KIM DONGHEE
KIM DONGHEE
Privacy Policy
neos ENTERTAINMENT Co., Ltd. ("Company," "we," "us," or "our") values the privacy of users of the official Kim Dong Hee website ("Service") and establishes and discloses this Privacy Policy in accordance with the Personal Information Protection Act of Korea and other applicable laws and regulations. Matters that apply only to members, such as membership registration and use of SHOP, are clearly identified as such below.
This Privacy Policy applies from June 1, 2026.
We process personal information for the following purposes. Personal information processed by the Company will not be used for purposes other than those stated below. If the purpose of use changes, we will take necessary measures in accordance with applicable laws.
We do not use gender, country, or other information voluntarily provided by members for automated evaluation of individual members or for targeted advertising.
We process the following personal information for membership registration and provision of the Service.
Gender and country are used only for the statistical analysis of member demographics and service improvement described in Article 1, and registering or using the Service is not restricted if you choose not to provide them. A "Prefer not to say" option is provided for gender.
We do not store passwords in plain text. Passwords are securely encrypted (hashed) by our authentication system (Supabase Auth) in a manner that cannot be decrypted.
We do not directly collect or store resident registration numbers, passport numbers, credit card numbers, bank account numbers, or other unique identifiers of a payment method itself — payments are processed through PayPal. However, as described in item 3 above, we do collect order- and shipping-related personal information generated when a product is purchased, and the related overseas transfer to PayPal is separately disclosed in Article 8.
The Service is intended for users aged 14 or older. As a general rule, we do not allow users under the age of 14 to register as members.
If we confirm that personal information of a child under the age of 14 has been collected without the consent of a legal guardian, we may promptly delete such information or restrict use of the relevant account.
We retain and use personal information until the purpose of processing is achieved. However, if retention is required under applicable laws, the information will be retained for the period required by such laws.
In accordance with Korea's Act on the Consumer Protection in Electronic Commerce and its Enforcement Decree, these records are retained separately for the periods below regardless of membership withdrawal.
We do not provide users' personal information to external parties in principle.
However, we may provide personal information in the following cases:
The Service may provide links to external services, including Fanicon, a paid fan club service in Japan, and official social media channels.
Fanicon is an external service operated separately from the Company's official website. Registration, payment, use of the paid fan club, and processing of personal information on Fanicon are governed by the terms of use and privacy policy of Fanicon or the relevant external service provider.
We do not provide member information from this official website to Fanicon, and we do not receive member information from Fanicon.
If we add any feature in the future that involves linking, sharing, or transferring member information with Fanicon or any other external service, we will provide prior notice and obtain user consent where required.
We entrust part of our personal information processing tasks to external service providers for smooth service provision and stable system operation.
When entering into an entrustment agreement, we take necessary measures in accordance with applicable laws to ensure that personal information is processed securely, and we manage and supervise whether the entrusted service provider processes personal information safely.
| Service Provider | Entrusted Tasks | Personal Information Processed | Processing and Storage Location | Retention and Use Period |
|---|---|---|---|---|
| Supabase, Inc. | Storage and management of member database, processing of member authentication-related data, provision of backend infrastructure for service operation | Name, email address, gender, country, member account information, board usage records, service usage records | Seoul Region, Republic of Korea (ap-northeast-2) | Until membership withdrawal or termination of the entrustment agreement |
| Plus Five Five, Inc. (Resend) | Sending account-related emails such as member authentication and password reset, service notices, and SHOP order confirmation and shipping notification emails | Email address, name, and order/shipping information necessary and included in the email content | The United States and other countries where Resend's subprocessors are located | Until the sending purpose is achieved; after the Service ends, up to 90 days in accordance with Resend's data processing agreement (DPA) |
| Vercel Inc. | Website hosting and serverless infrastructure (requests made while using the Service are processed through this infrastructure) | Request data generated while using the Service in general (which may include information entered during login, registration, or SHOP use) | The United States and other countries where Vercel's global infrastructure is located | In accordance with Vercel's infrastructure operation and log retention policies |
If the entrusted service provider or the scope of entrusted tasks changes, we will disclose such changes through this Privacy Policy.
PayPal is not a service provider to whom the Company entrusts personal information processing, but an independent payment service provider chosen by the Buyer. Personal information that PayPal collects and processes during payment is processed independently in accordance with PayPal's own privacy policy, and is not a task entrusted by the Company to PayPal. See Article 8 for details.
The primary storage location for personal information is the Seoul Region, Republic of Korea (ap-northeast-2). However, limited overseas processing may occur in the countries where infrastructure providers such as Supabase and Vercel locate their subprocessors, in the course of those providers' operation and support of the Service (incident response, technical support, etc.).
When a user pays through PayPal in SHOP, the Company transmits the payment amount, currency, and an internal member identifier to PayPal for payment processing. The buyer's payment and shipping information, such as name, email address, and shipping address, is not transmitted by the Company to PayPal; rather, it is information the buyer provides directly to PayPal on PayPal's own payment screen, and PayPal processes it independently as a separate data controller in accordance with its own privacy policy. After a payment is completed, the Company receives back from PayPal the information necessary to fulfill the order (such as the name to use for shipping, shipping address, and payment identifiers) and uses it solely for order fulfillment. PayPal retains such information for a period it determines separately under its own privacy policy and applicable laws. For details on how PayPal processes personal information, please refer to PayPal's own privacy policy.
To send emails such as member authentication, password reset, service notices, and SHOP order confirmation/shipping notifications, personal information is transferred to Resend (Plus Five Five, Inc.) as described below.
| Recipient | Plus Five Five, Inc. (Resend) |
|---|---|
| Destination country | The United States and other countries where Resend's subprocessors are located |
| Items transferred | Email address, name, and order/shipping information necessary and included in the email content |
| Purpose of transfer | Sending emails for member authentication, password reset, service notices, and SHOP order confirmation/shipping notifications |
| Timing and method | Transmitted online via API at the time each email is sent |
| Retention and use period | Until the sending purpose is achieved; after the Service ends, up to 90 days in accordance with Resend's data processing agreement (DPA) |
In addition, the Service is provided through Vercel Inc.'s hosting infrastructure, and request data generated while a user accesses and uses the Service may be processed through Vercel's global infrastructure in the United States and other countries.
If any additional overseas transfer of personal information occurs beyond the above, we will provide prior notice of the recipient, destination country, items of personal information transferred, purpose of transfer, timing and method of transfer, retention and use period, and take necessary measures in accordance with applicable laws.
When personal information becomes unnecessary due to expiration of the retention period, achievement of the processing purpose, membership withdrawal, or other reasons, we destroy such personal information without delay.
Personal information in electronic file format is securely deleted in a manner that cannot be restored, and personal information in paper format is shredded or incinerated.
However, information that must be retained for a certain period under applicable laws will be stored separately for the required period and then destroyed.
Users may exercise the following rights against the Company at any time:
Users may exercise these rights by contacting the privacy contact below by email. We will take action without delay in accordance with applicable laws.
However, where there are grounds under applicable laws, we may restrict or refuse a request, in which case we will inform the user of the reason.
We may use cookies to provide the Service, maintain login status, and improve user experience. We may also collect service visit statistics through Vercel Analytics, and such analytics are processed without using cookies and in a manner that does not directly identify individuals.
Users may refuse or delete cookies through browser settings. However, if cookies are disabled, some services such as login maintenance may be restricted.
We take the following measures to manage personal information securely:
We designate the following Personal Information Protection Officer and contact point to handle inquiries, complaints, damage relief, and requests for access, correction, deletion, and suspension of processing of personal information.
| Personal Information Protection Officer | CEO Choi Jonghwan |
|---|---|
| contact@neos-ent.kr | |
| Phone | +82-2-3446-2191 |
Users may contact the above contact point for any privacy-related inquiries, complaints, or damage relief requests arising from use of the Service. We will respond to and handle user inquiries without delay.
Users may contact the following institutions if they need to report or seek consultation regarding personal information infringement.
We may amend this Privacy Policy due to changes in applicable laws, service content, entrusted service providers, or personal information processing methods.
If this Privacy Policy changes, we will notify users of the changes through the official website.
The Korean language version of this Privacy Policy constitutes the governing document. The Japanese and English translations are provided for the convenience of users. In the event of any conflict or discrepancy between a translation and the Korean version, the Korean version shall prevail, unless otherwise required by applicable laws.
This Privacy Policy takes effect on June 1, 2026.
This Privacy Policy was revised and takes effect on October 1, 2026 to add provisions regarding personal information processing for SHOP (product purchases).
This Privacy Policy was revised and takes effect on October 7, 2026 to reflect a change of the Personal Information Protection Officer.