Privacy policy

BAI Genomics Privacy Policy: BAI Genomics Co., Ltd. (hereinafter referred to as the 'Company') provides BAI Genomics services (hereinafter referred to as the 'Service') to users in accordance with the Personal Information Protection Act, International Act on the Use and Protection of Credit Information and other relevant laws and regulations. We handle personal information (hereinafter the same) safely and lawfully.

01. Purpose of this Privacy Policy

The company transparently discloses how users' personal information is handled through this privacy policy. Users can check what personal information the company collects, how it uses the collected personal information, and when it is destroyed through this privacy policy.

Users may request the Company to view, correct, delete, or suspend processing of their personal information, and may make a request to the Company.

02. Personal information collected by the company

02-1. Personal information collected when registering as a member

When a user registers for membership, contacts, DNA Health Test, inquiries, Name, Date of Birth, Gender, Height / Weight, Nationality, Contact Number, Email, Address, Blood type, desired nutritional supplement, usual physical problems, Collect or create family member's disease information.

02-2. Personal Information Collected in the Process of Using the Service

The company collects personal information that the user transmits to the company by exercising the right to request transmission as stipulated in the relevant international laws in the process of using the service. The information that the user can request for transmission includes Name, Date of Birth, Gender, Height / Weight, Nationality, Contact Number, Email, Address, Blood type, desired nutritional supplement, usual physical problems, and family disease. In consideration of technical circumstances, etc., we provide a means to request transmission of all or part of this information, of which the user actually requests transmission and collects personal information transmitted to the company. Users use the service to check their health status and manage their health.

Genetic test information includes Name, Date of Birth, Gender, Height / Weight, Nationality, Contact Number, Email, Address, Blood type, desired nutritional supplement, usual physical problem, family disease, genetic analysis result, address, kit delivery, etc. Includes progress information

Directly entered information and DNA information includes the user's health habits settings and implementation history.

Users can use the service for better benefits or convenience, and in the process, the company may collect additional information necessary for this

When participating in events and conducting surveys and interviews with specific users, the information the company collects includes name, mobile phone number, gender, age, and survey and interview answer information.

In order to handle user inquiries, the company may collect personal information included in the inquiry contents.

When using the data export function, the company collects the email address to receive data and the password set by the user

In the process of using the service, device information such as IP, terminal information, connection history, OS version, and advertisement identifier used by the user may be automatically generated or collected. In addition, the company collects behavioral information including the user's use of services (including services of third parties connected through the service - advertisements). Login information (ID, password) may be used by users to access services from other institutions, places, and terminals.

03. Purpose of processing personal information by the company

The company processes users' personal information for the following purposes.

The company processes users' personal information so that users can understand their health information and manage their health. For example, based on the results of the user's DTC genetic test, it makes it easy to understand the user's health condition, and helps users manage their health by recommending healthy habits, exercise, products or services based on various information.

The company processes users' personal information to make it convenient for users to use various functions within the service, to improve the service, and to develop new functions. In addition, it analyzes users' personal information to advise/provide health management information and to receive better services. The company provides better benefits and convenience to users by improving existing functions or developing new functions based on various information such as users' service use records, access frequency, connected data, statistical data, and user opinions.

The company processes users' personal information to provide functions that users can effectively manage and utilize their information. The company processes users' personal information in order to provide users with the ability to effectively control their information.

The company processes users' personal information to protect the safe service use environment and to protect the legitimate interests of the company and users. For example, the company processes users' personal information for user identification and identity verification, age verification, verification of whether another person's name or access medium is used, confirmation of intention to withdraw from membership, member management, complaint handling, dispute resolution, etc. In addition, restrictions on use of users who violate relevant international laws and terms of use, restrictions on re-registration, measures to detect and prevent illegal service use, prevention of various frauds, reinforcement of service security and improvement of personal information processing methods, etc. We process users' personal information for this purpose.

The company processes users' personal information in order to provide users with various information about service use and other useful information and advertisements. For example, in order to provide users with necessary and useful information, such as notification of new function addition or function change, notification of service use method change, service interruption and failure notification, event introduction, product or service advertisement, etc. We process personal data.

The company may use the user's personal information to promote the service itself. For example, personal information such as opinions of certain users may be anonymously included in service promotional materials.

The company may process users' personal information in order to comply with the obligations under the relevant laws. For example, we may provide user information based on legitimate requests from law enforcement agencies and on legitimate grounds.

The company may pseudonymize the user's personal information and process it in accordance with the relevant international laws. In addition, to the extent reasonably related to the purpose of collection, personal information of users may be used or provided without the user's additional consent in accordance with relevant international laws. Furthermore, a group of anonymized information of all users' personal information may be provided or processed in accordance with relevant laws and regulations.

04. Personal information retention period and destruction

When a user wishes to withdraw from membership, the company destroys or anonymizes the user's personal information in accordance with the relevant terms and conditions. However, in order to prevent abuse and illegal use of the service, to handle disputes and civil complaints after withdrawal, to manage members such as restrictions on re-registration, and to comply with related laws, the company must provide identification information, membership registration and withdrawal date, reasons for withdrawal, records of illegal use, and complaint handling details. Retained for up to 5 years after membership withdrawal.

The company safely stores users' personal information for a certain period of time if required by relevant international laws. The cases in which the company must keep personal information in accordance with laws and regulations are as follows.

Customer confirmation information: 5 years

Records on consumer complaints or dispute resolution: 3 years

Records on membership registration: 5 years

Records on display/advertisement: 3 years

When the company needs to destroy personal information, the company destroys the personal information in a way that cannot be reproduced, or anonymizes the information so that a specific individual information subject can no longer be identified. Even in the case of personal information stored by the company for a certain period in accordance with relevant laws and regulations, if the period has elapsed, it will be safely destroyed or anonymized in the same way as above.

05. Exercise of rights of users and legal representatives

Users may request to view, correct, delete, or suspend processing of the user's personal information held by the company. The company may request a copy of ID or other technical means to verify the identity of the user. In addition, the company may prepare the necessary form to handle such request and request that the user fill out and submit it.

Furthermore, the user can modify the member information in the MY menu, and also have the right to stop the service at any time and have his or her personal information destroyed or anonymized. The Company assists users in correcting or deleting such information where technically possible.

The user's legal representative may request the user's personal information to be viewed, corrected, deleted, or to suspend processing on behalf of the user. The company may prepare the necessary form and request the legal representative to fill out the form and submit data to prove the right of representation. Users or their legal representatives can exercise these rights by using the ‘Customer Center’ or by contacting the personal information protection department below.

06. Matters concerning the installation, operation and rejection of automatic information collection devices

In order to provide customized services to users and to improve the service use environment, the company uses 'cookies' that store and retrieve users' service use information from time to time.

When a user visits the website, the website reads the cookie stored on the user's device, maintains the user's preferences, and provides customized services. Cookies are used to increase the convenience of users when they visit the website.

Users have the option to install cookies. Therefore, by setting the options of the web browser, the user can allow all cookies, check each time a cookie is saved, or reject all cookies. However, if you refuse to store cookies, there may be difficulties in using services that need to store user's setting information.

07. Securing personal information safety

The company is taking measures to ensure safety so that users' personal information is not lost, stolen, leaked, altered or damaged. The company complies with the technical/administrative protection obligations required by relevant laws, such as the Personal Information Protection Act and the Act on the Use and Protection of Credit Information, and is making every effort to ensure that users' personal information is safely protected.

Furthermore, the company establishes and enforces an internal policy for personal information protection, and checks whether personal information is sufficiently protected during service development and operation. In addition, we regularly conduct company-wide training and inspections to ensure that all employees of the company consider the protection of users' personal information as their top priority. The company is also taking technical protection measures, such as managing access rights to personal information and encryption, to prevent leakage or damage to users' personal information by hacking or computer viruses.

08. Handling of personal information-related grievances

The company operates a ‘customer center’ within the service to promptly handle user complaints including personal information processing. Users can ask questions through the ‘Customer Center’ and request necessary actions. For inquiries about the customer center, please contact us through Contact Us.

The company has a department that conducts personal information protection tasks. If handling grievances through the customer center is not sufficient, you can contact the department below. Department of Personal Information Protection: Legal Team (Please contact us through Contact Us)

09. Personal information processing policy for individual services

The company may establish and operate a separate personal information processing policy for specific services provided by the company in order to comply with relevant international laws and regulations and orders of regulatory agencies.