Privacy Policy
Privacy Policy
weballin Co., Ltd.(the “Company”) complies with applicable laws, including the Personal Information Protection Act. This Privacy Policy explains how we protect personal information and the rights and interests of the people it concerns. As a B2B digital marketing agency, the Company collects and processes only the minimum personal information needed, primarily during inquiries and consultations.
Effective date: June 21, 2026
1. Personal information items collected
The Company collects the following personal information when you request a consultation through the website form. It does not collect sensitive information, such as beliefs or health information, or unique identification information.
- Required items: Name, email address, inquiry/consultation content (message)
- Automatically collected items: During use of the Services, information such as IP addresses, cookies, access dates and times, and browser or device information may be generated and collected.
If a message includes additional information supplied directly by the data subject, such as a company name or contact details, the Company uses it only for the purpose of the consultation.
2. Purpose of collection and use of personal information
The company uses the collected personal information only for the following purposes.
- Responses to inquiries and consultations and follow-up communication
- Conduct sales consultations, including service proposals and quotations
- Service provision, contract implementation and settlement
- Service operation and improvement, including prevention of illegal use and handling of complaints
3. Retention and use period of personal information
In principle, once the purpose of collecting and using personal information is achieved, the company destroys the information without delay. However, in the following cases, it is kept for the specified period.
- Inquiry/consultation record: After consultation is completed Up to 3 years or until the information subject requests deletion.
- Records of contracts, withdrawal of offers or cancellations, payments and supply of goods: five years under the Act on the Consumer Protection in Electronic Commerce, etc.
- Consumer complaint/dispute resolution record: 3 years in accordance with the same law
- When preservation is required by relevant laws and regulations: the period specified in the relevant laws and regulations
4. Provision of personal information to third parties
The company does not use the information subject's personal information beyond the scope specified in this policy or provide it to a third party. However, the following cases are exceptions.
- When the information subject has agreed in advance to provision of information to a third party
- When there are special provisions in the law or when an investigative agency requests it in accordance with legal procedures.
5. Outsourcing of personal information processing
To the extent necessary to provide services, the Company may outsource some personal information processing to specialist providers, such as web hosting or cloud infrastructure, email or inquiry-form processing, and traffic analytics providers. The Company manages and supervises these providers in accordance with applicable law to ensure that personal information is handled securely, and discloses changes to providers or outsourced activities in this policy.
6. Procedures and methods for destroying personal information
The company destroys the information without delay when the retention period has elapsed or the purpose of processing has been achieved and the personal information becomes unnecessary.
- Electronic files: Permanently deleted using technical methods that prevent recovery or reconstruction.
- Printed documents: Destroyed by shredding or incineration
7. Rights and obligations of data subjects and how to exercise them
Data subjects may exercise the following rights with the Company at any time.
- Request to view personal information
- Request for correction if there is an error, etc.
- Request for deletion
- Request to stop processing
You may request to exercise your rights in writing or by email to the person in charge of personal information protection below, and the company will take action without delay. If the information subject is a child under the age of 14, the rights can be exercised through a legal representative.
9. Measures to ensure the safety of personal information
The company takes the following measures to ensure the safety of personal information.
- Management measures: Establishment and implementation of internal management plan, minimizing access rights
- Technical measures: access controls, encryption in transit and access logging
- Physical measures: controlling access to data storage environments
10. Personal information protection manager and contact information
The Company oversees personal information handling and has appointed the following person responsible for personal information protection to address complaints and provide remedies for harm to data subjects.
If you need to report or consult about other personal information infringements, you may contact the organizations below.
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
- Personal Information Infringement Reporting Center (privacy.kisa.or.kr / 118)
- Supreme Prosecutors' Office Cyber Investigation Division (spo.go.kr / 1301)
- National Police Agency Cyber Investigation Bureau (ecrm.police.go.kr / 182)
11. Changes to this Privacy Policy
This Privacy Policy applies from its effective date. If changes to laws, policies or security technology require additions, deletions or revisions, we will announce them on this page at least seven days before they take effect.
Effective date: June 21, 2026