LINE PLUS CORPORATION PRIVACY POLICY (B2B)

1. Introduction

LINE Plus Corporation (the “Company,” “we,” “our” or “us”)’s privacy policy (this “Policy”) applies to the operation of any and all business-related services that we provide to our business clients and their related individuals, such as products, applications, services, and websites operated by us (“Services”). In case of any conflict with LY Corporation’s Privacy Policy in respect to our Services accessible through LINE accounts, this Policy shall prevail.
 

We consider personal data protection as one of the most important principles in the management of the Company. We will comply with the laws and regulations applicable in all countries and regions where we engage in our business (such laws and regulations hereinafter collectively referred to as the “Applicable Laws”) and strive to protect personal data adequately pursuant to this Policy.

This Policy explains the types of personal data collected by us, how we use and share such personal data, and how you (also referred to as “user”) can manage your personal data.

2. Scope of Application of This Policy

2.a. Subject Scope

This Policy applies to any and all of your personal data collected by us, regardless of country or region. It also applies in the circumstances that you navigate publicly-available sections of the Services before logging in.

Through our Services, you may connect to other websites, devices, applications, and other functions (“External Sites”) which are operated separately by external parties following their own privacy policies or notices. Unless the External Sites are owned or controlled by us, we shall not be responsible for the relevant content, use of your personal data, or their personal data protection practices. If you connect to any External Sites through our Services, your personal data may be collected and used by such External Sites and be governed by the privacy policies of such External Sites, which shall be irrelevant to us, and as such, please review the policies of the External Sites carefully, especially upon your first visit to those External Sites.

2.b. Language; Applicable Policy

This Policy is prepared in the English language, and may also be prepared in other languages. In case of any discrepancy between the English version and its translated versions, the version in the language of your country shall prevail.

When you use our Services, you acknowledge that this Policy applies to the collection, processing, and usage of your personal data. For other specific scopes separately applied to each Service, please refer to the terms of use for respective Services.

3. Personal Data to Be Collected

We collect the following personal data in a lawful and fair manner, for the purposes set forth in this Policy. Some of the following information may be essentially required for our provision of the Services to you. If such information below is not collected, all or part of our Services may not be made available.

3.a. Personal Data Provided by You

We process personal data provided by you by operating your device or through written documents and other media. The information collected from you may include, but not limited to, the following:

  1. Information collected upon account or membership registration (such as name, phone number, postal address, email address, company name, job title  and department name etc.);

  2. Responses to surveys, events, and activities (if any);

  3. Identification documents provided to verify corporate or individual's identity and business status;                                                                   

  4. Bank account number and a copy of the bankbook required for settlement;                                                                                  

  5. Profile data (icon image, display name, status message, search ID, etc.); and      

  6. Delivery and contact information, such as name of recipient, address for delivery, phone number and email address upon user inquiries.     

3.b. Personal Data Regarding Use of Services

We collect information regarding your activities while using the Services or your device information, as well as information with respect to how you use the devices. We collect such personal data to analyze and improve the platform, provide the Services, and protect the Services from illegal/fraudulent activities that may interfere with the normal operation of the Services. Some personal data is collected automatically when you visit the Services, which includes the following.

3.b.1 Service Use Status

We collect, via automatic means, the information about when and how you use our Services. The information collected includes the status of use of various Services or features, such as the date and time of the use of each Service, search history within the Services and the results, purchased Services, and the content or advertisements viewed, tabbed, clicked, etc. In addition, we may also collect information regarding the use of Services through your participation in events, polls, surveys, and other content of Services (including the types of events participated by you, event participation options, and other information). We also collect transaction-related data, such as payment-related information and transaction records, etc.

3.b.2 Application, Browser, Device, and Network Information


We collect information regarding the applications, browsers, and devices (e.g., types and operating systems of the devices, app versions, OS versions, device manufacturers, browser types, languages, unique device identification numbers, cookies, and advertising identifiers, etc.) or network information (e.g., carriers or internet service providers, and IP addresses, etc.), used by you. 

We may combine this information with other user-related information collected.

3.c. Personal Data Collected from Third Parties

We may collect personal data from third parties, including our partners and related companies. Such personal data is as follows.

3.c.1 Personal Data Collected from Related Companies

We may collect your personal data in accordance with the terms or policies of related companies (as defined in the “Provision of Personal Data” section below, which can be found in the “List of Related Companies”, “Related Companies”). For the privacy policies applicable to individual services provided by Related Companies, please refer to the individual services.

- Information Shared by LY Corporation (“LY”) to us
: You agree that LY may provide your personal data that is collected and generated by LY to us in South Korea. The personal data shared by LY may include, but not limited to, the following:
  1. Profile data (icon image, display name, status message, internal identifiers, etc.);

  2. Business account data (where applicable, such as account management, user-defined access or operation authorities and payment methods on the LINE Official Account management interface, and payment records); and

  3. Attribute information.

3.c.2 Personal Data Collected from Partners

We may collect personal data from our partners. They may be partners who operate independent services, or partners who operate services in partnership with our Services.

Information collected from partners includes, but is not limited to, user-related identifiers (internal identifiers, advertising identifiers, etc.), hashed email addresses or phone numbers, IP addresses, partial device information (e.g., OS version, etc.), attribute information, purchase history, viewing history, search history, location information, and other details of user behaviors, including payment and settlement records.

3.c.3 Personal Data Uploaded by Other Users

We may collect information uploaded by other users who use the Services, which may contain your personal data.

4. Purpose of Use of Personal Data

We and Related Companies use personal data collected (including all personal data collected by third parties) to provide and improve the Services, respond to your requests, and provide customer services and technical support (including Related Companies’ use of information collected by us, which we share with Related Companies for the following purposes). We do not process personal data beyond the scope of the purposes of use, except to the extent consented by you or permitted by the Applicable Laws. 

In addition, we and Related Companies may collect user-related information from partners to send advertisements, measure the impact of advertisements, and prepare and provide statistical data, and may use such information in combination with the information retained by us.

4.a. Provision and Maintenance of Services

  1. To verify identity and qualification;

  2. To create accounts;

  3. To process delivery and fee settlement, and to issue tax invoices;

  4. To display sellers and facility information;

  5. To evaluate store entry, issue manager account, and evaluate membership (level) for CRM;

  6. To process claims or make payments for the purchase of products and use of paid services, etc.;

  7. To aggregate anonymized statistical data regarding the Services;                                                                              

  8. To handle your inquiries and requests by checking the status of use of Services, etc., and effectively responding thereto; and                                               

  9. To notify you of any other important information relating to the Services and to contact you, if necessary.

4.b. Development and Improvement of Services and Content

  1. To learn how you interact with the Services in order to improve the platform and develop new features;

  2. To improve the Services by creating statistics or models regarding the use of the Services;

  3. To provide new developments in the future and improve the quality and relevance of the Services; and

  4. To obtain platform-wide feedback and provide customer services (e.g. satisfaction surveys).                                                                                                                

4.c. Prevention of Abuse and Compliance with Applicable Laws

  1. To detect and prevent spam, fraud, abuse, or fraudulent use of the Services, and to contact you to verify fact-findings;

  2. To keep track of the content of reports and illegal posts, and to monitor and implement our compliance with legal agreements; and

  3. To comply with the Applicable Laws or legal obligations.                                                                                                                                                                                           

4.d. Provision of Better and More Optimized Content to Users

  1. To provide recommendations and information tailored to the specific interests of you; and

  2. To send information regarding recommendations that might be of interest to you, including offers personalized based on the information related to your accounts.

4.e. Marketing Related Activities

With your separate consent or other legal basis, where applicable, we will share your personal data with any of the Related Companies and third parties, and the Related Companies and third parties may also share your personal data for the following purposes:

  1. To transmit the marketing information, advertisements that are highly relevant to you, and/or promotional proposals provided or offered by us, Related Companies, or third parties, as the case may be;

  2. To match personal data with other data collected for other purposes and from other sources (including third parties) in connection with the provision, marketing or offering of products and services by Related Companies;

  3. To conduct market research, analytics, and surveys to enable us to understand and determine customer preferences and demographics for us to offer users products and our services as well as special offers and marketing programs which may be relevant to users’ preferences and profiles;

  4. To administer and organize contests, lucky draws, promotional events, competitions, and marketing campaigns, and personalizing users’ experience; and

  5. To optimize and promote the services provided by Related Companies.

5. Provision of Personal Data

We do not provide, disclose or share your personal data to a third party unless such provision, disclosure, or sharing is consented to by you, is permitted or required by the Applicable Law, or is necessary to protect our rights. 

We transfer, disclose, or otherwise provide your personal data as explained below. Receiving parties include third parties, such as entrustees and Related Companies located in countries or regions other than those of your place of residence.

5.a. Disclosure by the Data Subject

Public information, such as posts or comments on bulletin boards accessible by unspecified or multiple users, profile data, or any information or content on your business account(s) set to be public via our Services, will be available to third parties other than you. 

Due to the nature of digital data, such public information is likely to be copied, stored or distributed by viewers, thereby being accessed by unintended third parties. In case you are setting up your profile data or business account(s) or posting on our Services, please be aware of its content or scope of disclosure.

On the other hand, we may provide public information regarding you to a third party. Any public information provided by us to a third party may be posted on the services of such third party.

5.b. Entrustment of Work

We may entrust a third party (including Related Companies) with certain tasks necessary for the provision of Services (e.g., infrastructure establishment and operation, development, payment, delivery, and customer support, etc.). In doing so, we may transfer or disclose all or any part of your personal data to companies and individuals who function on our behalf. 

These entities have the authority to access and use only the minimum personal data necessary to provide our Services, and we ensure that these service providers process your information in accordance with this Policy and the Applicable Laws.

5.c. Related Companies

Other than the Entrustment of Work, we may also share the personal data mentioned in “3. Personal Data to be Collected” among Related Companies which can be found in the “List of Related Companies”. The purposes of sharing personal data are the same as those specified in “4. Purpose of Use of Personal data”.

5.d. Provision of Services

In any of the following cases, we may, to the extent permitted by the Applicable Laws or with your consent, provide personal data to third parties, including our partners, to the extent necessary:

  1. Where such provision is necessary to provide the Services or to improve the quality thereof (including where necessary for advertising and promotional activities in relation to the Services);

  2. Where such provision is necessary for us to review new Services;

  3. Where such provision is necessary to prevent illegal use of the Services;

  4. Where the personal data is provided to research institutes for investigation, research or analysis; and

  5. Where such provision is necessary to pay settlement amounts, issue tax invoices or address settlement-related issues.

5.e. Compliance; Cooperation with Public Agencies

We may disclose personal data to law enforcement agencies (e.g., the police) or third parties (e.g., courts of justice) in order to comply with legal procedures in accordance with the Applicable Laws in certain cases where, e.g., it is requested pursuant to legal procedures, such as warrants, or where there is a threat to the life or property.

5.f. Protection of the Company and Others

We may disclose your personal data in the case where we find that investigation, prevention, or taking measures is necessary in relation to illegal activities, suspected fraud, circumstances relating to potential threats to the safety of individuals, and breaches of our terms or this Policy, or where such personal data is used as evidence of litigation concerning our Services.

5.g. Professional Advisors

Provision of information may be necessary to be advised by attorneys, business consultants, accountants, or information security and forensic experts on the operation of the Services.

5.h. Third Parties Authorized by Users or Legally Permitted

This applies to any potential or actual acquirers and investors or professional advisors in relation to proposed merger, acquisition or investment regarding all or part of our business. We will use our best efforts to ensure that the terms of this Policy apply to personal data after transfer or that you receive notice of any changes to the processing of personal data.

6. Overseas Transfer of Personal Data

We are a controller who shares personal data in accordance with the Applicable Laws. Subject to this Policy, your use of our Services includes the transmission, storage, and processing of personal data in and outside of your country of residence.

  1. Service Provider: In providing the Services, we may store your personal data outside of the countries or regions of your residence. In particular, your personal data is stored in data centers in South Korea and Japan. Some of the receiving parties of information who share your personal data within the Services may be located in the US, the Philippines, and other countries, other than the countries in which your personal data was originally collected.
  2. Related Companies: South Korea, Japan, Taiwan, Thailand, Hong Kong, Vietnam, and Indonesia, etc. are the countries and regions to/from which personal data may be transferred.

You acknowledge that we may transfer your information overseas in which case we will ensure that any such transfer complies with Applicable Laws.

7. Retention Period of Personal Data

We collect and retain your personal data for the following period in order to provide the Services as per your requests, to achieve the purposes of use specified in this Policy, or to comply with the Applicable Laws:

  1. During the course of providing Services to you;

  2. For the period necessary for the purpose of data collection, unless a longer retention period is required as provided by the Applicable Laws;

  3. During the applicable period if required in connection with laws, contracts or legal obligations of the Company; or

  4. In case of processing of personal data for marketing purposes or with your consent, until you request the suspension of processing and thereafter for a short period of time until such request is fulfilled.

Unless you request the deletion of your accounts, we retain most of your personal data as a rule. In the event that your accounts are deleted, we retain your personal data for a certain period of time for the following purposes and then properly process such personal data in accordance with the Applicable Laws and internal regulations:

  1. To respond to inquiries, resolve disputes, and collect fees;

  2. To detect and deter from any illegal use or abuse of the Services; and

  3. To comply with obligations under rules determined by the Applicable Laws.                                                                                                                                                    

In addition, we may retain personal data in a form that cannot identify individuals after the expiration of the retention period determined by the Applicable Laws and internal regulations has elapsed.

8. Your Rights

As required by the Applicable Laws, you may request access to, or copies of, your personal data retained by us, which is not directly available via the application. You may also request to make an inquiry of, and to review, a copy of your personal data, suspend the collection, processing or use, request the deletion, and/or destruction of such personal data, correct any inaccuracies, make supplement about your personal data, or restrict the processing of your personal data. 

If you intend to exercise your rights on us, we will respond to your requests within a reasonable period of time after verifying your identity in accordance with the Applicable Laws. To file a written request, please contact us by using the information specified in the “12. Inquiries” section below.

9. Secure Management of Personal Data

In managing collected personal data, we will take strict technical and organizational security measures. We will review and reinforce our internal rules and the Applicable Laws in accordance with changes in laws and social norms in order to continuously improve the protection of personal data. However, despite our reasonable actions to protect your information, no website, internet transmission, computer system or wireless connection can be completely secure. We also need your help to protect your personal data and its confidentiality. 

Do not share your password with anyone else, and do not use the same password you use for other services. In addition, in case of any suspicious illegal use of your account or other security violations within the Services, please inform us by referring to “12. Inquiries” section below.

10. Use of Third-Party Modules and Cookies

We may use tags and modules, including cookies and third-party software development kits (SDKs), to achieve the purposes explained in this Policy.

10.a. Third-Party Modules

We may install third-party SDK modules in our Services for the following purposes:

  1. To analyze the status of use of the Services; and                                                                                                                                                                                          

  2. To distribute advertisements on our behalf or to measure their effectiveness.                                                                                                                                                 

As third parties’ privacy policies apply to your personal data processed by the third parties through their modules, please carefully review such third parties’ privacy policies before consenting thereto. For more information on the information collected by third parties and how to suspend/resume advertising, please refer to “Announcement on Outside Transfer of User Information”.

10.b. Cookies and Other Analytical Tools

Cookies are small text files that are stored on your computer when you visit a website. These text files store data that can be read by the website operator when you visit the website later again.

We may use cookies and similar web tracking technologies (e.g., web beacons, pixels, etc.), particularly for the following purposes:
  1. To store users’ login status, authenticate visitors, maintain sessions, and take security measures;

  2. To improve user convenience by storing settings, such as language preferences and the date and time of the latest access;

  3. To provide better Services by understanding the number of accesses and how the Services are used;

  4. To distribute advertisements that are more relevant to users’ interests; and

  5. To measure the effectiveness of advertising.                                                                                                                                                                                                                     

You may control whether to allow cookies based on your browser settings or by using other tools. However, if you disable cookies or restrict the feature of cookie settings, you may not be able to access all or part of the features of the website, which could limit overall user convenience.

10.c. Information Regarding the Use of Google Analytics

We use Google Analytics to measure the effectiveness of the Services, such as the website, to improve the Services. Google may set cookies or read existing cookies to collect data. At this point in time, information, such as the URL and IP address of the page you access is automatically transmitted to Google. We may use this information to determine the service usage status or such information may be used in the Services.

For more information on how Google collects, uses, and shares your information, please refer to see “How Google uses information from sites or apps that use our services”, “Safeguarding your data”, and ”Google Analytics Opt-out Browser Add-on”.

11. Child Privacy

Except in very limited circumstances, our Services generally do not process personal information of child users. If we do process personal information of child users, we do so with the consent of their legal guardian. We are aware of the need for higher privacy protection for personal data collected from users in certain jurisdictions, and do not intentionally collect personal data of children under a certain age (e.g., those under the age of 11 in Thailand, those under the age of 14 in South Korea) requiring consent as stipulated by laws in the relevant jurisdictions. If you believe that we are collecting personal data from children in those countries or regions, please inform us via the provided channels in “12. Inquiries” below. If confirmed, we will take reasonable actions to invalidate the relevant account and promptly handle such personal data in our records.

12. Inquiries

If you intend to exercise your rights as a user or to check the details of how we use personal data, please let us know through “Contact Us.” We will respond to your requests as promptly as practicable. Please note, however, that if there are complicated or many concerns arising from your requests, it could take longer to handle them. 

We designate the Chief Privacy Officer as follows, in order to handle your inquiries and/or complaints in connection with your personal data:

<Chief Privacy Officer>
  1. Name: Geun Su Byeon                                                                                                                                                                                                                                                                  

  2. Division: Security Center

  3. Position: Chief Privacy Officer

  4. Contact Info.: Contact Us

13. Amendment of the Company’s Privacy Policy

We may from time to time modify this Policy to reflect changes in our Services and the Applicable Laws, and the latest version of this Policy will always be posted on this website. Please review the latest version of this Policy in a careful manner. 

If there are material changes to this Policy, we will notify you via the application or other means. You can access this Policy directly from the application and website at any time. Your continued use of the Services shall be deemed as your acceptance of such changes.

Effective Date: May 13, 2025