This English translation is provided for convenience. In case of any discrepancy, the Korean version prevails.
FINT KOREA Co., Ltd. (the "Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.
Article 1 (Purposes of Processing Personal Information)
The Company processes personal information for the following purposes. Personal information being processed will not be used for any purpose other than those listed below, and if the purpose of use changes, the Company will take necessary measures such as obtaining separate consent under Article 18 of the Personal Information Protection Act.
- Receiving and handling online and business partnership inquiries: reviewing the inquiry, replying, managing consultation history
- Product and testing/analysis service consultations: providing quotes, arranging specimen and sample shipments
- Responding to recruitment inquiries
Article 2 (Personal Information Processed)
| Category | Items |
|---|---|
| Required | Name, email, inquiry subject and message |
| Optional | Company/organization, phone |
| Collected automatically | IP address, access time, browser information (service usage records) |
Article 3 (Processing and Retention Period)
The Company processes and retains personal information within the retention period required by law or the period agreed to by the data subject at the time of collection.
- Inquiry handling: 1 year after the inquiry is resolved
- Where retention is required by law, for the period specified in that law (e.g., 3 years for consumer complaint and dispute records under the Act on Consumer Protection in Electronic Commerce; 3 months for access logs under the Protection of Communications Secrets Act)
Article 4 (Provision to Third Parties)
The Company processes personal information only within the scope specified in Article 1 and provides it to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the data subject's consent or under special provisions of law.
Article 5 (Outsourcing of Processing)
To provide services smoothly, the Company may outsource personal information processing as follows, and supervises the contractor to ensure personal information is handled securely in accordance with applicable laws.
| Contractor | Outsourced work |
|---|---|
| Cafe24 Corp. | Website hosting and storage of inquiry data |
Article 6 (Rights and Obligations of Data Subjects and How to Exercise Them)
Data subjects may at any time exercise their rights to access, correct, delete or suspend the processing of their personal information. Requests may be made in writing or by email, and the Company will act on them without delay. Rights may also be exercised through a legal representative or an authorized agent, in which case a power of attorney must be submitted.
Article 7 (Destruction of Personal Information)
When personal information is no longer needed — because the retention period has expired or the purpose of processing has been achieved — the Company destroys it without delay. Electronic files are deleted using technical methods that make recovery impossible, and paper documents are shredded or incinerated.
Article 8 (Security Measures)
- Administrative measures: establishing and implementing an internal management plan, minimizing and training staff who handle personal information
- Technical measures: managing access rights to personal information processing systems, access control, encryption in transit (SSL), installation of security software
- Physical measures: access control to server rooms and data storage areas
Article 9 (Installation, Operation and Refusal of Automatic Data Collection Devices)
The Company may use cookies, which store and retrieve usage information, to provide personalized services. Users can choose to allow or block cookies in their browser settings; refusing cookies may limit the use of some services. If Google Analytics is used for visitor statistics, the items collected and how to opt out will be added to this Article.
Article 10 (Privacy Officer)
The Company designates the following Privacy Officer, who is responsible for overall personal information processing and for handling complaints and remedies related to it.
| Privacy Officer | Ryong Seong (CEO) |
|---|---|
| Contact | Tel +82-62-971-8005 · Fax +82-62-972-8009 · Email fintkorea1@fintkorea.com |
| Address | 43-10, Cheomdangwagi-ro 208beon-gil, Buk-gu, Gwangju, Korea (Bldg B, Rm 712–713) |
Article 11 (Remedies for Infringement)
Data subjects may seek dispute resolution or counseling from the Personal Information Dispute Mediation Committee, the KISA Personal Information Infringement Report Center and other agencies to obtain remedies for infringement of their personal information.
- Personal Information Dispute Mediation Committee: 1833-6972 (no area code) · www.kopico.go.kr
- Personal Information Infringement Report Center: 118 (no area code) · privacy.kisa.or.kr
- Supreme Prosecutors' Office Cybercrime Investigation Division: 1301 (no area code) · www.spo.go.kr
- National Police Agency Cyber Bureau: 182 (no area code) · ecrm.cyber.go.kr
Article 12 (Changes to This Privacy Policy)
This Privacy Policy applies from its effective date. Any additions, deletions or corrections required by law or policy will be announced through the notice board at least 7 days before they take effect.
Effective date: October 30, 2026