Contact us

Privacy Policy

IMPIX Co., Ltd. (the “Company”) establishes and discloses the following privacy policy under Article 30 of the Personal Information Protection Act, in order to protect the personal information of data subjects and to handle related grievances promptly.

Article 1 (Items of Personal Information Processed)

  1. The Company collects the following items through the enquiry form on the Website.
Category Items
Required Company name, contact person’s name, email address, enquiry content
Optional Telephone number, enquiry type

  1. The following information may be generated automatically and processed in the course of using the Website.

    • Access IP address, date and time of access, browser and operating system type

  2. The Company does not collect the following through the Website.

    • Membership details, user IDs or passwords (the Website has no membership function)

    • Recruitment-related information such as résumés, education or career history

    • Unique identifying information, including resident registration numbers

    • Sensitive information such as beliefs, health or trade union membership

    • Tracking information for advertising or behavioural analysis

Article 2 (Purpose of Processing Personal Information)

The Company uses the personal information it collects only for the purposes below. Where the purpose changes, the Company takes the necessary measures, including obtaining separate consent under Article 18 of the Personal Information Protection Act.

  1. Confirming and replying to the content of an enquiry

  2. Consultation arising from an enquiry, and provision of information about products and services

  3. Retention of records concerning provision of the service, where required under the applicable legislation

Article 3 (Retention and Use Period)

  1. Personal information collected through the enquiry form is destroyed without delay once handling of the enquiry is complete.

  2. Where an enquiry leads to an actual commercial discussion, the information is retained until that relationship ends, and destroyed without delay thereafter.

  3. In the following cases, information is retained for the period prescribed by the legislation concerned.

Legal basis Records retained Period
Act on Consumer Protection in Electronic Commerce Records on contracts or withdrawal of subscription 5 years
Act on Consumer Protection in Electronic Commerce Records on consumer complaints or dispute handling 3 years
  1. The Company does not separately store the automatically generated information referred to in Article 1(2); it is processed by the entrusted parties under Article 5 to the extent necessary for providing the service.

Article 4 (Provision to Third Parties)

  1. The Company does not provide data subjects’ personal information to third parties.

  2. The following are exceptions.

    • Where separate consent has been obtained from the data subject

    • Where there is a special provision in legislation, or an investigative agency has made a request in accordance with the procedures and methods prescribed by law

Article 5 (Entrustment of Processing)

  1. For the smooth conduct of its business, the Company entrusts the processing of personal information as follows.
Entrusted party Entrusted work Retention and use period
Cloudflare, Inc. Website hosting and content delivery Until termination of the entrustment agreement
Resend Delivery of enquiry content by email Until termination of the entrustment agreement

  1. When concluding an entrustment agreement, the Company sets out in a document, under Article 26 of the Personal Information Protection Act, matters including the prohibition of processing personal information beyond the purpose of the entrusted work, technical and administrative protective measures, restrictions on sub-entrustment, supervision of the entrusted party, and liability such as damages.

  2. Where the content of the entrusted work or the entrusted party changes, this will be disclosed through this policy.

Article 6 (Overseas Transfer of Personal Information)

The Company transfers personal information overseas as follows in order to provide the service. Under Article 28-8(1) of the Personal Information Protection Act, a data subject may refuse the overseas transfer; in that case, the data subject may contact the Company by telephone or email instead of using the enquiry form.

Transferee Country Items transferred Time and method of transfer Purpose Retention period
Cloudflare, Inc. United States Automatically generated information such as access IP address Transmitted over the network when the Website is accessed Hosting and content delivery Duration of service provision
Resend United States Items entered in the enquiry form under Article 1(1) Transmitted over the network when an enquiry is sent Delivery of enquiry content by email Period necessary for delivery processing

Article 7 (Procedure and Method of Destruction)

  1. The Company destroys personal information without delay once the retention period has elapsed or the purpose of processing has been achieved.

  2. Personal information recorded and stored in electronic file form is deleted by a technical method that makes recovery impossible; personal information recorded and stored on paper is shredded or incinerated.

Article 8 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them)

  1. A data subject may exercise the following rights against the Company at any time.

    • Request to access personal information

    • Request to correct errors

    • Request for deletion

    • Request to suspend processing

  2. The rights under paragraph 1 may be exercised in writing, by telephone or by email, and the Company will act on the request without delay.

  3. Where a data subject requests correction of an error in personal information, the Company will not use or provide that personal information until the correction is complete.

  4. The rights under paragraph 1 may be exercised through a representative, such as the data subject’s legal representative or an authorised agent. In that case, a power of attorney in the form of Annex 11 to the Public Notice on Methods of Processing Personal Information must be submitted.

  5. A data subject must not damage personal information processed by the Company in breach of the Personal Information Protection Act or other relevant legislation.

Article 9 (Measures to Ensure Security)

The Company takes the following measures to ensure the security of personal information.

  1. Minimising the items collected — only the items necessary to respond to an enquiry are collected; no unique identifying information or sensitive information is collected.

  2. No separate storage — content received through the enquiry form is not stored in a separate database, and is delivered only to the mailbox of the responsible staff member.

  3. Encryption in transit — HTTPS is applied across the entire Website, encrypting the information transmitted.

  4. Management of access rights — the number of people who can access personal information is limited to the minimum required for their work, and the granting, modification and revocation of rights is managed.

  5. Administrative measures — regular training is provided to staff who handle personal information.

Article 10 (Installation and Operation of Automatic Collection Devices, and Refusal)

  1. The Company does not use cookies or tracking tools for advertising or behavioural analysis on the Website.

  2. Where a visitor selects “Do not show again” on a notice popup on the Website, however, that setting is kept in the visitor’s browser storage. This information is stored only in the visitor’s browser, is not transmitted to the Company’s servers, and contains no personally identifiable information.

  3. The information under paragraph 2 can be erased at any time by clearing site data in the browser settings.

Article 11 (Personal Information Protection Officer)

  1. The Company designates a Personal Information Protection Officer as follows, who takes overall responsibility for work relating to the processing of personal information and for handling data subjects’ complaints and providing remedies in connection with such processing.
Item Details
Personal Information Protection Officer Sangho Lee, Chief Executive Officer
Telephone +82-2-745-8324
Email [email protected]
  1. Data subjects may direct to the Personal Information Protection Officer any enquiry, complaint or request for remedy relating to personal information protection that arises while using the Company’s services. The Company will answer and handle such enquiries without delay.

Article 12 (Remedies for Infringement of Rights)

  1. Data subjects may contact the following bodies for remedies or advice regarding infringement of personal information.

  2. The following are bodies separate from the Company. Please contact them if you are not satisfied with the outcome of the Company’s own complaint handling or remedy, or if you need more detailed assistance.

Body Telephone Website Remit
Personal Information Infringement Report Centre 118 privacy.kisa.or.kr Reporting infringement, requesting advice
Personal Information Dispute Mediation Committee 1833-6972 www.kopico.go.kr Dispute mediation, collective dispute mediation
Cyber Investigation Division, Supreme Prosecutors’ Office 1301 www.spo.go.kr Investigation of personal information crimes
Cyber Investigation Bureau, National Office of Investigation 182 ecrm.police.go.kr Investigation of personal information crimes
  1. Where a person’s rights or interests have been infringed by a disposition or omission of the head of a public institution in respect of a request under Article 35 (Access), Article 36 (Correction and Deletion) or Article 37 (Suspension of Processing) of the Personal Information Protection Act, that person may file an administrative appeal under the Administrative Appeals Act.

Article 13 (Amendment of this Policy)

  1. This privacy policy takes effect on 23 September 2026.

  2. Where content is added, deleted or amended in line with changes in legislation or Company policy, notice will be given through the Website from 7 days before the change takes effect.

  3. This policy supersedes the previous privacy policy, which had applied since 16 March 2020.