Privacy policy

Article 1 (Purpose of processing personal information)

The company processes users' personal information for the following purposes. The processed personal information is not used for purposes other than the following purposes, and if the purpose of use is changed, separate consent from the user is obtained or measures are taken in accordance with the law.

• Reception and management of consultation requests:
  
  • Receiving and responding to user inquiries, and coordinating and providing consultation schedules
  • Provision of marketing and promotional materials and service guidance
  • Notices, notifications, and follow-up management in connection with service provision
• Website usage, statistics and service improvement:
  
  • Analysis of website visits and usage records, website improvement and new service development

Article 2 (Personal Information Items to be Processed)

The company may collect the following personal information in the process of requesting a consultation and using the website.

• Required items: Name, contact information (mobile phone number), email address, consultation request details
  
• Optional items: Company name, job title
• Automatically collected items: IP addresses, cookies, access logs, visit history, and user device information (including collection through Google Analytics)
  ‍

Article 3 (Personal Information Processing and Retention Period)

As a general rule, the company destroys the information without delay after the purpose of collecting and using personal information has been achieved.
However, if it is necessary to preserve it in accordance with relevant laws and regulations, it will be preserved for the period specified by the relevant law. Examples of specific retention periods are as follows:

• Reception and management of consultation requests: 1 year after the end of the consultation or user's request
• Other website usage records: 3 months (or archived after anonymisation for statistical purposes)

※ The above retention period may vary depending on the company's internal policies and revisions to laws, etc., and changes will be notified in advance through this policy.
‍

Article 4 (Provision of Personal Information to Third Parties)

As a general rule, the company does not provide users' personal information to third parties. However, exceptions are made in the following cases.

• If the user has agreed in advance
• When provision is required by law
• When outsourced to a partner company to provide services (see Section 5)

※ In the case of provision by a third party, the recipient, purpose of provision, item of provision, period of retention and use, etc. are specified in advance and consent is sought.

‍

Article 5 (Outsourcing of personal information processing)

In order to provide smooth services, companies can outsource some tasks such as receiving consultation requests, sending emails, and operating CRM systems to external specialized companies.

In the case of entrustment, the consignee is required to comply with laws and regulations relating to the protection of personal information through a contract of entrustment, use or provision to a third party for other purposes of outsourced work is prohibited, and administrative and technical measures are put in place to ensure safety.

Details of outsourced work and trustee information are separately announced or procedures are in place to obtain consent.

In order to provide smooth services, the company entrusts the processing of personal information as follows.

• Trustee: HubSpot, Inc.
  
  • Details of outsourced work: Management of consultation application data and sending customer response emails
  • Period of retention and use: Until the purpose of entrustment is achieved

• Trustee: Zapier, Inc.
  
  • Outsourced work content: Automatic transmission of form input information and workflow automation
  • Retention and use period: Discard immediately when the purpose of automated processing is achieved

• Trustee: Google LLC
  
  • Outsourced work content: Website traffic analysis (Google Analytics)
  • Period of retention and use: Until statistical purposes are achieved or user cookies are deleted
    ‍

Article 6 (Rights and Obligations of Information Subjects and How to Exercise Them)

Users can exercise the following rights at any time.

• Request to view personal information
• Request correction if there is an error, etc.
• Request for deletion
• Request to stop processing
• Request for withdrawal of consent

The exercise of rights can be requested from the company in writing, e-mail, fax, etc., and the company will act immediately upon receipt of the request, but some restrictions may be imposed by law. The personal information of children under the age of 14 can be exercised on their behalf by a legal representative.

‍

Article 7 (Procedure and Method for Destruction of Personal Information)

Users can exercise the following rights at any time.

• Destruction procedure:
  
  • The company selects personal information that has passed the retention period or whose processing purpose has been achieved and destroys it according to internal standards.
  • Even if personal information becomes unnecessary due to a user's request or termination of a contract, it will be destroyed without delay.
• How to destroy:
  
  • Personal information in the form of an electronic file is permanently deleted or destroyed by overwriting so that it cannot be recovered.
  • Personal information stored in paper documents is destroyed through a shredder or incineration.

Article 9 (Use of cookies, etc., and how to refuse them)

The company uses cookies to provide customized services and improve site performance. Non-essential cookies are activated only after the user's consent, and users can change cookie settings at any time.

‍Purpose of use

• Essential cookies: maintain basic site functionality
• Statistical cookies: traffic analysis through Google Analytics (GA4)
• Marketing cookies: HubSpot CRM integration, email tracking

• On the first visit to the website, a consent banner for the use of cookies is displayed, and users can choose between “Accept all,” “Accept only what is essential,” and “Reject.”
• Users can limit or delete the storage of cookies through their browser settings.
  • Chrome: Settings > Privacy & security > Cookies and other site data
  • Edge: Settings > Cookies and site permissions
  • Safari: Settings > Privacy > Block cookies
• If cookies are rejected, some functions may be restricted.

• If the user does not agree to the use of cookies, Google Analytics and HubSpot tracking will be disabled.

‍

Article 10 (Remedies for Infringement of Rights)

Users can report to the following organizations for relief due to personal information infringement.

• Privacy Infringement Report Center Korea Internet & Security Agency (tel. 118, https://www.kisa.or.kr)
• Personal Information Dispute Mediation Committee (https://www.kopico.go.kr)
• Grand Prosecutor's Office Internet Crime Investigation Center, etc.
  ‍

Article 11 (Personal Information Protection Officer)

The company has designated the following person responsible for processing personal information, and responds promptly to users' inquiries and complaints related to the protection of personal information.

• Personal Information Manager: Hong Soo Hyun
• Affiliated Department/Position: Strategy Division/General Manager
• Contact: 010-3961-8090/hello@flatgrid.io
  ‍

Article 12 (Changes to the Privacy Policy)

This policy will be applied from [Effective Date 2025.11.01]. If content is added, deleted, or modified due to changes in laws or policies, users will be notified 7 days before the effective date of the change via website notice or email.

‍