Article 1: Introduction
Run to the Future Labs Inc. (the "Company") complies with the Personal Information Protection Act and other applicable laws to protect the freedoms and rights of data subjects, and processes personal information lawfully and securely. This Privacy Policy explains the procedures and standards by which the Company processes personal information and how data subjects can exercise their rights.
Article 2: Information We Collect
2.1 Quote / Inquiry Form Information
When you submit information through our quote or 1:1 consultation form, we collect:
- Company name: to understand your business context
- Contact name: to identify and address you personally
- Email: to respond to your inquiry
- Phone: secondary contact channel
- Inquiry details (type of merch, quantity, requirements) and desired delivery date: to prepare a quote and coordinate the schedule
- Attachments (optional): logos, design mockups, references, and other materials for production
- Whether you consent to the collection and use of personal information and to receiving marketing communications
2.2 Newsletter Subscription Information
When you subscribe to our newsletter, we collect:
- Email address: to send our newsletter
2.3 Order, Payment, and Delivery Information
We may collect the following information during product ordering, payment, and delivery:
- Orderer information: name, company name, email, phone number
- Delivery information: recipient name, phone number, delivery address, delivery requests
- Order information: products ordered, quantity, options, design and text, payment amount
- Payment information: payment method, payment status, approval number, payment date and time
- Proof of transaction: business registration number, email for tax invoices, cash receipt details
- Refund information: account holder, bank name, refund account number
We do not directly collect or store sensitive payment details such as card numbers or expiration dates. Card payment information is processed by the payment gateway.
2.4 Automatically Collected Information
We may automatically collect certain technical information when you visit our website, such as:
- IP address
- Browser type and version
- Pages visited and time spent
- Referring website and campaign identifiers (UTM parameters, ad click IDs)
Article 3: How We Use Your Information
We use the personal information we collect for the following purposes:
- Responding to business inquiries and providing quotes and proposals
- Receiving orders and performing contracts
- Managing production, shipping, and delivery
- Approving payments, checking payment history, and processing cancellations and refunds
- Issuing proof of transaction such as tax invoices and cash receipts
- Handling customer inquiries, complaints, and disputes
- Sending newsletters and new merch updates to users who consented to marketing communications
- Communicating about our services and collaborations
- Improving our Website and services
- Retaining transaction records as required by applicable laws
Article 4: Information Sharing
4.1 Internal Use
Your information may be shared internally with our sales and operations teams to provide you with better service.
4.2 Provision to Third Parties
We process personal information only within the scope of the purposes stated in this Privacy Policy and do not provide it to third parties unless the data subject has given prior consent or applicable laws specifically provide otherwise.
4.3 Outsourcing of Processing
We outsource the processing of personal information as follows to provide our services smoothly, and we supervise our processors to ensure they comply with applicable laws.
| Processor | Outsourced tasks |
|---|---|
| UDID Co., Ltd. (PayApp) | Payment processing, payment history management, payment cancellations and refunds |
| Amazon Web Services, Inc. | Website and server operation, data and attachment storage, confirmation emails |
| Slack Technologies, LLC | Quote and consultation inquiry notifications and internal collaboration |
| Kit Inc. | Newsletter delivery and subscriber management |
| Google LLC | Website visit analytics |
| PostHog Inc. | Website visit and usability analytics |
Article 5: Security Measures
To ensure the security of personal information, the Company implements necessary technical, administrative, and physical safeguards, including minimizing access rights, encrypting passwords and important information, retaining access logs, operating security programs, training staff who handle personal information, establishing an internal management plan, and controlling access to places where personal information is stored.
Article 6: Data Retention
We destroy personal information without delay once the purposes of collection and use have been achieved. However, where applicable laws require retention for a certain period, we store the information separately for that period.
- Quote and consultation information: 1 year from the date of inquiry
- Newsletter subscription information: until consent is withdrawn or you unsubscribe
- Records of contracts or withdrawal of offers: 5 years
- Records of payments and supply of products: 5 years
- Records of consumer complaints or dispute resolution: 3 years
- Records of labeling and advertising: 6 months
- Tax invoices and proof of transaction: for the period prescribed by tax laws
- Website server access logs: 30 days
If a data subject requests deletion of personal information, we process the request without delay. However, information that must be retained under applicable laws is stored separately for the required period and then destroyed.
Article 7: Destruction Procedures and Methods
We destroy personal information without delay once the retention period has expired or the purpose of processing has been achieved. Electronic files are deleted in a way that cannot be recovered or reproduced, and paper documents are shredded or incinerated. Personal information that must be retained under applicable laws is stored separately from other personal information and destroyed without delay when the retention period ends.
Article 8: Rights of Data Subjects
Data subjects may request access to, correction or deletion of, suspension of processing of, and withdrawal of consent for their personal information, as well as transmission of personal information as provided by applicable laws. Requests can be made by email or in writing, and these rights may also be exercised through a legal representative or an authorized agent.
When we receive a request, we take necessary action without delay in accordance with applicable laws. However, deletion or suspension of processing may be restricted where other laws require the collection or retention of the personal information. The Company may verify whether the person making a request is the data subject or a legitimate representative.
- Department handling requests: Chief Privacy Officer
- Email: sik@o-sean.io
- Phone: 1544-0782
Article 9: Cookies and Analytics Tools
We use essential cookies required to provide our services and optional cookies for usage analytics.
- Essential cookies: required for basic Website functions such as storing your cookie choice, and used without consent.
- Analytics cookies (optional): used for visit analytics, returning-visitor identification, and session recording through Google Analytics and PostHog, only if you consent.
Google Analytics operates only if you consent to the use of analytics cookies. To understand how the service is used, PostHog collects usage records such as pages visited, referral sources, and clicks, along with IP address and device and browser information, even before consent, without storing cookies; in this case it does not identify returning visitors or record sessions. If you consent to analytics cookies, returning-visitor identification using cookies and session recording are added. You can block the cookieless collection of usage records with your browser's tracking protection or a content blocker, and doing so does not affect basic services. The Company masks or excludes input areas such as payment information, passwords, form inputs, and delivery addresses so that personal information is not collected through analytics and session recording tools. You can change your cookie consent at any time via "Cookie settings" below or in your browser settings.
Article 10: International Transfers of Personal Information
We transfer personal information overseas as follows.
| Recipient and contact | Country | Items transferred | Purpose | Timing and method | Retention period | How to refuse and effect |
|---|---|---|---|---|---|---|
| Google LLC Contact: https://support.google.com/policies?p=privpol_privts | United States | Service usage records such as cookies, online identifiers, IP address, device and browser information, pages visited, time spent, and referral sources | Website visit analytics | Sent over the network when using the service after consenting to analytics cookies | Up to 14 months from collection (per the Google Analytics data retention setting) | Decline analytics cookies or change cookie settings / basic services remain available |
| PostHog Inc. Contact: privacy@posthog.com | United States | Usage records such as online identifiers, IP address, device and browser information, pages visited, time spent, referral sources, and clicks (collected without cookies before consent), and masked session recordings if analytics cookies are accepted | Service usage analytics | Sent over the network when using the service (cookie storage and session recording only after consenting to analytics cookies) | 7 years from collection (session recordings: 90 days) | Declining analytics cookies stops returning-visitor identification and session recording; cookieless usage records can be blocked with browser tracking protection / basic services are not affected |
| Kit Inc. Contact: legal@kit.com | United States | Newsletter subscription: email and language; marketing consent in a quote request: email, name, company name, phone number, and language | Newsletter delivery and subscriber management | Sent over the network upon subscription or marketing consent | Until you unsubscribe, withdraw consent, or the outsourcing contract ends | Do not subscribe or withdraw consent / you will not receive the newsletter |
| Slack Technologies, LLC Contact: privacy@slack.com | United States | Quote request: company name, contact name, email, phone number, quantity, delivery date, marketing consent status, inquiry details, attachment file names, and referral source and site navigation; newsletter subscription: email and referral source | Inquiry notifications and internal collaboration | Sent over the network when an inquiry or subscription is received | Until the outsourcing contract ends | If you refuse the international transfer, you can inquire by email or phone |
Article 11: Updates to This Policy
When the Company changes this Privacy Policy, it will announce the changes and the effective date on the Website. Changes that significantly affect the rights of data subjects will be notified by separate means before they take effect.
Article 12: Contact Information
Chief Privacy Officer
If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
- Name: Jeongsik Woo
- Position: CTO
- Email: sik@o-sean.io
- Tel: (+82) 1544-0782
Reporting and Counseling on Privacy Infringement
If you need to report or seek counseling on a privacy infringement, you may contact the following organizations:
- Personal Information Infringement Report Center: 118 (no area code)
- Personal Information Dispute Mediation Committee: 1833-6972
- Korean National Police Agency Cyber Crime Report System: 182 (no area code)
These organizations are independent of the Company. For details, please visit each organization's website.
Article 13: Legal Basis for Processing
We process personal information on the following legal bases:
- Consent of the data subject: quote and consultation requests, newsletter subscriptions, and optional analytics cookies
- Conclusion and performance of contracts: product orders, payment, production, delivery, cancellations, and refunds
- Compliance with legal obligations: retention of transaction records and proof under e-commerce and tax laws
- Legitimate interests of the Company or third parties: service security, fraud prevention, cookieless service usage statistics, and other legitimate interests that override the rights of the data subject
Article 14: Effective Date
This Privacy Policy is effective as of September 17, 2026.
- Effective date: September 17, 2026
Last updated: 2026.09.17