Privacy Policy

1. Purposes of Processing Personal Information

The Company processes personal information for the following purposes. Personal information processed will not be used for any purposes other than those listed below. If the purpose changes, the Company will take necessary measures, such as obtaining separate consent under Article 18 of the PIPA.

• Project inquiries — handling inquiries, follow-up consultation, sales activities
• Company brochure downloads — providing materials, sending download links by email, lead generation
• Service operation analysis — visit statistics, content improvement, marketing effectiveness measurement
• Compliance with legal obligations — record retention under e-commerce and related laws

2. Items of Personal Information Processed

The Company processes the following items of personal information.

• Project inquiry form — Required: name, email, inquiry content / Optional: company name, phone, service of interest
• Brochure download form — Required: name, email, company, phone
• Automatically collected — IP address, cookies, service usage records, visit timestamp, browser/OS info, referrer
• Analytics tools (Google Analytics 4) — anonymized user identifiers, page views, events, device/geolocation (country/city level)

3. Retention and Use Periods

The Company processes and retains personal information within the period agreed by the data subject or required by relevant laws.

• Project inquiries — 1 year after response (for follow-up and dispute resolution)
• Brochure download leads — 2 years from collection (lead nurturing)
• Access logs — 3 months under the Protection of Communications Secrets Act
• Google Analytics data — Default 14 months per GA4 settings (auto-deleted after expiry)
• Records required by law — Period set by applicable laws (e.g., e-commerce regulations)

4. Provision of Personal Information to Third Parties

The Company processes personal information only within the scope specified in Article 1 and provides it to third parties only with the data subject's consent or as permitted by Articles 17 and 18 of the PIPA.

The Company does not currently provide personal information to any third party.

5. Outsourcing of Personal Information Processing

The Company outsources personal information processing as follows.

• Google LLC — Website traffic analytics (Google Analytics 4). Items: anonymized user identifiers, page-view data. Retention: per GA4 settings (default 14 months)
• Amazon Web Services, Inc. — Website hosting and infrastructure. Items: service usage records, access logs. Retention: until end of contract

6. Data Subject's Rights and How to Exercise Them

Data subjects may exercise the following rights at any time.

• Right to request access to personal information
• Right to request correction or deletion (except where collection is legally mandated)
• Right to request suspension of processing
• Right to withdraw consent

7. Procedure and Method for Destruction of Personal Information

When personal information is no longer necessary due to expiration of retention period or achievement of purpose, the Company destroys it without delay.

Electronic files are permanently deleted using technical methods that prevent recovery; paper records are shredded or incinerated.

8. Operation of Cookies and Analytics Tools

The Company uses "cookies" to store and retrieve information about data subjects. Cookies are small data files sent by the web server to the user's browser and stored on the user's device.

The Company uses cookies for the following purposes.

• Essential cookies — login session, locale preference (NEXT_LOCALE), cookie consent state (cookie_consent), and other core service functions
• Analytics cookies — Visit statistics and content usage analysis via Google Analytics 4 (GA4). Cookies used: _ga, _ga_<measurementID>, _gid. Controller: Google LLC. Retention: 14 months (default GA4 setting)
• Data subjects can refuse cookies via browser settings. However, refusing essential cookies may limit access to certain service features.
• To opt out of Google Analytics tracking, install the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.
• Selecting "Essential only" in the cookie consent banner disables analytics and marketing cookies.

9. Measures to Ensure the Security of Personal Information

The Company implements the following measures.

• Administrative — Internal management plan, regular staff training
• Technical — Access control for processing systems, access control systems, encryption of unique identifiers, security software
• Physical — Access control for server rooms and document storage

10. Personal Information Protection Officer

The Company designates a Personal Information Protection Officer responsible for overall personal information processing and for handling related complaints and remediation.

11. Remedies for Rights Infringement

Data subjects may apply for dispute resolution or consultation with the following Korean agencies regarding personal information infringement.

• Personal Information Dispute Mediation Committee — 1833-6972 / www.kopico.go.kr
• Korea Internet & Security Agency (KISA) Privacy Center — 118 / privacy.kisa.or.kr
• Supreme Prosecutors' Office Cybercrime Division — 1301 / www.spo.go.kr
• Korean National Police Agency Cyber Bureau — 182 / ecrm.cyber.go.kr

12. Changes to This Privacy Policy

This Privacy Policy is effective from the date below. Any additions, deletions, or amendments due to changes in law or policy will be announced at least 7 days in advance via the website.

Announced: 2026-05-12

Effective: 2026-05-12