Sowonweb ("the Company") complies with personal data protection regulations under applicable laws, including the Act on Promotion of Information and Communications Network Utilization and Information Protection and the Personal Information Protection Act, and has established this Privacy Policy to best protect users' rights and interests.

1. Purposes of Collection and Use of Personal Information

The Company processes personal information for the following purposes. Personal information is not used for any purpose other than those listed below, and if the purpose of use changes, necessary measures such as obtaining separate consent will be taken in accordance with Article 18 of the Personal Information Protection Act.

Website membership and user management: confirming registration intent, identification/authentication for services, maintaining user accounts, preventing fraudulent use, notices/notifications, and customer service
Website design, development, and consulting services: providing website/e-commerce planning, design, development, and maintenance services, delivering contracts, invoices, and project deliverables, providing custom technical consulting, and processing payments/settlements
Complaint and inquiry handling: verifying complainant identity, reviewing inquiries, communications for fact-finding, and notifying resolution results
Marketing and service improvement: developing new services, providing event and promotional information with user consent, analyzing access frequency, and compiling service usage statistics

2. Items and Methods of Personal Information Collected

The Company collects the following personal information for service inquiries, consultations, project requests, and quote estimates.

Required items: name, email, mobile phone number
Optional items: company name, job title, website URL, project budget/timeline, areas of interest
Automatically collected during service use: IP address, cookies, service usage records, visit history, and browser/device metadata
Collection methods: website forms (contact forms, consultation requests, quote forms), email, phone consultations, and direct client communications

3. Retention and Use Period of Personal Information

The Company processes and retains personal information within the retention period prescribed by law or agreed upon by the information subject at the time of collection.

Website consultations and client management: until completion of consultation or contract termination (or until resolution of outstanding contractual obligations)
1) If an investigation or inquiry due to violation of relevant laws is ongoing, until the conclusion of such investigation
2) If any claims/debt obligations remain from website development contracts, until the completion of settlement
Where retention is required by statutory regulations, the Company retains information for the following legal periods:
- Records on contracts or subscription cancellation: 5 years (Act on Consumer Protection in Electronic Commerce)
- Records on payment and supply of services: 5 years (Act on Consumer Protection in Electronic Commerce)
- Records on consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
- Records on website visits and communications confirmation data: 3 months (Protection of Communications Secrets Act)

4. Procedures and Methods for Destroying Personal Information

The Company destroys personal information without delay when it becomes unnecessary due to the expiration of the retention period or the fulfillment of the processing purpose.

Procedure: Personal information subject to destruction is selected and destroyed with the approval of the Privacy Officer. Once the purpose is fulfilled, it is moved to an isolated database and destroyed after the designated statutory period.
Method: Personal information stored in electronic format is permanently deleted using technical methods that prevent recovery (such as low-level formatting); physical documents are shredded or incinerated.

5. Provision of Personal Information to Third Parties

The Company does not provide users' personal information to external third parties in principle, except in the following cases:

When the user has given prior consent
When required by statutory laws or requested by law enforcement agencies in accordance with legal procedures

6. Rights of Users and Legal Representatives and How to Exercise Them

Users may exercise the following rights as personal information subjects at any time:

1) Request access to personal information
2) Request correction of errors
3) Request deletion
4) Request suspension of processing
Rights may be exercised in writing, by phone, or email, and the Company will process requests without delay.
If a user requests correction of personal information, the Company will not use or provide such information until the correction is finalized.

7. Installation, Operation, and Refusal of Automatic Data Collection Devices

The Company uses 'cookies' that store and retrieve usage information to provide customized and optimal user experiences.

Purpose of cookies: To analyze website traffic, session activity, popular search terms, and secure connections to deliver optimized services.
Installation, operation, and refusal: Users can configure browser settings to allow all cookies, require confirmation upon cookie storage, or refuse all cookies.
- Configuration: Browser Settings > Privacy & Security > Cookies and other site data
Note: Refusing cookies may cause difficulties in using certain personalized features.

8. Measures to Secure Personal Information

The Company implements technical, administrative, and physical measures to ensure the security of personal information:

Administrative measures: Internal management plans, regular staff security training
Technical measures: Access control management for database systems, SSL/TLS encryption, firewall and security protection software
Physical measures: Restricted physical access to server locations and archive rooms

9. Privacy Officer

The Company has designated the following Privacy Officer responsible for personal data management and inquiry resolution:

Name: Sungho Jung
Position: CEO
Phone: +82-10-4224-3658
Email: sowonweb@gmail.com
※ You will be connected to the department responsible for privacy protection.

10. Changes to the Privacy Policy

This Privacy Policy takes effect on March 31, 2026. Any additions, deletions, or amendments will be notified through public notices at least 7 days before enforcement.

This policy is effective from 2026-03-31.