Privacy Policy

1. Personal Information Collected

The Company collects the following personal information for the purposes of concluding service contracts, processing payments, and providing customer support.

• Required: name (contact person), email address, phone number, payment information (payment method and amount)
• Optional: company (organization) name, consent to receive marketing communications

2. Purposes of Collection and Use

The personal information collected is used for the following purposes.

• Performance of StayWeb web build project service contracts and identity verification
• Payment processing, service provision, and receipt delivery
• Customer support and complaint handling
• (Only with consent) Notification of marketing information such as new services and events

3. Retention and Use Period

In principle, personal information is destroyed without delay once the purpose of its collection and use has been achieved. However, where retention is required under applicable laws (such as the Act on Consumer Protection in Electronic Commerce), the information is retained for the following periods.

• Records concerning contracts or withdrawal of offers: 5 years
• Records concerning payments and the supply of goods or services: 5 years
• Records concerning consumer complaints or dispute resolution: 3 years

4. Provision to Third Parties

The Company processes personal information only within the scope specified in Article 2 and, in principle, does not provide it to external parties. However, for payment processing, it is provided as follows.

• Recipient: payment gateway provider (PG company)
• Purpose of provision: payment processing and confirmation of payment results
• Items provided: name, email address, phone number, payment information
• Retention and use period: retention period required under applicable laws

5. Outsourcing of Personal Information Processing

The Company outsources personal information processing tasks as follows to ensure smooth service delivery, and when concluding outsourcing contracts, it manages and supervises the contractors so that personal information is processed safely in accordance with the Personal Information Protection Act.

• Hosting service provider: system management for service operation
• SMS service provider: delivery of informational and notification messages

6. Rights and Obligations of Data Subjects and How to Exercise Them

Data subjects may exercise the following rights against the Company at any time.

• Request access to personal information
• Request correction of errors
• Request deletion
• Request suspension of processing

These rights may be exercised in writing, by email, or by other means, and the Company will take action without delay. Data subjects also have the right to refuse consent to the collection and use of their personal information; however, refusing consent to the required items may restrict the use of services such as payment.

7. Destruction Procedures and Methods

When personal information becomes unnecessary, such as upon expiration of the retention period or achievement of the processing purpose, the Company destroys it without delay.

• Destruction procedure: personal information for which grounds for destruction have arisen is identified and destroyed after approval in accordance with internal policies.
• Destruction method: information in electronic file format is deleted using technical methods that prevent recovery, and paper documents are shredded or incinerated.

8. Privacy Officer

The Company designates a privacy officer as follows to oversee personal information processing and to handle complaints and provide remedies for data subjects in connection with the processing of personal information.

• Privacy Officer: Jihoon Lee
• Email: stayweb@naver.com

Data subjects may direct inquiries regarding privacy protection, complaint handling, and remedies to the contact above, and the Company will provide prompt and sufficient responses.