Privacy Policy

The Firm processes personal information for the following purposes. Personal information being processed will not be used for any purpose other than those listed below, and if the purpose of use changes, the Firm will take necessary measures such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act.

• Responding to inquiries and consultations submitted via the Site
• Processing recruitment applications (document review, interviews, selection decisions, and notifications)
• Use as HR records after hiring (applicable only to successfully hired candidates)
• Fulfilling legal obligations and responding to disputes

The Firm processes and retains personal information within the retention and use period prescribed by law or agreed upon when collecting personal information from data subjects.

• Job applicant personal information: Retained until the completion of the recruitment process and then destroyed. If hired, retained until resignation.
• Site inquiries: Retained for one year after the inquiry has been fully addressed, then destroyed.
• Statutory retention obligations: Retained for the period prescribed by applicable laws (e.g., Act on Consumer Protection in Electronic Commerce, Protection of Communications Secrets Act, etc.).

The Firm processes the following categories of personal information.

The Firm processes personal information only within the scope specified under “Purposes of Processing Personal Information” in this Policy, and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or pursuant to special provisions of law.

The Firm currently does not provide personal information to external parties. If provision becomes necessary in the future, the Firm will obtain separate consent from data subjects before proceeding.

The Firm may entrust personal information processing to external specialist companies as follows in order to provide smooth services.

When entering into entrustment agreements, the Firm specifies in contracts the prohibition of processing personal information for purposes other than the entrusted tasks, technical and managerial protective measures, restrictions on re-entrustment, supervision of the processor, and matters relating to liability including damages, pursuant to Article 26 of the Personal Information Protection Act, and supervises whether the processor handles personal information safely.

Data subjects may exercise the following personal information protection rights against the Firm at any time.

1. Request to access personal information
2. Request for correction if there are errors
3. Request for deletion
4. Request to suspend processing

Rights may be exercised against the Firm in writing, by email, or by other means pursuant to Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Firm will take action without delay.

When personal information becomes unnecessary — such as when the retention period expires or the processing purpose is achieved — the Firm destroys the relevant personal information without delay.

• Destruction procedure:Personal information subject to destruction is selected, and the Firm’s Personal Information Protection Officer approves its destruction.
• Destruction method: Electronic files are permanently deleted by methods that prevent recovery; paper documents are shredded or incinerated.

The Firm takes the following measures to ensure the security of personal information.

• Administrative measures: Establishment and implementation of an internal management plan; regular training of employees handling personal information
• Technical measures: Access control for personal information processing systems; maintenance of access logs; installation of security programs; encryption of data in transit (HTTPS)
• Physical measures: Access control for data storage rooms and archives

The Firm may use cookies to provide customised services to users.

• Purpose: Analysing Site usage patterns and security (e.g., CSRF prevention during form submission)
• How to refuse: Users may refuse cookie storage through the options of their web browser. However, refusing cookies may result in some restrictions on the use of the service.

On English-language pages, Google Analytics 4 may be used for site usage measurement when the relevant environment variable is configured. LinkedIn Insight Tag is optional and is enabled only when users allow LinkedIn measurement through the separate banner. Vercel Analytics is used for cookieless, aggregated site measurement.

The Firm has designated a Personal Information Protection Officer to take overall responsibility for personal information processing and to handle complaints and remedy harm for data subjects in connection with personal information processing.

Data subjects may apply to the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency Personal Information Infringement Reporting Centre for dispute resolution or consultation in order to obtain relief from infringement of personal information.

• Personal Information Dispute Mediation Committee: 1833-6972 (no area code) / www.kopico.go.kr
• Personal Information Infringement Reporting Centre: 118 (no area code) / privacy.kisa.or.kr
• Supreme Prosecutors’ Office Cyber Investigation Division: 1301 (no area code) / www.spo.go.kr
• National Police Agency Cyber Investigation Bureau: 182 (no area code) / cyberbureau.police.go.kr

This Privacy Policy is effective from the date of enforcement and, in the event of additions, deletions, or corrections pursuant to laws and regulations, changes will be notified via the notice board at least 7 days prior to their implementation.

Effective date: May 2, 2026