Privacy Policy
KC Technology Co., Ltd. (the "Company") processes personal information in the mi.moa pro Service as follows.
1. Items collected
1) Salon and brand accounts (sign-up, account editing)
Required: brand/salon name, name, gender, date of birth, country, phone number, email, login ID, password (stored only as a hash that cannot be recovered), and the time and version of agreement to the terms and this privacy policy.
Optional: address. It is stored when entered, and what was entered can be deleted in account editing.
Consent to use for marketing is optional, and you can sign up without it. If you consent, the time of consent is stored. If you withdraw that consent in account editing, the time of withdrawal is stored.
Staff sign-up is confirmed with a salon code. Brand sign-up is confirmed with a brand code and an approval code.
2) Customers (members)
The salon enters these when registering a member or taking a measurement.
Required: name, gender, date of birth, country, and mobile phone
Optional: email, address, landline, occupation, marital status, visit path, memo, scalp questionnaire, and profile photo
Measurement: measurement photos and analysis results (scores and analysis values)
Report: result files and share links the salon uploads to the server
The salon obtains consent to collect customer information. The Company uses that information to provide and keep measurement results. The Company may also make statistics that cannot identify a person, for service quality management.
3) License, installed device, and measurement device
License: number, product, period of use, number of allowed installations, and registration time
Installed device: device identifier, platform, model, display name, local/server distinction, registration time, and last access time
Measurement device: device number, model, and the time it was linked to the salon
4) Collected automatically
Login and sync time, access IP, and records of login success, failure, and lockout
The local version keeps members and measurements on that installed device. It does not sync with the server.
China stores only the product number and authentication number on the installed device, and does not create the server sign-up items above. Members and measurements also stay on that installed device.
2. Purposes of use
1) Creating salon and brand accounts, signing in, and customer support
2) Providing skin and scalp measurement results and managing history
3) Making statistics that cannot identify a person from skin and scalp measurement results, for service quality management
4) Sync between the salon server and the device
5) Checking the license, managing installed devices (registration within the allowed number), and confirming the measurement device connection
6) Sending service and product notices to a contact who consented to marketing, using the brand/salon name, name, gender, date of birth, country, phone number, email, and address
7) Performing legal duties and preventing misuse
3. Retention
1) Kept until the purpose ends.
Under the Personal Information Protection Act, information is deleted when the purpose is achieved, and there is no statutory period that requires these items to be kept longer.
Account: brand/salon name, name, country, phone number, email, login ID, password, gender, date of birth, address, and the times of marketing consent and withdrawal. Deleted when the account is withdrawn, taken over, the salon is closed, or the Service ends.
Customer information, profile and measurement photos, and analysis results: until the salon deletes them. When the salon reports the deletion to the server, they are deleted from active data.
Installed device and measurement device link information: until use of that salon ends.
Result files and share links: 30 days from the day they are uploaded.
2) Only information for which a statute sets a period is kept for that period.
License contract and registration records (number, product, period, registration time): under the Act on the Consumer Protection in Electronic Commerce, records of contracts and withdrawal of an offer are kept for 5 years. If payment or supply records arise, they are kept for 5 years, and records of complaints and dispute handling are kept for 3 years. This period does not apply to gender, date of birth, address, or measurement photos.
Access records (login ID, IP, access time, success and failure): kept for 1 year and then deleted under the standards for ensuring the safety of personal information.
The time and version of agreement to the terms and this privacy policy: kept while the account exists. If there is a dispute after the account ends, they are kept for 3 years as records of complaint and dispute handling.
4. Provision to third parties and entrusted processing
1) The Company does not sell or provide personal information to a third party.
2) Servers and files are kept in the Republic of Korea (AWS Seoul Region) and are not transferred overseas.
3) Entrusted processor: Amazon Web Services Korea LLC. The entrusted work is cloud server operation and file storage.
5. Rights of users
Contacts and customers may request access, correction, deletion, or suspension of processing of their personal information. In the app, this is done as follows.
1) Salon and brand contacts
Access and correction: view and correct the brand/salon name, name, gender, date of birth, country, phone number, email, and address in account information in Settings.
Deleting optional items: clearing what was entered for the address deletes only that content. Gender and date of birth are not cleared in account editing.
Refusing marketing: turn off marketing consent in account editing. Turning it off stops the notices only, and gender, address, and date of birth remain.
Deleting an account: withdraw the account in Settings. This can be done when there is another salon admin or after the salon is closed. An owned-salon account cannot be withdrawn.
Takeover: only the previous admin account is withdrawn. Salon, member, and measurement data is kept as it is and can be viewed from the new salon account.
Salon closure: ends the salon and its members and measurements.
Local withdrawal: use of the account ends, but the member and measurement files on that installed device are not deleted.
2) Customers
Access, correction, and deletion of customer information are done by the salon that registered that customer, in Members.
Requests that are difficult to make in the app are made to the contact below.
If a request can be refused under the law, the reason is given.
6. Destruction
Information is destroyed without delay when the retention period ends or the purpose of processing no longer exists.
1) Address is deleted when what was entered is cleared in account editing.
2) Account information is deleted on withdrawal, takeover, or salon closure.
3) Customer information, measurement photos, and analysis results are deleted from the server's active data when the salon deletes them.
4) Result files and share links are deleted after 30 days.
5) Local withdrawal does not delete the member and measurement files on that installed device. They disappear when the app data is deleted on the device.
6) Electronic files are deleted by a method that cannot restore them. Access records and contract records kept under Article 3 for a statutory period are deleted after that period ends.
7. Contact
Inquiries about personal information
Department: Information processing officer
Email: kcservice@kcscopes.com
Phone: 02-552-3115
Address: 301, 3F, Global Cosmetic Business Center, 738 Samsunghyeon-ro, Gyeongsan-si, Gyeongsangbuk-do, Republic of Korea