Samaritan’s Purse Privacy Policy

Samaritan’s Purse Korea (hereafter referred to as ‘Samaritan’s Purse’) established and is disclosing this privacy policy to protect the personal information of users under the relevant laws. The privacy policy also ensures that any issues that arise can be resolved quickly and effectively.

Article 1 (Why we collect personal information)

Samaritan’s Purse collects personal information for the following purposes:
1. To oversee and manage donations and campaigns:

Donations: Sending information about the donations at the time of transaction, verifying financial transactions, including a summary in the year-end tax report, issuing donation receipts, as well as sending out newsletters, printed materials, catalog services, and other content.
Campaigns: Information on various projects, campaigns, and events, including Operation Christmas Child, as well as information on project campaign participation and volunteer work, and the delivery timeline for campaign goods.

2. Promotional use: To provide promotional information about various events and participation opportunities, record access frequency, tally member service use, communication service, TM marketing service, etc.

3. Service improvement and development: To improve existing and new services, develop customized services, and check service efficacy.

Article 2 (Collection of personal information)

1. Samaritan’s Purse collects the following items of personal information.

Services Selected by the User	Mandatory fields	Optional fields
Making Individual Donations	Name, email, mobile phone number, date of birth (YYMMDD)	Mailing address, national I.D. number or business registration number (only when applying for donation receipt), name of workplace/church/organization, type of donation, marketing route. (※Article 160-3 of the Income Tax Act, Article 208-3 of the act’s enforcement decree, Article 112-2 of the Corporate Tax Act, and Article 155-2 of the act’s enforcement decree)
Ordering OCC Gift Boxes	Individual: Name, email, mobile phone number, date of birth (YYMMDD), address Church/organization: Church/organization name, email, church contact information, address, contact person name, contact person’s mobile phone number and email	Individual: Workplace/church/organization name, donation type and the marketing route. Church/Organization: Denomination, senior pastor/representative’s name/contact number/email, donation type and the marketing route.
Completing Transactions	Direct debit payment: Bank name, account number, account holder’s name, account holder's legal date of birth (or business registration number), and account holder’s contact details. Credit card payment: Card company, card number, expiration date, cardholder’s name, cardholder's legal date of birth, and cardholder contact details.
Subscribing to Newsletter	Name, email
Signing-up for Campaign Information	Name, e-mail, mobile phone number	Receive follow-up notices and updates once the campaign launches

Services Selected by the User	Mandatory fields	Optional fields
Making Individual Donations	Name, email, mobile phone number, date of birth (YYMMDD)	Mailing address, national I.D. number or business registration number (only when applying for donation receipt), name of workplace/church/organization, type of donation, marketing route. (※Article 160-3 of the Income Tax Act, Article 208-3 of the act’s enforcement decree, Article 112-2 of the Corporate Tax Act, and Article 155-2 of the act’s enforcement decree)
Ordering OCC Gift Boxes	Individual: Name, email, mobile phone number, date of birth (YYMMDD), address Church/organization: Church/organization name, email, church contact information, address, contact person name, contact person’s mobile phone number and email	Individual: Workplace/church/organization name, donation type and the marketing route. Church/Organization: Denomination, senior pastor/representative’s name/contact number/email, donation type and the marketing route.
Completing Transactions	Direct debit payment: Bank name, account number, account holder’s name, account holder's legal date of birth (or business registration number), and account holder’s contact details. Credit card payment: Card company, card number, expiration date, cardholder’s name, cardholder's legal date of birth, and cardholder contact details.
Subscribing to Newsletter	Name, email
Signing-up for Campaign Information	Name, e-mail, mobile phone number	Receive follow-up notices and updates once the campaign launches

Samaritan’s Purse collects personal information through online/offline forms, phone/fax, phone inquiries, and other methods.

Article 3 (How personal information is used)

1. Samaritan’s Purse safely keeps personal information following relevant laws, regulations, and guidelines for up to five years to encourage donations, confirm donating history, and provide guidance even if the user chooses to discontinue their donations. In principle, personal information collected via events, etc. will be destroyed immediately after the usage purpose is achieved. However, if it is necessary to confirm the obligation between the two parties, the information is retained for a certain period under the relevant laws and regulations.

2. Notwithstanding the preceding paragraph, Samaritan’s Purse will retain this information until the end of the relevant period in the following cases.

Personal information related to service use (log records): three months, which is the retention period under the Protection of Communications Secrets Act
Records on withdrawal from contract, donations, etc., as well as records on payment and supply of goods: five years, the retention period under the Act on Consumer Protection in the Electronic Commerce Transactions, etc.
Records on consumer complaints or dispute handling: three years, the retention period under the Act on Consumer Protection in the Electronic Commerce Transactions, etc.
Books and supporting documents for all transactions stipulated by the tax law: five years, the retention period under the Framework Act on National Taxes
Information on deduction carried forward for donations: Ten years, the period stipulated in the Income Tax Act

Article 4 (Provision of Personal Information to Third Parties)

Samaritan’s Purse provides personal information to third parties only with the user’s consent or when there are special provisions in the Personal Information Protection Act or other laws.

Article 5 (Consignment of personal information processing)

1. Samaritan’s Purse entrusts the following entities with the following items of personal information to ensure that processing of personal information is completed smoothly.

Consignee	Assigned tasks
NHN KCP, Korea Financial Telecommunications & Clearings Institute	Approving, processing donation payments
NCOMSOFT	Approving, processing donation payments
Daou Technology Inc.	MMS, sending notification alerts
KakaoTalk	Friends Talk notifications
11st Co. Ltd.	Sending event gifticons
SG Support	Donor management and gaining new prospects
McKinney Consulting Inc.	Head-hunting and recruitment
Post office and courier companies (CJL, Lotte, Hanjin, Logen)*	Mail delivery and delivery of campaign participation-related parcels
Doosol PNP Co. Ltd.	Mail delivery and delivery of campaign participation-related goods
Blackbaud Inc., Formagrid Inc.,	Donor management program
Constant Contact Inc.	Newsletter management program

*Courier companies could change depending on the provider’s circumstances.

2. Samaritan’s Purse entrusts the following third—party entities located overseas with the following items of personal information to ensure that processing of personal information is completed smoothly.

Blackbaud Inc.
– Items of personal information transferred: name, email, mobile phone number, date of birth (YYMMDD), mailing address, national identification number or business registration number (only when applying for donation receipt), workplace/church/organization name, donation type and how the user came to know about it, church/ organization name, email, church contact information, address, contact person’s name, mobile phone number and email, donation type and how the user came to know about it, denomination, senior pastor/representative’s name/contact information/e-mail
– Country receiving the transferred data: U.S.A.
– Date and time of transfer and method of transfer: Continuous transfer of information via communication networks
– Recipient name/contact: Blackbaud Inc., [email protected]
– Recipient’s purpose for using the personal information: To provide donor management program
– Recipient’s retention and usage period: Same as the retention and use period in Article 3
Formagrid Inc.
– Items of personal information transferred: name, email, mobile phone number, date of birth, mailing address, national identification number or business registration number (only when applying for donation receipt), workplace/church/organization name, donation type and how the user came to know about it, church and organization name, email, church contact information, address, contact person’s name, mobile phone number and email, donation type and how the user came to know about it, denomination, senior pastor/representative’s name/contact information/e-mail
– Country receiving the transferred data: U.S.A.
– Date and time of transfer and method of transfer: Continuous transfer of information via communication networks
– Recipient name/contact: Formagrid Inc., [email protected]
– Purpose of use of personal information of the recipient: To provide sponsor management program
– Recipient’s retention and use period: Same as the retention and use period in Article 3
Constant Contact Inc.
– Items of personal information transferred: name, email
– Country receiving the transferred data: U.S.A.
– Date and time of transfer and method of transfer: Continuous transfer of information via communication networks
– Name/Contact Recipient of Transfer: Constant Contact Inc., +1 781-472-8120
– Purpose of use of personal information by the recipient: Provide newsletter management program
– Period of retention and use by the recipient: Until the newsletter is canceled

Article 6 (Use and provision of personal information within the scope reasonably related to the purpose of collection)

Samaritan’s Purse may use or provide personal information to a third party without the user’s consent, taking into account each of the following criteria within a reasonable scope and the original purpose of collection.

Whether or not it is relevant to the original purpose of collection: Judged based on whether the original purpose of collection and the purpose of additional use/provision are related in nature or tendency.
Whether there is the possibility of further use or provision of personal information in light of the circumstances in which the personal information was collected or processed: The relationship between the personal information collectors and users, the level of technology and the speed of development, as well as general circumstances established over a considerable period (practices), etc.
Whether or not the user’s interest is unfairly infringed: Judged based on whether the user’s interest is substantially infringed by the additional usage purpose and whether the infringement of the interest is unreasonable.
Whether necessary measures have been taken to ensure safety, such as pseudonymization or encryption: Determining whether safety measures were implemented to prevent the possibility of infringement.

Article 7 (Users, legal representatives’ rights and duties)

Users can exercise their rights, including viewing, correcting, deleting, and requesting the suspension of processing of personal information at any time.
Exercising the rights in the above paragraph can be done in writing or by e-mail, and Samaritan’s Purse will take prompt action.
The exercise of rights in the first paragraph of article 7 may be done through the user’s legal representative or an agent, including a person who has been designated as such. In this case, submitting a power of attorney confirming such designation is required.
Under relevant laws such as the Personal Information Protection Act, exercising users’ rights such as viewing, correcting, deleting, and suspending the use of personal information may be restricted.
Requests for the correction and deletion of personal information cannot be entertained if the personal information is specified as a collection target under other laws.
Samaritan’s Purse has the right to check whether the user making the request, such as a request for access, correction or deletion, or request to suspend processing, is the user or a lawful representative.

Article 8 (Destruction of personal information)

Samaritan’s Purse destroys personal information without delay when the personal information is no longer needed, such as when the personal information retention period expires or when the data has served its purpose.
If the personal information retention period agreed to by the user expires or the data has served its purpose, if the personal information needs to be kept under the laws and regulations outlined in Article 3, Paragraph 2, the personal information will be stored by moving it to a separate database (DB) or changing the storage location.
The procedure and methods to destroy personal information are as follows.
1) Data Destruction Procedure: Samaritan’s Purse identifies the personal information that needs to be destroyed and destroys the data upon receiving approval from the Samaritan’s Purse data manager.
2) Data Destruction Method: Samaritan’s Purse destroys personal information recorded and stored in electronic file format using technical methods so that the record cannot be reproduced, while personal information is recorded and stored in a paper format by shredding or incineration with a shredder.

Article 9 (Measures to ensure the safety of personal information)

Samaritan’s Purse takes the following measures to ensure the safety of personal information.

Administrative measures: To develop and implement internal management plans, regular employee training, etc.
Technical measures: Manage access rights of personal information processing system, etc., install access control system, encrypt unique identification information, install security programs
Physical measures: control access to computer rooms, data storage rooms, etc.

Article 10 (Concerning the installation, operation, and rejection of automatic personal information collection devices)

Samaritan’s Purse uses cookies to store and retrieve user information from time to time as follows to provide users with a customized service. Cookies are small amounts of information that the server uses to operate the website that is sent to the user’s computer browser and stored on the user’s PC hard disk.

Why cookies? Analyze user access frequency and visit times, identify user service usage patterns and trace user history, manage security and improve services through secure access, user size, etc., develop new services, and provide customized services and advertisements.
Acceptance, usage, and rejection of cookies: Users have a choice in whether or not to install cookies. Users can thus refuse to save cookies by setting the option in the Tools → Internet Options → Personal Information menu at the top of the web browser.
If you refuse to store cookies, you may experience difficulties in using some services.

Article 11 (The collection, use, and rejection of consumer behavioral information)

1. Samaritan’s Purse collects and uses consumer behavioral information to provide users with customized services and benefits as well as in online customized promotions.

2. Samaritan’s Purse uses Google Analytics to collect behavioral information as follows.

Item	User's website/app visit history, search history
Collection method	Automatically collected when users visit/run websites and apps
Purpose of Collection	To provide customized services (including advertisements) based on users’ interests and propensities
Retention and usage period	From the collection date until the end of the sponsorship

3. Samaritan’s Purse can refuse to use Google Analytics by using the Google Analytics opt-out browser add-on or by rejecting cookies.

Article 12 (Personal information protection manager)

Samaritan’s Purse is responsible for the handling of personal information and has appointed a chief representative for the protection of personal information as follows to handle complaints and address damages.
▶ Chief Representative for Protection of Personal Information
– Name: Christopher J. Weeks
– Position: CEO
– Contact: 02)2105-1800 / [email protected]
Users may contact the personal information protection manager and the department in charge of all personal information protection-related inquiries, complaint handling, damage relief, etc.
– Department Name: IT Team
– Contact: Park Mi-sook Manager, 02)2105-1800 / [email protected]
You can contact the following organizations if you need to report or receive consultation about other personal information infringements.
– Korea Internet & Security Agency
– Supreme Prosecutors’ Office Cybercrime Investigation Division
– National Police Agency Cyber Bureau

Article 13 (Updated privacy policy)

This privacy policy is effective from November 3, 2022.
The previous privacy policy can be found below.
View the previous privacy policy (effective from November 20, 2020 – November 24, 2022)

Hope Store Operation Christmas Child