Privacy Policy

This English text is a courtesy translation. The Korean version is the authoritative text; in case of any discrepancy, the Korean version prevails.

NDM (the "Company") complies with the Personal Information Protection Act of Korea and other applicable laws and processes the personal information of people who use this website and its mobile app (the "Site") safely. This Policy explains what personal information the Company processes, why and for how long, and the rights of users.

1. Purposes of Processing

• Member management: confirming intent to join, identification, linking Integrated Login, preventing misuse, preventing re-registration of restricted members, processing withdrawal
• Providing the Services: boards, comments, inquiries and other services; delivering notifications and notices; handling complaints
• Service improvement and security: access statistics, usage analysis, error checking, preventing and responding to security incidents
• Advertising information: event and benefit notices (only to members who separately consent)

2. Items Processed and Collection Methods

A. Joining and signing in

• Joining the Site directly: name (nickname), email address, password
• KBPlatform Integrated Login — received: Integrated Account ID, name, email address, email verification status, sign-up method (standard or social), membership level, points, history of consent to the KBPlatform terms, mobile phone number (only if the Site has been granted phone number permission) / stored: name, email address
• Optional: information the member enters, such as mobile phone number and profile photo

B. Information generated automatically during use

• IP address, access time, browser and device information, visit history, service usage records, cookies, device token for app notifications (if notifications are allowed in the app)

C. Collection methods

Join and sign-in screens, KBPlatform Integrated Login, input on boards and inquiries, automatic collection during use of the Services

3. KBPlatform Integrated Login (SSO)

① The Site uses Integrated Login from KBPlatform (https://kbplatform.co.kr), the integrated account service operated by the Company. One Integrated Account can be used to sign in to the Company's sites connected to KBPlatform.

② When a user signs in with Integrated Login, KBPlatform passes the items in Section 2.A to the Site. The Site uses them only to identify the member and to create or link the account, and stores nothing other than the name and email address. It neither receives nor stores the Integrated Account password.

③ If the Site already has an account with the same email address, it is linked to that account. Only Integrated Accounts with a verified email are linked.

④ All sites connected to KBPlatform are operated by the Company, and the information exchanged for Integrated Login is processed only within the Company. Personal information processed when joining KBPlatform follows the KBPlatform Privacy Policy.

⑤ If a user withdraws from the Integrated Account on KBPlatform, KBPlatform notifies the connected sites, and the Site withdraws that member account. Withdrawing only from the Site leaves the Integrated Account in place.

4. Retention Period

① When a member withdraws or the purpose of processing is achieved, the Company destroys the personal information or makes it unidentifiable without delay.

② However, the following is kept for the periods below:

• Records of use restrictions to prevent misuse: 1 year from the restriction
• Website visit records (access logs): 3 months (Protection of Communications Secrets Act)
• Where products are purchased or paid for: records of contracts, withdrawal of offers and payments 5 years; records of consumer complaints and disputes 3 years (Act on Consumer Protection in Electronic Commerce)

③ Personal information of members who have not signed in for one year may be stored separately from other members' information or destroyed, with notice by email or the like at least 30 days beforehand.

5. Provision to Third Parties

The Company does not use personal information beyond the purposes in Section 1 or provide it to third parties, except where the user separately consents, where laws specially provide, or where an investigative agency requests it under procedures set by law.

6. Outsourcing

The Company outsources personal information processing as follows to provide the Services, and requires and supervises the outsourcees by contract to process personal information safely.

• Cafe24 Corp.: server operation and data storage
• Kakao Corp.: sending email
• Where payment, identity verification or text message services are used, the businesses providing them: processing of those tasks (their names will be added to this Policy when use begins)

7. External Analytics and Advertising Tools, and Collection Abroad

① The Site uses Google Analytics by Google LLC (USA) for visit statistics and service improvement. When a user accesses the Site, Google automatically collects pages visited, access time, browser and device information, IP address and the like through cookies and stores them on Google's servers in the USA and elsewhere for up to 14 months. The Company does not use this information to identify individuals.

② If the Site displays advertisements such as Google AdSense, advertisers may collect visit records through cookies to show ads matched to interests.

③ Users can refuse collection and personalized ads by blocking cookies in the browser, using the Google Analytics opt-out add-on (https://tools.google.com/dlpage/gaoptout) or Google Ad Settings (https://adssettings.google.com). Refusing does not affect use of the Services.

8. Cookies

① The Site uses cookies and browser storage to keep users signed in, remember display settings (language, display mode) and compile usage statistics.

② Users can refuse or delete cookies in their browser settings, although some services such as signing in may then be difficult to use. (e.g., Chrome — Settings › Privacy and security › Third-party cookies)

9. Destruction Procedure and Method

Personal information whose retention period has ended or whose purpose has been achieved is destroyed without delay. Electronic files are deleted in a way that cannot be recovered, and paper documents are shredded or incinerated. Information that must be kept by law is stored separately from other information.

10. Rights of Users and Legal Representatives

① Users may at any time request access to, correction, deletion or suspension of processing of their personal information and withdraw consent (withdraw membership). They can do so directly in the Site's member information menu or by emailing the Chief Privacy Officer below, and the Company processes requests without delay.

② Integrated Account information can be viewed and corrected on KBPlatform.

③ Requests may be made through a representative, who must submit a power of attorney.

④ Deletion cannot be requested for information that must be kept by law.

11. Children Under 14

The Company does not accept members under 14 years of age. If it learns that information of a child under 14 has been collected, it deletes it immediately.

12. Security Measures

• Encrypted storage of passwords and encryption in transit (HTTPS)
• Access limited to designated staff and access records kept
• Intrusion prevention, security updates and regular backups

13. Chief Privacy Officer

• Chief Privacy Officer: Bae Junhyeon
• Contact: help@namdaemun.net

For inquiries, complaints or remedies regarding personal information, contact the address above and the Company will respond and act without delay.

14. Remedies for Infringement

For reports or consultation on infringement of personal information, users may contact:

• Personal Information Infringement Report Center: privacy.kisa.or.kr / 118 (no area code)
• Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
• Supreme Prosecutors' Office: www.spo.go.kr / 1301 (no area code)
• Korean National Police Agency: ecrm.police.go.kr / 182 (no area code)

15. Changes to This Policy

This Policy applies from October 22, 2026. Changes are announced on the Site from 7 days before they apply, and changes important to users' rights from 30 days before. The previous Policy (effective August 18, 2026) is replaced by this Policy.