Privacy Policy

Effective date: 1 August 2024

Lanyard Studio (the “Company”) values your personal data and complies with applicable data protection and e-commerce consumer protection law. This policy applies to the website and services provided by the Company.

1. Personal Data We Collect and How

Required and optional items we may collect:

  • Required: name, email, mobile number, delivery address, order and payment history, payment-identifier information, IP address, cookies, access logs, and device information.
  • Optional: company name, department or title, tax-invoice information, marketing-consent status, and reference files (logos, images, text, and so on).
  • Methods: registration, order/quote/enquiry intake, receipt of payment-approval results, and automatic collection through cookies and similar technologies.

We do not collect sensitive data such as health or political views.

2. Purposes of Processing

  • Orders, delivery, and settlement: production and shipping, payment approval and refunds, tax invoicing.
  • Customer support: consultation, after-sales service, complaint handling, and announcements.
  • Operation and improvement: error analysis, quality improvement, statistics, and security.
  • Marketing (optional): events, newsletters, and promotions.
  • Promotional use (optional): using finished work (designs, completed images, production examples) as portfolio and promotional material — excluded on request.

3. Retention Period

  • Member information: until account withdrawal (excluding periods required by law).
  • Order, payment, and delivery records: 5 years, as required by e-commerce law.
  • Consumer complaint and dispute records: 3 years.
  • Logs and access records: 3 months.
  • Proofs and source files: destroyed after 365 days from delivery.

4. Provision to Third Parties

As a rule, the Company does not provide your personal data to outside parties, except where required by law or where you have consented.

5. Processing Consignment

The Company may entrust limited processing to service providers so that it can operate the service:

  • Payment gateway — payment processing (payment identifiers, approval/cancellation records), for the statutory retention period.
  • Hosting / cloud provider — web, database, backup, and security (system logs), until the contract ends.
  • Courier — product delivery (name, contact, address, waybill), for a set period after delivery.
  • SMS / email provider — notifications and marketing (email, phone number), until you unsubscribe or the contract ends.

6. Your Rights

You may request access, correction, deletion, or suspension of processing at any time, through your account page or by email.

7. Security Measures

  • Administrative: internal management plan, regular training, and access management.
  • Technical: encryption, access control, vulnerability checks, and anti-virus.
  • Physical: access control to server rooms and secure record storage.

8. Destruction Procedure

Data is destroyed promptly once the retention period ends or the purpose is fulfilled. Electronic files are destroyed by irrecoverable means and printed materials are shredded or incinerated.

9. Cookies and Similar Technologies

The Company uses cookies, local storage, and similar technologies to provide the service and to analyze usage statistics. These are collected automatically within the scope below, and you can refuse them through your browser settings.

  • Essential (functional): identifiers for keeping you signed in, holding your cart, and preventing security abuse.
  • Analytics: pseudonymous visitor and session identifiers, page paths, referral sources (referrer and UTM parameters), device and browser information, and visit timestamps.

Analytics identifiers are pseudonymized and do not directly identify you. We may use Google Analytics; you can opt out through your browser settings or the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout). Blocking essential cookies may limit sign-in and cart features.

10. Children Under 14

We do not intend to collect personal data from children under 14; if we become aware of it, we destroy it promptly or verify legal-guardian consent.

11. Marketing Messages

Marketing messages are sent only with prior consent and stop immediately when you unsubscribe.

12. Changes to This Policy

We revise this policy when law or the service changes, and announce material changes at least 7 days in advance.

Data Protection Contact

Data protection officer: Taeyun Kim

Email: hello@lanyardstudio.com