ITSOLUTION
Privacy

Privacy Policy

ITSOLUTION Co., Ltd. (the “Company”) publishes this Privacy Policy under Article 30 of the Personal Information Protection Act to protect personal information and address related concerns promptly and properly.

Article 1. Purposes of processing personal information

The Company processes only the minimum personal information needed for the purposes below. It does not use that information for other purposes. If a purpose changes, the Company takes the necessary measures, including obtaining separate consent under Article 18 of the Personal Information Protection Act.

  1. Receiving inquiries through the website and sending replies
  2. Analyzing website usage statistics and improving the website

Article 2. Categories of personal information processed

The Company does not operate a separate sign-up process or information-entry form on the website. To make an inquiry, visitors send an email directly from their own email application.

Accordingly, the personal information provided directly by visitors is limited to information in emails they choose to send:

  • Required: email address
  • Only if voluntarily included: name, contact details, organization, and information in the inquiry

Separately, the following information is collected automatically to analyze website usage statistics:

  • A visitor identifier stored in a cookie
  • IP address
  • Browser, operating system, device type, and screen information
  • Visit time and duration
  • Pages visited and referral path

Article 10 explains the automatic collection tools, their purposes, and how to opt out.

Article 3. Processing and retention periods

The Company deletes an inquiry email as soon as it has received and answered the inquiry. It does not set a separate retention period or keep the information for another purpose after replying.

Information collected automatically under Article 2 is deleted from the analytics tool 14 months after collection.

If another law requires retention, the information is kept for the period required by that law.

Article 4. Disclosure to third parties

The Company does not provide personal information to third parties, except within the scope permitted by law in cases covered by Articles 17 and 18 of the Personal Information Protection Act.

Article 5. Entrustment of personal information processing

The Company does not entrust personal information processing to an external processor.

Article 6. Overseas transfer of personal information

The Company uses services provided by an overseas company to receive and store email and analyze website usage. The details are disclosed below under Article 28-8(1)(3) of the Personal Information Protection Act.

A. Email receipt and storage

Recipient
Google LLC
Country
United States
When and how
Transferred over a network when a visitor sends an email
Information transferred
The email information described in Article 2
Purpose
Providing email receipt and storage services
Retention and use
The same retention period as Article 3

B. Website usage analytics

Recipient
Google LLC
Country
United States
When and how
Transferred over a network when a visitor uses the website
Information transferred
The automatically collected information described in Article 2
Purpose
Providing the analytics service described in Article 10
Retention and use
14 months from collection

You may refuse overseas transfer. Refusing item A may limit email inquiries. You may refuse item B using the methods in Article 10, without losing access to the website.

Article 7. Deletion procedures and methods

  1. The Company begins deletion without delay when the reason for retaining personal information ends.
  2. Electronic files, including emails, are permanently deleted by a method that prevents recovery or reproduction.
  3. After replying, the Company deletes the email from the inbox, sent items, and trash, and keeps no separate copy.

Article 8. Rights and duties of data subjects and legal representatives

  1. You may request access to, correction or deletion of, or suspension of processing of your personal information at any time.
  2. You may exercise these rights in writing or by email. The Company responds without delay.
  3. A legal representative or an authorized agent may exercise these rights on your behalf.
  4. The Company verifies that the requester is the data subject or a duly authorized representative.

Article 9. Measures to protect personal information

The Company takes the following measures to protect personal information:

  1. Limits the staff authorized to handle personal information and manages their access rights.
  2. Controls access to email accounts and manages passwords.
  3. Provides regular training to staff who handle personal information.

Article 10. Automatic collection tools and how to opt out

The Company uses cookies to analyze website usage statistics. A cookie is a small piece of information stored in a visitor's browser; the Company does not use it to identify individual visitors.

Tools
Google Tag Manager and Google Analytics (Google LLC)
Purpose
Analyze visitor counts, referrals, and page usage to improve the website
Information collected
The automatically collected information in Article 2
Retention and use
14 months from collection

The Company does not use these tools for advertising, collect advertising identifiers, or use collected information for advertising.

You can choose whether to allow cookie storage and can opt out using the following methods:

  1. Block or delete cookies in your browser settings. The path varies by browser and is generally under privacy or security settings.
  2. Install the Google Analytics opt-out browser add-on.
Analytics opt-out add-on
tools.google.com/dlpage/gaoptout

Blocking cookies does not restrict your ability to read the website or make an inquiry by email.

If the tools or purposes change, the Company will update this policy and give notice before the change.

Article 11. Privacy officer

The Company has appointed the following privacy officer to oversee personal information processing and handle related complaints and requests for redress.

Privacy officer
Privacy contact

You may use the contact above for questions, complaints, and requests for redress related to personal information. The Company will respond and act without delay.

Article 12. How to seek redress for privacy violations

If your personal information rights have been infringed, you may seek dispute resolution or advice from the following organizations:

Personal Information Dispute Mediation Committee
1833-6972www.kopico.go.kr
Personal Information Infringement Report Center
118privacy.kisa.or.kr
Supreme Prosecutors' Office Cyber Investigation Division
1301www.spo.go.kr
National Police Agency Cyber Investigation Bureau
182ecrm.police.go.kr

Article 13. Changes to this Privacy Policy

  1. This Privacy Policy takes effect on September 28, 2026.
  2. The previous Privacy Policy applied from August 24 through September 27, 2026.
  3. Additions, deletions, or changes will be announced on the website at least seven days before taking effect.