Privacy policy

This is an English translation for reference. If it differs from the Korean version, the Korean version prevails.

Green Idea Lab LLC. (“the Company”) establishes and discloses this privacy policy under Article 30 of the Korean Personal Information Protection Act (PIPA) to protect personal information and handle related requests.

1. Purposes and items

The Company processes only the minimum personal information needed for the purposes below. If a purpose changes, the Company takes the steps required by Article 18 of PIPA, such as obtaining separate consent.

Category Purpose Items
Enquiries Replying to project and partnership enquiries; keeping records of consultations Name, email address, organization, position, phone number and other details the sender includes in an email
Contracts Concluding and performing service contracts; communication; invoicing Name, organization, position, email address and phone number of client and partner contacts

This website has no sign-up, no input forms and no cookies, and does not collect personal information directly.

2. Retention

  1. Enquiries: one year after the enquiry is answered
  2. Contracts: five years after the contract ends (the record-keeping period for books and vouchers under Article 85-3 of the Framework Act on National Taxes)

3. Provision to third parties

The Company provides personal information to third parties only with the data subject’s consent or where Articles 17 and 18 of PIPA otherwise permit.

4. Outsourcing and overseas transfer

The Company outsources the processing below. Because the service providers’ servers are located abroad, personal information is transferred to and stored outside Korea.

Provider Outsourced task Country Items Timing and method Retention
Google LLC (Google Workspace) Sending, receiving and storing business email United States and other countries where the provider’s data centers are located Items in section 1 exchanged by email Transmitted over the network when emails are sent or received As in section 2
Cloudflare, Inc. Website hosting and security United States and other countries where the provider’s data centers are located IP addresses and similar data processed automatically when visiting the website Transmitted over the network when the website is visited For the provider’s service period

Each provider’s privacy contact is listed in its own privacy policy. If you do not want your information transferred abroad, you may ask the contact in section 7 for a way to communicate other than email; in that case, consultation by email is not available.

Under Article 26 of PIPA, the Company’s outsourcing contracts prohibit processing beyond the outsourced task, require security measures and restrict sub-outsourcing, and the Company supervises the providers.

5. Destruction

The Company destroys personal information without delay once the retention period ends or the purpose is achieved. Information that other laws require to be kept is stored separately.

  • Electronic files: permanently deleted so they cannot be recovered
  • Paper documents: shredded or incinerated

6. Rights of data subjects

You may at any time ask the Company to let you access, correct or delete your personal information, suspend its processing or withdraw consent, by writing or emailing the contact in section 7. The Company will act without delay. A legal representative or authorized agent may also make these requests. Information that other laws require to be kept cannot be deleted on request.

7. Privacy officer

8. Security measures

  • Access to personal information is limited to people who need it for their work
  • Two-factor authentication on business accounts
  • HTTPS encryption across the website

9. Remedies

You may apply for dispute resolution or advice to the following Korean agencies:

  • Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
  • Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
  • Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
  • Korean National Police Agency: 182 (ecrm.police.go.kr)

10. Changes

This privacy policy applies from 23 October 2026. If it changes, we will post the update on this page at least seven days before it takes effect.