Last Updated: January 20, 2025
Vexplor (hereinafter referred to as 'the Company') complies with the Personal Information Protection Act and related laws to protect the freedom and rights of data subjects, and processes personal information lawfully and manages it safely. In accordance with Article 30 of the Personal Information Protection Act, we establish and disclose this Privacy Policy to inform data subjects of the procedures and standards for personal information processing and to promptly and smoothly handle related grievances.
The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
A. Service Provision and Consultation
- Responding to product and service inquiries
- Processing demo requests and scheduling
- Providing diagnostic services and result notifications
- Proposing customized solutions
B. Marketing and Advertising
- Developing new services and providing customized services
- Providing event and advertising information and participation opportunities
- Verifying service effectiveness
C. Service Improvement
- Collecting customer feedback and improving services
- Providing services and advertising based on statistical characteristics
The Company collects the minimum personal information necessary to provide services.
A. Required Items
- Name
- Company name
- Email address
B. Optional Items
- Phone number
- Inquiry details
- Diagnostic result information
C. Automatically Collected Items
- Service usage records
- Access logs
- Cookies
- Access IP information
- Device information
The Company processes and retains personal information within the retention and use period according to laws or the period agreed upon when collecting personal information from data subjects.
A. General Inquiries and Consultations
- Retention period: 3 years after inquiry processing completion
- Basis: Act on Consumer Protection in Electronic Commerce
B. Marketing and Advertising
- Retention period: Until consent withdrawal
- Basis: Data subject's consent
C. Retention According to Laws
- Records on contracts or withdrawal of offers: 5 years
- Records on payment and supply of goods: 5 years
- Records on consumer complaints or dispute resolution: 3 years
- Website visit records: 3 months
The Company processes personal information only within the scope specified in Article 1 (Purpose of Personal Information Processing), and provides personal information to third parties only when applicable under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or special provisions of law.
Currently, the Company does not provide personal information to third parties.
The Company consigns personal information processing tasks as follows for smooth personal information processing.
A. Email Delivery Service
- Consignee: Self-operated SMTP server
- Consigned tasks: Sending inquiry receipt confirmation emails
When concluding consignment contracts, the Company specifies in documents such as contracts matters regarding prohibition of personal information processing other than the purpose of consigned work, technical and managerial protection measures, restrictions on re-consignment, management and supervision of consignees, and liability for damages in accordance with Article 26 of the Personal Information Protection Act, and supervises whether consignees safely process personal information.
Data subjects may exercise the following personal information protection rights against the Company at any time:
A. Request to view personal information
B. Request correction if there are errors
C. Request deletion
D. Request suspension of processing
Rights may be exercised against the Company in writing or via email according to Form No. 8 of the Enforcement Rules of the Personal Information Protection Act, and the Company will take action without delay.
Rights may be exercised through a legal representative of the data subject or an authorized agent. In this case, a power of attorney according to Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
The Company destroys personal information without delay when it becomes unnecessary, such as when the retention period expires or the processing purpose is achieved.
A. Destruction Procedure
- Unnecessary personal information and personal information files are processed as follows according to internal policy procedures under the responsibility of the personal information manager.
- Destruction of personal information: Personal information whose retention period has expired is destroyed without delay from the end date.
B. Destruction Method
- Electronic file format: Permanent deletion by irreversible methods
- Records, prints, documents, etc.: Shredding or incineration
The Company takes the following measures to ensure the safety of personal information:
A. Administrative Measures
- Establishment and implementation of internal management plans
- Regular employee training
B. Technical Measures
- Management of access rights to personal information processing systems
- Installation of access control systems
- Encryption of personal information
- Installation and periodic update/inspection of security programs
C. Physical Measures
- Access control to computer rooms and data storage rooms
The Company designates a Personal Information Protection Officer as follows to take overall responsibility for personal information processing and to handle complaints and remedy damages related to personal information processing:
▶ Personal Information Protection Officer
- Name: Vexplor Privacy Protection Team
- Email: info@wace.me
- Phone: Please contact through the inquiry form
Data subjects may contact the Personal Information Protection Officer regarding all personal information protection inquiries, complaint handling, damage remedy, etc. that occur while using the Company's services. The Company will respond to and process data subjects' inquiries without delay.
This Privacy Policy applies from January 20, 2025, and if there are additions, deletions, or corrections to changes according to laws and policies, they will be announced through notices from 7 days before the implementation of changes.
However, when significant changes to user rights occur, such as changes to collected personal information items or purposes of use, we will announce at least 30 days in advance and may obtain user consent again if necessary.
Data subjects may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, Korea Internet & Security Agency Personal Information Infringement Report Center, etc. to receive remedy for personal information infringement.
▶ Personal Information Dispute Mediation Committee
- Phone: 1833-6972 (without area code)
- Website: www.kopico.go.kr
▶ Personal Information Infringement Report Center (operated by KISA)
- Phone: 118 (without area code)
- Website: privacy.kisa.or.kr
▶ Supreme Prosecutors' Office Cybercrime Investigation Unit
- Phone: 1301 (without area code)
- Website: www.spo.go.kr
▶ National Police Agency Cyber Safety Bureau
- Phone: 182 (without area code)
- Website: cyberbureau.police.go.kr