Privacy Policy of the Asian Society of Health and Exercise (ASHE)

Effective Date: June 1, 2025

The Asian Society of Health and Exercise (hereinafter referred to as “ASHE”) establishes this privacy policy in accordance with the Personal Information Protection Act to protect users’ personal data and rights and to facilitate the handling of user complaints related to personal information.

If ASHE makes any revisions to the privacy policy, it will notify users via website announcements (or individual notifications).

1. Purpose of Personal Information Processing

ASHE processes personal information for the following purposes. The information will not be used for purposes other than those stated below, and any change in purpose will require prior user consent.

A. Website Membership Registration and Management
To confirm a user’s intent to register, identify and authenticate users for membership services, maintain and manage membership status, verify identity in compliance with limited identity verification policies, prevent misuse of services, confirm parental consent for users under age 14, provide notices and announcements, handle complaints, and retain records for dispute resolution.

B. Handling Civil Complaints
To verify the identity of the complainant, confirm complaint details, communicate for investigation, and notify results.

C. Providing Goods or Services
To deliver products, provide services or content, offer customized services, verify identity, and conduct age verification.

2. Status of Personal Information Files

File Name: Member Management

  • Items Collected: Login ID, password, name, email, home address, home phone number, mobile phone number
  • Collection Method: Through the website
  • Access Method: Administration page of the website
  • Retention Period: 3 years
  • Relevant Laws:
    • Records of consumer complaints or dispute resolution: 3 years
    • Records on collection/use of credit information: 3 years

3. Processing and Retention Period of Personal Information

  1. ASHE retains and uses personal information within the period agreed upon at the time of collection or as required by law.
  2. The specific processing and retention periods are as follows:
    • Membership Registration and Management: Retained from the date of consent to collection and use for up to 1 year.
    • Retention Basis: Website administration page
    • Relevant Laws: Records of consumer complaints or dispute resolution: 3 years

4. Items of Personal Information Processed

ASHE processes the following personal information:

<Website Membership Registration and Management>

  • Required: Login ID, password, name, email, home address
  • Optional: Home phone number, mobile phone number

5. Disposal of Personal Information

ASHE will dispose of personal information without delay once the purpose of processing has been achieved. The procedures, timing, and methods are as follows:

  • Procedure: The information entered by the user is transferred to a separate database (or physical documents are separated) after the purpose is fulfilled. It is retained for a specific period in accordance with internal policies and applicable laws, then deleted or destroyed. At that time, the personal information transferred to the database will not be used for any other purpose unless required by law.
  • Timing:
    • If the retention period has expired: Within 5 days of expiration
    • If the data is no longer needed (e.g., end of service, termination of business, etc.): Within 5 days of recognition of redundancy
  • Method:
    • Electronic files: Irreversibly deleted using technical methods
    • Printed documents: Shredded or incinerated

6. Measures to Ensure Security of Personal Information

ASHE implements the following technical, administrative, and physical safeguards under Article 29 of the Personal Information Protection Act:

  1. Minimizing and Training Staff Handling Personal Information: Designates specific staff and restricts access to essential personnel only.
  2. Encryption of Personal Information: Passwords are encrypted. Important data is also encrypted or protected with file-locking and security functions.
  3. Access Restriction: Access rights to databases are managed through authorization, change, and revocation procedures. An intrusion prevention system controls unauthorized access from outside.
  4. Document Security: Documents and storage media containing personal information are kept in secure, locked locations.

7. Personal Information Protection Officer

A. ASHE designates the following individual(s) to oversee personal information processing, address user complaints, and provide relief for damages:

  • Chief Privacy Officer
    • Name:
    • Contact Info:
    • ※ Connects to the department in charge of privacy matters.
  • Department in Charge of Privacy Matters
    • Department Name:
    • Person in Charge:
    • Contact Info:

B. Users may contact the above for any inquiries, complaints, or damages related to personal information protection that arise while using ASHE’s services(or business activities). ASHE will respond without delay.

8. Changes to the Privacy Policy

This privacy policy takes effect from the date stated above. If any changes are made in accordance with laws or internal policies, they will be announced on the website at least 7 days prior to the effective date.

Prohibition on Unauthorized Email Collection

This website prohibits unauthorized collection of email addresses posted herein using automated programs or other technical means.

Violation of this policy may result in penalties under the Act on Promotion of Information and Communications Network Utilization and Information Protection and other relevant laws.