Privacy
Policy
Overview
Made in Heaven Agency Co., Ltd. (the "Company") establishes and publishes this Privacy Policy to protect users' personal information and handle privacy-related inquiries promptly and transparently.
This Privacy Policy applies to the official website and related services operated by the Company (the "Service").
Effective date: June 2, 2025
Last updated: June 2, 2025
Article 1. Purpose of Processing Personal Information
The Company processes personal information for the following purposes and does not use it for purposes outside this scope unless required by law or separately agreed by the user.
1. Membership registration and account management
• Confirming intent to register
• User identification and authentication
• Maintaining membership status
• Preventing unauthorized use
• Sending notices and responding to inquiries
2. Performance, event, and booking inquiries
• Providing booking consultation and estimates
• Event planning and operational communication
• Artist booking and contract processing
• Schedule coordination and event support
• Tax invoice, contract, payment, and settlement processing
3. Service operation and support
• Receiving and processing inquiries
• Providing proposals and content
• Managing service usage records
• Improving service quality
4. Marketing and advertising, only with separate consent
• Sending service updates, event information, promotions, and customized content
5. Recruitment management
• Receiving applications, verifying applicants, and communicating during the hiring process
Article 2. Personal Information Collected
The Company may collect and use the following information to provide the Service.
1. Website inquiries and consultation
[Required] Name, contact number, email address, company or organization name, inquiry details
[Optional] Event region, event date, budget, preferred artist, and other information entered by the user
2. Performance and event contracts
[Required] Contact person's name, mobile number, email, address, business registration number, bank account information, and contract-related information
[Optional] Tax invoice email, additional contacts, and event details
3. Membership registration
[Required] ID, password, name, mobile number, email address
[Optional] Interests and marketing consent status
4. Recruitment
[Required] Name, contact information, email, resume, and cover letter
[Optional] Portfolio, career description, and certificates
5. Automatically collected information
• IP address, cookies, MAC address
• Service usage records, access logs, visit history
• Browser, operating system, device information
• Access country and access time
The Company does not collect resident registration numbers or other unique identifiers in principle, except where required by law.
Article 3. Retention and Use Period
The Company processes and retains personal information within the period required by law or agreed by the user.
1. Member information: until membership withdrawal, unless an investigation, dispute, or settlement remains pending
2. Performance inquiry and consultation information: up to 3 years after completion
3. Contract and settlement information: up to 5 years after contract termination and settlement
4. Recruitment information: destroyed immediately after hiring ends, or retained for 1 year if the applicant consents to talent pool registration
5. Statutory retention
• Records on contracts or withdrawal of offers: 5 years
• Payment and supply records: 5 years
• Consumer complaints and dispute handling records: 3 years
• Display and advertising records: 6 months
• Access logs: 3 months
• Tax invoices, accounting books, and supporting documents: 5 years
Article 4. Provision to Third Parties
The Company processes personal information only within the purposes stated in this Privacy Policy and does not provide personal information to third parties unless the user consents or applicable law permits or requires it.
Exceptions may include prior user consent, legal requirements, lawful requests by investigative authorities, or cases necessary to protect life, body, or property.
When personal information is provided to a third party, the Company will notify the user of the recipient, purpose, items provided, and retention period and obtain separate consent where required.
Article 5. Outsourcing of Personal Information Processing
The Company may outsource personal information processing to professional vendors for smooth service operation.
Examples of outsourced work include hosting and server operation, SMS/LMS notification delivery, email delivery, payment and settlement processing, and customer relationship management.
The Company specifies privacy protection obligations in outsourcing contracts and supervises vendors so that personal information is processed safely. Changes to outsourced vendors or tasks will be disclosed through this Privacy Policy.
Article 6. International Transfer
The Company may use cloud services, email services, and analytics tools during service operation, and personal information may be transferred overseas in that process.
Where required by law, the Company will notify users of the country, timing, method, purpose, and retention period of overseas transfer and obtain separate consent if necessary.
Examples:
• Google LLC (United States): access logs and usage records for analytics and service improvement
• Meta Platforms, Inc. (United States): advertising identifiers for advertising and marketing analytics
Article 7. User Rights and How to Exercise Them
Users may exercise the following rights regarding personal information at any time.
1. Request access to personal information
2. Request correction
3. Request deletion
4. Request suspension of processing
5. Withdraw consent
Rights may be exercised in writing, by phone, or by email, and the Company will respond without delay. If correction or deletion is requested, the Company will not use or provide the information until the request is completed.
For children under 14, a legal representative may exercise these rights on behalf of the child.
Article 8. Destruction of Personal Information
When personal information becomes unnecessary due to expiration of the retention period or achievement of the processing purpose, the Company destroys it without delay.
1. Destruction procedure
The Company selects information subject to destruction and destroys it with approval from the privacy officer.
2. Destruction method
• Electronic files: permanently deleted using technical methods that prevent recovery
• Paper documents: shredded or incinerated
Article 9. Security Measures
The Company implements administrative, technical, and physical measures to protect personal information.
Administrative measures include internal privacy management plans, employee training, access authorization management, and record management.
Technical measures include encryption, security programs, access control systems, firewalls, intrusion detection systems, anti-virus programs, security patches, and SSL.
Physical measures include access control for computer rooms and document storage areas.
Article 10. Cookies
The Company may use cookies to provide optimized services.
Cookies may be used to analyze visit frequency and time, understand usage patterns and interests, provide customized content, confirm secure access, improve services, and analyze statistics.
Users may refuse cookie storage through browser settings. However, some services may be limited if cookies are disabled.
Article 11. Behavioral Information
The Company may collect and use behavioral information to analyze user interests, preferences, devices, and access environment for customized advertising and services.
Behavioral information is processed in a form that does not identify a specific individual, and users may refuse customized advertising through browser or advertising identifier settings.
Article 12. Privacy Officer
The Company designates the following privacy officer to oversee personal information processing and handle complaints and remedies.
Privacy Officer
• Name: Sungmin Yoon
• Title: Chief Executive Officer
• Email: dhlee3728@naver.com
• Phone: 010-3431-3947
Privacy Department
• Department: Management Support Team
• Contact: Sungmin Yoon
• Email: dhlee3728@naver.com
• Phone: 010-3431-3947
The Company will respond to user inquiries without delay.
Article 13. Remedies and Contact
Users may contact the Company at dhlee3728@naver.com or 010-3431-3947 regarding privacy inquiries, access requests, complaints, or dispute resolution.
Users may also contact relevant Korean privacy protection authorities, including the Personal Information Infringement Report Center, the Personal Information Dispute Mediation Committee, the Supreme Prosecutors' Office Cybercrime Division, and the National Police Agency Cybercrime Reporting System.
Article 14. Changes to This Privacy Policy
This Privacy Policy may be amended due to changes in applicable laws or Company policy.
When the Company amends this Privacy Policy, it will announce the changes on the website in advance, and the amended policy will take effect from the announced effective date.
Announcement date: June 2, 2025 / Effective date: June 2, 2025
Article 15. Marketing Consent
The Company may send advertising information such as performance information, events, promotions, and new service notices by email, SMS/LMS, KakaoTalk notifications, or push notifications only when the user has given prior consent.
Users may withdraw marketing consent at any time, and the Company will stop sending advertising information without delay upon refusal.
Article 16. Inquiry Form Consent
For performance inquiries, event consultation, and service provision, the Company collects and uses the following personal information.
• Items collected: name, contact number, email, company name (optional), inquiry details
• Purpose: responding to performance and event inquiries and providing consultation
• Retention period: up to 3 years after inquiry processing is completed
Users may refuse consent, but inquiry submission may be limited if consent is refused.