Privacy Policy.

01 Items Collected & Purpose of Use

The Operator collects personal data only to the extent necessary to provide services.

a. Data provided directly by users

Legal basis: PIPA Article 15(1)(1) — consent of the data subject.

b. Data automatically collected during use

For site analytics the Operator uses Google Analytics, which collects:

• IP address, cookies, visit timestamps, service usage records
• Device info (OS, browser, screen resolution, etc.)

Legal basis: PIPA Article 15(1)(6) — legitimate interests, limited to website operation and improvement.

02 Retention & Use Period

• Inquiry / consult data: retained for 1 year after the inquiry is closed, then disposed of.
• Automatically collected data: retained per Google Analytics policy.

Where relevant laws require longer retention, the statutory period applies.

03 Disclosure to Third Parties

The Operator processes personal data only within the purposes stated in Section 1 and does not disclose it to third parties without consent, except:

• Where the data subject has consented in advance.
• Where required by law or compelled by lawful process (warrant, etc.) from investigating authorities.

04 Processing Entrustment

The Operator entrusts processing tasks as follows:

The entrustment contract addresses prohibition of out-of-purpose use, security measures, restrictions on re-entrustment, monitoring, and damages under PIPA Article 26.

05 Overseas Transfer

For site analytics, the Operator transfers personal data overseas as follows:

To opt out, configure cookies (see Section 8) or install the Google Analytics opt-out browser add-on.

06 Children Under 14

The Site is not directed to children under 14 and does not knowingly collect their personal data.

07 Rights & How to Exercise Them

Data subjects may at any time:

• Request access to their personal data
• Request correction or deletion of inaccurate data
• Request suspension of processing
• Withdraw consent

Send requests in writing or by email to the privacy officer (Section 11). The Operator will act without delay. Requests through a representative require a letter of authorization.

08 Cookies

The Site uses cookies for analytics. A cookie is a small piece of information the site sends to your browser and is stored on your device.

You can refuse cookies in your browser settings:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Edge: Settings → Cookies and site permissions
• Safari: Preferences → Privacy

Refusing cookies may limit some services.

09 Disposal Procedure & Method

• Procedure: Personal data whose retention period has elapsed or whose purpose has been achieved is disposed of without delay.
• Method: Electronic files are deleted by methods that prevent recovery; printouts are shredded or incinerated.

10 Security Measures

The Operator implements:

• Minimized access permissions and access control
• Encryption of channels carrying personal data (HTTPS/SSL)
• Access logging on processing systems
• Security software installation and periodic updates

11 Privacy Officer

The Operator designates the following privacy officer to oversee personal-data processing and handle inquiries, complaints, and grievances.

12 Grievance Channels

Data subjects may seek remedies from the following agencies in Korea:

13 Changes to This Policy

This policy may change as laws, policies, or security practices evolve. Material changes will be announced on the Site.

Announced: [YYYY-MM-DD] · Effective: [YYYY-MM-DD]

[ ] bracketed items (officer contact, dates, etc.) should be filled with final, real values before publishing.