Privacy Policy
듀오랩스 (the "Company") complies with the Personal Information Protection Act and related laws, and establishes and discloses this Privacy Policy to protect the rights of data subjects.
Article 1. Purpose of Processing
The Company processes personal data for the following purposes and does not use it for any other purpose.
- Receiving and responding to inquiries: name, email, phone, company, inquiry details
- Consultation & quotes: project consultation and estimates in response to your inquiry (not used for advertising or marketing; separate prior consent is obtained if needed)
- Website analytics: improving the service based on self-collected anonymous visit, acquisition, and conversion statistics (no analytics cookies, not shared with third parties)
Article 2. Processing and Retention Period
- Inquiry handling: 1 year after the inquiry is answered (to review inquiry history and handle follow-up questions)
- If a contract is concluded: the period required by applicable law (e.g., E-Commerce Act Art. 6)
- Anonymous usage analytics events: 24 months from collection
- Destroyed without delay upon a data subject's deletion request
Article 3. Cookies and Automatic Collection
This website does not use cookies for advertising or behavioral analytics. For first-party visitor analytics, a randomly generated anonymous visitor ID is stored in local storage, while a randomly generated session ID and first-touch attribution are stored in session storage. This information is not used for advertising profiles or shared with external analytics services. Otherwise, we use only the minimum cookies/local storage needed to operate the service (login session and display theme).
Article 4. Provision to Third Parties & Entrustment
As a rule, the Company does not provide personal data to outside parties. However, to operate the service, it processes (entrusts) data as follows.
- Telegram Messenger Inc.: real-time inquiry notifications. Items provided are name, email, phone, company, and inquiry details, destroyed after the inquiry is resolved.
- Cloudflare, Inc.: website traffic delivery and security (CDN/tunnel). Processed data is connection information such as the visitor's IP address, handled only to the extent necessary for reliable service and security.
* Telegram and Cloudflare are overseas (U.S.) services; the above information may be processed on overseas servers. As entrusted processing necessary to handle your inquiry (in the course of entering into a contract), this disclosure in the Privacy Policy serves as notice of the overseas transfer under Article 28-8(1)3 of the Personal Information Protection Act. Their privacy policies: telegram.org/privacy · cloudflare.com/privacypolicy
Article 5. Destruction of Personal Data
When the retention period expires or the purpose is achieved and the data is no longer needed, it is destroyed without delay; electronic files are permanently deleted in an irrecoverable manner.
Article 6. Rights of Data Subjects and How to Exercise Them
Data subjects may exercise the following rights at any time: access, correction, deletion, and suspension of processing.
- How to exercise: email [email protected] We will notify you of the outcome within 10 days of receipt.
Article 7. Personal Data Items Collected
- [Contact form] Required: name, email, inquiry details
- [Contact form] Optional: phone, company
- [Automatically collected] anonymous visitor/session IDs, path, language, first-touch referrer domain, UTM campaign values, and event timestamp
Under Article 15(1)4 of the Personal Information Protection Act (measures taken at the data subject's request in the course of entering into a contract), the Company collects and uses the above information without separate consent, solely to respond to your inquiry. If use beyond this purpose is needed (such as sending advertising information), we obtain separate prior consent. You may request deletion or suspension of processing at any time, as described in Article 6.
Article 8. Data Protection Officer
- Officer: 홍서진 (CEO)
- Email: [email protected]
Article 9. Changes to This Policy
This policy applies from its effective date. If there are changes due to law or policy, they will be announced on the website at least 7 days before they take effect.
Article 10. Remedies for Infringement
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Privacy Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
- National Police Agency: 182 (ecrm.cyber.go.kr)