To protect the freedoms and rights of data subjects, Mi-hee Won complies with the Personal Information Protection Act of the Republic of Korea and other relevant statutes, ensuring that personal information is processed lawfully and managed securely. Pursuant to Article 30 of the Personal Information Protection Act of the Republic of Korea, Mi-hee Won has established and disclosed this Privacy Policy to guide data subjects on the procedures and standards regarding the processing and protection of personal information, and to ensure that any related grievances are handled swiftly and smoothly.
This Privacy Policy applies from the effective date. In the event of any additions, deletions, or corrections due to changes in relevant laws or operational policies, notice will be given through the website notices section (or via individual notification) at least 7 days prior to the implementation of the changes.
Article 1 (Purpose of Processing Personal Information)
Mi-hee Won processes personal information for the purposes listed below. The processed personal information will not be used for any purpose other than the following. If the purpose of use changes, necessary measures will be implemented, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act of Republic of Korea.
1. Insurance consultation and product introduction
2. Provision of insurance remodeling services
3. Solicitation of insurance contracts
Article 2 (Items of Personal Information Processed)
Mi-hee Won processes the following personal information items upon obtaining consent from the data subject.
1. Insurance Consultation and Product Introduction
- Legal Basis: Article 15, Paragraph 1, Item 1 (‘Consent’) of the Personal Information Protection Act of Republic of Korea
- Items Collected and Used: Name, Contact Number, Product of Interest (Insurance) Details, Inquiries
- Method of Collection: Direct input by the user in the data fields when applying for a consultation on the homepage.
2. Provision of Insurance Remodeling Services
- Legal Basis: Article 15, Paragraph 1, Item 1 (‘Consent’) of the Personal Information Protection Act of Republic of Korea
- Items Collected and Used: Name, Contact Number, Product of Interest (Insurance) Details, Inquiries
- Method of Collection: Direct input by the user in the data fields when applying for a consultation on the homepage.
3. Solicitation of Insurance Contracts
- Legal Basis: Article 15, Paragraph 1, Item 1 (‘Consent’) of the Personal Information Protection Act of Republic of Korea
- Items Collected and Used: Name, Contact Number, Product of Interest (Insurance) Details, Inquiries
- Method of Collection: Direct input by the user in the data fields when applying for a consultation on the homepage.
Article 3 (Period of Processing and Retention of Personal Information)
① Mi-hee Won processes and retains personal information within the personal information retention and use period required by law, or within the period agreed upon when collecting personal information from the data subject.
② The processing and retention periods for each type of personal information are as follows:
1. Insurance Consultation and Product Introduction: 3 months from the date of collection (However, personal information will be destroyed immediately once the purpose of use is achieved).
2. Provision of Insurance Remodeling Services: 3 months from the date of collection (However, personal information will be destroyed immediately once the purpose of use is achieved).
3. Solicitation of Insurance Contracts: 3 months from the date of collection (However, personal information will be destroyed immediately once the purpose of use is achieved).
However, if an investigation or inquiry is underway due to a violation of relevant laws, the information will be retained until the conclusion of the corresponding investigation or inquiry.
Article 4 (Provision of Personal Information to Third Parties)
To provide smooth services, Mi-hee Won provides personal information within the minimum necessary scope only upon obtaining the consent of the data subject pursuant to Article 17, Paragraph 1, Item 1 of the Personal Information Protection Act of Republic of Korea.
| Recipient | Purpose of Provision | Items Provided | Period of Retention and Use |
| Samsung Life Insurance Co., Ltd. Hanwha Life Insurance Co., Ltd. NH NongHyup Life Insurance Co., Ltd. Tongyang Life Insurance Co., Ltd. MetLife Insurance Company of Korea Limited KB Life Insurance Mirae Asset Life Insurance Co., Ltd. Kyobo Life Insurance Co., Ltd. KDB Life Insurance Co., Ltd. DB Insurance Co., Ltd. iM Life Insurance Co., Ltd. Heungkuk Life Insurance Co., Ltd. ABL Life Insurance Co., Ltd. LINA Life Insurance Co., Ltd. Shinhan Life Insurance Co., Ltd. Chubb Life Insurance Korea Co., Ltd. Hana Life Insurance Co., Ltd. AIA Life Insurance Co., Ltd. Fubon Hyundai Life Insurance Co., Ltd. Chubb Fire & Marine Insurance Company Samsung Fire & Marine Insurance Co., Ltd. Hyundai Marine & Fire Insurance Co., Ltd. KB Insurance Co., Ltd. Meritz Fire & Marine Insurance Co., Ltd. Lotte Insurance Co., Ltd. Hanwha General Insurance Co., Ltd. Heungkuk Fire & Marine Insurance Co., Ltd. NH NongHyup Property & Casualty Insurance Co., Ltd. AIG General Insurance Company Korea, Ltd. Hana Insurance Co., Ltd. | Confirming Insurance Premiums | Name, Contact Number | 3 months from the date of collection |
| Insurance Planner Mi-hee Won (Registration No: 20240520001059, Contact: 010-9816-2124) | Insurance consultation, product introduction, and solicitation of insurance contracts | Same as above | Same as above |
※ Customers have the right to refuse consent to the provision of personal information as stated above. However, if consent is refused, the use of the corresponding services (insurance consultation, product introduction, and solicitation of insurance contracts) may be partially restricted.
Article 5 (Procedure and Method of Personal Information Destruction)
① Mi-hee Won will destroy personal information without delay when it becomes unnecessary, such as upon the expiration of the retention period or achievement of the processing purpose, or when a customer requests to withdraw consent, delete, or destroy their personal information.
② If personal information must continue to be preserved pursuant to other statutes despite the expiration of the retention period agreed upon by the data subject or the achievement of the processing purpose, the corresponding personal information will be transferred to a separate database (DB) or stored in a different location.
(The specific items of personal information preserved under other statutes and their legal grounds can be verified in ‘Article 3: Period of Processing and Retention of Personal Information’.)
③ The procedure and methods of personal information destruction are as follows:
1. Destruction Procedure: Mi-hee Won selects the personal information for which destruction reasons have occurred and destroys it upon receiving approval from Mi-hee Won’s Privacy Officer.
2. Destruction Method: Mi-hee Won destroys personal information recorded or stored in the form of electronic files using technical methods that render the records unreproducible, and personal information recorded or stored on paper documents will be destroyed through shredding with a shredder or incineration.
Article 6 (Measures to Ensure the Safety of Personal Information)
In handling users’ personal information, Mi-hee Won devises the following technical and administrative measures to ensure safety so that personal information is not lost, stolen, leaked, altered, or damaged.
- A. Conducting Regular Self-Audits: Self-audits are conducted regularly (once a quarter) to ensure safety related to personal information handling.
- B. Establishment and Implementation of an Internal Management Plan: An internal management plan is established and implemented for the secure processing of personal information.
- C. Encryption of Personal Information: Users’ personal information is stored and managed in an encrypted form, and separate security functions are used, such as encrypting files and transmitted data or using a file-lock feature.
- D. Restricting Access to Personal Information: Access control is maintained by granting, changing, and canceling access rights to the database system that processes personal information, and unauthorized access from the outside is controlled using an intrusion prevention system.
- E. Use of Locking Devices for Document Security: Documents, auxiliary storage media, etc., that contain personal information are stored in a safe place equipped with a locking mechanism.
- F. Access Control for Unauthorized Persons: A separate physical storage location for personal information is maintained, and access control procedures for it are established and operated.
Article 7 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)
Mi-hee Won does not use cookies to store and periodically retrieve utilization information for the user’s web browsing convenience.
Article 8 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them)
① A data subject may exercise their rights to access, transfer, correct, delete, suspend the processing of, or withdraw consent for their personal information (hereinafter referred to as “Exercising Rights”) against Mi-hee Won at any time.
(The exercise of rights for children under the age of 14 must be performed directly by their legal representative. Minor data subjects aged 14 or older may exercise rights regarding their own personal information independently or through their legal representative.)
② The exercise of rights can be made in writing, via phone, email, facsimile (FAX), or the internet to Mi-hee Won in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act of Republic of Korea, and Mi-hee Won will take action without delay.
③ The exercise of rights may also be performed through a representative, such as a legal representative of the data subject or an authorized person. In this case, a power of attorney must be submitted in accordance with Form [Attached Sheet 11] of the “Notice on Personal Information Processing Methods.”
④ Requests for access to and suspension of processing of personal information may restrict the rights of the data subject pursuant to Article 35, Paragraph 4, and Article 37, Paragraph 2 of the Personal Information Protection Act of Republic of Korea.
⑤ A request for deletion of personal information cannot be made if the personal information is explicitly specified as an object of collection under other statutes.
⑥ Mi-hee Won verifies whether the person making the request according to the data subject’s rights is the person themselves or a legitimate representative.
⑦ Data subjects may submit their requests to exercise rights to the department listed below. Mi-hee Won will respond within 10 days (or without delay in the case of data transfer requests) from the date the request is received.
▶Department for Requesting and Processing the Exercise of Personal Information Rights
- Department Name: Mi-hee Won
- Address: #502, M7 Tower, 133 Magokseo-ro, Gangseo-gu, Seoul
- Contact Number: 010-9816-2124
Article 9 (Privacy Officer)
① Mi-hee Won takes overall responsibility for matters related to personal information processing, and has designated a Privacy Officer as follows to handle complaints and provide remedies for damages suffered by data subjects regarding personal information processing.
▶Privacy Officer
- Name: Mi-hee Won
- Contact Number: 010-9816-2124
▶Department in Charge of Personal Information Protection
- Department Name: Mi-hee Won
- Contact Number: 010-9816-2124
② Data subjects may inquire about all personal information protection-related queries, complaint handling, damage relief, etc., that occur while using the services (or business) of Mi-hee Won to the Privacy Officer and the department in charge. Mi-hee Won will respond to and process inquiries from data subjects without delay.
Article 10 (Remedies for Infringement of Rights and Interests)
To obtain remedies for personal information infringement, data subjects may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, etc. For other reports or consultations regarding personal information infringement, please contact the institutions below:
1. Personal Information Dispute Mediation Committee: 1833-6972 (without area code) (www.kopico.go.kr)
2. Personal Information Infringement Report Center: 118 (without area code) (privacy.kisa.or.kr)
3. National Police Agency: 182 (without area code) (ecrm.police.go.kr)
Article 11 (Changes to the Privacy Policy)
This Privacy Policy shall enter into force on June 22, 2026.