Privacy Policy

1. Information we collect

The Company collects and processes the following personal information to operate the website and handle inquiries.

• Contact form: [Required] inquiry type, company name, email address, message / [Optional] name. When an inquiry is submitted, your IP address and browser information are also recorded for security purposes.
• Automatically collected information: while you use the website, your IP address, approximate location derived from the IP address (country and city), browser and operating system, device details, screen resolution, visit time, usage records such as pages visited, referring source, clicks on external links, and browser environment signals used to distinguish automated programs (bots) from people (true/false values such as an automation flag, graphics rendering mode, and window size) may be generated and collected automatically.

2. Purpose of processing

The Company processes personal information for the following purposes and will obtain separate consent or take other required measures if the purpose changes.

• Confirming inquiries, fact-checking, sending replies, and service communication
• Website traffic monitoring, usage statistics, and year-over-year trend comparison (including identifying visiting organisations)
• Preventing unauthorised access, ensuring system security, and maintaining service stability

3. Retention period

Personal information is retained and processed within the period required by law or agreed at the time of collection.

• Contact inquiries: retained for 3 years from receipt
• Website access records: retained for 3 years; IP addresses are deleted 12 months after collection so that individuals can no longer be identified

If an investigation or legal proceeding concerning a violation of relevant laws is ongoing, the data is retained until it concludes.

4. Destruction procedures and methods

When personal information is no longer necessary, because the retention period has expired or the purpose has been achieved, it is destroyed without delay.

• Procedure: the data to be destroyed is identified and destroyed with the approval of the Privacy Officer. Expired inquiries and access records are deleted automatically by the system.
• Method: electronic files are permanently deleted using technical methods that render the data unrecoverable; printed documents are shredded or incinerated.

5. Disclosure to third parties, outsourcing and overseas transfer

The Company does not provide personal information to third parties without prior consent, except where permitted under Articles 17 and 18 of the Personal Information Protection Act.

The website and its visitor statistics system run on servers operated directly by the Company and are not outsourced. However, to notify staff of new inquiries, the Company entrusts the following processing, which involves a transfer of personal information abroad.

• Processor: Google LLC (United States) — Data transferred: inquiry type, company name, name, email address, message / Purpose: inquiry notification and handling via business email and messaging (Google Workspace) / Retention: 3 years from receipt of the inquiry / Method: transmitted over the network when an inquiry is submitted / Contact: dataspira@dataspira.com

You may refuse this overseas transfer; in that case we may be unable to receive or respond to your inquiry.

6. Cookies and similar technologies

The Company does not use tracking cookies for usage analytics. Only the minimum cookies needed for essential site functions, such as remembering your language choice, may be used. You can refuse or delete cookies in your browser settings.

• Example: browser menu > Settings > Privacy and security > Cookies and other site data

7. Your rights and how to exercise them

You may at any time request access to, correction or deletion of, or suspension of processing of your personal information, and you may withdraw consent.

• Requests can be made in writing or by email using the contact details in Section 9; the Company will act without delay.
• If you request correction or deletion of inaccurate personal information, the Company will not use or disclose that information until the correction or deletion is complete.

8. Security measures

The Company implements the following measures to protect personal information.

• Administrative: internal management plan, regular training for staff handling personal information
• Technical: access control for personal-information systems, encrypted transmission (HTTPS/SSL), retention and tamper protection of access logs
• Physical: access control to server rooms and data storage facilities

9. Privacy Officer and responsible department

The Company has designated a Privacy Officer and a responsible department to oversee personal-information matters, handle complaints and remedies, and receive access requests.

• Privacy Officer: Chief Executive Officer
• Responsible department (access requests): Management Support Team
• Email: dataspira@dataspira.com
• Phone: +82 51-746-2103
• Address: BCC 725, 140 Suyeonggangbyeon-daero, Haeundae-gu, Busan, Republic of Korea

For remedies regarding infringement of personal information, you may contact the Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972) or the Korea Internet & Security Agency Privacy Infringement Report Center (privacy.kisa.or.kr / 118).

10. Changes to this policy

This policy takes effect on 14 September 2026. Any additions, deletions, or amendments will be announced on the website at least 7 days before they take effect, or at least 30 days in advance for significant changes affecting your rights.