Privacy Policy

1. Data controller and contact information

Data controller: Ari Hak Dang. Representative and privacy officer: KIM SEUNGMO. Contact: [email protected]. Address: #105, 46-3, Bukyuseong-daero 155beon-gil, Yuseong-gu, Daejeon, Republic of Korea.

2. Information we collect and why

Sign-up, verification, and account management: we process your name, nickname, email address, chosen login ID, password stored as a one-way hash, optional contact details, and sign-up and access records.

Camp application and operation: we process your name in English as shown in your passport, phone number, address, date of birth, email, passport number, gender, nationality, camp-specific optional items, and your application, payment, and cancellation status. Primary language is optional. Student information registered by an agent is processed by that agent and the operator for the purpose of camp registration and management.

Inquiry handling: we process the subject, content, and attachments of your inquiry and our reply. News delivery uses the email address you separately consented with, together with records of consent and withdrawal. Use of your likeness is governed by the scope of your separate consent.

Agent account management: we process the company name, nickname, email, phone number, login ID, password stored as a one-way hash, and settlement account details.

3. Retention and disposal

Member information is retained for as long as needed to provide member services and is destroyed without delay when you withdraw or the purpose of processing is fulfilled. Information needed to complete a pending service is kept until that processing is finished, and any general additional retention is limited to a maximum of one year after withdrawal or account deletion.

Where a law requires separate retention, records are stored separately by purpose. Under the Act on Consumer Protection in Electronic Commerce, records of contracts, withdrawal of offers, payment, and supply of goods are kept for 5 years; records of consumer complaints and dispute resolution for 3 years; and records of labeling and advertising for 6 months. During the statutory retention period, these records are not used for any other purpose.

Electronic files are deleted in a way that makes recovery difficult, and printed materials are destroyed by shredding or similar means. If you withdraw your consent to receive news, you are removed from the news distribution list.

4. Outsourced and overseas processing

We use hosting and Cloudflare services to protect the servers and network that run the site, and the Resend service to send and receive email such as login notices, inquiry replies, and news. Access is limited to what is needed to perform these tasks.

Where you have given explicit consent, we use Google Analytics 4 (GA4), Microsoft Clarity, and the Meta Pixel configured for your language on public pages to analyze visits and measure application conversions. Cookies, connection and device information, and page usage data may be processed in each service provider's overseas processing environment. These tracking tools are not placed on admin, agent, member account, or sign-in screens. Cross-border transfers that require separate consent or notice under applicable law follow the required procedures.

5. Cookies and analytics settings

You can change your choice or withdraw consent at any time in the analytics and advertising settings on the page. You can use the site without consenting. Tracking is not run when your browser's Global Privacy Control or Do Not Track signal is enabled. Names, emails, phone numbers, addresses, dates of birth, passport numbers, inquiry contents, account details, and passwords are never included in conversion events, and application input areas are masked in Clarity.

You can refuse or delete cookies in your browser settings, though some sign-in features may then be limited.

6. Your rights as a data subject

You can view and correct your information in My account. Requests for deletion, suspension of processing, withdrawal of consent, account withdrawal, and the exercise of rights through a representative can be sent to [email protected]. After verifying your identity, we handle requests in accordance with applicable law and notify you if any restriction applies. If you decline to provide required information, you may be unable to use the relevant service.

7. Security measures and notice of changes

We apply necessary safeguards, including hashed password storage, access control, encrypted communication, restricted admin access, and security reviews. Significant changes to this privacy policy are announced on the site together with their effective date.