optionally.
This information is used to confirm orders, deliver products, and communicate about transactions.
Payment Verification and Order Management
We process order numbers, ordered products, options, quantities, product prices, shipping charges, total payment amounts, order and payment dates and times,
payment methods, payment identifiers, payment, cancellation and refund results, and shipping status.
Order Lookup
We use the order number and the email address provided at checkout to locate the relevant order and display its details and processing status.
Exchanges, Returns, and Customer Support
We use order information, contact details, request details, and supporting materials necessary to handle exchanges, returns, refunds, complaints, and disputes.
Refunds by Bank Transfer
We collect the bank name, account number, and account holder’s name only when a refund cannot be issued through the original payment method and a bank transfer is required.
Information required for payment authentication, such as full card numbers and card PINs, is processed through the payment interfaces of Toss Payments or other payment service providers.
This information is not collected through the Company’s order forms.
Please do not include unnecessary personal information or sensitive information, such as resident registration numbers or health information, in inquiries or delivery instructions.
Legal Bases and Methods of Collection
The Company processes personal information necessary to take steps at the user’s request before entering into a contract and to perform a contract
pursuant to Article 15(1)(4) of the Personal Information Protection Act.
Records retained to comply with applicable laws are processed pursuant to Article 15(1)(2). Where separate consent is required, processing takes place after that consent has been obtained.
Personal information is collected through product inquiry forms, checkout and order lookup pages, email or telephone communications, and payment processing results transmitted by payment service providers.
Product inquiries are submitted through Framer forms and forwarded to the Company’s Google Workspace email account. Order and delivery information is processed
through Vercel servers and stored in a Supabase database.
Retention Periods
The Company destroys personal information without delay once the purpose of processing has been fulfilled. Records that must be retained under applicable laws are kept for the required periods.
Product inquiries and general customer support information: Until the purpose of handling the inquiry has been fulfilled.
Order and delivery information: Until order fulfillment and related processing have been completed. Records subject to statutory retention requirements are retained for the periods below.
Records relating to contracts or withdrawal from contracts : 5 years.
Records relating to payments and the supply of goods or services : 5 years.
Records relating to consumer complaints or dispute resolution : 3 years.
Records relating to product representations and advertising : 6 months.
Information retained to meet statutory obligations is limited to what is necessary for that purpose and is managed separately from personal information used in ordinary business operations.
General product inquiries are not automatically retained for five years merely by categorizing them as transaction records.
The Company does not separately retain users’ personal information solely to preserve product representation or advertising records.
Destruction Procedures and Methods
The Company identifies and destroys personal information when its processing purpose has been fulfilled or its retention period has expired.
Information that must continue to be retained under applicable laws is stored separately and destroyed when the required period ends.
Electronic information is deleted in a manner that prevents recovery or reconstruction. Paper documents are destroyed by shredding or equivalent methods.
Copies remaining in email accounts, databases, downloaded files, or other locations are also included in the destruction process.
Backups and other copies managed by service providers are deleted in accordance with their respective data processing agreements and deletion procedures.
Outsourced Processing of Personal Information
The Company entrusts the following service providers with tasks necessary to operate its services.
Framer B.V.
Website hosting, operation of product inquiry forms, and transmission of inquiry details.
Google Asia Pacific Pte. Ltd. — Google Workspace
Sending, receiving, and storing business emails.
Vercel Inc.
Server operations for order placement and lookup, payment integration, and processing of order and delivery information.
Supabase Pte. Ltd.
Database storage and management of order and delivery information and payment processing results.
Toss Payments Co., Ltd.
Electronic payment processing and support for payment cancellations and refunds.
🔴【To be completed: Shipping service provider】
Product delivery and collection of products for exchanges and returns.
The Company limits the processing of personal information to what is necessary to perform the entrusted tasks and takes measures required by applicable laws,
including contractual arrangements, management, and supervision.
Changes to service providers or entrusted tasks will be reflected in this Policy.
External manufacturers receive only the production information necessary to perform their work. Customers’ personal information is not shared with them.
Disclosure to Third Parties
The Company uses personal information within the stated purposes and does not disclose it to third parties without the data subject’s consent or another legal basis.
Personal information collected and processed directly by payment service providers for their own electronic financial transaction services is subject to those providers’ terms and privacy notices.
International Transfers of Personal Information
The Company uses overseas cloud services to receive product inquiries, respond to emails, and process orders.
Personal information may therefore be transferred outside the Republic of Korea for processing and storage.
Framer B.V.
Contact : legal@framer.com
Information transferred : Name, email address, inquiry details, and information identifying the product concerned.
Purpose : Receiving and forwarding product inquiries submitted through the website.
Storage and processing locations : The United States and service operating locations in Europe and the Asia-Pacific region.
Google Asia Pacific Pte. Ltd. — Google Workspace
Contact : Google Workspace Privacy Inquiry Channel.
Information transferred : Personal information contained in product inquiry and customer support emails.
Purpose : Sending, receiving, and storing emails.
Storage and processing locations : Countries disclosed by Google, including the United States, Singapore, Japan, and Taiwan.
Vercel Inc.
Contact : privacy@vercel.com
Information transferred : Order and delivery information, order lookup information, and payment processing results.
Purpose : Order placement and lookup, payment integration, and transmission of information to the database.
Confirmed order processing server region : Washington, D.C. region, United States.
The countries and regions listed for Framer and Google reflect the operating locations publicly disclosed by those providers.
This does not mean that all customer information is transferred to every listed location.
🔴【To be confirmed: The transfer countries applicable to WVL’s use of Framer and Google, and any additional overseas processing by Vercel, including logs and support operations.】
The primary Supabase database is located in Seoul, Republic of Korea. Order and delivery information passes through Vercel’s servers in the United States before being stored in this database.
🔴【To be confirmed: Whether Supabase involves additional overseas processing beyond the Seoul database, including overseas support access and logs.
If applicable, add the transfer countries, information categories, purposes, contact details, and other required information.】
Timing and Method of Transfer
Information is transferred over networks when inquiry forms are submitted, emails are sent or received, order, payment, or lookup requests are made, and related information is processed.
Retention and Use Periods
The retention periods in Section 3 of this Policy apply. Information is deleted when its processing purpose has been fulfilled or its retention period has expired.
Logs and backups managed by providers are subject to their respective retention and deletion procedures.
🔴【To be confirmed: Log and backup retention periods and deletion procedures for the services actually enabled.】
Legal Basis for Transfers
Transfers falling within outsourced processing or storage necessary to enter into or perform a contract are made pursuant to Article 28-8(1)(3) of the Personal Information Protection Act.
Transfers requiring another legal basis are made only after the applicable requirements have been met.
How to Refuse Transfers and the Consequences
Inquiries or requests to refuse international transfers may be submitted to hello@wookoorookoo.com. The Company will explain the scope of the request and how it can be handled.
Product inquiry or order-related services may be restricted if overseas processing necessary to provide those services cannot take place.
Security Measures
The Company implements necessary safeguards, including restrictions on access to personal information, protection of account credentials, restrictions on public access
to documents containing personal information, and security management of the devices used to process such information.
Data Subject Rights and How to Exercise Them
Users may request access to, correction or deletion of, or suspension of processing of their personal information, and may withdraw consent.
Requests may be submitted by email or telephone to the Privacy Officer listed below.
The Company will verify the identity of the requester or their authorized representative and handle the request in accordance with applicable laws.
Deletion or suspension of processing may be restricted where records must be retained by law or another applicable exception exists. In such cases, the Company will explain the reason.
Automatically Collected Information and External Features
The Company uses Framer’s built-in analytics to operate the website and understand its usage.
This feature provides statistics such as visits, page views, and traffic sources without using cookies or persistent visitor identifiers for analytics.
The Company does not use separate advertising tracking tools or use website activity information for personalized advertising.
The Kakao (Daum) Postcode Service is used to search for delivery addresses. Information processed directly by external address search and
payment service providers is subject to their respective privacy notices.
🔴【To be confirmed: The use of cookies or browser storage by shopping cart and order lookup features; the categories and retention periods of server access and
security logs; and any additional automatic collection by address search or payment integration code.】
If additional information collection features are introduced, the Company will update this Policy and any necessary notices to reflect the actual processing activities.
Privacy Officer and Contact Details
Privacy Officer : Jinwook Lee (이진욱)
Business Name : Wookoorookoo (우쿠루쿠)
Email : hello@wookoorookoo.com
Phone : +82-10-5726-4324
Address : Room Ga-62, 5F, 18, Eonju-ro 134-gil, Gangnam-gu, Seoul, Republic of Korea
For assistance concerning personal information infringements in the Republic of Korea, users may also contact the Personal Information Infringement Report Center at 118,
without an area code, or the Personal Information Dispute Mediation Committee at 1833-6972.
Changes to This Privacy Policy
This Policy takes effect on October 25, 2026.
The Company maintains this Privacy Policy by version number and effective date. When the Policy is amended, the Company will announce the changes and
their effective date on the website and make previous versions and their applicable periods available for reference.
Where separate notification or consent is required by applicable laws, the Company will follow the relevant procedures. Amending this Policy or updating its version number
does not replace any required consent.