Privacy Policy
ApexStack Co., Ltd. ("the Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea, to protect the rights of data subjects and to handle related concerns efficiently.
The Korean version of this Privacy Policy is the legally authoritative version. This English translation is provided for convenience only.
01Purposes of Processing Personal Information
The Company processes personal information for the following purposes. Personal information processed will not be used for any purposes other than those listed below. If the purpose changes, the Company will take necessary measures, such as obtaining separate consent under Article 18 of the PIPA.
- Project inquiries — handling inquiries, follow-up consultation, sales activities
- Company brochure downloads — providing materials, sending download links by email, lead generation
- Service operation analysis — visit statistics, content improvement, marketing effectiveness measurement
- Compliance with legal obligations — record retention under e-commerce and related laws
02Items of Personal Information Processed
The Company processes the following items of personal information.
- Project inquiry form — Required: name, email, inquiry content / Optional: company name, phone, service of interest
- Brochure download form — Required: name, email, company, phone
- Automatically collected — IP address, cookies, service usage records, visit timestamp, browser/OS info, referrer
- Analytics tools (Google Analytics 4) — anonymized user identifiers, page views, events, device/geolocation (country/city level)
03Retention and Use Periods
The Company processes and retains personal information within the period agreed by the data subject or required by relevant laws.
- Project inquiries — 1 year after response (for follow-up and dispute resolution)
- Brochure download leads — 2 years from collection (lead nurturing)
- Access logs — 3 months under the Protection of Communications Secrets Act
- Google Analytics data — Default 14 months per GA4 settings (auto-deleted after expiry)
- Records required by law — Period set by applicable laws (e.g., e-commerce regulations)
04Provision of Personal Information to Third Parties
The Company processes personal information only within the scope specified in Article 1 and provides it to third parties only with the data subject's consent or as permitted by Articles 17 and 18 of the PIPA.
The Company does not currently provide personal information to any third party.
05Outsourcing of Personal Information Processing
The Company outsources personal information processing as follows.
- Google LLC — Website traffic analytics (Google Analytics 4). Items: anonymized user identifiers, page-view data. Retention: per GA4 settings (default 14 months)
- Amazon Web Services, Inc. — Website hosting and infrastructure. Items: service usage records, access logs. Retention: until end of contract
06Data Subject's Rights and How to Exercise Them
Data subjects may exercise the following rights at any time.
- Right to request access to personal information
- Right to request correction or deletion (except where collection is legally mandated)
- Right to request suspension of processing
- Right to withdraw consent
07Procedure and Method for Destruction of Personal Information
When personal information is no longer necessary due to expiration of retention period or achievement of purpose, the Company destroys it without delay.
Electronic files are permanently deleted using technical methods that prevent recovery; paper records are shredded or incinerated.
08Operation of Cookies and Analytics Tools
The Company uses "cookies" to store and retrieve information about data subjects. Cookies are small data files sent by the web server to the user's browser and stored on the user's device.
The Company uses cookies for the following purposes.
- Essential cookies — login session, locale preference (NEXT_LOCALE), cookie consent state (cookie_consent), and other core service functions
- Analytics cookies — Visit statistics and content usage analysis via Google Analytics 4 (GA4). Cookies used: _ga, _ga_<measurementID>, _gid. Controller: Google LLC. Retention: 14 months (default GA4 setting)
- Data subjects can refuse cookies via browser settings. However, refusing essential cookies may limit access to certain service features.
- To opt out of Google Analytics tracking, install the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.
- Selecting "Essential only" in the cookie consent banner disables analytics and marketing cookies.
09Measures to Ensure the Security of Personal Information
The Company implements the following measures.
- Administrative — Internal management plan, regular staff training
- Technical — Access control for processing systems, access control systems, encryption of unique identifiers, security software
- Physical — Access control for server rooms and document storage
10Personal Information Protection Officer
The Company designates a Personal Information Protection Officer responsible for overall personal information processing and for handling related complaints and remediation.
- Personal Information Protection Officer
- Mok Youngrok (CEO)
- [email protected]
11Remedies for Rights Infringement
Data subjects may apply for dispute resolution or consultation with the following Korean agencies regarding personal information infringement.
- Personal Information Dispute Mediation Committee — 1833-6972 / www.kopico.go.kr
- Korea Internet & Security Agency (KISA) Privacy Center — 118 / privacy.kisa.or.kr
- Supreme Prosecutors' Office Cybercrime Division — 1301 / www.spo.go.kr
- Korean National Police Agency Cyber Bureau — 182 / ecrm.cyber.go.kr
12Changes to This Privacy Policy
This Privacy Policy is effective from the date below. Any additions, deletions, or amendments due to changes in law or policy will be announced at least 7 days in advance via the website.
Announced: 2026-05-12
Effective: 2026-05-12