ChampNote Privacy Policy

Orange Football Network Inc. (hereinafter referred to as the “Company”) collects, uses, and provides personal information based on the consent of the “User” and actively guarantees the “User’s” rights (the right to control one’s own personal information).

To protect the freedom and rights of data subjects, the Company complies with the provisions of the Personal Information Protection Act and related laws, processes personal information lawfully, and manages it safely. In accordance with Article 30 of the Personal Information Protection Act, this privacy policy is established and disclosed to inform data subjects of the procedures and standards for handling personal information and to ensure that any related concerns are addressed promptly and efficiently.

The Privacy (Location) Policy refers to guidelines on protecting the user’s valuable personal information which the Company is required to comply with, in order to ensure that users use its services with confidence.

Purpose of Processing Personal Information, Items to be Collected, Retention and Use Period

The Company collects the minimum necessary personal information required to provide the following services during the membership registration process or while using the Service through the website, individual applications, or programs.

Common (sign-up)

Service	Purpose of Use	Purpose of Collection	Items to be Collected	Retention and Use Period
Information collected during service use	Sign-up	- Confirmation of a member's intention to sign up. - Identification and authentication required for service provision based on membership status. - Maintenance and management of membership. - Prevention of service misuse. - Notifications, notices and grievance handling.	[Required] ID, name, email, mobile phone. [Optional] Profile photo.	Until membership cancellation. However, certain information may be stored for up to 1 year in an encrypted form for duplicate account prevention, follow-up inquiries, or legal obligations. ※ For cases involving investigations, retention may continue until the end of the investigation.
	PR and marketing	- Provision of services and ads based on statistical characteristics, provision of marketing (customized) information.	[Optional] ID, name, email address, child’s information (name, date of birth, gender), mobile phone number, various automatically generated data created during service use, and service usage records (app usage history, search history, misuse history, access logs, cookies), IP address, advertising identifier.	Until the revocation of agreement or membership cancellation. ※ To be retained in accordance with the retention period required by law.
	Errors and complaints	- Verifying the applicant, identifying and resolving the cause based on the reported content, and responding to the report.	[Required] Name, ID, mobile phone number, inquiry details.	Until membership cancellation. ※ To be retained in accordance with the retention period required by law.
	Customer inquiries	- Verifying the inquirer and responding to the inquiry.	[Required] Name, email address, mobile phone number, order number, inquiry details.
	Events	- Event participation and winner announcement, prize delivery.	[Required] Name, address, mobile phone number, ID, email address. <If selected as winner> Name, resident registration number, depositor's name.	Up to six (6) months after withdrawing consent or the conclusion of an event. <If selected as winner> Stored for 5 years and then discarded based on Article 100, Item 25 of the Income Tax Act Enforcement Rules.
	Partnerships	- Matters related to partnership with new sellers and inquiry handling.	[Required] Name, mobile phone number.	Until withdrawal of consent or membership cancellation. ※ To be retained in accordance with the retention period required by law.
	Real-Time information and new service development	- Statistics on the use of a product or a service. - New service development.	[Required] Product/Service usage, generated data, service usage information (such as search history, search terms, usage logs, cookies, information generated in services, OS, device information, IP address).	Until withdrawal of consent or membership cancellation. ※ To be retained in accordance with the retention period required by law.
ChampNote	Photo services	- Provision of Champ Photographer Service.	[Required] Academy, family member (name, ID, device ID), child information (name), child photo, staff member information (name, ID, device ID).	Until withdrawal of consent or membership cancellation. ※ To be retained in accordance with the retention period required by law.
ChampNote	Transmission of invitation messages	- Send invitation messages to the target individuals to be invited as administrators, staff, or family members of the organization.	[Required] Information of the third party to be invited (phone number, email).	7 days after the message is sent.
ChampNote Store	ChampNote store service usage: order and delivery processing	- Order information confirmation. - Product delivery and contract fulfillment. - Refunds and consultation replies.	[Required] Buyer information (ID, name, phone number, email address), recipient information (name, phone number, address), product purchase, cancellation, return, and exchange information, refund account information (account number, account holder name, bank name). [Optional] Additional contact (additional mobile phone number or phone number).	Until the completion of goods/service supply and payment/settlement. ※ To be retained in accordance with the retention period required by law.
ChampNote Store	Ticket product usage: order processing	- Order information confirmation. - Ticket product provision and contract fulfillment. - Refunds and consultation replies.	[Required] Reservation information (name, phone number, email address), user information. [<For delivery products> Name, phone number, email address, address. <For accommodation products> country/region of residence]. Product purchase, cancellation, return, and exchange information, payment method (payment method, payment date), refund account information (account number, account holder name, bank name). [Optional] Additional contact (additional mobile phone number or phone number).	Until the completion of goods/service supply and payment/settlement. ※ To be retained in accordance with the retention period required by law.

Personal Information Items to be Additionally Collected from Family Members

Family members refer to parents who send their children to institutions, such as academies, that use the service. When an institution uses specific features within ChampNote or when a family member makes a purchase in the ChampNote store, the company collects and uses the following information from the family member:

Service	Purpose of Use	Purpose of Collection	Items to be Collected	Retention and Use Period
Information collected during service use	Registration of the information of a child after a Family Member signs up for the service	- Child registration and service provision.	[Required] Child's information (name, date of birth, gender, photo).	Until membership cancellation. ※ If an investigation or inquiry related to a violation of relevant laws is ongoing, the information will be retained until the investigation or inquiry is concluded.
ChampNote	Album	- Share photos and videos to allow checking of the child's institutional activities.	[Required] Photos and videos of the child.	Until membership cancellation. ※ To be retained in accordance with the retention period required by law.
	Notices and announcements	- Share and manage the child's behavior records and daily routines with family members and the institution.	[Required] Child information (photos, videos, behavior record).
	Invoice Issuance Service	- Invoice issuance and notification.	[Required] Family member information (name, phone number).	Until membership cancellation. ※ To be retained in accordance with the retention period required by law.
ChampNote Store	Store service usage: order and delivery processing	- Order information confirmation. - Product delivery and contract fulfillment. - Refunds and customer service replies.	[Required] Child information (name, affiliated academy/class). [Optional] Child's photo.	Until the completion of goods/service supply and payment/settlement. ※ To be retained in accordance with the retention period required by law.

※ The above information may be used for statistical analysis related to service usage.

※ Information that is retained for a certain period before being destroyed according to the legally required retention period is as follows.

Provision	Retained Items	Retention Period
Act on Consumer Protection in Electronic Commerce, etc.	Records on contracts or withdrawal of subscription, payment for goods, and supply of goods, etc.	5 years
	Records on consumer complaints or dispute resolution.	3 years
	Records on labeling/advertising.	6 months
Framework Act on National Taxes	Books and supporting documents for all transactions required by the Act.	5 years
Electronic Financial Transactions Act	Records of electronic financial transactions.	5 years
Protection of Communications Secrets Act	Service visit records.	3 months
Income Tax Act	Handling of taxes and public charges for prize winners.	5 years

Provision of Personal Information to Third Parties

The Company processes the personal information of information subjects only within the scope specified in the Purpose of Processing Personal Information, and provides personal information to third parties only when it falls under Articles 17 and 18 of the Personal Information Protection Act as mentioned in the Consent of the Information Subject and special provisions of the law, and otherwise, does not provide the personal information of information subjects to third parties.

The Company may provide personal information to related organizations without the consent of the data subject in the event of an emergency, such as a disaster, infectious disease, an event or accident that poses an imminent danger to life or body, or an imminent loss of property, in accordance with the “Guidelines for Handling and Protecting Personal Information in Emergency Situations” jointly issued by relevant government departments. For more information, please click here*.

In this case, the Company will provide only the minimum amount of personal information required under the applicable laws and will not provide it for any other purpose.

Personal Information Destruction Process and Methods

The Company will destroy personal information immediately when personal data becomes unnecessary because of expiration of the retention period, achievement of the purpose of processing, etc.
In the event that the Company must continue to preserve the personal information in accordance with other applicable laws even when the personal information retention period agreed by the information subject has elapsed, or the purpose of processing it has been achieved, it may move the personal information to a separate database or store it in a different storage location.
The procedure and method of destroying personal information are as follows.

Destruction Procedure

The Company selects the personal information for which the reason for destruction has occurred and destroys the personal information with the approval of the Company's personal information protection officer.

Method of Destruction

The Company destroys personal information recorded and stored in the form of electronic files so that the records cannot be reproduced, and destroys personal information recorded and stored in paper documents by shredding or incineration.

Information Regarding Long-Term Non-Users

The dormant membership system has been abolished due to the revision of the Personal Information Protection Act* (effective September 15, 2023).

*Relevant sections removed include Article 39-6 (Special Provisions on the Destruction of Personal Information) of the Personal Information Protection Act, and Article 48-5 of the Enforcement Decree of the Personal Information Protection Act, concerning special provisions on the destruction and handling of personal information.

Please note that the Company does not destroy or segregate data of long-term non-users.

Rights and Obligations of Information Subject and Its Statutory Agent, and Method of Exercising Them

Information subjects may exercise the rights to request for access, correction, deletion and suspension of processing of personal information against the Company at any time.

※ Requests for access to personal information about children under the age of 14 must be made directly by a legal representative (in the case of a divorced family, 'legal representative' is limited to those who have both parental and custodial rights, which is the same throughout this policy), and information subjects who are minors over the age of 14 may exercise their rights regarding the personal information of the information subject by themselves or through a legal representative.

Access to or correction of personal information can be made in “Edit Personal Information” (or “Manage Member Information”). An information subject may unregister from the service by clicking “Unregister”, complete the user verification process and choose “Unregister”. The information subject may also contact the Privacy Protection Officer by writing, phone, or email for such requests.
Rights may also be exercised through a legal representative of the information subject or a person who has been delegated with the authority. In this case, the person shall submit a power of attorney using the Attachment #11 template in the Notice on Personal Information Handling (#2020-7).
In terms of a request for access and suspension of processing of personal information, the rights of the information subject may be restricted in accordance with Paragraph 4 of Articles 35, and Paragraph 2 of Article 37 of the Personal Information Protection Act.
A request to delete personal information may not be made if the concerned personal information is prescribed as an item to be collected in other applicable laws.

The Company verifies whether the person making a request for access to, correction, deletion and suspension of processing of personal information based on the rights of information subjects are the information subject themselves, or a legitimate representative.

Privacy Protection Officer and Request for Access to Personal Information

The Company is responsible for the processing of personal information in general, and designates a personal information protection officer as follows to handle complaints and damage relief of information subjects related to the processing of personal information.

Classification	Name/Title	Contact Info
Privacy Protection Officer	Seo, Beomseok/CTO	E-mail: support@champnote.com

The information subject may inquire about all personal information protection-related inquiries, complaints, damage relief, etc. arising from the use of the Company's services (or business) to the person in charge of personal information protection and the department in charge.

Remedies for Infringement on Rights and Interests of Information Subject

The Company guarantees the right for information subjects to control their own personal information, and does its best to provide consultation and relieve damages caused by personal information breach. Please contact the department in charge of privacy protection for reporting or consultation.

Information subjects may contact the Personal Information Dispute Mediation Committee, KISA Report Center for Personal Information Breach, etc. to inquire about dispute resolution or consultation, etc. in terms of damage relief related to personal data infringement. For other reports and consultation on personal information breach, please contact the following organizations.

Personal Information Dispute Mediation Committee: (Toll-free) 1833-6972 (www.kopico.go.kr)
KISA Report Center for Personal Information Breach: (Toll-free) 118 (privacy.kisa.or.kr)
Supreme Prosecutors' Office: (Toll-free) 1301 (www.spo.go.kr)
National Police Agency: (Toll-free) 182 (ecrm.cyber.go.kr)

Where any persons whose rights and interest have been infringed on due to the act or omission of the head of a public institution regarding requests prescribed in Article 35 (Access to Personal Information), Article 36 (Rectification or Erasure of Personal Information) and Article 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act, they may request an administrative appeal under the Administrative Appeals Act.

Central Administrative Appeals Tribunal: (Toll-free) 110 (www.simpan.go.kr)

Facial Data Processing Policy

Purpose of Collection and Use

The app processes facial data only when necessary to provide facial detection and recognition features. Facial data is used solely for implementing the core functionalities of the app and is not used for advertising, analytics, or any other purposes.

Data Processing and Storage

Facial data is analyzed temporarily in real-time, and original images are not stored. After analysis, the data is completely processed to be non-recoverable and is not retained in any form.

Data Sharing

Processed facial data is not provided or shared externally, and there is no secondary use such as selling or providing the data.

Security Measures

The app applies industry-standard security technologies, such as encryption, to ensure safety during the transmission and processing of facial data. We do not combine or cross-reference facial data with other personal information and implement technical and administrative safeguards to prevent information leakage.