Privacy Policy

Article 1 — Purpose of Processing Personal Information

The Liquor (the “Service”) processes personal information for the purposes described below. Personal information will not be used for purposes other than those stated, and when the purpose of use changes, necessary measures will be taken in accordance with applicable privacy laws.

  1. Membership registration and management
    • Confirm intent to register
    • Identify and authenticate members
    • Maintain and manage membership status
  2. Service provision
    • Provide search and content services about spirits
    • Allow posting reviews and ratings
    • Manage service usage records

Article 2 — Categories of Personal Information Processed

1. At registration (required)

  • Email address
  • Nickname
  • Password (stored encrypted)

2. Automatically collected during service use

  • Service usage records
  • Access logs
  • IP address
  • Cookies

3. When using social login

  • Social account unique identifier (ID)
  • Email

※ Only information provided by the social login provider for service provision

Article 3 — Retention and Use Period

Personal information will be retained and used until the purpose of processing is achieved. When retention is required by law, it will be retained for the period required by the relevant statutes.

  • Member information: Until withdrawal of membership
    (If an investigation is underway related to violations of law, retained until the procedure is completed)
  • Service usage records and access logs: 3 months

Article 4 — Provision to Third Parties

The Service does not provide personal information to third parties in principle. However, it may be provided when the data subject has consented or when required by applicable law.

Article 5 — Outsourcing and Overseas Transfer

The Service outsources certain processing tasks for smooth service provision, and personal information may be transferred overseas in this process.

1. Outsourcing and overseas transfer details

Processor: Google LLC (Firebase Authentication)

  • • Country of transfer: United States
  • • Service: Member authentication
  • • Items transferred: Email, encrypted password, user identifier (UID)
  • • Transfer timing and method: Network transmission at signup or login
  • • Retention period: Until termination of outsourcing contract

The Service defines necessary measures in outsourcing contracts to ensure safe handling of personal information.

Article 6 — Destruction of Personal Information

When personal information is no longer necessary, the Service will promptly destroy it in accordance with internal policy.

  • Destruction procedure: Destroy immediately upon occurrence of destruction grounds according to internal policy
  • Destruction method
    • Electronic files: Permanently deleted so recovery is not possible
    • Paper documents: Shredded or incinerated

Article 7 — Rights of Data Subjects

Data subjects may exercise the following rights at any time.

  • Request access, correction, deletion, or suspension of processing of personal information
  • Rights may be exercised via email; the Service will take action without delay
  • If correction or deletion is requested, the data will not be used or provided until completed

Article 8 — Security Measures

The Service implements the following measures to ensure secure processing of personal information.

  • Establish and follow internal policies and procedures for personal information protection
  • Limit access rights to minimum personnel and manage grants/changes/removals
  • Encrypt important personal data such as passwords
  • Apply protective measures to prevent unauthorized external access
  • Enforce access control for systems and locations storing personal information

Article 9 — Data Protection Officer

The Service appoints a data protection officer to oversee personal information processing and handle inquiries.

Data protection officer: Yuchan Lee

Email: theliquornet@gmail.com

Article 10 — Changes to the Privacy Policy

This privacy policy is effective from the effective date. Changes will be announced via service notices at least 7 days prior to implementation.

Effective date: January 1, 2025