1. Overview
boxcu (the "Company") complies with applicable privacy laws, including the Personal Information Protection Act of Korea. This policy explains how we collect, use, share, and delete personal data.
2. Data We Collect
Sign-up: name, email, password (required)
Service use: recipient name/address/phone, customs information such as personal customs code, order and payment records
Automatically collected: access logs, cookies, device and browser information
3. Purposes of Use
Member identification and account management; performing proxy-purchase and forwarding contracts (ordering, arrival notices, international shipping, customs); payment and settlement; customer support; service improvement and fraud prevention.
4. Retention Period
Data is deleted without delay upon membership withdrawal, except where laws require retention:
Contract/withdrawal/payment/supply records 5 years; consumer complaint/dispute records 3 years; display/advertising records 6 months (E-Commerce Act); access logs 3 months (Protection of Communications Secrets Act).
5. Sharing with Third Parties
To fulfill international shipping, recipient and package details are shared with carriers (EMS/Korea Post, DHL, UPS, etc.) and customs brokers. Payment information necessary for processing is shared with payment gateways.
Other than the above, we do not share personal data without legal grounds or your separate consent.
6. Cross-Border Transfer
Delivery and customs information is transferred to carriers and customs authorities in the destination country, limited to the minimum necessary for fulfillment.
7. Processing Delegation
We may delegate cloud hosting, payment processing, and customer-support tooling to specialized providers, managed and supervised in accordance with applicable law.
8. Your Rights
You may request access, correction, deletion, or suspension of processing of your data at any time via My Page or support@boxcu.com. We will act without undue delay.
10. Security Measures
We apply technical and organizational safeguards including password hashing, TLS encryption in transit, least-privilege access, and access logging.
11. Privacy Officer
Privacy Officer: Jaebin Sim (support@boxcu.com). You may also contact the Personal Information Dispute Mediation Committee or the Privacy Call Center (118) in Korea.
12. Changes to This Policy
Changes will be announced at least 7 days before they take effect.
This document is a standard draft prepared during service development and will be replaced after legal review.