个人资讯处理方针
生效日期：2026-08-27 | 版本：v1.1
K-Bridge International Co., Ltd. (hereinafter the "Company") establishes and discloses this Privacy Policy in accordance with the Personal Information Protection Act in order to protect the personal information of data subjects and to promptly address related grievances.
1. Personal Information Collected and Methods of Collection
a. Application Stage (Required)
| Item | Purpose |
|---|---|
| Full name in English as shown on passport | Participant verification, accommodation and insurance rosters |
| Nationality, date of birth, gender | Eligibility verification, room assignment |
| Email, mobile phone number | Notices and contact |
| Emergency contact (name, relationship, contact information) | Emergency response |
| Allergy and health information | Meal preparation, safety management |
| Dietary restrictions, religious requests | Meal and accommodation arrangements |
| Swimming ability | Safety management for the yacht excursion |
b. Payment Stage
| Item | Purpose |
|---|---|
| Payment method information | Payment processing |
| Payment history, order number | Contract performance, refund processing |
Detailed payment information, such as credit card numbers, is not directly collected or stored by the Company; it is processed by the payment gateway provider.
c. Waitlist Stage (Optional)
| Item | Purpose |
|---|---|
| Notice of released seats and waitlist status for a full cohort |
A waitlist request is accepted only after separate required consent. The email is not used for marketing.
d. Post-Payment Document Submission Stage
| Item | Category | Purpose |
|---|---|---|
| Passport number, passport copy | Unique identifying information | Accommodation registration, insurance enrollment, identity verification in emergencies |
| Travel insurance policy | General | Confirmation of coverage |
| Detailed health/allergy information | Sensitive information | Safety management |
| Legal guardian's consent form and power of attorney | General | Verification of minor participation |
| Flight arrival information | General | Arrival guidance |
Unique identifying information and sensitive information are collected only with separate consent and are stored in encrypted form.
e. Automatically Collected Items
Access IP address, browser information, access date/time, cookies. The time and IP address of consent are recorded as evidence of contract performance.
2. Purposes of Use
- Receipt of Program applications, contract formation, and performance
- Participant verification and eligibility review
- Room assignment, meal preparation, and class assignment
- Insurance enrollment and accident handling
- Contact and response in the event of an emergency
- Payment processing and refund processing
- Handling of grievances and disputes
- Notice of released seats and waitlist status for a full cohort
- Provision of marketing information (only where separate consent has been given)
3. Retention and Use Period of Personal Information
| Item | Retention Period | Basis |
|---|---|---|
| Records of contracts or withdrawal of offers | 5 years | Act on Consumer Protection in Electronic Commerce |
| Records of payment and supply of goods | 5 years | Act on Consumer Protection in Electronic Commerce |
| Records of consumer complaints or dispute resolution | 3 years | Act on Consumer Protection in Electronic Commerce |
| Consent records (time, IP, document version) | 5 years | Evidence of contract performance |
| Waitlist email and consent record | Until waitlist notices for that cohort end or consent is withdrawn | Waitlist notice |
| Passport number and passport copy | Destroyed without delay after the Program ends | — |
| Health and allergy information | Destroyed without delay after the Program ends | — |
| Legal guardian's consent form | 1 year after the Program ends | Response to safety incidents |
| Photographs/videos (where consented) | Until consent is withdrawn | — |
| Marketing opt-in information | Until consent is withdrawn | — |
4. Provision of Personal Information to Third Parties
The Company does not provide personal information to third parties except in the following cases.
| Recipient | Items Provided | Purpose |
|---|---|---|
| Accommodation facility (Arpina) | Name, date of birth, nationality | Accommodation registration |
| Medical institutions | Name, date of birth, health information | Medical treatment in emergencies |
Information may be provided without consent where necessary to prevent imminent danger to life or physical safety in an emergency.
5. Outsourcing of Personal Information Processing
| Processor | Outsourced Task | Data Location |
|---|---|---|
| Gabia, Inc. | Website hosting, domain | Republic of Korea |
| Supabase Inc. | Database, authentication, sending of notification emails | Tokyo region (Japan) |
| PayPal | Payment processing | United States |
When entering into an outsourcing agreement, the Company sets out in writing matters concerning the secure management of personal information and supervises the processor's compliance with those terms.
6. Cross-Border Transfer of Personal Information
The Company transfers personal information overseas as follows.
| Recipient | Country | Items Transferred | Time and Method of Transfer | Purpose of Use | Retention Period |
|---|---|---|---|---|---|
| PayPal | United States | Name, email, payment information | Transmitted via information network at the time of payment | Payment processing and refunds | As determined by PayPal's privacy policy |
| Supabase Inc. | Japan (data storage) / United States (corporate location) | Application information, contact details, health information | Transmitted via information network during service use | Data storage, authentication, sending emails | Until the outsourcing agreement ends |
Data subjects may refuse the cross-border transfer of their personal information. However, refusing a transfer that is essential to payment processing may limit the ability to apply for the Program.
7. Personal Information of Children Under 14
- Where the Company collects personal information of a child under the age of 14, it obtains the consent of the child's legal guardian.
- The legal guardian may request access to, correction of, deletion of, or suspension of processing of the child's personal information.
- The personal information of children under 14 is collected only to the minimum extent necessary for operating the Program.
8. Rights of Data Subjects and How to Exercise Them
- Data subjects may at any time request access to, correction of, deletion of, or suspension of processing of their personal information.
- Requests may be made by email (kbridge.woojin@gmail.com) or telephone (+82 10-3307-9552), and the Company will act on such requests without delay.
- Requests may also be made through a legal guardian or an authorized representative.
- However, the Company may not comply with a deletion request for information that it is legally required to retain.
9. Destruction of Personal Information
- Personal information is destroyed without delay once the retention period has elapsed or the purpose of processing has been achieved.
- Electronic files are deleted using methods that prevent recovery, and printed materials are shredded or incinerated.
- Passport copies and health information are automatically destroyed after the Program ends without any separate request, and a record of the destruction is retained.
10. Measures to Ensure the Security of Personal Information
- Encrypted storage of unique identifying information and sensitive information
- Minimization of access privileges to personal information processing systems and retention of access logs
- Encryption of data in transit (HTTPS)
- Training for personnel who handle personal information
- Operation of backup and recovery procedures
11. Operation of Cookies
- The Company uses cookies to improve the convenience of using the website.
- Users may refuse the storage of cookies through their browser settings.
- Analytics and marketing cookies, other than essential cookies, are used only with the user's consent.
12. Data Protection Officer
- Name: Woojin Kim
- Title: Team Lead
- Contact: kbridge.woojin@gmail.com / +82 10-3307-9552
- Address: 306-150, 33 Bongnaenaru-ro, Yeongdo-gu, Busan, Republic of Korea
For reports or consultations regarding infringement of personal information, you may contact the following agencies:
- Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
- Supreme Prosecutors' Office Cyber Investigation Division (1301)
- National Police Agency Cyber Investigation Bureau (ecrm.police.go.kr / 182)
13. Changes to This Privacy Policy
Where this Policy is changed, notice will be posted on the website at least 7 days before the effective date.
14. Language
This Policy is provided in Korean and English. In the event of any discrepancy in interpretation between the language versions, the Korean version will prevail.