Privacy Policy

Article 1 (Purposes of processing)

GOVR Inc. (the "Company") processes personal information for the purposes below. It is not used for any other purpose, and if a purpose changes, the Company will take the required steps, such as obtaining separate consent under Article 18 of the Personal Information Protection Act of Korea (the "Act").

• Reviewing and replying to business inquiries and partnership proposals
• Providing technical support and keeping a record of consultations
• Preventing misuse and keeping the service stable

This website does not offer membership sign-up, sales of goods, or payments, and the Company does not collect personal information for those purposes.

Article 2 (Personal information collected and how it is collected)

The Company processes the following personal information.

The Company does not collect sensitive information, such as information on beliefs, trade union membership, political views, health or sex life, or unique identification information. If a user volunteers such information in a message, the Company will not use it for any processing purpose and will destroy it without delay.

Article 3 (Processing and retention periods)

The Company processes and retains personal information within the retention period set by law or agreed to by the data subject at the time of collection.

Personal information whose retention period has ended is destroyed without delay under Article 7. Where another law requires a longer retention period, it is kept for that period.

Article 4 (Provision to third parties)

The Company processes personal information only within the scope stated in Article 1, and provides it to third parties only in the cases set out in Articles 17 and 18 of the Act, such as with the data subject's consent or where a law specifically provides for it.

The Company does not currently provide users' personal information to any third party. If this becomes necessary, the Company will first disclose the recipient, purpose, items and retention period, and obtain separate consent.

Article 5 (Outsourcing and transfer abroad)

To run the service smoothly, the Company outsources the processing of personal information as follows. Outsourcing contracts set out in writing how personal information is to be kept safe, and the Company supervises whether the contractors process it safely.

The automatically generated information in Article 2 is transferred to Cloudflare, and the inquiry · partnership information in Article 2 is transferred to Resend, each only as far as needed for the outsourced work. The recipients keep and use that information only for these purposes. Data subjects may refuse the transfer abroad by contacting the Company at the details in Article 10, or block cookies as described in Article 8. In that case, parts of the website, including the contact form, may not work.

Article 6 (Rights and obligations of data subjects and legal representatives, and how to exercise them)

Data subjects may exercise the following rights against the Company at any time.

1. Request access to personal information
2. Request correction of errors
3. Request deletion
4. Request suspension of processing

These rights may be exercised in writing or by email to the contact details in Article 10, and the Company will act on them without delay. If a data subject requests correction of an error, the Company will not use or provide the information concerned until the correction is complete.

These rights may also be exercised through an agent, such as a legal representative or a person with authority to act for the data subject. In that case, a power of attorney in the form of Annex 11 of the Notice on Methods of Processing Personal Information must be submitted.

Article 7 (Procedure and method of destruction)

When personal information is no longer needed, for example because its retention period has ended or its purpose has been achieved, the Company destroys it without delay.

• Procedure — Personal information due for destruction is identified and destroyed with the approval of the privacy officer.
• Method — Electronic files are deleted by technical means that make recovery impossible. Personal information on paper is shredded or incinerated.

Article 8 (Automatic collection tools and how to refuse them)

The Company does not use cookies to identify users or analyze their behavior, and does not run website analytics tools. However, the contractors in Article 5 may set cookies for security purposes to host the website and to protect the contact form against automated submissions (Turnstile). A cookie is a small piece of information that a server running the website sends to the user's browser and that is stored on the user's device.

Users can choose whether to accept cookies. In their browser settings, they can allow all cookies, be asked each time a cookie is stored, or refuse all cookies.

• Chrome — Settings > Privacy and security > Third-party cookies
• Edge — Settings > Cookies and site permissions > Manage and delete cookies and site data
• Safari — Settings > Privacy > Cookies and website data

If cookies are refused, the automated-submission check on the contact form may not work, and an inquiry may not be sent.

Article 9 (Measures to keep personal information secure)

The Company takes the following measures to keep personal information secure.

• Administrative — The number of staff handling personal information is kept to a minimum, and they are trained regularly.
• Technical — Access rights to systems that process personal information are managed, connections are encrypted (HTTPS), and access records are kept.
• Physical — Access to records and storage devices holding personal information is controlled.

Article 10 (Privacy officer)

The Company has appointed the privacy officer below to take overall responsibility for the processing of personal information and to handle data subjects' complaints and remedies related to it.

Data subjects may contact the privacy officer about any privacy question, complaint or remedy arising from their use of the Company's services. The Company will answer and act on such inquiries without delay.

Article 11 (Remedies for infringement)

To seek a remedy for an infringement of personal information, data subjects may apply for dispute resolution or counseling to the organizations below. These organizations operate in Korean.

A person whose rights or interests have been infringed by a disposition or omission of the head of a public institution in response to a request under Article 35 (access), Article 36 (correction · deletion) or Article 37 (suspension of processing) of the Act may file an administrative appeal as provided in the Administrative Appeals Act.

Article 12 (Changes to this Privacy Policy)

This Privacy Policy applies from its effective date. Any additions, deletions or corrections made under law or policy will be announced on the website at least 7 days before they take effect.