전체상품목록 바로가기

본문 바로가기

Login Sign Up
 
 
Image

HOME

 Image

MY

 Image

CART

 Image

RECENT

 Image

CONTACT
{#imgTag_1_or_video_1}
{#imgTag_2_or_video_2}

NEW & HOT

Discover PLOTOY's new and popular products.

ABOUT CHARACTERS

Meet PLOTOY's diverse characters.

01
05

REVIEW

Honest reviews from customers who purchased PLOTOY products.

@plotoy

Check out PLOTOY's Instagram.

Follow usFollow us
Close popup

Privacy Policy

Studio Origin Co., Ltd. (hereinafter referred to as the “Company”) establishes and discloses this Privacy Policy as follows in accordance with Article 30 of the “Personal Information Protection Act” to protect users’ personal information and to ensure that any related grievances are handled promptly and smoothly.

1. Purpose of Personal Information Processing
The Company processes personal information for the following purposes. The personal information being processed will not be used for any purposes other than those listed below, and if the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the “Personal Information Protection Act.”
(1) Website Membership Registration and Management
We process personal information to confirm the user’s intent to register, identify and authenticate users for membership-based services, maintain and manage membership status, prevent unauthorized use of services, verify consent from a legal representative when processing the personal information of children under the age of 14, send various notices and notifications, and handle complaints.
(2) Provision of Goods or Services
We process personal information for the purposes of providing content; processing purchases and payments; shipping goods or sending invoices; providing services; offering personalized services; and verifying identity and age.
(3) Use for Marketing and Advertising
We process personal information for the purposes of providing events and promotional information, offering opportunities to participate, analyzing access frequency, and compiling statistics on members’ service usage.
(4) Handling Complaints
We process personal information for purposes such as verifying the identity of the complainant, confirming the details of the complaint, contacting or notifying the complainant for fact-finding, and notifying the complainant of the resolution outcome.

2. Period of Processing and Retention of Personal Information
(1) The Company processes and retains personal information within the retention and use period for which consent was obtained from the data subject at the time of collection. Once the purpose of processing personal information has been achieved or upon a request from the data subject to terminate the service, the Company will destroy the relevant personal information without delay. The specific periods for processing and retaining personal information are as follows:
① Website Membership Registration and Management: Until the member withdraws from the service
② Provision of Goods or Services: Until the supply of goods or services is completed and payment and settlement are finalized
(2) However, if retention is required under relevant laws and regulations, the Company will retain member information for the specific periods stipulated by such laws and regulations, as follows:
① Records related to contracts or withdrawal of offers
- Reason for retention: Act on Consumer Protection in Electronic Commerce, etc.
- Retention period: 5 years
② Records related to payment and the supply of goods, etc.
- Reason for retention: Act on Consumer Protection in Electronic Commerce, etc.
- Retention period: 5 years
③ Records related to the handling of consumer complaints or disputes
- Reason for retention: Act on Consumer Protection in Electronic Commerce, etc.
- Retention period: 3 years
④ Records related to labeling and advertising
- Reason for retention: Act on Consumer Protection in Electronic Commerce, etc.
- Retention period: 6 months
⑤ Service visit records
- Reason for retention: Act on the Protection of Communications Secrecy
- Retention period: 3 months

3. Categories of Personal Information Processed and Methods of Collection
(1) Categories of Personal Information Processed
① The Company collects the following personal information for purposes such as membership registration, consultations, and service applications.
- For general membership registration  
Required fields: ID, password, name, email, mobile phone number, date of birth, (for members under 14 years of age) legal guardian information
 
Optional items: Gender
- When placing an order  
Required items: Order information (name, email, mobile phone number), shipping information (name, address, mobile phone number), (for non-member orders) order inquiry password  
Optional items: Landline number
- When logging in via Kakao Easy Login  
Required fields: Name
- When logging in via Naver Easy Login  
Required fields: ID, Name, Email  
Optional fields: Nickname, Birthday
② The following information may be generated and collected during the course of service use or business operations.
- Service usage history, access logs, cookies, IP address information, payment records, service suspension records, and records of improper use
(2) Collection Methods
- Website, written forms, bulletin boards, email, event entries, shipping requests, phone, fax, information provided by partner companies, and collection via automated data collection tools

4. Matters Concerning the Processing of Personal Information of Children Under the Age of 14
(1) When collecting personal information from children under the age of 14, the Company obtains consent from their legal representative and collects only the minimum amount of personal information necessary to provide the relevant service.
- Required Items: [List of personal information collected via the legal guardian consent form]
(2) When collecting personal information from children under the age of 14, the Company may request minimal information from the child, such as the legal guardian’s name and contact information, and verifies whether a lawful legal guardian has given consent using one of the following methods:
- A method in which the legal guardian indicates consent on a website displaying the consent terms, and the personal information processor notifies the legal guardian via text message to their mobile phone that the consent indication has been confirmed
- A method in which the legal guardian indicates consent on a website displaying the consent terms, and the Company receives the legal guardian’s credit card or debit card information
- A method in which the legal representative indicates their consent on a website displaying the consent terms, and the personal information processor verifies the legal representative’s identity through mobile phone authentication or similar means
- A method in which a written document containing the consent terms is issued directly to the legal representative or delivered via mail or fax, and the legal representative is required to sign and seal the document before submitting it
- Sending an email containing the consent terms and receiving an email from the legal representative indicating their consent
- Informing the legal representative of the consent terms by phone to obtain consent, or providing instructions on how to review the terms (e.g., via a web address), and then obtaining consent through a follow-up phone call
- Any other method equivalent to those listed above for informing the legal representative of the consent terms and verifying their expression of consent

5. Matters Concerning the Provision of Personal Information to Third Parties
(1) The Company processes the data subject’s personal information only within the scope specified in Article 1 (Purpose of Personal Information Processing) and provides personal information to third parties only in cases falling under Articles 17 and 18 of the “Personal Information Protection Act,” such as with the data subject’s consent or pursuant to special provisions of law.
(2) In accordance with the “Guidelines for the Processing and Protection of Personal Information in Emergency Situations” jointly announced by relevant government ministries, the Company may provide personal information to relevant agencies without the data subject’s consent in the event of an emergency, such as a disaster, infectious disease, an incident or accident posing an imminent threat to life or physical safety, or imminent property loss.
For more details, please click here*.

6. Matters Concerning the Outsourcing of Personal Information Processing
(1) To ensure the smooth handling of personal information, the Company outsources personal information processing tasks as follows.

Contractor
Outsourced Tasks
Cafe24 Co., Ltd.
Provision and maintenance of the online store hosting service system
Hanjin Express
Parcel shipping and delivery services
Toss Payments
Provision and maintenance of the payment system

(2) When entering into an outsourcing contract, the Company specifies in the contract or other documents—in accordance with Article 26 of the “Personal Information Protection Act”—matters such as the prohibition of processing personal information for purposes other than those specified in the contract, technical and administrative protective measures, restrictions on re-outsourcing, management and supervision of the contractor, and liability for damages, and supervises the contractor to ensure the secure processing of personal information.
(3) If the scope of outsourced tasks or the contractor changes, we will disclose such changes without delay through this Privacy Policy.

7. Procedures and Methods for the Destruction of Personal Information
The Company destroys personal information without delay when it is no longer necessary, such as upon the expiration of the retention period or the achievement of the purpose of processing.
(1) Destruction Procedures
① If personal information must be retained in accordance with other laws and regulations even after the retention period agreed upon with the data subject has expired or the purpose of processing has been achieved, the Company will transfer such personal information to a separate database (DB) or store it in a different location.
② Personal information transferred to a separate DB will not be used for any other purpose, except as required by law.
(2) Methods of Destruction
① For information in the form of electronic files, we use technical methods that render the records irrecoverable.
② Personal information printed on paper is destroyed by shredding or incineration.

8. Matters Concerning the Rights and Obligations of Data Subjects and Their Legal Representatives, and How to Exercise Them
(1) Data subjects may exercise their rights—such as requesting access to, correction of, deletion of, or suspension of processing of their personal information—with the Company at any time.
(2) To view or modify your personal information, click “Change Personal Information” (or “Edit Member Information,” etc.); to cancel your membership (withdraw consent), click “Withdraw Membership.” After completing the identity verification process, you may directly view, correct, or withdraw your information.
(3) Alternatively, you may contact the Personal Information Protection Officer in writing, by phone, or via email, and we will take action without delay.
(4) The rights set forth in Paragraph (1) may be exercised through a representative, such as the data subject’s legal representative or an authorized agent; in such cases, you must submit a power of attorney in accordance with Form No. 11 of the “Notice on Personal Information Processing Methods (No. 2020-7).”
(5) Requests to access personal information or suspend its processing may be restricted pursuant to Article 35(4) and Article 37(2) of the “Personal Information Protection Act”; furthermore, requests to correct or delete personal information cannot be granted if other laws or regulations explicitly designate such personal information as subject to collection.
(6) When receiving requests for access, correction, deletion, or suspension of processing based on the rights of data subjects, the Company verifies whether the person making the request is the data subject themselves or a legitimate representative.

9. Matters Concerning Security Measures for Personal Information
The Company takes the following measures to ensure the security of personal information.
(1) Administrative Measures: Establishment and implementation of internal management plans; operation of a dedicated organization; regular employee training
(2) Technical Measures: Management of access rights to personal information processing systems; installation of access control systems; encryption of personal information; installation of security software
(3) Physical Measures: Access control for computer rooms, data storage rooms, and other facilities

10. Installation, Operation, and Opt-Out of Devices That Automatically Collect Personal Information
The Company uses “cookies” to store and periodically retrieve usage information in order to provide users with personalized services.
A cookie is a small amount of information sent by the server used to operate a website to the user’s computer browser and is sometimes stored on the user’s computer hard drive.
(1) Purpose of Cookie Use: Cookies are used to identify the services and websites visited by users, their usage patterns, popular search terms, and whether a secure connection is established, in order to provide users with optimized information.
(2) Installation, Operation, and Rejection of Cookies: You can refuse to store cookies by adjusting the settings in the Tools > Internet Options > Privacy menu at the top of your web browser.
However, if you refuse to store cookies, you may experience difficulties in using personalized services.

11. Information Regarding the Data Protection Officer
(1) The Company has designated a Data Protection Officer as described below to take overall responsibility for personal information processing and to handle complaints and provide remedies to data subjects regarding the processing of personal information.
o Data Protection Officer
  Name: Bae Yong-sik
  Affiliation: Studio Origin Co., Ltd.
  Phone Number: +82 70-7788-2580
  Email: plotoy@studioorigin.co.kr
o Department in Charge of Personal Information Protection
  Department: Customer Support Team
  Affiliation: Studio Origin Co., Ltd.
  Phone Number: +82 70-7788-2580
  Email: plotoy@studioorigin.co.kr
(2) Data subjects may contact the Data Protection Officer and the responsible department regarding any matters related to personal information protection—including inquiries, complaint handling, and redress for damages—that arise while using the Company’s services. The Company will respond to and address data subjects’ inquiries without delay.

12. Remedies for Violations of Data Subjects’ Rights and Interests
(1) To seek redress for a personal information infringement, you may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency (KISA) Personal Information Infringement Reporting Center. For other reports or consultations regarding personal information infringements, please contact the following organizations:
- Personal Information Dispute Mediation Committee: (No area code required) 1833-6972 (privacy.go.kr)
- Personal Information Infringement Reporting Center: (No area code required) 118 (privacy.kisa.or.kr)
- Supreme Prosecutors’ Office: (No area code required) 1301 (www.spo.go.kr)
- National Police Agency: (No area code required) 182 (ecrm.cyber.go.kr)
(2) Any person whose rights or interests have been infringed upon due to a decision or omission by the head of a public institution in response to a request made pursuant to the provisions of Article 35 (Access to Personal Information), Article 36 (Correction and Deletion of Personal Information), or Article 37 (Suspension of Processing of Personal Information, etc.) of the “Personal Information Protection Act” may file an administrative appeal in accordance with the provisions of the Administrative Appeal Act.
※ For detailed information on administrative appeals, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).

13. Changes to the Privacy PolicyThis Privacy Policy is effective as of July 29, 2026.

WORLD SHIPPING

PLEASE SELECT THE DESTINATION COUNTRY AND LANGUAGE :

GO
닫기