Privacy Policy
[Hanbridge Partners] (the “Company”) establishes and publishes this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to ensure that privacy-related inquiries and complaints are handled promptly and effectively.
Article 1. Purposes of Processing Personal Information
The Company processes personal information for the purposes set forth below. Personal information will not be used for purposes other than those stated herein. If the purposes of processing change, the Company will take all necessary measures, including obtaining separate consent where required under Article 18 of the Personal Information Protection Act.
1. Website Membership Registration and Management
The Company processes personal information to:
Confirm a user’s intention to register as a Member;
Identify and authenticate Members for the provision of membership-based services;
Maintain and manage membership status;
Verify identity where limited identity verification procedures apply;
Prevent unauthorized or fraudulent use of the services;
Verify the consent of a legal representative when processing the personal information of children under the age of 14;
Deliver notices and other communications; and
Respond to inquiries and complaints.
2. Provision of Goods or Services
The Company processes personal information to:
Deliver goods;
Provide services;
Send contracts and invoices;
Provide content and customized services;
Verify identity and age;
Process and settle payments; and
Collect outstanding receivables.
3. Handling Inquiries and Complaints
The Company processes personal information to verify the identity of the individual submitting an inquiry or complaint, review the relevant matter, communicate for fact-finding purposes, and provide notice of the outcome
Article 2. Processing and Retention Periods
The Company processes and retains personal information within the retention and use periods prescribed by applicable laws or agreed upon by the data subject at the time the personal information is collected.
The processing and retention periods for each category of personal information are as follows:
1. Website Membership Registration and Management
Personal information will be retained until the Member withdraws from the Website.
However, where any of the following circumstances applies, the information will be retained until the relevant matter has been resolved:
If an investigation or inquiry concerning a violation of applicable law is ongoing, until the investigation or inquiry is concluded; or
If any receivable, payable, or other outstanding obligation remains in connection with the use of the Website, until such obligation has been fully settled.
2. Provision of Goods or Services
Personal information will be retained until the provision of the relevant goods or services and the related payment and settlement processes have been completed.
However, where retention is required under applicable law, the information will be retained for the periods specified below:
Records of Transactions Under the Act on Consumer Protection in Electronic Commerce
Records relating to labels and advertisements: 6 months
Records relating to contracts, withdrawal of offers, payments, and the supply of goods or services: 5 years
Records relating to consumer complaints and dispute resolution: 3 years
Communications Data Under the Protection of Communications Secrets Act
Records relating to the date and time of telecommunications, commencement and termination times, subscriber numbers of counterparties, frequency of use, and location-tracking data from base stations: 1 year
Internet communication records, access logs, and access-location tracking data: 3 months
Article 3. Provision of Personal Information to Third Parties
The Company processes personal information only within the scope of the purposes specified in Article 1 of this Privacy Policy.
The Company provides personal information to third parties only where permitted under Articles 17 and 18 of the Personal Information Protection Act, including where the data subject has provided consent or where disclosure is specifically authorized by law. The Company does not otherwise provide personal information to third parties.
Where necessary for the effective provision of services, the Company may provide the minimum personal information required to a third party after obtaining the data subject’s consent pursuant to Article 17(1)(1) of the Personal Information Protection Act.
The details of any such provision shall be disclosed as follows:
Recipient: [e.g., OOO Card Co., Ltd.]
Purpose of Use by the Recipient: [e.g., Joint promotional events, business partnerships, and issuance of affiliated credit cards]
Personal Information Provided: [e.g., Name, address, telephone number, email address, and card payment account information]
Retention and Use Period: [e.g., For the duration of the credit card agreement]
Article 4. Outsourcing of Personal Information Processing
The Company outsources certain personal information processing activities as necessary for the efficient operation of its services.
The outsourced activities and service providers include:
Website Developer: Website development, maintenance, and operation
Payment Gateway Provider: Payment processing and settlement
Service Provider: Consultation and client inquiry management
When entering into an outsourcing agreement, the Company specifies in writing the matters required under Article 25 of the Personal Information Protection Act, including:
Prohibition on processing personal information for purposes unrelated to the outsourced services;
Required technical and administrative safeguards;
Restrictions on subcontracting;
Management and supervision of the service provider; and
Liability for damages.
The Company also supervises its service providers to ensure that personal information is processed securely.
If the scope of the outsourced activities or the identity of a service provider changes, the Company will disclose such changes through this Privacy Policy without undue delay.
Article 5. Rights of Data Subjects and Legal Representatives
A data subject may exercise the following rights regarding personal information at any time:
Request access to personal information;
Request correction of inaccurate or incomplete personal information;
Request deletion of personal information; and
Request suspension of personal information processing.
These rights may be exercised by submitting a request to the Company in writing or by telephone, email, fax, or other appropriate means. The Company will respond without undue delay.
If a data subject requests the correction or deletion of personal information, the Company will not use or provide the relevant information until the correction or deletion has been completed.
The rights described in Paragraph 1 may be exercised through a legal representative or duly authorized agent. In such cases, a power of attorney in the form prescribed in Appendix Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
Data subjects shall not infringe upon their own or another person’s personal information or privacy in violation of the Personal Information Protection Act or other applicable laws and regulations.
Article 6. Categories of Personal Information Collected
The Company processes the following categories of personal information:
1. Client Information Management
Required Information:
Name, date of birth, user ID, password, address, telephone number, gender, email address, and other information required to provide the services.
Optional Information:
Marital status, areas of interest, and other information voluntarily provided by the user.
2. Provision of Goods or Services
Required Information:
Name, date of birth, user ID, password, address, telephone number, email address, and payment information, including credit card details or bank account information, where necessary to process transactions.
Article 7. Retention and Destruction of Personal Information
The Company will securely destroy personal information without undue delay once the applicable retention period has expired or the purpose for which the information was collected has been fulfilled.
Where personal information must be retained pursuant to applicable laws and regulations after the original purpose of processing has been fulfilled, such information will be transferred to a separate database or otherwise stored separately.
Personal information will be destroyed in accordance with the following procedures:
Destruction Procedure: Personal information identified for destruction will be reviewed and approved by the Company's Privacy Officer before disposal.
Destruction Method: Electronic records will be permanently deleted using methods that prevent recovery. Paper records will be shredded or securely destroyed.
Article 8. Security Measures
The Company implements appropriate administrative, technical, and physical safeguards to protect personal information, including:
Establishing and maintaining internal privacy policies and providing regular employee training;
Managing access rights, implementing access control systems, encrypting sensitive information, and maintaining security software; and
Restricting physical access to facilities where personal information is stored.
Article 9. Cookies
The Company uses cookies and similar technologies to provide users with a more personalized experience.
Cookies are small text files transmitted by the Website's server and stored on the user's computer or mobile device.
Users may configure their browser settings to accept, reject, or delete cookies. However, disabling cookies may affect the availability of certain features or personalized services.
The Company may collect and analyze information such as website visits, usage patterns, popular search terms, and security access information in order to improve the Website and provide optimized services.
Article 10. Privacy Officer
The Company has designated the following Privacy Officer to oversee matters relating to the processing of personal information and to respond to privacy-related inquiries and complaints.
Privacy Officer
Name: Hyun Sun Do
Title: Chief Executive Officer
Phone: +1 (510) 342-9510
Privacy Contact
Phone: +1 (510) 342-9510
Users may contact the Privacy Officer regarding any questions, complaints, or requests relating to the processing of personal information. The Company will respond promptly.
Article 11. Requests to Access Personal Information
Users may request access to their personal information in accordance with applicable privacy laws by contacting:
Privacy Request Contact
Phone: +1 (510) 342-9510
The Company will make reasonable efforts to respond promptly to such requests.
Article 12. Remedies for Privacy Rights Infringement
If users believe that their privacy rights have been infringed, they may seek assistance from the appropriate governmental or regulatory authorities in the jurisdiction where they reside.
For users in the Republic of Korea, the following organizations are available:
Personal Information Dispute Mediation Committee
Personal Information Infringement Report Center (KISA)
Supreme Prosecutors' Office
National Police Agency
Article 13. Effective Date and Amendments
This Privacy Policy shall become effective on July 1, 2026.
The Company may amend this Privacy Policy from time to time to reflect changes in applicable laws, regulations, or business practices. Any material changes will be published on the Website prior to taking effect.
Article 1. Purposes of Processing Personal Information
The Company processes personal information for the purposes set forth below. Personal information will not be used for purposes other than those stated herein. If the purposes of processing change, the Company will take all necessary measures, including obtaining separate consent where required under Article 18 of the Personal Information Protection Act.
1. Website Membership Registration and Management
The Company processes personal information to:
Confirm a user’s intention to register as a Member;
Identify and authenticate Members for the provision of membership-based services;
Maintain and manage membership status;
Verify identity where limited identity verification procedures apply;
Prevent unauthorized or fraudulent use of the services;
Verify the consent of a legal representative when processing the personal information of children under the age of 14;
Deliver notices and other communications; and
Respond to inquiries and complaints.
2. Provision of Goods or Services
The Company processes personal information to:
Deliver goods;
Provide services;
Send contracts and invoices;
Provide content and customized services;
Verify identity and age;
Process and settle payments; and
Collect outstanding receivables.
3. Handling Inquiries and Complaints
The Company processes personal information to verify the identity of the individual submitting an inquiry or complaint, review the relevant matter, communicate for fact-finding purposes, and provide notice of the outcome
Article 2. Processing and Retention Periods
The Company processes and retains personal information within the retention and use periods prescribed by applicable laws or agreed upon by the data subject at the time the personal information is collected.
The processing and retention periods for each category of personal information are as follows:
1. Website Membership Registration and Management
Personal information will be retained until the Member withdraws from the Website.
However, where any of the following circumstances applies, the information will be retained until the relevant matter has been resolved:
If an investigation or inquiry concerning a violation of applicable law is ongoing, until the investigation or inquiry is concluded; or
If any receivable, payable, or other outstanding obligation remains in connection with the use of the Website, until such obligation has been fully settled.
2. Provision of Goods or Services
Personal information will be retained until the provision of the relevant goods or services and the related payment and settlement processes have been completed.
However, where retention is required under applicable law, the information will be retained for the periods specified below:
Records of Transactions Under the Act on Consumer Protection in Electronic Commerce
Records relating to labels and advertisements: 6 months
Records relating to contracts, withdrawal of offers, payments, and the supply of goods or services: 5 years
Records relating to consumer complaints and dispute resolution: 3 years
Communications Data Under the Protection of Communications Secrets Act
Records relating to the date and time of telecommunications, commencement and termination times, subscriber numbers of counterparties, frequency of use, and location-tracking data from base stations: 1 year
Internet communication records, access logs, and access-location tracking data: 3 months
Article 3. Provision of Personal Information to Third Parties
The Company processes personal information only within the scope of the purposes specified in Article 1 of this Privacy Policy.
The Company provides personal information to third parties only where permitted under Articles 17 and 18 of the Personal Information Protection Act, including where the data subject has provided consent or where disclosure is specifically authorized by law. The Company does not otherwise provide personal information to third parties.
Where necessary for the effective provision of services, the Company may provide the minimum personal information required to a third party after obtaining the data subject’s consent pursuant to Article 17(1)(1) of the Personal Information Protection Act.
The details of any such provision shall be disclosed as follows:
Recipient: [e.g., OOO Card Co., Ltd.]
Purpose of Use by the Recipient: [e.g., Joint promotional events, business partnerships, and issuance of affiliated credit cards]
Personal Information Provided: [e.g., Name, address, telephone number, email address, and card payment account information]
Retention and Use Period: [e.g., For the duration of the credit card agreement]
Article 4. Outsourcing of Personal Information Processing
The Company outsources certain personal information processing activities as necessary for the efficient operation of its services.
The outsourced activities and service providers include:
Website Developer: Website development, maintenance, and operation
Payment Gateway Provider: Payment processing and settlement
Service Provider: Consultation and client inquiry management
When entering into an outsourcing agreement, the Company specifies in writing the matters required under Article 25 of the Personal Information Protection Act, including:
Prohibition on processing personal information for purposes unrelated to the outsourced services;
Required technical and administrative safeguards;
Restrictions on subcontracting;
Management and supervision of the service provider; and
Liability for damages.
The Company also supervises its service providers to ensure that personal information is processed securely.
If the scope of the outsourced activities or the identity of a service provider changes, the Company will disclose such changes through this Privacy Policy without undue delay.
Article 5. Rights of Data Subjects and Legal Representatives
A data subject may exercise the following rights regarding personal information at any time:
Request access to personal information;
Request correction of inaccurate or incomplete personal information;
Request deletion of personal information; and
Request suspension of personal information processing.
These rights may be exercised by submitting a request to the Company in writing or by telephone, email, fax, or other appropriate means. The Company will respond without undue delay.
If a data subject requests the correction or deletion of personal information, the Company will not use or provide the relevant information until the correction or deletion has been completed.
The rights described in Paragraph 1 may be exercised through a legal representative or duly authorized agent. In such cases, a power of attorney in the form prescribed in Appendix Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
Data subjects shall not infringe upon their own or another person’s personal information or privacy in violation of the Personal Information Protection Act or other applicable laws and regulations.
Article 6. Categories of Personal Information Collected
The Company processes the following categories of personal information:
1. Client Information Management
Required Information:
Name, date of birth, user ID, password, address, telephone number, gender, email address, and other information required to provide the services.
Optional Information:
Marital status, areas of interest, and other information voluntarily provided by the user.
2. Provision of Goods or Services
Required Information:
Name, date of birth, user ID, password, address, telephone number, email address, and payment information, including credit card details or bank account information, where necessary to process transactions.
Article 7. Retention and Destruction of Personal Information
The Company will securely destroy personal information without undue delay once the applicable retention period has expired or the purpose for which the information was collected has been fulfilled.
Where personal information must be retained pursuant to applicable laws and regulations after the original purpose of processing has been fulfilled, such information will be transferred to a separate database or otherwise stored separately.
Personal information will be destroyed in accordance with the following procedures:
Destruction Procedure: Personal information identified for destruction will be reviewed and approved by the Company's Privacy Officer before disposal.
Destruction Method: Electronic records will be permanently deleted using methods that prevent recovery. Paper records will be shredded or securely destroyed.
Article 8. Security Measures
The Company implements appropriate administrative, technical, and physical safeguards to protect personal information, including:
Establishing and maintaining internal privacy policies and providing regular employee training;
Managing access rights, implementing access control systems, encrypting sensitive information, and maintaining security software; and
Restricting physical access to facilities where personal information is stored.
Article 9. Cookies
The Company uses cookies and similar technologies to provide users with a more personalized experience.
Cookies are small text files transmitted by the Website's server and stored on the user's computer or mobile device.
Users may configure their browser settings to accept, reject, or delete cookies. However, disabling cookies may affect the availability of certain features or personalized services.
The Company may collect and analyze information such as website visits, usage patterns, popular search terms, and security access information in order to improve the Website and provide optimized services.
Article 10. Privacy Officer
The Company has designated the following Privacy Officer to oversee matters relating to the processing of personal information and to respond to privacy-related inquiries and complaints.
Privacy Officer
Name: Hyun Sun Do
Title: Chief Executive Officer
Phone: +1 (510) 342-9510
Privacy Contact
Phone: +1 (510) 342-9510
Users may contact the Privacy Officer regarding any questions, complaints, or requests relating to the processing of personal information. The Company will respond promptly.
Article 11. Requests to Access Personal Information
Users may request access to their personal information in accordance with applicable privacy laws by contacting:
Privacy Request Contact
Phone: +1 (510) 342-9510
The Company will make reasonable efforts to respond promptly to such requests.
Article 12. Remedies for Privacy Rights Infringement
If users believe that their privacy rights have been infringed, they may seek assistance from the appropriate governmental or regulatory authorities in the jurisdiction where they reside.
For users in the Republic of Korea, the following organizations are available:
Personal Information Dispute Mediation Committee
Personal Information Infringement Report Center (KISA)
Supreme Prosecutors' Office
National Police Agency
Article 13. Effective Date and Amendments
This Privacy Policy shall become effective on July 1, 2026.
The Company may amend this Privacy Policy from time to time to reflect changes in applicable laws, regulations, or business practices. Any material changes will be published on the Website prior to taking effect.