Ordiora (hereinafter referred to as the “Brand”) establishes this Privacy Policy regarding the handling of personal information in connection with the websites, applications, and paid services provided by the Brand (collectively, the “Services”). The Brand complies with the Act on the Protection of Personal Information (hereinafter the “APPI”) and the EU General Data Protection Regulation (hereinafter the “GDPR”) and sets forth the following Privacy Policy.
1. Business Information
Brand Name: Ordiora
Contact: support@ordiora.com
2. Personal Information We Collect
The Brand may collect the following personal information:
- Contact information, including name and email address
- Payment-related information (credit card information is managed by payment service providers)
- IP addresses, Cookie information, and advertising identifiers (including IDFA and AAID)
- Device information, operating system information, and browser information
- Access logs, usage history, and application usage information
- Information contained in inquiries and other communications
3. Purposes of Use
The Brand may use personal information for the following purposes:
- To provide and operate the Services
- To process payments and manage contracts
- To respond to inquiries
- To improve the Services, conduct analysis, and develop new features
- To prevent unauthorized use and maintain security
- To deliver advertisements and measure their effectiveness
- To comply with applicable laws and regulations
4. Changes to the Purposes of Use
If the Brand changes the purposes for which personal information is used, such changes shall be made only to the extent reasonably recognized as being relevant to the purposes prior to such changes. The revised purposes shall be publicly announced on the Brand’s website.
5. Provision of Personal Data to Third Parties
Except in the following circumstances, the Brand will not provide personal data to any third party without the consent of the individual concerned:
- Where required by applicable laws or regulations
- Where necessary to protect the life, body, or property of an individual
- Where particularly necessary for the improvement of public health or the sound development of children
- Where cooperation with a national government agency, local government, or other public authority is required as prescribed by applicable laws or regulations
6. Outsourcing
The Brand may outsource certain operations, including payment processing, advertising delivery, and data analysis, to external service providers. In such cases, the Brand will exercise appropriate supervision over such service providers.
7. Security Measures
The Brand shall implement appropriate organizational, personnel, physical, and technical security measures to prevent the leakage, loss, destruction, or other unauthorized handling of personal data and to ensure the proper management and protection thereof.
8. Requests for Disclosure and Other Actions Regarding Retained Personal Data (APPI)
Pursuant to the APPI, individuals may request disclosure, correction, addition, deletion, suspension of use, or cessation of provision to third parties of their retained personal data, subject to applicable laws and regulations.
9. Cookies and Advertising Identifiers
The Services may use Cookies and advertising identifiers. Users may disable Cookies through their browser settings or other available settings; however, doing so may result in certain features of the Services becoming unavailable.
10. Additional Provisions under the GDPR (For Residents of the European Union)
10-1. Data Controller
The Brand is the “Data Controller” for the purposes of the GDPR.
10-2. Legal Bases for Processing
The Brand processes personal data on the following legal bases, as applicable:
- Performance of a contract (Article 6(1)(b) of the GDPR)
- Compliance with a legal obligation (Article 6(1)(c) of the GDPR)
- Legitimate interests (Article 6(1)(f) of the GDPR)
- Consent (Article 6(1)(a) of the GDPR)
10-3. Rights of Data Subjects
Data subjects have the following rights under the GDPR, subject to applicable conditions and limitations:
- Right of access
- Right to rectification
- Right to erasure (the “right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to lodge a complaint with a supervisory authority
10-4. Data Retention Period
Personal data shall be retained for the period necessary to achieve the purposes for which it was collected. Thereafter, such data shall be appropriately deleted or anonymized.
10-5. International Transfers of Personal Data
Personal data may be transferred to Japan or other countries outside the European Economic Area. Where such transfers occur, the Brand shall implement appropriate safeguards in accordance with Article 46 of the GDPR.
11. Personal Information of Minors
The processing of personal data of individuals residing in the European Union who are under 16 years of age shall be carried out only where parental consent has been obtained, as required under applicable laws and regulations.
12. Changes to this Privacy Policy
This Privacy Policy may be amended from time to time in response to changes in applicable laws and regulations or changes to the Services.
13. Contact Information
Email: support@ordiora.com
Effective Date: February 26, 2026