Privacy Policy

HOMI FACTORY Co., Ltd. (the "Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of Korea, to protect data subjects’ personal information and to handle related complaints promptly and smoothly.

This Policy applies to all three of the following websites operated by the Company (the "Sites").

Article 1 (Purposes of Processing Personal Information)

The Company processes personal information for the following purposes. Personal information processed will not be used for any purpose other than the following, and if the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act.

1. Receiving and processing HOMI FACTORY consultation request forms: reviewing requests, proposing tailored marketing plans, contacting you about your consultation, and informing you of the outcome
2. HOMI FACTORY creator application: registration in the creator pool, contact regarding campaign proposals, casting review, and (where consent is given) notices of new campaigns
3. Receiving and processing HOMI FACTORY project inquiries: reviewing inquiries and contacting you to make proposals and proceed with consultation
4. Receiving and processing HOMI PRODUCTION production and rental inquiries: discussing video production quotes and schedules, checking studio availability, and replying
5. Live chat consultation (HOMI FACTORY): reviewing and answering chat inquiries, managing consultation history
6. Responding to inquiries and handling grievances: reviewing inquiries, contacting the data subject for fact-finding, and notifying processing results
7. Website usage statistics: improving services by analyzing visits and usage (used in statistical form that cannot identify individuals)

Article 2 (Items of Personal Information Processed)

1. HOMI FACTORY consultation request form — Required: name, contact (phone number), email, brand/product name, consultation details (direction, target countries/markets, concerns, goals)
   Optional: brand link (website/social media URL), current sales channels, preferred timing, budget range
2. HOMI FACTORY creator application — Required: name (creator name or full name), email, contact details (one of phone number, LINE or WhatsApp), country of activity, main platform, main channel link, follower count, main categories, campaigns available to join, confirmation of being 14 years of age or older
   Optional: other channel links, languages, introduction, consent to receive new campaign updates
   ※ Product shipping addresses are collected with separate consent only after selection for a campaign.
3. HOMI FACTORY project inquiry — Required: contact person’s name, email, contact (phone number), project details
   Optional: company/brand name, inquiry type
4. HOMI PRODUCTION production/rental inquiry — Required: inquiry type, name, contact (phone number), email, inquiry details
   Optional: company/brand/artist name, video type, preferred schedule, reference video link
5. Live chat consultation (HOMI FACTORY) — consultation type, consultation details, and name and contact (phone number or email) for receiving a reply
6. Information automatically generated and collected while using the website: IP address, cookies, date and time of visit, service usage records, browser and device information

※ We ask that you not enter sensitive information such as resident registration numbers or health information in consultation/inquiry fields, and the Company does not request such information.

Article 3 (Processing and Retention Period of Personal Information)

① The Company processes and retains personal information within the retention and use period prescribed by law or the retention and use period consented to by the data subject at the time of collection.

② The processing and retention periods for each category of personal information are as follows.

1. Consultation request form, project inquiry, and production/rental inquiry information: 1 year from the date the consultation/inquiry is completed. However, if it leads to a contract, the information is retained for the period required by applicable laws (such as the Commercial Act and the Framework Act on National Taxes) to perform the contract and resolve related disputes.
2. Creator application information: 2 years from the date of registration (destroyed after notice is given 30 days before the retention period expires). Where the creator has participated in a campaign, the information is retained for the period prescribed by applicable laws after the contract ends, and is destroyed without delay upon the data subject’s request for deletion.
3. Live chat consultation records: 1 year from the date the consultation ends
4. Website access records: 3 months (the Protection of Communications Secrets Act)

③ Notwithstanding the above periods, if a related investigation or inquiry is in progress, the information is retained until such investigation or inquiry is concluded.

Article 4 (Provision of Personal Information to Third Parties)

① The Company processes the personal information of data subjects only within the scope of the purposes stated in Article 1, and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or under special provisions of law.

② The HOMI PRODUCTION studio is operated by a separate business. When you submit a rental inquiry, personal information is provided as described below to check availability and coordinate schedules, and separate consent for this is obtained on the rental inquiry screen.

③ Except as described in Paragraph 2, personal information is not provided to third parties. If it becomes necessary to provide personal information to local overseas partners or others during a consultation or campaign, we will inform you in advance of the recipient, purpose, items provided, and retention/use period, and obtain separate consent. You may decline to consent, but declining may make it difficult to process your rental inquiry.

Article 5 (Entrustment of Personal Information Processing)

① The Company entrusts personal information processing as follows for the smooth handling of personal information.

② When entering into an entrustment contract, the Company specifies in the contract or other documents, pursuant to Article 26 of the Personal Information Protection Act, matters concerning the prohibition of processing personal information for purposes other than performing the entrusted tasks, technical and managerial safeguards, restrictions on re-entrustment, management and supervision of the trustee, and liability such as compensation for damages, and supervises whether the trustee processes personal information securely.

③ If the details of the entrusted tasks or the trustee change, the Company will disclose such changes through this Privacy Policy without delay.

Article 6 (Overseas Transfer of Personal Information)

① The Company transfers personal information overseas (entrustment of processing and storage) as follows for the analysis of website usage statistics.

② For trustees under Article 5 whose servers are located overseas (Vercel Inc., FormSubmit, Make, Google LLC, Supabase Inc.), the relevant items under Article 2 are transmitted over the network when a consultation request form, creator application, inquiry or chat consultation is submitted, and are stored for the retention period set out in Article 3. If you do not wish your information to be transferred overseas, you may contact us by email (support@homifactory.com) or phone (010-9873-4339) instead of using the on-screen forms.

Article 7 (Procedures and Methods for Destruction of Personal Information)

① The Company destroys personal information without delay when it is no longer necessary, such as when the retention period has expired or the purpose of processing has been achieved.

② If personal information must continue to be preserved under other laws, the Company preserves it by transferring it to a separate database (DB) or storing it in a different location.

③ Information in electronic file form is deleted using technical methods that prevent recovery or reproduction, and paper documents are destroyed by shredding or incineration.

Article 8 (Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them)

① Data subjects may at any time exercise their rights against the Company, including requests to access, correct, delete, or suspend processing of personal information and to withdraw consent.

② Rights may be exercised in writing, by email, or by other means, and the Company will take action without delay (within 10 days from the date the request is received).

③ Rights may also be exercised through a representative, such as the data subject’s legal representative or a person delegated by the data subject. In this case, a power of attorney in accordance with Form No. 11 annexed to the Notice on Personal Information Processing Methods must be submitted.

④ The rights of data subjects to request access to and suspension of processing of personal information may be restricted pursuant to Article 35(4) and Article 37(2) of the Personal Information Protection Act.

⑤ Deletion of personal information may not be requested where other laws specify that such personal information is subject to collection.

⑥ The Company verifies whether the person exercising the rights is the data subject or a legitimate representative.

Article 9 (Personal Information of Children Under 14)

① The Company does not collect personal information from children under 14. Consultations and inquiries on the Sites are intended for corporate and brand representatives, and creator applications for creators aged 14 or older.

② If we become aware that personal information of a child under 14 has been collected, we will destroy it without delay. If a creator under 14 participates in a campaign, their legal guardian must contact us directly and complete the guardian consent process.

Article 10 (Measures to Ensure the Security of Personal Information)

Pursuant to Article 29 of the Personal Information Protection Act, the Company takes the following measures necessary to ensure security.

1. Managerial measures: establishment and implementation of an internal management plan, minimization of staff handling personal information, and regular training
2. Technical measures: management of access rights to and access control of the personal information processing system, retention of access records and prevention of their forgery or alteration, encryption of data in transit (HTTPS), and installation and updating of security programs
3. Physical measures: access control to locations where materials containing personal information are stored

Article 11 (Installation, Operation, and Refusal of Devices that Automatically Collect Personal Information)

① The Company uses cookies, which store usage information and retrieve it from time to time, to provide users with suitable information.

② Purpose of cookie use: statistical analysis of visits and usage (Google Analytics). Conversations in the live chat consultation window are temporarily stored in the browser’s session storage and are deleted when the browser is closed.

③ Installation, operation, and refusal of cookies: you may refuse cookie storage through your web browser settings (e.g. Chrome — Settings > Privacy and security > Third-party cookies; Safari — Settings > Privacy).

④ Refusing cookie storage does not affect your use of the website or your ability to request a consultation.

Article 12 (Chief Privacy Officer and Department Receiving Access Requests)

The Company assumes overall responsibility for matters relating to the processing of personal information and has designated a Privacy Officer and a grievance-handling department, as set out below, to handle data subjects’ complaints and provide remedies for damages relating to the processing of personal information. Data subjects may submit requests to access their personal information to the department below.

Article 13 (Remedies for Infringement of Rights and Interests)

Data subjects may apply to the following agencies for dispute resolution or consultation to obtain remedies for infringement of personal information.

1. Personal Information Dispute Mediation Committee: (no area code) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center (KISA): (no area code) 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors’ Office: (no area code) 1301 (www.spo.go.kr)
4. Korean National Police Agency: (no area code) 182 (ecrm.police.go.kr)

A person whose rights or interests have been infringed by a disposition or omission of the head of a public institution in response to a request under Article 35 (Access), Article 36 (Correction or Deletion), or Article 37 (Suspension of Processing, etc.) of the Personal Information Protection Act may file an administrative appeal as prescribed by the Administrative Appeals Act. (Central Administrative Appeals Commission: (no area code) 110, www.simpan.go.kr)

Article 14 (Changes to the Privacy Policy)

① This Privacy Policy applies from October 15, 2026.

② If any content of this Policy is added, deleted, or modified, we will give notice through the Sites starting 7 days before the changes take effect, or 30 days before for changes materially affecting data subjects’ rights.

③ The previous Policy (v1.1, effective October 5, 2026) applied only to the HOMI FACTORY site. This revision extends it to all three sites and adds the creator application, project inquiry, and production/rental inquiry items, as well as third-party provision for rental inquiries.