All personal information handled by AllMyKids (hereinafter "the Organization") is collected, retained, and processed in accordance with the Personal Information Protection Act (개인정보 보호법) and related laws, or with the consent of the data subject.

Article 1. Purpose of Collection and Use of Personal Information

The Organization uses collected personal information for the following purposes:

• 1) Donor Membership Management — Confirmation of membership registration and withdrawal, restriction of use for members who violate terms of service, record keeping for dispute resolution, complaint handling and delivery of notices
• 2) Donation Processing and Service Provision — Donation payment (regular CMS / one-time donations), donation withdrawals, donation history management, donation usage reporting, financial transaction identity verification
• 3) Donation Receipt Issuance — Issuance and history management of donation receipts for year-end tax settlement
• 4) Newsletter and News Distribution — Organization activity updates, overseas child support status, campaign information, and public notices
• 5) Non-member One-time Donation Processing — Processing non-member one-time donations through identity verification, donation history confirmation, and receipt issuance
• 6) Complaint and Grievance Handling — Receiving and processing donor inquiries and complaints, notifying results

Article 2. Personal Information Items Collected

§ 1. Upon Donor Membership Registration

• [Individual Members] Required: Name, gender, date of birth, mobile phone number, address, payment method, donation amount, donation receipt request status / Optional: Email, marketing consent, sign-up channel
• [Corporate/Organization Members] Required: Company/organization name, contact person name, mobile phone number, email
• [Foreign Members] Required: Name (English), gender, date of birth, mobile phone number, address, payment method, donation amount
• [Kakao Simple Login] Required: Kakao account linking information

§ 2. Payment Information for Donations

CMS automatic transfer, credit card, real-time bank transfer, simple payment, etc.

§ 3. When Applying for Donation Receipts

Donor's resident registration number (only when applying for issuance)

§ 4. Non-member One-time Donations

Name, date of birth, mobile phone number, and payment information confirmed through identity verification

§ 5. Automatically Collected During Service Use

IP address, cookies, service usage records, access logs

Article 3. Consent to Collection and Use of Unique Identification Information

Resident registration numbers are collected for the purpose of issuing donation receipts and are destroyed after being retained for 5 years.

Article 4. Retention and Use Period of Personal Information

• Basic member information: Until membership withdrawal
• Donation carryover deduction records: 10 years
• Donation receipt issuance history: 5 years
• Contract/subscription withdrawal records: 5 years
• Payment records: 5 years
• Electronic financial transaction records: 5 years
• Consumer complaint/dispute handling records: 3 years
• Service access logs: 3 months

Article 5. Provision of Personal Information to Third Parties

• Korea Financial Telecommunications & Clearings Institute — CMS automatic transfer
• NICE Information Service — Credit card, bank transfer, simple payment

Article 6. Outsourcing of Personal Information Processing

• Cafe24 — Web hosting
• HumanSoftware — Donor management solution
• Kakao — Login authentication

Article 7. Rights of Users and Legal Representatives

Data subjects (or their legal representatives) may exercise the following rights regarding personal information at any time:

• Right to access personal information
• Right to request correction
• Right to request deletion
• Right to request suspension of processing
• Right to withdraw consent

Article 8. Procedures and Methods for Destruction of Personal Information

When personal information is no longer needed, the Organization destroys it without delay using the following methods:

• Electronic files: Permanently deleted using methods that prevent data recovery
• Paper documents: Shredded or incinerated

Article 9. Measures to Ensure the Security of Personal Information

The Organization implements the following measures to ensure the security of personal information:

• Encryption of personal information
• Countermeasures against hacking
• Access authority management
• Administrative and physical security measures

Article 10. Right to Refuse Consent and Notice of Disadvantages

Data subjects have the right to refuse consent to the collection and use of personal information. However, refusal of consent to required items may result in restrictions on membership registration or service use.

Article 11. Operation of Cookies

The Organization uses cookies to provide personalized services. Users may allow or refuse cookie storage through their browser settings.

• Chrome: Settings > Privacy and security > Cookies
• Edge: Settings > Cookies and site permissions
• Safari: Preferences > Privacy

Article 12. Privacy Protection Officer

• Name: Park Seong-bin (박성빈)
• Position: Head of International Cooperation Team
• Email: support@allmykids.org

Article 13. Remedies for Rights Infringement

Data subjects may contact the following organizations for resolution of personal information-related disputes:

• Personal Information Dispute Mediation Committee: 1833-6972
• KISA Personal Information Infringement Report Center: 118
• National Police Agency Cyber Bureau: 182
• Supreme Prosecutors' Office Cybercrime Investigation Unit: 02-3480-3573

Article 14. Changes to the Privacy Policy

Any revisions to this privacy policy will be announced at least 7 days prior to their effective date through the website notice board.