Privacy Policy

1. Purposes of processing

We process personal information only for the purposes below. If a purpose changes, we will take the required steps, such as obtaining separate consent under Article 18 of the Act.

• Inquiries: reviewing, answering and following up on online inquiries
• Recruitment: identifying applicants, screening documents and informing them of results
• Operation and security: reviewing access records to prevent misuse and resolve failures

2. Information we process

• Online inquiries — required: name, email, subject, message / optional: company, phone
• Job applications — required: name, email / optional: phone, résumé file, portfolio link, cover letter (information you include in these is processed with them; please do not include resident registration numbers or sensitive information)
• Generated automatically — IP address, access time, requested page, browser information (server access logs)

3. Retention

We keep personal information only for the periods below and delete it without delay afterwards.

• Online inquiries: 1 year from receipt
• Job applications: 1 year from receipt, or immediately on the applicant’s request; applicants may request the return of submitted documents
• Server access logs: 3 months

4. Provision to third parties

We provide personal information to third parties only with your consent or where Articles 17 and 18 of the Act allow it, such as a specific legal provision.

5. Processors

• Amazon Web Services, Inc. — website hosting, data storage and backup (Seoul region)
• Google LLC (Google Workspace) — sending and storing inquiry and application notification emails

6. Transfer abroad

• Recipient: Google LLC (https://support.google.com/policies/contact/general_privacy_form)
• Countries: the United States and other countries where Google operates data centers
• Items: name, email, phone, company and message entered in an inquiry or application (résumé files are not transferred)
• When and how: by encrypted email at the time of submission
• Purpose and retention: notifying our staff; the retention periods in section 3
• Declining: if you do not want your information transferred, please contact the privacy officer below by phone instead of using the online forms.

7. Destruction

• Information whose retention period has passed or whose purpose has been achieved is destroyed without delay.
• Electronic files are deleted irrecoverably; printed copies are shredded or incinerated. Copies in backups are removed when the backup expires (at most 60 days).

8. Your rights

You may at any time ask to access, correct, delete or suspend the processing of your personal information by contacting the privacy officer in writing, by phone or by email, directly or through a representative. We will act without delay.

9. Security measures

• The admin screens that handle personal information require a separate account and additional authentication.
• All traffic to the website is encrypted with HTTPS.
• Résumé files are kept in non-public storage and can be downloaded only by authorized staff.
• Backups are encrypted and stored with restricted access.

10. Cookies

We use a cookie to remember your language and, on the admin screens only, a login cookie. We do not use advertising or tracking cookies. You can refuse cookies in your browser settings; your language choice may then not be kept.

11. Privacy officer

• Kwon Dong-hwan (Principal Researcher)
• 070-8855-0555, cofounder@navifra.com

12. Remedies

• Personal Information Dispute Mediation Committee: +82 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)