Privacy Policy

Maristella (Representative: Lee Jae-Kyoung, hereinafter "Company") strictly adheres to applicable data protection and privacy laws (including the Personal Information Protection Act) to protect users' personal information and rights. This Privacy Policy outlines the practices and policies governing the collection, use, retention, and protection of personal data across 'Alpheon, the Glass Bead (TEMPLE CASTALIEN)' and its related services.

1. Categories of Personal Information Collected and Collection Methods

The Company collects the minimum personal information necessary to deliver quality customer support, execute transactions, and provide personalized digital contemplation services:

• During Member Registration and Ordering: Full Name (or Depositor Name), Mobile Phone Number (for order notifications), Email Address.
• During Personalized Contemplation Sessions: Chosen Nickname, thematic areas of inquiry, and submitted life questions (securely encrypted).
• Automatically Generated During Service Use: IP Address, Browser Cookies, Access Timestamps, Device and Browser Specifications, Payment Authorization Identifiers.

* Sensitive electronic financial information (such as credit/debit card numbers, CVVs, and banking passwords) is transmitted directly through PCI-DSS compliant secure payment gateway bridges (KG Inicis Co., Ltd., PayPal); the Company does not store or process sensitive financial secrets on internal servers.

2. Purposes of Collection and Use

• Service Delivery and Contract Fulfillment: Issuance of digital access passes, real-time generation of classical hermeneutic reports, member authentication, and contemplation archive access.
• Customer Administration: Identity verification, prevention of fraudulent misuse, customer support inquiry handling, and essential administrative notices.
• Service Improvement & Analytics: Statistical modeling to refine classical algorithm accuracy and optimize platform responsiveness.

3. Period of Retention and Processing

The Company destroys personal information without delay once the specified purpose of collection has been fulfilled. However, statutory records are preserved in accordance with applicable laws:

• Records regarding contracts or withdrawal of offers: 5 years (Act on the Consumer Protection in Electronic Commerce).
• Records on payment settlement and supply of goods/services: 5 years.
• Records on consumer complaints or dispute settlements: 3 years.
• Website access logs: 3 months (Protection of Communications Secrets Act).

4. Destruction Procedures and Technical Measures

1. Destruction Procedure: Personal data that has exceeded the statutory retention period is systematically selected and destroyed under the supervision of the Data Protection Officer.

2. Destruction Method: Electronic files are permanently sanitized using irreversible data wiping methods; physical printouts, if any, are shredded.

5. Third-Party Delegation & Cross-Border Data Transfer

The Company does not share or sell personal information to third parties without prior consent, except as strictly required for secure payment processing via authorized payment gateways:

• Domestic Payment Processing:
  • Delegatee: KG Inicis Co., Ltd. (주식회사 케이지이니시스), PortOne Inc.
  • Delegated Scope: Electronic payment gateway services (Credit/Debit cards, digital wallets, bank transfers, virtual accounts), identity verification, and anti-fraud fraud prevention.
  • Retention Period: Safely disposed of upon expiry of statutory obligation periods under Korean financial and commercial laws.
• Overseas Payment Processing & Cross-Border Transfer:
  • Delegatee: PayPal Pte. Ltd. (Singapore)
  • Delegated Scope: Processing international credit cards and PayPal wallet transactions.
  • Transferred Items: Name, Email Address, Payment Amount, Payment Reference ID.
  • Transfer Method: Encrypted transmission over TLS/HTTPS protocols during overseas checkout.
  • Retention Period: Preserved in accordance with relevant statutory requirements (5 years pursuant to the E-Commerce Act).

6. Rights of Users and How to Exercise Them

Users may at any time inspect, correct, or request the deletion of their registered personal data through the profile settings on the platform or by contacting customer support. The Company honors all legitimate privacy requests without delay.

7. Cookie Policy and Management

The Service uses cookies to maintain secure login sessions and preserve user language preferences (e.g. English/Korean). Users may refuse or delete cookies through browser settings, though certain personalized features may be limited as a consequence.

8. Data Protection Officer (DPO) and Inquiries

For any inquiries, complaints, or feedback regarding personal data protection, please contact the designated privacy officer:

• Data Protection Officer: Lee Jae-Kyoung (Representative)
• Customer Care Email: alpheonadmin@gmail.com
• Customer Support Tel: +82-70-4248-4167 (Mon-Fri 10:00 - 18:00 KST)