Privacy Policy

주식회사 퍼스트플레이트 (the "Company") processes personal information for the following purposes. The personal information being processed is not used for any purpose other than those listed below, and if the purpose of use is changed, the Company will take necessary measures such as obtaining separate consent.

• Member identification and processing of sign-up and withdrawal
• Supporting transactions such as product orders, payment, delivery, and refunds
• Responding to customer inquiries and delivering announcements
• Service security, including prevention of fraudulent use and account theft
• Service improvement and statistical analysis

The Company collects the following personal information during sign-up and use of the service. There are three main methods of collection: (1) automatically provided by the provider with the user's consent during Kakao OAuth authentication, (2) entered directly by the user during the order and payment process, and (3) automatically generated and recorded during use of the service.

Required items — Required for sign-up and to complete transactions; the service can only be used upon consent.

• Kakao OAuth identifier — member identification and login
• Email — retained in the internal profile when provided in the Kakao OAuth response
• Name — verification of the orderer's identity, display on receipts and tax invoices
• Phone number — delivery contact, order/payment/delivery notification messages, identity verification at customer service
• Delivery information (recipient name, delivery address, contact) — processing product delivery and automatically setting the default delivery address at order time

Optional items — The service can be used without consent, but some personalized features will be limited.

• Profile image — display of the avatar on My Page
• Gender — category filtering, size guide, personalized product recommendations
• Age range — controlling exposure of age-restricted products, age-tailored recommendations
• Birthday — issuing birthday coupons and points
• Year of birth — age verification based on actual age, generation-specific product recommendations

Automatically collected items

• Access IP, cookies, service usage records, device information
• Order history, payment history, delivery tracking information

Sensitive payment information (card numbers, account numbers, etc.) is not collected or stored directly by the Company; it is processed separately by an external payment gateway (PG). Connecting Information (CI) for identity verification is not collected.

As a rule, personal information is destroyed without delay once the purpose of its collection and use has been achieved. However, where retention is required by applicable laws, it is kept for the periods below and then destroyed.

• Upon membership withdrawal: destroyed immediately (excluding retention obligations under applicable laws)
• Records on contracts or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records on payment and the supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records on consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce)
• Website visit records (logs): 3 months (Protection of Communications Secrets Act)

The Company processes users' personal information only within the scope of the stated purposes of use, and does not process it beyond the original scope or provide it to third parties without the user's prior consent. The following cases are exceptions.

• The Company provides the seller from whom the user purchased the product with the information necessary to process the order (order details, recipient, delivery address, and contact).
• Where required by the provisions of applicable law or at the request of an investigative agency

The Company outsources the work necessary to provide the service to the external specialized companies below, and specifies obligations related to personal information protection in the outsourcing contracts.

• Baum P&S — card payment processing, payment cancellation and refunds
• Kakao — OAuth authentication
• Cloud infrastructure provider — server hosting, data storage

Users may view or modify their personal information at any time, and may request deletion of their personal information by withdrawing their membership. Users may also request suspension of the processing of their personal information or correction of any errors.

Rights may be exercised directly through the My Page features within the service, or by request to the Personal Information Protection Officer below in writing, by email, etc., and the Company will act without delay.

• Minimizing and regularly training staff who handle personal information
• Access control and privilege management for personal information
• Applying encryption when transmitting and storing personal information
• Installing and periodically updating security programs against hacking and similar threats
• Retaining access logs of the personal information processing system and preventing forgery or tampering

The Company uses cookies to improve the service and provide a personalized experience to users. Users may refuse to store cookies through their web browser settings, in which case the use of some services may be limited.

The Company takes overall responsibility for work related to the processing of personal information and designates a Personal Information Protection Officer as below to handle users' complaints and provide remedies related to personal information processing.

Name

안형준

Organization

주식회사 퍼스트플레이트

Address

서울특별시 동대문구 장한로5길53, 1층

When a seller connects their YouTube channel via Google OAuth in the seller admin, the Company accesses certain Google user data through the YouTube Data API to operate live broadcasts. This section describes what data we access, how we use it, and how it can be removed, in addition to the general policy above.

Data accessed and how it is used

• Channel information (channel name and URL) of the connected account — to display and verify the linked channel.
• Live chat messages of the seller's ongoing live broadcasts — to show chat during the broadcast and, when the seller enables it, to send purchase-completion notification messages to the live chat.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use this data only to operate broadcasts and send order notifications. We do not use it for advertising, and we never sell it or transfer it to third parties except as necessary to provide the service or as required by law.

Google account access tokens are stored only to maintain the connection and are deleted immediately when the seller disconnects using the “Disconnect” button in the seller admin. Sellers can also revoke this app's access at any time from their Google Account security settings.

For more information, see the Google Privacy Policy, the YouTube Terms of Service, and the Google Account security settings.

This Privacy Policy takes effect from 2026-04-23.