Privacy Policy


Effective Date: 2026/05/05  |  Last Updated: 2026/05/21

1. Personal Information We Collect

1.1 Information You Provide Directly

At checkout (guest purchase):

  • Name, delivery address, phone number, email address, payment information.

When registering for a membership account (when available):

  • Name, date of birth, gender, login ID, password, phone number, email address, delivery address.

Membership is not available to individuals under the age of 14. Registrations submitted by individuals under 14 without the consent of a legal representative will be considered invalid and will be cancelled.

When contacting customer service:

  • Name, contact information, and the content of your inquiry.

When subscribing to marketing communications:

  • Mobile phone number and email (collected separately with explicit consent at checkout).

1.2 Information Collected Automatically

During your use of the website, the following information may be generated and collected automatically:

  • Service usage records, access logs, cookies, IP address, payment records, and records of any prohibited use.

1.3 How We Collect It

Personal information is collected through the following channels: the website checkout, customer service inquiries, and automated data collection tools such as cookies.

The Company collects only the minimum personal information necessary to provide its services. At checkout, name, address, phone number, and email are required to process and deliver your order. Payment information is required to complete the transaction. All other information, including marketing consent, is optional. Refusing to provide optional information will not affect your ability to place an order or use the website.

2. Purpose of Collection and Use

The Company collects and uses personal information only for the following purposes:

2.1 Order Fulfillment and Service Provision

  • Processing and confirming purchases.
  • Payment processing and verification.
  • Delivery of products and billing.
  • Identity verification for financial transactions.
  • Handling returns, exchanges, and refunds.
  • Responding to customer service inquiries and complaints.

2.2 Member Management (when membership is available)

  • Verifying identity and managing membership accounts.
  • Preventing unauthorized or fraudulent use.
  • Age verification and legal representative consent for users under 14.
  • Delivering notices and service updates.

2.3 Marketing and Communications (with separate consent only)

  • Sending promotional messages via SMS and KakaoTalk to customers who have explicitly opted in.
  • Analyzing access frequency and usage patterns for service improvement and targeted communications.

3. Retention and Use Periods

As a general rule, personal information is destroyed without delay once the purpose of collection has been fulfilled. However, the following information is retained for the periods specified below.

3.1 Retention Based on Company Policy

Even after a member cancels their account, limited information may be retained for 2 years from the date of cancellation to prevent recurrence of fraudulent activity, assist with dispute resolution, and cooperate with lawful requests from investigative authorities. This information will not be used for any other purpose.

3.2 Retention Required by Law

Record Type Legal Basis Retention Period
Contracts and withdrawal records Act on Consumer Protection in Electronic Commerce 5 years
Payment and product supply records Act on Consumer Protection in Electronic Commerce 5 years
Consumer complaint and dispute records Act on Consumer Protection in Electronic Commerce 3 years
Website access logs Protection of Communications Secrets Act 3 months

4. Destruction of Personal Information

Once personal information has fulfilled its purpose and the applicable retention period has expired, it will be destroyed in a manner that prevents recovery or reconstruction.

  • Electronic files are deleted using technical methods that make recovery impossible.
  • Paper records are shredded or incinerated.

Prior to destruction, information is moved to a separate, access-restricted database and kept solely for the legally required period. It is not used for any other purpose during this time.

5. Disclosure of Personal Information to Third Parties

The Company does not disclose your personal information to external parties as a general rule. Exceptions apply only in the following circumstances:

  • You have given prior consent to the specific disclosure.
  • Disclosure is required by law, or a lawful request is made by an investigative authority following legal procedures.

Where the Company shares information with third-party service providers necessary to fulfill your order, this is handled as a consignment arrangement and is disclosed in Section 6 below.

6. Consignment and Overseas Transfer of Personal Information

6.1 Consigment

The Company consigns certain personal information to the following third-party service providers solely for the purpose of fulfilling orders and operating the website. Consignees are contractually prohibited from using your information for any purpose beyond the scope of the consignment.

Consignee Purpose
CJ Logistics Order delivery
KG Inicis
Payment processing

The information shared with each consignee is limited to what is strictly necessary for that purpose (e.g., name, address, and phone number for delivery; payment details for the payment processor). Consignment agreements are in place requiring each provider to handle data securely and in compliance with applicable law.

6.2 Overseas Transfer

The Company transfers personal information overseas as set out below. As these transfers are necessary to perform the service agreement with you (website operation, payment, and analytics), they are disclosed here in accordance with the Personal Information Protection Act.

Recipient Items Transferred Purpose
Shopify Inc. (Canada & USA) Name, email, phone number, shipping and billing address, order details and account credentials where a customer account is created E-commerce platform operation and order/customer data storage
Google LLC (USA) Online identifiers (cookies), IP address, device and browser information, and on-site usage and behavioral data Website traffic analytics (Google Analytics / GA4)
Vercel Inc. (USA) IP address, location derived from IP address, and access and system logs Website (frontend) hosting, customer data storage and delivery.

Each recipient retains the information for the duration of the Company's use of the relevant service. For Google Analytics, event data is retained for the period configured in the service (2 to 14 months).

Transfers are made electronically over the information and communications network at the time the information is collected or the order is processed. Recipient contacts: Shopify (privacy@shopify.com), Google (googlekrsupport@google.com), Vercel (privacy@vercel.com).

If you wish to object to an overseas transfer, contact the Company at the address provided in Section 1. Please note that refusing a transfer necessary to provide the service may limit your ability to use the store.

7. Cross-Border Transfer of Personal Information

mewt operates its website on Shopify, an e-commerce platform whose servers are located outside the Republic of Korea. As part of normal website operations, certain personal information is transferred internationally. The details of this transfer are as follows:

  • Information transferred: Name, delivery address, phone number, email address, order details, payment confirmation records, and website usage data (including IP address and access logs).
  • Country of transfer: Canada and the United States.
  • Date and method of transfer: Continuously, via encrypted network transmission (HTTPS/TLS), at the time of order placement, account creation, or website use.
  • Recipient: Shopify Inc., 151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada. Privacy contact: privacy@shopify.com.
  • Purpose of use by recipient: Operation and hosting of the mewtwear.com website, order processing, account management, and provision of customer support tools.
  • Retention period: For the duration of mewt's service agreement with Shopify, and thereafter only as required by applicable law.

Shopify is bound by contract to handle your information securely and only for the purposes described above. Because Shopify hosting is essential to the operation of mewtwear.com, the transfer described in this section is necessary for the performance of your contract with mewt. If you do not agree to this transfer, you may be unable to place an order or use the website.

8. Your Rights

You have the following rights with respect to your personal information at any time:

  • View the personal information the Company holds about you.
  • Request correction of any inaccurate information.
  • Request deletion of your personal information or withdrawal from membership, subject to any retention periods required by applicable law (as specified in Section 3.2).
  • Withdraw consent to the collection, use, or disclosure of your personal information.

To exercise these rights, contact our Personal Information Officer at contact@mewtwear.com or use the account management features on the website (when membership is available). We will act on your request without delay.

If you request a correction, the relevant information will not be used or disclosed until the correction is complete. If incorrect information has already been shared with a third party, we will notify them of the correction without delay.

Withdrawal of consent to optional data collection will not affect your ability to make a purchase or use the website.

9. Cookies and Automatic Data Collection

The Company uses cookies, which are small text files stored on your device by the website's server. Cookies are used for the following purposes:

  • Analyzing visit frequency and session duration to understand user behavior.
  • Providing personalized content and targeted marketing to users who have consented.
  • Tracking participation in events and promotions.

You have the right to control cookie settings through your web browser. You may allow all cookies, require confirmation before each cookie is saved, or refuse all cookies. Note that refusing cookies may limit certain features of the website.

To manage cookie settings:

  • Chrome: Settings > Privacy and Security > Cookies and other site data.
  • Safari: Preferences > Privacy > Manage Website Data.
  • Other browsers: refer to your browser's help documentation.

10. Security Measures for Personal Information

In accordance with Article 29 of the Personal Information Protection Act and the standards for technical, administrative, and physical safeguards, mewt has put the following measures in place to protect personal information:

Administrative measures

  • Establishment and implementation of an internal management plan for personal information protection.
  • Regular training for employees who handle personal information.
  • Access privileges granted only on a role and necessity basis, with periodic review.

Technical measures

  • Encryption of sensitive information, including passwords and payment-related data, both in storage and during transmission.
  • Use of secure connections (HTTPS/TLS) on all pages where personal information is collected or transmitted.
  • Access control systems and authentication procedures to prevent unauthorized intrusion.
  • Storage and periodic review of access logs for security audit purposes.
  • Installation and regular updating of antivirus and anti-malware software on systems handling personal information.

Physical measures

  • Restricted access to physical locations and devices where personal information may be stored or processed.
  • Secure storage and disposal of any printed documents containing personal information.

Despite these measures, no security system can guarantee absolute protection against all forms of unauthorized access or technical failure. mewt continues to review and improve its safeguards in line with evolving technology, threats, and regulatory standards.

11. Personal Information Officer

The Company has designated the following Personal Information Officer to protect customer data and address related complaints:

  • Name: 박정현
  • Title: CMO
  • Phone: +82 (10)-6381-6398
  • Email: contact@mewtwear.com

All privacy-related inquiries, complaints, or requests may be directed to the officer above. We will respond promptly and thoroughly.

12. Government Agencies for Privacy Complaints

If you require additional assistance or wish to report a privacy violation beyond what mewt can address, you may contact the following Korean government agencies:

  • Personal Information Infringement Report Center: privacy.kisa.or.kr / Dial 118 (no area code)
  • Personal Information Dispute Mediation Committee: kopico.go.kr / 1833-6972
  • Cybercrime Investigation Division, Supreme Prosecutors Office: spo.go.kr / Local area code + 1301
  • Cyber Bureau, National Police Agency: cyberbureau.police.go.kr / Dial 182 (no area code)

13. Changes to This Policy

This Privacy Policy may be updated to reflect changes in law, company policy, or security practices. Any changes will be announced on the mewt website at least 7 days before taking effect. For changes that are materially unfavorable to customers, at least 30 days' prior notice will be provided.

Continued use of the website following the effective date of any update constitutes acceptance of the revised policy.