Privacy Policy
Star Payments Inc.
1. Purposes of Processing
Star Payments Inc. (the "Company") processes personal information for the following purposes and will obtain separate consent under Article 18 of the Personal Information Protection Act if the purposes change.
- Receiving and answering merchant consultation and partnership inquiries
- Concluding, performing and managing merchant agreements, and paying settlements
- Providing payment gateway and prepaid electronic payment services and keeping transaction records
- Handling complaints and disputes, and fulfilling legal obligations
2. Personal Information Processed
| Item | Items |
|---|---|
| Merchant Inquiry | Required: company name, contact name, phoneOptional: email, business type, industry, message |
| Merchant agreement | Information in contract documents, including representative's name, date of birth and phone, business registration number, business address, settlement account and copy of ID |
| Collected automatically | IP address, cookies, access time, service usage records, browser information |
3. Processing and Retention Periods
The Company destroys personal information without delay once the purpose is achieved, except in the following cases where it is kept for the stated period.
- Merchant inquiries: 1 year after the consultation ends
- Merchant agreement information: 5 years after the agreement ends
- Records of electronic financial transactions: 5 years (Electronic Financial Transactions Act; 1 year for transactions of KRW 10,000 or less)
- Records of contracts or withdrawal of offers, payments and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce)
- Records of consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce)
- Website access logs: 3 months (Protection of Communications Secrets Act)
4. Provision to Third Parties
The Company provides personal information to third parties only in cases under Articles 17 and 18 of the Personal Information Protection Act, such as with the data subject's consent or under special provisions of law. For payment approval and settlement, it provides information as follows.
| Recipient | Purpose | Items |
|---|---|---|
| Credit card companies, banks | Payment approval · settlement | Transaction information, merchant information |
| [Name of primary payment gateway] | Payment gateway processing | Transaction information, merchant information |
5. Outsourcing of Processing
For smooth operations, the Company outsources personal information processing as follows and, under Article 26 of the Personal Information Protection Act, supervises contractors to ensure they process personal information safely.
| Contractor | Outsourced work |
|---|---|
| [Terminal installation and maintenance company] | Payment terminal installation and repairs |
| [Website hosting company] | Website operation and data storage |
6. Destruction Procedures and Methods
Personal information whose retention period has ended or whose purpose has been achieved is destroyed without delay. Electronic files are permanently deleted in an unrecoverable way, and paper documents are shredded or incinerated.
7. Rights and Obligations of Data Subjects
Data subjects may at any time request access to, correction or deletion of, or suspension of processing of their personal information, or withdraw consent. Requests can be made in writing, by phone (1551-6541) or by email, and the Company will act without delay. Rights may also be exercised through a legal representative or authorized agent, who must submit a power of attorney.
8. Security Measures
- Administrative: internal management plan, regular staff training
- Technical: access rights management for processing systems, access control, encryption of unique identifiers, security software
- Physical: access control to server rooms and records storage
9. Cookies
The Company may use cookies for convenience. Users can refuse cookies in their browser settings, in which case some services may be limited.
10. Privacy Officer
- Privacy officer: [Name] / [Title]
- Contact: 1551-6541, [Email]
For privacy inquiries, complaints and remedies, please contact the privacy officer.
11. Remedies for Infringement
To report or seek advice on privacy infringement, you may contact the following organizations.
- Personal Information Infringement Report Center: 118 · privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: 1833-6972 · www.kopico.go.kr
- Supreme Prosecutors' Office: 1301 · www.spo.go.kr
- Korean National Police Agency: 182 · ecrm.police.go.kr
12. Changes to This Policy
This Privacy Policy applies from [Month 00, 2026]. Any additions, deletions or changes will be announced in Notices on the Website from 7 days before they take effect.