Privacy Policy

1. Information we collect

The Service collects the following personal information.

• Email address — collected via the application form (Tally). Used to deliver launch notifications (waitlist) and early-access information.
• Usage records (collected automatically) — behavioural data such as page views, scroll position, button clicks, and form submission. A random visitor identifier stored in your browser's localStorage, access time, referring page, browser and device type, and approximate region inferred from your IP address are recorded alongside it. This data is not combined with directly identifying information such as your name or email.
• Ad performance data (collected automatically — only while ads are running) — While we run ads on Meta (Facebook·Instagram) and TikTok, each platform's measurement tool (Meta Pixel, TikTok Pixel) collects page visits, button clicks, signup completion, IP address, and browser/device information via cookies and advertising identifiers. This data is never combined with information that directly identifies you, such as your name or email.

Your email address is a required item for applying, and you enter it yourself in the application form. The Service collects no personal information beyond the categories above, and does not accept uploads of video, images, or any other files.

Usage records are not entered by you — they are collected automatically when you visit the website. If you do not want this, you can opt out using the methods described in section 6 below; opting out places no restriction whatsoever on your use of the Service. The Service does not collect personal information from children under 14, and applications are open only to those aged 14 and over.

2. How we use your information

• Launch notifications (waitlist) — early applicants will be notified when the full service launches.
• Usage statistics for service improvement — views, scrolls, clicks, and completed applications are aggregated to understand which explanations actually help. The purpose is not to identify individual users; the data is used in aggregate form only.
• Ad performance measurement — We check whether visitors who arrive from our ads complete the signup, so we can measure ad effectiveness and adjust our campaigns.

The legal basis differs by category. Information you enter directly in the sign-up form is processed on the basis of your consent(PIPA Article 15(1)1), while website usage statistics (visits, scrolling, clicks) are processed for statistical purposes without identifying individual users, on the basis of the legitimate interests of the controller(PIPA Article 15(1)6); you may opt out at any time using your browser's Do Not Track setting. The email address you enter in the signup form is used only for launch notifications — never for advertising, and never shared with third parties for marketing. Ad performance measurement uses only automatically collected behavioral data, which you can opt out of at any time using the methods in Section 6. If a new purpose is added, we will amend this policy and obtain your consent again in advance.

3. Retention and deletion

The Service destroys personal information without delay once the purpose of collection has been achieved. Retention periods per item are as follows.

• Email address — destroyed once the launch notification has been sent, or one year after collection, whichever comes first. If you withdraw consent, the data is destroyed immediately at that point.
• Usage records — automatically deleted from the analytics tool 12 months after collection.

Destruction methods are as follows. Information held as electronic files is permanently erased by a method that makes recovery impossible; information printed on paper is shredded or incinerated. Where retention is required by law, the information is stored separately for the period prescribed by that law and then destroyed.

4. Third-party processors and overseas transfer

The Service delegates certain data processing activities to the sub-processors below, all of which are located outside the Republic of Korea. Information you enter, or that is collected automatically, is transferred over the internet to the countries listed below at the time the relevant service is used.

Each processor retains personal information only for as long as is necessary to perform the delegated task. The Service enters into terms of service and data processing agreements that include personal data protection obligations, and supervises how processing is carried out.

You have the right to refuse the overseas transfer of your personal information. However, the processors above are essential to accepting applications, so refusing the transfer means you cannot use the application form. Overseas transfer of automatically collected usage records can be refused using the methods in section 6 below, and doing so places no restriction on your use of the Service. To refuse, please contact us at the address in section 8 below. If a processor or a destination country changes, we will amend this policy and give notice in advance.

While we run ads, the advertising platforms below collect the ad performance data described in Section 1 directly, through their own measurement tools (pixels). Unlike the processors above, they are independent controllers that process data under their own privacy policies, and the data is transferred to the countries below at the time of collection.

The retention period for data collected by these advertising platforms is governed by each platform's own privacy policy; the Service does not itself store this data. You can opt out of this collection and the related cross-border transfer using the methods in Section 6. Opting out does not limit your use of the Service in any way.

5. Your rights

You may exercise the following rights at any time.

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to withdraw consent

To exercise these rights, email the data protection officer at the address in section 8 below. So that we can verify your identity, please write from the email address you used when applying. The Service will act on your request and inform you of the outcome within 10 days of receiving it. You may also exercise these rights through a legal representative or an authorised agent, in which case a power of attorney in the form set out in Annex Form No. 11 of the Notice on Methods of Personal Information Processing must be submitted.

If you withdraw consent, we destroy the email address we hold immediately, and you will no longer receive the launch notification. Information that has already been destroyed cannot be recovered.

6. Automatically collected data and how to opt out

For usage statistics, the Service stores a random visitor identifier in your browser's localStorage. This statistics identifier is not combined with directly identifying information such as your name or email, and is never used for advertising or shared with third parties. Separately, while we run ads, the advertising platforms listed in Section 4 collect ad performance data via cookies and advertising identifiers.

If you do not want this data collected, you can opt out in any of the following ways.

• Delete or block site data (localStorage and cookies) for this site in your browser settings.
• Visit the site in your browser's private / incognito mode. The stored identifier is removed when you close the window.
• Enable your browser's Do Not Track setting, or use an ad- and tracker-blocking extension. When tracking protection (Do Not Track) is on, both usage statistics and ad pixels are fully disabled.
• You can manage or opt out of Meta's data collection inMeta Ad preferences, and TikTok's in the TikTok app under "Personalized ads" settings.

Opting out places no restriction whatsoever on your use of the Service.

7. Security measures

The Service takes the following measures to process personal information safely.

• Encryption in transit — HTTPS (TLS) is applied to all communication with the website and the application form.
• Minimum access rights — access to collected personal information is limited to the minimum number of people required for the work, and two-factor authentication is enforced on those accounts.
• Minimum retention — personal information whose purpose has been achieved is destroyed without delay under the criteria in section 3.
• Processor management — we verify the data protection standards of the processors in section 4 and review their processing practices regularly.

8. Data protection officer and contact

The Service has designated the following data protection officer, who has overall responsibility for personal information processing and handles user enquiries, complaints, and remedies relating to it.

• Data protection officer — Wi Seungbin (Representative, OZYODA)
• Contact email —shoeout.official@gmail.com
• Organisation — OZYODA. We do not maintain a separate data protection department, so the officer handles enquiries directly.

You may direct any privacy enquiry, complaint, or request for remedy arising from your use of the Service to the contact above, and we will respond and act without delay.

9. Remedies for infringement of your rights

To obtain redress for harm caused by a personal information breach, you may apply for dispute resolution or advice to the following bodies.

• Personal Information Dispute Mediation Committee — 1833-6972 (www.kopico.go.kr)
• Privacy Infringement Report Centre — 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office, Cyber Investigation Division — 1301 (www.spo.go.kr)
• National Police Agency, Cyber Bureau — 182 (ecrm.police.go.kr)

In addition, if your rights or interests are infringed by a disposition or omission by the Service in response to a request under PIPA Article 35 (access), Article 36 (rectification and erasure), or Article 37 (suspension of processing), you may file an administrative appeal under the Administrative Appeals Act.

10. Changes to this policy

This privacy policy takes effect on 20 July 2026.

Amendment of 23 July 2026 — the changes to Sections 1, 2, 4, and 6 regarding ad measurement tools (Meta Pixel · TikTok Pixel) apply only to website visits after the amendment's effective date (23 July 2026) and are not applied retroactively to data collected before that date.

Amendment of 29 July 2026 — we narrowed the personal data we collect toan email address only (previously "email or contact details"). Because this reduces what we collect, it is not unfavourable to users and takes effect at the same time as this notice.

If we amend this policy because of changes in law, policy, or the Service, we will announce the changes and their effective date on this page at least7 days beforehand. For changes that are disadvantageous to users or material (adding collected items, changing the purpose of use, changing a processor or destination country), we will give notice at least30 days beforehand and, where necessary, notify you individually by email and obtain your consent again.