Privacy Policy

This English version is provided for convenience. If it differs from the Korean version, the Korean version prevails.

In accordance with Article 30 of the Personal Information Protection Act, BUWON KH (hereinafter the "Company") establishes and publishes this Privacy Policy to protect the personal information of data subjects and to handle related complaints promptly and smoothly.

1. Personal Information Collected and Purposes of Use

The Company collects and uses the following personal information to receive and handle inquiries submitted through the website. The collected personal information will not be used for any purpose other than the following purposes.

When CollectedItems CollectedPurpose of Use
Submitting an inquiryContact name (company name), contact details (phone number or email), inquiry contentChecking the inquiry and replying to it
Accessing the websiteIP address, cookies, access records, usage recordsOperating the website and checking for access failures

If the purpose of use is changed, the Company will take the necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.

2. Retention Period and Destruction Method

The Company retains personal information for one year from the date the handling of the inquiry is completed, and destroys it without delay once the retention period has passed. Personal information for which a reason for destruction has arisen is destroyed with the approval of the Chief Privacy Officer.

  • Personal information in electronic file form is deleted by a method that makes recovery impossible.
  • Personal information printed on paper is destroyed by shredding or incineration.
  • If another law sets a retention period, the information is destroyed after that period has passed.

3. Provision of Personal Information to Third Parties

The Company does not provide collected personal information to third parties. However, an exception applies where an investigative agency makes a request in accordance with the procedures and methods prescribed by law.

4. Entrustment of Personal Information Processing

The Company entrusts the processing of personal information as follows in order to forward website inquiries by email. If the content of the entrusted work or the service provider changes, the Company will promptly disclose this through this Privacy Policy.

Service ProviderEntrusted Work
Cloudflare, Inc.Running the program that receives inquiry content and forwards it by email
Microsoft CorporationSending inquiry emails and operating the mailbox

5. Transfer of Personal Information Abroad

The Company entrusts the processing of personal information abroad as described below in order to forward website inquiries by email. Because the work essential to forwarding inquiry content to the Company's email is handled using an overseas service, you cannot use the website inquiry form if you refuse the transfer abroad. If you do not wish your information to be transferred abroad, please contact us by phone (+82-31-543-1171) or email ([email protected]).

Items TransferredContact name (company name), contact details (phone number or email), inquiry content
Recipient and Contact DetailsCloudflare, Inc. — [email protected]
Country of TransferUnited States
Time and Method of TransferTransmitted over the information and communications network each time an inquiry is received
Recipient's Purpose of UseForwarding inquiry content to the Company's email
Retention and Use PeriodNot retained once forwarding is completed.

6. Rights of Data Subjects and How to Exercise Them

Data subjects may at any time request the Company to access, correct, delete, or suspend the processing of their personal information. Requests may be made in writing, by phone, or by email using the contact details in Section 9 below, and the Company will act on them without delay and reply with the result.

If a request is made through a representative, a power of attorney in accordance with Attached Form No. 11 of the Notice on Methods of Processing Personal Information must be submitted.

7. Automatic Personal Information Collection Devices and Cookies

IP addresses, access records, and cookies are automatically generated and collected in the course of accessing the website. A cookie is a small amount of information that the server operating the website sends to the user's browser, and it is stored on the user's computer. Users can refuse the storage of cookies or delete stored cookies through their browser settings, and refusing storage does not affect the use of the website.

The Company does not use analytics tools for advertising or personalized recommendations.

8. Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information.

  • Employees who handle personal information are limited to the inquiry managers, and access rights are revoked when a manager changes.
  • Files and documents containing personal information are kept in a locked place.
  • Access records are kept and managed so that they are not forged, altered, or lost.

9. Chief Privacy Officer

The Company has the following department in charge, which oversees and is responsible for personal information processing and handles data subjects' complaints and remedies related to personal information processing.

Department in Charge of Personal Information ProtectionIT Team
Tel.031-543-1171
Email[email protected]
Address9, Eunggol-gil, Soheul-eup, Pocheon-si, Gyeonggi-do, Republic of Korea

10. Remedies for Infringement of Data Subjects' Rights

Data subjects may apply to the following organizations for dispute resolution or consultation in order to obtain remedies for infringement of personal information.

Personal Information Dispute Mediation Committee1833-6972 · www.kopico.go.kr
Personal Information Infringement Report Center118 · privacy.kisa.or.kr
Supreme Prosecutors' Office, Cyber and Technology Crime Investigation Division1301 · www.spo.go.kr
National Police Agency, Electronic Cybercrime Report and Management System (ECRM)182 · ecrm.police.go.kr

11. Changes to This Privacy Policy

This Privacy Policy applies from its effective date. If there are any changes, the Company will announce them through the website notices from 7 days before the changes take effect.

Effective date: October 30, 2026