Privacy Policy
Collection of
General Information
Grievance Handling Department
Remedies for Infringement of Rights
Purpose of Personal Information Processing
Retention Period of Personal Information
Destruction
Procedures and Methods
Changes to the
Privacy Policy
Entrustment of
Personal Information
JYP Entertainment Corporation (hereinafter referred to as the “Company”) complies with the Personal Information Protection Act and related laws to protect the freedom and rights of data subjects. The Company lawfully processes personal information and manages it securely. In accordance with Article 30 of the 「Personal Information Protection Act」, this Privacy Policy has been established and disclosed to inform data subjects of the procedures and standards for personal information processing, and to promptly and smoothly handle related grievances.
1. Purpose, Items, and Retention Period of Personal Information Processing
The Company collects and uses personal information to the minimum extent necessary for the following purposes and processes the following personal information items with the consent of the data subjects. The personal information being processed will not be used for purposes other than those listed below, and if the purpose of use changes, the Company plans to take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
Legal basis
Purpose
Items
Retention Period
Article 15, Paragraph 1, Subparagraph 1 of the Personal Information Protection Act (‘consent’)
Contacting winners and providing prizes
[Required]:Email, SNS ID
One month after prize delivery is completed
2. Procedures and Methods for the Destruction of Personal Information
1) The Company promptly destroys personal information without delay once its retention period has expired or the purpose of processing has been achieved.
2) The procedures and methods for destroying personal information are as follows:
Destruction Procedure
Destruction Method
The Company selects the personal information subject to destruction and obtains approval from the Chief Privacy Officer before proceeding with destruction.
Personal information stored in electronic file format is permanently deleted using a method that prevents recovery or reproduction. Information recorded or stored in paper documents is shredded or incinerated.
3) If certain data must be retained according to other laws despite expiration of retention period or fulfillment of processing purpose, it will be stored in a separate database or stored in a different location.
Retained Information
Retention Period
Legal Basis
Website and app visit records
3 months
Article 15-2 (2) of the Protection of Communications Secrets Act
3. Outsourcing of Personal Information Processing
1) The Company entrusts personal information processing tasks as follows to ensure smooth processing of personal information.
Trustee
Entrusted Tasks
AWS
System operation and data storage via cloud services
Azure
System operation and data storage via cloud services
Google LLC(Google Workspace)
Cloud storage and retention (spreadsheets, etc.)
2) In accordance with Article 26 of the Personal Information Protection Act, when concluding a consignment contract, the Company specifies matters regarding the prohibition of processing personal information for purposes other than the performance of consigned work, technical and administrative protective measures, restrictions on re-consignment, management and supervision of the trustee, and liability for damages in documents such as contracts, and manages and supervises the trustee to ensure that personal information is processed safely.
3) If the content of the consigned work or the trustee changes, we will disclose this without delay through this Privacy Policy
4. Transfer of Personal Information Overseas
The Company transfers personal information overseas as follows, in accordance with Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act, for the purpose of entrusting the processing and storage of personal information. If a data subject does not wish for their personal information to be transferred overseas, they may refuse the transfer by contacting the Chief Privacy Officer; in this case, the use of related services may be restricted.
Recipient (Contact Information)
Country of Transfer
Date and Method of Transfer
Items Transferred
Retention and Usage Period
Google LLC (Contact Privacy Officer: googlekrsupport@google.com)
Countries where Google data centers are located, such as the United States
Frequent transmission via network when using the service
Personal information managed via Google Drive spreadsheets
Same as the retention and usage period in Item 1 above
5. Matters Concerning the Installation and Operation of Automatic Personal Information Collection Devices and Refusal Thereof
1) The Company permits the collection and processing of behavioral information from online personalized advertising providers as follows to identify user inflow/conversion patterns and track user errors/performance.
Advertising business operators intending to collect and process behavioral information
Methods for collecting behavioral information
Items of behavioral information collected and processed
Retention/Usage Period
(Google Analytics 4)
Automatically collected upon web access and usage
Webpage access and usage history
(Personal identification not possible)
3 months from collection
DataDog
(Datadog RUM (Real User Monitoring))
Automatically collected upon web access and usage
Webpage access and usage history
(Personal identification not possible)
3 months from collection
2) The Company collects and uses advertising identifiers to identify user acquisition/conversion patterns and track user errors/performance within the mobile app. Data subjects can block or allow personalized advertisements in the app by changing the settings on their mobile devices.
[Allowing/Blocking Cookies in Web Browsers]
- Chrome: Select the ‘⋮’ icon in the top right corner of the web browser > New Incognito Window (Shortcut: Ctrl+Shift+N)
- Edge: Select the ‘...’ icon in the top right corner of the web browser > New InPrivate Window (Shortcut: Ctrl+Shift+N)
[Allowing/Blocking Cookies in Mobile Browsers]
- Chrome: Select the ‘⋮’ icon in the top right corner of the mobile browser > New Incognito Tab
- Safari: Mobile Device Settings > Safari > Advanced > Block All Cookies
- Samsung Internet: Select the ‘Tab’ icon at the bottom of the mobile browser > Turn on Incognito Mode > Start
6. Measures to Ensure the Security of Personal Information
Category
Details
Administrative Measures
Establishment and implementation of internal management plans, operation of a dedicated department, regular employee training
Technical Measures
Access control for personal information processing systems, installation of access control systems, encryption of personal information, installation and updates of security programs, regular vulnerability assessments and remediation of personal information processing systems
Physical Measures
Access control for computer rooms, data storage rooms, etc.
7. Rights of Data Subjects and How to Exercise Them
1) Data subjects may exercise their rights at any time with respect to their personal information, including requests for access, correction, deletion, suspension of processing, or withdrawal of consent.
2) These rights may be exercised by submitting the designated form in writing, by email, or by other means in accordance with Article 41(1) of the Enforcement Decree of the 「Personal Information Protection Act」. The Company will take prompt action upon receiving such requests.
No. 8 from the “Notice on Personal Information Processing Methods (No. 2023-12)”.pdf
3) These rights may also be exercised by the data subject’s legal representative or authorized agent. In such cases, a power of attorney in the format of Form No. 11 from the same notice must be submitted.
4) The rights to request access to or suspension of personal information may be restricted in accordance with Articles 35(4) and 37(2) of the Personal Information Protection Act.
5) Requests for correction or deletion cannot be granted if the relevant personal information is specified as mandatory under other laws.
6) The Company verifies whether the person requesting access, correction/deletion, or suspension of processing in accordance with the rights of the data subject is the data subject themselves or a legitimate representative.
8. Chief Private Officer and Access Request
1) The Company designates the following individual as the Chief Privacy Officer, who is responsible for overseeing all matters related to personal information processing and for handling complaints and providing relief for data subjects:
2) Data subjects may submit requests for access to their personal information under Article 35 of the Personal Information Protection Act to the above department. The Company will make every effort to process such requests promptly.
3) If you wish to withdraw your membership, please contact the department below and we will process your withdrawal immediately.
Category
Chief Private Officer (CPO)
Department in charge of Access Requests
Name
Shin Jungcheol
-
Title/Department
Director
Technology Strategy Team
Phone Number
+82-2-2225-8100
+82-2-2225-8100
privacy@jype.com
privacyit@jype.com
9. Remedies for Infringement of Rights
The data subject may seek dispute resolution or consultation by applying to institutions such as the Personal Information Dispute Mediation Committee or the Personal Information Infringement Report Center of the Korea Internet & Security Agency in order to obtain relief for any infringement of personal information. For reporting or consultation regarding other personal information infringements, please contact the institutions listed below.
① Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
② Korea Internet & Security Agency (KISA) Personal Information Infringement Center: 118 (privacy.kisa.or.kr)
③ Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
④ National Police Agency: 182 (ecrm.police.go.kr)
10. Changes to the Privacy Policy
This Privacy Policy will take effect on August 24, 2026.
Privacy Policy
Grievance Handling Department
Collection of
General Information
Changes to the
Privacy Policy
Remedies for Infringement of Rights
Purpose of Personal Information Processing
Retention Period of Personal Information
Destruction
Procedures and Methods
Entrustment of
Personal Information
JYP Entertainment Corporation (hereinafter referred to as the “Company”) complies with the Personal Information Protection Act and related laws to protect the freedom and rights of data subjects. The Company lawfully processes personal information and manages it securely. In accordance with Article 30 of the 「Personal Information Protection Act」, this Privacy Policy has been established and disclosed to inform data subjects of the procedures and standards for personal information processing, and to promptly and smoothly handle related grievances.
1. Purpose, Items, and Retention Period of Personal Information Processing
The Company collects and uses personal information to the minimum extent necessary for the following purposes and processes the following personal information items with the consent of the data subjects. The personal information being processed will not be used for purposes other than those listed below, and if the purpose of use changes, the Company plans to take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
Legal basis
Purpose
Items
Retention Period
Article 15, Paragraph 1, Subparagraph 1 of the Personal Information Protection Act (‘consent’)
Contacting winners and providing prizes
[Required]:Email, SNS ID
One month after prize delivery is completed
2. Procedures and Methods for the Destruction of Personal Information
1) The Company promptly destroys personal information without delay once its retention period has expired or the purpose of processing has been achieved.
2) The procedures and methods for destroying personal information are as follows:
Destruction Procedure
Destruction Method
The Company selects the personal information subject to destruction and obtains approval from the Chief Privacy Officer before proceeding with destruction.
Personal information stored in electronic file format is permanently deleted using a method that prevents recovery or reproduction. Information recorded or stored in paper documents is shredded or incinerated.
3) If certain data must be retained according to other laws despite expiration of retention period or fulfillment of processing purpose, it will be stored in a separate database or stored in a different location.
Retained Information
Retention Period
Legal Basis
Website and app visit records
3 months
Article 15-2 (2) of the Protection of Communications Secrets Act
3. Outsourcing of Personal Information Processing
1) The Company entrusts personal information processing tasks as follows to ensure smooth processing of personal information.
Trustee
Entrusted Tasks
AWS
System operation and data storage via cloud services
Azure
System operation and data storage via cloud services
Google LLC(Google Workspace)
Cloud storage and retention (spreadsheets, etc.)
2) In accordance with Article 26 of the Personal Information Protection Act, when concluding a consignment contract, the Company specifies matters regarding the prohibition of processing personal information for purposes other than the performance of consigned work, technical and administrative protective measures, restrictions on re-consignment, management and supervision of the trustee, and liability for damages in documents such as contracts, and manages and supervises the trustee to ensure that personal information is processed safely.
3) If the content of the consigned work or the trustee changes, we will disclose this without delay through this Privacy Policy
4. Transfer of Personal Information Overseas
The Company transfers personal information overseas as follows, in accordance with Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act, for the purpose of entrusting the processing and storage of personal information. If a data subject does not wish for their personal information to be transferred overseas, they may refuse the transfer by contacting the Chief Privacy Officer; in this case, the use of related services may be restricted.
Recipient (Contact Information)
Country of Transfer
Date and Method of Transfer
Items Transferred
Retention and Usage Period
Google LLC (Contact Privacy Officer: googlekrsupport@google.com)
Countries where Google data centers are located, such as the United States
Frequent transmission via network when using the service
Personal information managed via Google Drive spreadsheets
Same as the retention and usage period in Item 1 above
5. Matters Concerning the Installation and Operation of Automatic Personal Information Collection Devices and Refusal Thereof
1) The Company permits the collection and processing of behavioral information from online personalized advertising providers as follows to identify user inflow/conversion patterns and track user errors/performance.
Advertising business operators intending to collect and process behavioral information
Methods for collecting behavioral information
Items of behavioral information collected and processed
Retention/Usage Period
(Google Analytics 4)
Automatically collected upon web access and usage
Webpage access and usage history
(Personal identification not possible)
3 months from collection
DataDog
(Datadog RUM (Real User Monitoring))
Automatically collected upon web access and usage
Webpage access and usage history
(Personal identification not possible)
3 months from collection
2) The Company collects and uses advertising identifiers to identify user acquisition/conversion patterns and track user errors/performance within the mobile app. Data subjects can block or allow personalized advertisements in the app by changing the settings on their mobile devices.
[Allowing/Blocking Cookies in Web Browsers]
- Chrome: Select the ‘⋮’ icon in the top right corner of the web browser > New Incognito Window (Shortcut: Ctrl+Shift+N)
- Edge: Select the ‘...’ icon in the top right corner of the web browser > New InPrivate Window (Shortcut: Ctrl+Shift+N)
[Allowing/Blocking Cookies in Mobile Browsers]
- Chrome: Select the ‘⋮’ icon in the top right corner of the mobile browser > New Incognito Tab
- Safari: Mobile Device Settings > Safari > Advanced > Block All Cookies
- Samsung Internet: Select the ‘Tab’ icon at the bottom of the mobile browser > Turn on Incognito Mode > Start
6. Measures to Ensure the Security of Personal Information
Category
Details
Administrative Measures
Establishment and implementation of internal management plans, operation of a dedicated department, regular employee training
Technical Measures
Access control for personal information processing systems, installation of access control systems, encryption of personal information, installation and updates of security programs, regular vulnerability assessments and remediation of personal information processing systems
Physical Measures
Access control for computer rooms, data storage rooms, etc.
7. Rights of Data Subjects and How to Exercise Them
1) Data subjects may exercise their rights at any time with respect to their personal information, including requests for access, correction, deletion, suspension of processing, or withdrawal of consent.
2) These rights may be exercised by submitting the designated form in writing, by email, or by other means in accordance with Article 41(1) of the Enforcement Decree of the 「Personal Information Protection Act」. The Company will take prompt action upon receiving such requests.
No. 8 from the “Notice on Personal Information Processing Methods (No. 2023-12)”.pdf
3) These rights may also be exercised by the data subject’s legal representative or authorized agent. In such cases, a power of attorney in the format of Form No. 11 from the same notice must be submitted.
4) The rights to request access to or suspension of personal information may be restricted in accordance with Articles 35(4) and 37(2) of the Personal Information Protection Act.
5) Requests for correction or deletion cannot be granted if the relevant personal information is specified as mandatory under other laws.
6) The Company verifies whether the person requesting access, correction/deletion, or suspension of processing in accordance with the rights of the data subject is the data subject themselves or a legitimate representative.
8. Chief Private Officer and Access Request
1) The Company designates the following individual as the Chief Privacy Officer, who is responsible for overseeing all matters related to personal information processing and for handling complaints and providing relief for data subjects:
2) Data subjects may submit requests for access to their personal information under Article 35 of the Personal Information Protection Act to the above department. The Company will make every effort to process such requests promptly.
3) If you wish to withdraw your membership, please contact the department below and we will process your withdrawal immediately.
Category
Chief Private Officer (CPO)
Department in charge of Access Requests
Name
Shin Jungcheol
-
Title/Department
Director
Technology Strategy Team
Phone Number
+82-2-2225-8100
+82-2-2225-8100
privacy@jype.com
privacyit@jype.com
9. Remedies for Infringement of Rights
The data subject may seek dispute resolution or consultation by applying to institutions such as the Personal Information Dispute Mediation Committee or the Personal Information Infringement Report Center of the Korea Internet & Security Agency in order to obtain relief for any infringement of personal information. For reporting or consultation regarding other personal information infringements, please contact the institutions listed below.
① Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
② Korea Internet & Security Agency (KISA) Personal Information Infringement Center: 118 (privacy.kisa.or.kr)
③ Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
④ National Police Agency: 182 (ecrm.police.go.kr)
10. Changes to the Privacy Policy
This Privacy Policy will take effect on August 24, 2026.
Privacy Policy
Collection of
General Information
Grievance Handling Department
Changes to the
Privacy Policy
Remedies for Infringement of Rights
Purpose of Personal Information Processing
Retention Period of Personal Information
Destruction
Procedures and Methods
Entrustment of
Personal Information
JYP Entertainment Corporation (hereinafter referred to as the “Company”) complies with the Personal Information Protection Act and related laws to protect the freedom and rights of data subjects. The Company lawfully processes personal information and manages it securely. In accordance with Article 30 of the 「Personal Information Protection Act」, this Privacy Policy has been established and disclosed to inform data subjects of the procedures and standards for personal information processing, and to promptly and smoothly handle related grievances.
1. Purpose, Items, and Retention Period of Personal Information Processing
The Company collects and uses personal information to the minimum extent necessary for the following purposes and processes the following personal information items with the consent of the data subjects. The personal information being processed will not be used for purposes other than those listed below, and if the purpose of use changes, the Company plans to take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
Legal basis
Purpose
Items
Retention Period
Article 15, Paragraph 1, Subparagraph 1 of the Personal Information Protection Act (‘consent’)
Contacting winners and providing prizes
[Required]:Email, SNS ID
One month after prize delivery is completed
2. Procedures and Methods for the Destruction of Personal Information
1) The Company promptly destroys personal information without delay once its retention period has expired or the purpose of processing has been achieved.
2) The procedures and methods for destroying personal information are as follows:
Destruction Procedure
Destruction Method
The Company selects the personal information subject to destruction and obtains approval from the Chief Privacy Officer before proceeding with destruction.
Personal information stored in electronic file format is permanently deleted using a method that prevents recovery or reproduction. Information recorded or stored in paper documents is shredded or incinerated.
3) If certain data must be retained according to other laws despite expiration of retention period or fulfillment of processing purpose, it will be stored in a separate database or stored in a different location.
Retained Information
Retention Period
Legal Basis
Website and app visit records
3 months
Article 15-2 (2) of the Protection of Communications Secrets Act
3. Outsourcing of Personal Information Processing
1) The Company entrusts personal information processing tasks as follows to ensure smooth processing of personal information.
Trustee
Entrusted Tasks
AWS
System operation and data storage via cloud services
Azure
System operation and data storage via cloud services
Google LLC(Google Workspace)
Cloud storage and retention (spreadsheets, etc.)
2) In accordance with Article 26 of the Personal Information Protection Act, when concluding a consignment contract, the Company specifies matters regarding the prohibition of processing personal information for purposes other than the performance of consigned work, technical and administrative protective measures, restrictions on re-consignment, management and supervision of the trustee, and liability for damages in documents such as contracts, and manages and supervises the trustee to ensure that personal information is processed safely.
3) If the content of the consigned work or the trustee changes, we will disclose this without delay through this Privacy Policy
4. Transfer of Personal Information Overseas
The Company transfers personal information overseas as follows, in accordance with Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act, for the purpose of entrusting the processing and storage of personal information. If a data subject does not wish for their personal information to be transferred overseas, they may refuse the transfer by contacting the Chief Privacy Officer; in this case, the use of related services may be restricted.
Recipient (Contact Information)
Country of Transfer
Date and Method of Transfer
Items Transferred
Retention and Usage Period
Google LLC (Contact Privacy Officer: googlekrsupport@google.com)
Countries where Google data centers are located, such as the United States
Frequent transmission via network when using the service
Personal information managed via Google Drive spreadsheets
Same as the retention and usage period in Item 1 above
5. Matters Concerning the Installation and Operation of Automatic Personal Information Collection Devices and Refusal Thereof
1) The Company permits the collection and processing of behavioral information from online personalized advertising providers as follows to identify user inflow/conversion patterns and track user errors/performance.
Advertising business operators intending to collect and process behavioral information
Methods for collecting behavioral information
Items of behavioral information collected and processed
Retention/Usage Period
(Google Analytics 4)
Automatically collected upon web access and usage
Webpage access and usage history
(Personal identification not possible)
3 months from collection
DataDog
(Datadog RUM (Real User Monitoring))
Automatically collected upon web access and usage
Webpage access and usage history
(Personal identification not possible)
3 months from collection
2) The Company collects and uses advertising identifiers to identify user acquisition/conversion patterns and track user errors/performance within the mobile app. Data subjects can block or allow personalized advertisements in the app by changing the settings on their mobile devices.
[Allowing/Blocking Cookies in Web Browsers]
- Chrome: Select the ‘⋮’ icon in the top right corner of the web browser > New Incognito Window (Shortcut: Ctrl+Shift+N)
- Edge: Select the ‘...’ icon in the top right corner of the web browser > New InPrivate Window (Shortcut: Ctrl+Shift+N)
[Allowing/Blocking Cookies in Mobile Browsers]
- Chrome: Select the ‘⋮’ icon in the top right corner of the mobile browser > New Incognito Tab
- Safari: Mobile Device Settings > Safari > Advanced > Block All Cookies
- Samsung Internet: Select the ‘Tab’ icon at the bottom of the mobile browser > Turn on Incognito Mode > Start
6. Measures to Ensure the Security of Personal Information
Category
Details
Administrative Measures
Establishment and implementation of internal management plans, operation of a dedicated department, regular employee training
Technical Measures
Access control for personal information processing systems, installation of access control systems, encryption of personal information, installation and updates of security programs, regular vulnerability assessments and remediation of personal information processing systems
Physical Measures
Access control for computer rooms, data storage rooms, etc.
7. Rights of Data Subjects and How to Exercise Them
1) Data subjects may exercise their rights at any time with respect to their personal information, including requests for access, correction, deletion, suspension of processing, or withdrawal of consent.
2) These rights may be exercised by submitting the designated form in writing, by email, or by other means in accordance with Article 41(1) of the Enforcement Decree of the 「Personal Information Protection Act」. The Company will take prompt action upon receiving such requests.
No. 8 from the “Notice on Personal Information Processing Methods (No. 2023-12)”.pdf
3) These rights may also be exercised by the data subject’s legal representative or authorized agent. In such cases, a power of attorney in the format of Form No. 11 from the same notice must be submitted.
4) The rights to request access to or suspension of personal information may be restricted in accordance with Articles 35(4) and 37(2) of the Personal Information Protection Act.
5) Requests for correction or deletion cannot be granted if the relevant personal information is specified as mandatory under other laws.
6) The Company verifies whether the person requesting access, correction/deletion, or suspension of processing in accordance with the rights of the data subject is the data subject themselves or a legitimate representative.
8. Chief Private Officer and Access Request
1) The Company designates the following individual as the Chief Privacy Officer, who is responsible for overseeing all matters related to personal information processing and for handling complaints and providing relief for data subjects:
2) Data subjects may submit requests for access to their personal information under Article 35 of the Personal Information Protection Act to the above department. The Company will make every effort to process such requests promptly.
3) If you wish to withdraw your membership, please contact the department below and we will process your withdrawal immediately.
Category
Chief Private Officer (CPO)
Department in charge of Access Requests
Name
Shin Jungcheol
-
Title/Department
Director
Technology Strategy Team
Phone Number
+82-2-2225-8100
+82-2-2225-8100
privacy@jype.com
privacyit@jype.com
9. Remedies for Infringement of Rights
The data subject may seek dispute resolution or consultation by applying to institutions such as the Personal Information Dispute Mediation Committee or the Personal Information Infringement Report Center of the Korea Internet & Security Agency in order to obtain relief for any infringement of personal information. For reporting or consultation regarding other personal information infringements, please contact the institutions listed below.
① Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
② Korea Internet & Security Agency (KISA) Personal Information Infringement Center: 118 (privacy.kisa.or.kr)
③ Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
④ National Police Agency: 182 (ecrm.police.go.kr)
10. Changes to the Privacy Policy
This Privacy Policy will take effect on August 24, 2026.