Privacy
Policy
Collection of
General Information
Grievance Handling Department
Remedies for Infringement of Rights
Purpose of Personal Information Processing
Retention Period of Personal Information
Destruction
Procedures and Methods
Changes to the
Privacy Policy
Entrustment of
Personal Information
JYP Entertainment Corporation (hereinafter referred to as the “Company”) complies with the Personal Information Protection Act and related laws to protect the freedom and rights of data subjects. The Company lawfully processes personal information and manages it securely.
In accordance with Article 30 of the 「Personal Information Protection Act」, this Privacy Policy has been established and disclosed to inform data subjects of the procedures and standards for personal information processing, and to promptly and smoothly handle related grievances. Changes to personal information collection items or entrusted processors will be disclosed through the website's notice (or individual notification).
1. Purpose, Items, and Retention Period of Personal Information Processing
1) The Company collects personal information based on the data subject’s consent in accordance with Article 15(1)(1) of the 「Personal Information Protection Act」 for the purposes of site use, service proposals, inquiries, and reports.
Purpose
Items
Retention Period
Advertising inquiries, business partnerships, partner feedback, corporate ethics reporting
[Required]: Name, Email[Optional]: Contact Number
12 months
2) The company receives the following personal information from sources other than the data subject.
Purpose
Service name
Provider
Providing affiliate services to FANS paid membership members
Pre-sale of concert and fan meeting tickets available
Blue Garage
2. Processing of Personal Information of Children Under 14
The Company does not collect personal information from children under the age of 14. In cases where it is necessary to collect such information, the consent of a legal guardian will be obtained, and only the minimum information required for the service will be collected. Legal rights of the guardian will be ensured.
3. Procedures and Methods for the Destruction of Personal Information
1) The Company promptly destroys personal information without delay once its retention period has expired or the purpose of processing has been achieved.
2) The procedures and methods for destroying personal information are as follows:
Destruction Procedure
Destruction Method
The Company selects the personal information subject to destruction and obtains approval from the Chief Privacy Officer before proceeding with destruction.
Personal information stored in electronic file format is permanently deleted using a method that prevents recovery or reproduction. Information recorded or stored in paper documents is shredded or incinerated.
3) If certain data must be retained according to other laws despite expiration of retention period or fulfillment of processing purpose, it will be stored in a separate database or stored in a different location.
Retained Information
Retention Period
Legal Basis
Website and app visit records
3 months
Article 15-2 (2) of the Protection of Communications Secrets Act
4. Provision of Personal Information to Third Parties
The Company processes personal information only within the scope specified for the purpose of collection and does not provide personal information to third parties without the data subject’s consent, except in cases permitted under applicable laws such as Article 17 and 18 of the Personal Information Protection Act.
5. Additional Use and Provision of Personal Information
Under Articles 15(3) and 17(4) of the Personal Information Protection Act and Article 14-2 of its Enforcement Decree, the Company may use or provide personal information without the data subject’s consent, considering the following:
① Relevance to the original purpose of collection
② Predictability based on collection circumstances or processing practices
③ Whether the data subject’s interests are unfairly infringed
④ Implementation of safety measures such as pseudonymization or encryption
If such additional use/provision occurs frequently, the Company will disclose the assessment criteria and monitor compliance with those standards.
6. Entrustment of Personal Information ProcessingEntrustment of Personal Information
1) The Company outsources certain tasks to process personal information more efficiently.
Entrusted Party
Task
Blue Garage
Operation of FANS Service
2) When entering into an outsourcing contract, the Company specifies in the agreement or other written document matters concerning the prohibition of personal information processing beyond the scope of the entrusted tasks, technical and managerial protective measures, restrictions on sub-outsourcing, management and supervision of the entrusted party, and liability for damages, under Article 26 of the 「Personal Information Protection Act」. The Company also supervises the entrusted party to ensure that personal information is handled safely."
7. Measures to Ensure the Security of Personal Information
Category
Details
Administrative Measures
Establishment and implementation of internal management plans, operation of a dedicated department, regular employee training
Technical Measures
Access control for personal information processing systems, installation of access control systems, encryption of personal information, installation and updates of security programs, regular vulnerability assessments and remediation of personal information processing systems
Physical Measures
Access control for computer rooms, data storage rooms, etc.
8. Installation, Operation, and Refusal of Automatic Collection Devices
The Company does not use cookies to store or retrieve user information for personalized services.
9. Behavioral Information Collection and Use
1) The Company allows the collection and processing of behavioral information for online personalized advertising as follows:
Advertising Company Collecting and Processing Behavioral Information
Method of Behavioral Information Collection
Items of Behavioral Information Collected/Processed
Retention and Usage Period
Automatically collected and transmitted when users visit Company website or launch the app
Basic user information (age, gender, region, device information), visit history (referral source, visited pages, time spent), search history, purchase history
1 year from the date of collection
2) In its mobile applications, the company collects and uses advertising identifiers for the purpose of delivering online personalized advertisements. Data subjects may enable or disable personalized advertising through their mobile device settings.
[Enabling/Disabling Advertising Identifiers on Smartphones]
(1) Android
① Go to Settings → ② Security & Privacy → ③ Privacy → ④ Ads → ⑤ Reset advertising ID or Delete advertising ID
(2) iPhone (iOS)
① Go to Settings → ② Privacy & Security → ③ Tracking → ④ Turn off Allow Apps to Request to Track
* Menu names and steps may vary depending on the version of the mobile OS.
3) Data subjects may also choose to enable or disable online personalized advertising by adjusting cookie settings in their web browsers. Please note that changing cookie settings may affect certain services, such as automatic login on websites.
[Enabling/Disabling Personalized Ads in Web Browsers]
(1) Internet Explorer (Internet Explorer 11 for Windows 10)
(2) Microsoft Edge
(3) Google Chrome
10. Rights of Data Subjects and How to Exercise Them
1) Data subjects may exercise their rights at any time with respect to their personal information, including requests for access, correction, deletion, suspension of processing, or withdrawal of consent.
2) These rights may be exercised by submitting the designated form in writing, by email, or by other means in accordance with Article 41(1) of the Enforcement Decree of the 「Personal Information Protection Act」. The Company will take prompt action upon receiving such requests.
No. 8 from the Notice on Personal Information Processing Methods (No. 2023-12).pdf
3) These rights may also be exercised by the data subject’s legal representative or authorized agent. In such cases, a power of attorney in the format of Form No. 11 from the same notice must be submitted.
4) The rights to request access to or suspension of personal information may be restricted in accordance with Articles 35(4) and 37(2) of the Personal Information Protection Act.
5) Requests for correction or deletion cannot be granted if the relevant personal information is specified as mandatory under other laws.
6) The Company verifies whether the person requesting access, correction/deletion, or suspension of processing in accordance with the rights of the data subject is the data subject themselves or a legitimate representative.
11. Chief Private Officer and Access RequestGrievance Handling Department
1) The Company designates the following individual as the Chief Privacy Officer, who is responsible for overseeing all matters related to personal information processing and for handling complaints and providing relief for data subjects.
2) Data subjects may submit requests for access to their personal information under Article 35 of the Personal Information Protection Act to the above department. The Company will make every effort to process such requests promptly.
Category
Chief Private Officer (CPO)
Department in charge of Access Requests
Name
Shin Jungcheol
Jeon Youngho
Title / Department
Director
Technology Strategy Team
Phone Number
+82-2-2225-8100
+82-2-2225-8100
privacy@jype.com
privacyit@jype.com
12. Remedies for Infringement of Rights
The data subject may seek dispute resolution or consultation by applying to institutions such as the Personal Information Dispute Mediation Committee or the Personal Information Infringement Report Center of the Korea Internet & Security Agency in order to obtain relief for any infringement of personal information. For reporting or consultation regarding other personal information infringements, please contact the institutions listed below.
① Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
② Korea Internet & Security Agency (KISA) Personal Information Infringement Center: 118 (privacy.kisa.or.kr)
③ Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
④ National Police Agency: 182 (ecrm.police.go.kr)
13. Changes to the Privacy PolicyChanges to the Privacy Policy


Privacy Policy
Grievance Handling Department
Collection of
General Information
Changes to the
Privacy Policy
Remedies for Infringement of Rights
Purpose of Personal Information Processing
Retention Period of Personal Information
Destruction
Procedures and Methods
Entrustment of
Personal Information
JYP Entertainment Corporation (hereinafter referred to as the “Company”) complies with the Personal Information Protection Act and related laws to protect the freedom and rights of data subjects. The Company lawfully processes personal information and manages it securely.
In accordance with Article 30 of the 「Personal Information Protection Act」, this Privacy Policy has been established and disclosed to inform data subjects of the procedures and standards for personal information processing, and to promptly and smoothly handle related grievances. Changes to personal information collection items or entrusted processors will be disclosed through the website's notice (or individual notification).
1. Purpose, Items, and Retention Period of Personal Information Processing
1) The Company collects personal information based on the data subject’s consent in accordance with Article 15(1)(1) of the 「Personal Information Protection Act」 for the purposes of site use, service proposals, inquiries, and reports.
Purpose
Items
Retention Period
Advertising inquiries, business partnerships, partner feedback, corporate ethics reporting
[Required]: Name, Email[Optional]: Contact Number
12 months
2) The company receives the following personal information from sources other than the data subject.
Purpose
Service name
Provider
Providing affiliate services to FANS paid membership members
Pre-sale of concert and fan meeting tickets available
Blue Garage
2. Processing of Personal Information of Children Under 14
The Company does not collect personal information from children under the age of 14. In cases where it is necessary to collect such information, the consent of a legal guardian will be obtained, and only the minimum information required for the service will be collected. Legal rights of the guardian will be ensured.
3. Procedures and Methods for the Destruction of Personal Information
1) The Company promptly destroys personal information without delay once its retention period has expired or the purpose of processing has been achieved.
2) The procedures and methods for destroying personal information are as follows:
Destruction Procedure
Destruction Method
The Company selects the personal information subject to destruction and obtains approval from the Chief Privacy Officer before proceeding with destruction.
Personal information stored in electronic file format is permanently deleted using a method that prevents recovery or reproduction. Information recorded or stored in paper documents is shredded or incinerated.
3) If certain data must be retained according to other laws despite expiration of retention period or fulfillment of processing purpose, it will be stored in a separate database or stored in a different location.
Retained Information
Retention Period
Legal Basis
Website and app visit records
3 months
Article 15-2 (2) of the Protection of Communications Secrets Act
4. Provision of Personal Information to Third Parties
The Company processes personal information only within the scope specified for the purpose of collection and does not provide personal information to third parties without the data subject’s consent, except in cases permitted under applicable laws such as Article 17 and 18 of the Personal Information Protection Act.
5. Additional Use and Provision of Personal Information
Under Articles 15(3) and 17(4) of the Personal Information Protection Act and Article 14-2 of its Enforcement Decree, the Company may use or provide personal information without the data subject’s consent, considering the following:
① Relevance to the original purpose of collection
② Predictability based on collection circumstances or processing practices
③ Whether the data subject’s interests are unfairly infringed
④ Implementation of safety measures such as pseudonymization or encryption
If such additional use/provision occurs frequently, the Company will disclose the assessment criteria and monitor compliance with those standards.
6. Entrustment of Personal Information ProcessingEntrustment of Personal Information
1) The Company outsources certain tasks to process personal information more efficiently.
Entrusted Party
Task
Blue Garage
Operation of FANS Service
2) When entering into an outsourcing contract, the Company specifies in the agreement or other written document matters concerning the prohibition of personal information processing beyond the scope of the entrusted tasks, technical and managerial protective measures, restrictions on sub-outsourcing, management and supervision of the entrusted party, and liability for damages, under Article 26 of the 「Personal Information Protection Act」. The Company also supervises the entrusted party to ensure that personal information is handled safely."
7. Measures to Ensure the Security of Personal Information
Category
Details
Administrative Measures
Establishment and implementation of internal management plans, operation of a dedicated department, regular employee training
Technical Measures
Access control for personal information processing systems, installation of access control systems, encryption of personal information, installation and updates of security programs, regular vulnerability assessments and remediation of personal information processing systems
Physical Measures
Access control for computer rooms, data storage rooms, etc.
8. Installation, Operation, and Refusal of Automatic Collection Devices
The Company does not use cookies to store or retrieve user information for personalized services.
9. Behavioral Information Collection and Use
1) The Company allows the collection and processing of behavioral information for online personalized advertising as follows:
Advertising Company Collecting and Processing Behavioral Information
Method of Behavioral Information Collection
Items of Behavioral Information Collected/Processed
Retention and Usage Period
Automatically collected and transmitted when users visit Company website or launch the app
Basic user information (age, gender, region, device information), visit history (referral source, visited pages, time spent), search history, purchase history
1 year from the date of collection
2) In its mobile applications, the company collects and uses advertising identifiers for the purpose of delivering online personalized advertisements. Data subjects may enable or disable personalized advertising through their mobile device settings.
[Enabling/Disabling Advertising Identifiers on Smartphones]
(1) Android
① Go to Settings → ② Security & Privacy → ③ Privacy → ④ Ads → ⑤ Reset advertising ID or Delete advertising ID
(2) iPhone (iOS)
① Go to Settings → ② Privacy & Security → ③ Tracking → ④ Turn off Allow Apps to Request to Track
* Menu names and steps may vary depending on the version of the mobile OS.
3) Data subjects may also choose to enable or disable online personalized advertising by adjusting cookie settings in their web browsers. Please note that changing cookie settings may affect certain services, such as automatic login on websites.
[Enabling/Disabling Personalized Ads in Web Browsers]
(1) Internet Explorer (Internet Explorer 11 for Windows 10)
(2) Microsoft Edge
(3) Google Chrome
10. Rights of Data Subjects and How to Exercise Them
1) Data subjects may exercise their rights at any time with respect to their personal information, including requests for access, correction, deletion, suspension of processing, or withdrawal of consent.
2) These rights may be exercised by submitting the designated form in writing, by email, or by other means in accordance with Article 41(1) of the Enforcement Decree of the 「Personal Information Protection Act」. The Company will take prompt action upon receiving such requests.
No. 8 from the Notice on Personal Information Processing Methods (No. 2023-12).pdf
3) These rights may also be exercised by the data subject’s legal representative or authorized agent. In such cases, a power of attorney in the format of Form No. 11 from the same notice must be submitted.
4) The rights to request access to or suspension of personal information may be restricted in accordance with Articles 35(4) and 37(2) of the Personal Information Protection Act.
5) Requests for correction or deletion cannot be granted if the relevant personal information is specified as mandatory under other laws.
6) The Company verifies whether the person requesting access, correction/deletion, or suspension of processing in accordance with the rights of the data subject is the data subject themselves or a legitimate representative.
11. Chief Private Officer and Access RequestGrievance Handling Department
1) The Company designates the following individual as the Chief Privacy Officer, who is responsible for overseeing all matters related to personal information processing and for handling complaints and providing relief for data subjects.
2) Data subjects may submit requests for access to their personal information under Article 35 of the Personal Information Protection Act to the above department. The Company will make every effort to process such requests promptly.
Category
Chief Private Officer (CPO)
Department in charge of Access Requests
Name
Shin Jungcheol
Jeon Youngho
Title / Department
Director
Technology Strategy Team
Phone Number
+82-2-2225-8100
+82-2-2225-8100
privacy@jype.com
privacyit@jype.com
12. Remedies for Infringement of Rights
The data subject may seek dispute resolution or consultation by applying to institutions such as the Personal Information Dispute Mediation Committee or the Personal Information Infringement Report Center of the Korea Internet & Security Agency in order to obtain relief for any infringement of personal information. For reporting or consultation regarding other personal information infringements, please contact the institutions listed below.
① Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
② Korea Internet & Security Agency (KISA) Personal Information Infringement Center: 118 (privacy.kisa.or.kr)
③ Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
④ National Police Agency: 182 (ecrm.police.go.kr)
13. Changes to the Privacy PolicyChanges to the Privacy Policy

Privacy Policy
Collection of
General Information
Grievance Handling Department
Changes to the
Privacy Policy
Remedies for Infringement of Rights
Purpose of Personal Information Processing
Retention Period of Personal Information
Destruction
Procedures and Methods
Entrustment of
Personal Information
JYP Entertainment Corporation (hereinafter referred to as the “Company”) complies with the Personal Information Protection Act and related laws to protect the freedom and rights of data subjects. The Company lawfully processes personal information and manages it securely.
In accordance with Article 30 of the 「Personal Information Protection Act」, this Privacy Policy has been established and disclosed to inform data subjects of the procedures and standards for personal information processing, and to promptly and smoothly handle related grievances. Changes to personal information collection items or entrusted processors will be disclosed through the website's notice (or individual notification).
1. Purpose, Items, and Retention Period of Personal Information Processing
1) The Company collects personal information based on the data subject’s consent in accordance with Article 15(1)(1) of the 「Personal Information Protection Act」 for the purposes of site use, service proposals, inquiries, and reports.
Purpose
Items
Retention Period
Advertising inquiries, business partnerships, partner feedback, corporate ethics reporting
[Required]: Name, Email[Optional]: Contact Number
12 months
2) The company receives the following personal information from sources other than the data subject.
Purpose
Service name
Provider
Providing affiliate services to FANS paid membership members
Pre-sale of concert and fan meeting tickets available
Blue Garage
2. Processing of Personal Information of Children Under 14
The Company does not collect personal information from children under the age of 14. In cases where it is necessary to collect such information, the consent of a legal guardian will be obtained, and only the minimum information required for the service will be collected. Legal rights of the guardian will be ensured.
3. Procedures and Methods for the Destruction of Personal Information
1) The Company promptly destroys personal information without delay once its retention period has expired or the purpose of processing has been achieved.
2) The procedures and methods for destroying personal information are as follows:
Destruction Procedure
Destruction Method
The Company selects the personal information subject to destruction and obtains approval from the Chief Privacy Officer before proceeding with destruction.
Personal information stored in electronic file format is permanently deleted using a method that prevents recovery or reproduction. Information recorded or stored in paper documents is shredded or incinerated.
3) If certain data must be retained according to other laws despite expiration of retention period or fulfillment of processing purpose, it will be stored in a separate database or stored in a different location.
Retained Information
Retention Period
Legal Basis
Website and app visit records
3 months
Article 15-2 (2) of the Protection of Communications Secrets Act
4. Provision of Personal Information to Third Parties
The Company processes personal information only within the scope specified for the purpose of collection and does not provide personal information to third parties without the data subject’s consent, except in cases permitted under applicable laws such as Article 17 and 18 of the Personal Information Protection Act.
5. Additional Use and Provision of Personal Information
Under Articles 15(3) and 17(4) of the Personal Information Protection Act and Article 14-2 of its Enforcement Decree, the Company may use or provide personal information without the data subject’s consent, considering the following:
① Relevance to the original purpose of collection
② Predictability based on collection circumstances or processing practices
③ Whether the data subject’s interests are unfairly infringed
④ Implementation of safety measures such as pseudonymization or encryption
If such additional use/provision occurs frequently, the Company will disclose the assessment criteria and monitor compliance with those standards.
6. Entrustment of Personal Information ProcessingEntrustment of Personal Information
1) The Company outsources certain tasks to process personal information more efficiently.
Entrusted Party
Task
Blue Garage
Operation of FANS Service
2) When entering into an outsourcing contract, the Company specifies in the agreement or other written document matters concerning the prohibition of personal information processing beyond the scope of the entrusted tasks, technical and managerial protective measures, restrictions on sub-outsourcing, management and supervision of the entrusted party, and liability for damages, under Article 26 of the 「Personal Information Protection Act」. The Company also supervises the entrusted party to ensure that personal information is handled safely."
7. Measures to Ensure the Security of Personal Information
Category
Details
Administrative Measures
Establishment and implementation of internal management plans, operation of a dedicated department, regular employee training
Technical Measures
Access control for personal information processing systems, installation of access control systems, encryption of personal information, installation and updates of security programs, regular vulnerability assessments and remediation of personal information processing systems
Physical Measures
Access control for computer rooms, data storage rooms, etc.
8. Installation, Operation, and Refusal of Automatic Collection Devices
The Company does not use cookies to store or retrieve user information for personalized services.
9. Behavioral Information Collection and Use
1) The Company allows the collection and processing of behavioral information for online personalized advertising as follows:
Advertising Company Collecting and Processing Behavioral Information
Method of Behavioral Information Collection
Items of Behavioral Information Collected/Processed
Retention and Usage Period
Automatically collected and transmitted when users visit Company website or launch the app
Basic user information (age, gender, region, device information), visit history (referral source, visited pages, time spent), search history, purchase history
1 year from the date of collection
2) In its mobile applications, the company collects and uses advertising identifiers for the purpose of delivering online personalized advertisements. Data subjects may enable or disable personalized advertising through their mobile device settings.
[Enabling/Disabling Advertising Identifiers on Smartphones]
(1) Android
① Go to Settings → ② Security & Privacy → ③ Privacy → ④ Ads → ⑤ Reset advertising ID or Delete advertising ID
(2) iPhone (iOS)
① Go to Settings → ② Privacy & Security → ③ Tracking → ④ Turn off Allow Apps to Request to Track
* Menu names and steps may vary depending on the version of the mobile OS.
3) Data subjects may also choose to enable or disable online personalized advertising by adjusting cookie settings in their web browsers. Please note that changing cookie settings may affect certain services, such as automatic login on websites.
[Enabling/Disabling Personalized Ads in Web Browsers]
(1) Internet Explorer (Internet Explorer 11 for Windows 10)
(2) Microsoft Edge
(3) Google Chrome
10. Rights of Data Subjects and How to Exercise Them
1) Data subjects may exercise their rights at any time with respect to their personal information, including requests for access, correction, deletion, suspension of processing, or withdrawal of consent.
2) These rights may be exercised by submitting the designated form in writing, by email, or by other means in accordance with Article 41(1) of the Enforcement Decree of the 「Personal Information Protection Act」. The Company will take prompt action upon receiving such requests.
No. 8 from the Notice on Personal Information Processing Methods (No. 2023-12).pdf
3) These rights may also be exercised by the data subject’s legal representative or authorized agent. In such cases, a power of attorney in the format of Form No. 11 from the same notice must be submitted.
4) The rights to request access to or suspension of personal information may be restricted in accordance with Articles 35(4) and 37(2) of the Personal Information Protection Act.
5) Requests for correction or deletion cannot be granted if the relevant personal information is specified as mandatory under other laws.
6) The Company verifies whether the person requesting access, correction/deletion, or suspension of processing in accordance with the rights of the data subject is the data subject themselves or a legitimate representative.
11. Chief Private Officer and Access RequestGrievance Handling Department
1) The Company designates the following individual as the Chief Privacy Officer, who is responsible for overseeing all matters related to personal information processing and for handling complaints and providing relief for data subjects.
2) Data subjects may submit requests for access to their personal information under Article 35 of the Personal Information Protection Act to the above department. The Company will make every effort to process such requests promptly.
Category
Chief Private Officer (CPO)
Department in charge of Access Requests
Name
Shin Jungcheol
Jeon Youngho
Title / Department
Director
Technology Strategy Team
Phone Number
+82-2-2225-8100
+82-2-2225-8100
privacy@jype.com
privacyit@jype.com
12. Remedies for Infringement of Rights
The data subject may seek dispute resolution or consultation by applying to institutions such as the Personal Information Dispute Mediation Committee or the Personal Information Infringement Report Center of the Korea Internet & Security Agency in order to obtain relief for any infringement of personal information. For reporting or consultation regarding other personal information infringements, please contact the institutions listed below.
① Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
② Korea Internet & Security Agency (KISA) Personal Information Infringement Center: 118 (privacy.kisa.or.kr)
③ Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
④ National Police Agency: 182 (ecrm.police.go.kr)
13. Changes to the Privacy PolicyChanges to the Privacy Policy