Skip to content

Privacy Policy

How Hongik Information Technology handles personal information.

Hongik Information Technology Co., Ltd. (the “Company”) establishes and discloses this Privacy Policy in accordance with the Personal Information Protection Act to protect the personal information of data subjects and to handle related complaints promptly and smoothly.

This Policy applies to personal information processed on the Company’s website (www.hongikinfo.com).

This English version is provided for reference only. If there is any discrepancy, the Korean version prevails.

Effective DateNovember 9, 2026

Article 1 Purpose of Processing Personal Information

The Company processes personal information for the following purposes. Personal information processed will not be used for any other purpose, and if the purpose changes, the Company will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

  • Receiving and responding to inquiries: reviewing inquiries submitted through the Contact Us page on the website (Business Inquiry and Technical Support), contacting the inquirer to respond, and informing them of the outcome

Article 2 Personal Information Processed

The Company processes the following personal information with the consent of data subjects.

Personal information processed
CategoryItemsLegal Basis
Contact Us (Business Inquiry and Technical Support)Required: Name, Phone, Email
Optional: Company
Consent of the data subject
  • The subject and message of an inquiry are written by the data subject. The Company advises data subjects not to include personal information that is not needed for the inquiry, such as resident registration numbers.
  • Server access logs (date and time of access, IP address, and browser information) may be generated automatically while the website is used (Article 9).
  • The Company does not collect personal information from children under the age of 14.

Article 3 Processing and Retention Period of Personal Information

The Company processes and retains personal information for the retention period consented to at the time of collection and destroys it without delay once that period ends.

Processing and retention period of personal information
CategoryRetention Period
Contact Us3 years from the date the inquiry is received
Server access logs11 days from the date of access

However, where relevant laws require personal information to be kept, it is kept for the period those laws require.

Article 4 Procedure and Method of Destroying Personal Information

  1. Procedure: Personal information is destroyed without delay once its retention period ends. Inquiry information is automatically deleted from the system when the retention period ends.
  2. Method: Information in electronic files is deleted in a way that cannot be recovered. Personal information printed on paper is shredded or incinerated.
  3. Personal information remaining in backup data created for system recovery is also deleted when the backup retention period ends.

Article 5 Provision of Personal Information to Third Parties

The Company processes personal information only within the scope of the purposes stated in Article 1 and does not provide it to third parties except in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as when the data subject consents or a law specifically provides otherwise. The Company does not transfer personal information overseas.

Article 6 Outsourcing of Personal Information Processing

The Company does not outsource the processing of personal information. If it does so in the future, the Company will disclose the contractor and the outsourced tasks through this Privacy Policy without delay.

Article 7 Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them

  1. Data subjects may at any time ask the Company to provide access to, correct, delete, or suspend the processing of their personal information, or withdraw their consent.
  2. Data subjects may exercise these rights in writing, by phone, or by email to the Chief Privacy Officer listed in Article 10, and the Company will take action without delay.
  3. These rights may also be exercised through a representative, such as a legal representative or a person authorized by the data subject. In this case, a power of attorney must be submitted.
  4. Deletion cannot be requested if other laws specify the personal information as subject to collection, and requests for access or suspension of processing may be restricted where other laws have special provisions.
  5. The Company verifies whether the person exercising these rights is the data subject or a legitimate representative.

Article 8 Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information.

Administrative Measures

  • The Company keeps the number of employees who handle personal information to a minimum and provides training on personal information protection.

Technical Measures

  • Inquiry information can be viewed only through administrator accounts, and access rights to these accounts are managed.
  • Administrator logins are protected against unauthorized access, for example by locking an account for a period of time after repeated failed password attempts.
  • All communication on the website and administrator pages is encrypted (HTTPS).
  • Inquiry notification emails do not contain personal information, which can be viewed only on the administrator pages.

Physical Measures

  • Servers storing personal information are managed in locations with controlled access.

Article 9 Installation, Operation, and Refusal of Devices That Automatically Collect Personal Information

  1. The Company does not use cookies, which store and retrieve user information from time to time, nor does it use external analytics tools that collect behavioral information.
  2. Videos on the Videos page are played through the YouTube player. When a video is played, YouTube (Google) may use cookies and similar technologies under its own policies.
  3. The map on the Location page is provided by Google Maps. When the map loads, Google may use cookies and similar technologies under its own policies.
  4. Website visit statistics are collected without cookies and count only the page, the device type (PC, mobile, or tablet), and the referral source (the type of site a visitor came from, such as a search engine or social media). IP addresses are not stored.
  5. For security and troubleshooting, the website server automatically keeps access logs (date and time of access, IP address, and browser information), which are deleted after the period stated in Article 3.

Article 10 Chief Privacy Officer and Complaints Department

The Company has designated a Chief Privacy Officer, as shown below, to oversee personal information processing and to handle complaints and provide remedies for data subjects.

Chief Privacy Officer

Name
Kevin Gitae Kim
Title
Deputy General Manager
Email
kevin.gitae.kim@gmail.com

Complaints Department

Department
Business Planning Team
Phone
+82-70-4140-3001
Email
kevin.gitae.kim@gmail.com

Data subjects may contact the above for any inquiries, complaints, or requests for remedies regarding personal information arising from their use of the website, and the Company will respond and take action without delay.

Article 11 Remedies for Infringement of Data Subjects’ Rights

Data subjects may apply to the following organizations for dispute resolution or consultation to seek remedies for infringement of their personal information.

Article 12 Changes to This Privacy Policy

This Privacy Policy takes effect on November 9, 2026. If it changes, the Company will give notice on the website at least 7 days before the change takes effect, and previous versions will remain available on this page.