Optiscale (hereinafter the “Company”) complies with the Personal Information Protection Act and related laws and regulations, and gives the highest priority to protecting the rights and interests of data subjects. This Policy sets out matters concerning the processing of personal information on the website operated by the Company (optiscale.net) and related services.
1. Items Collected and Methods of Collection
The Company collects the following items only when the data subject directly enters them and gives consent.
- Consultation / lead form: name, company name, job title (optional), email, phone number (optional), workload/scale/timeline of interest, message
- Seminar registration: name, company name, job title (optional), email
- Automatic collection: access IP, browser type, date and time of visit, cookies (upon consent to analytics)
2. Purpose of Use
- Responding to inquiries, sending quotes and proposals, seminar notifications
- Sending content nurture sequences (email) (upon consent to receive)
- Anonymous statistical analysis to improve services (upon consent to analytics cookies)
- Fulfilling obligations under applicable law
3. Retention and Use Period
- Consultation / lead information: 3 years from the date of collection (sales history management)
- Seminar registration information: 1 year after the event ends
- Access logs: 3 months (Protection of Communications Secrets Act)
- Destroyed immediately upon the data subject’s request
4. Provision to Third Parties
The Company does not provide personal information to third parties without the data subject’s consent.
5. Outsourcing of Processing
The Company outsources the processing of personal information as follows for the operation of its services.
- Cloud infrastructure (AWS Seoul): data storage and transmission. No cross-border transfer of personal information occurs.
- Email delivery (Amazon SES): sending consultation responses and seminar notifications.
- Analytics tools (Google Analytics 4): anonymous statistical analysis. IP addresses are anonymized.
If an outsourced provider changes, we will give prior notice through this Policy.
6. Rights of the Data Subject
The data subject may exercise the following rights at any time.
- Request to access, correct, delete, or suspend the processing of personal information
- Withdrawal of consent (including opting out of marketing communications)
- Exercise of rights through a legal representative (information on children under 14 is not collected)
Requests submitted to [email protected] will be answered without delay.
7. Measures to Ensure Security
- Access control (separation of administrator privileges, 2FA)
- Encryption in transit (TLS 1.2 or higher)
- Encryption at rest (KMS-based)
- Retention of access records for 90 days or more
8. Cookie Policy
The Company distinguishes cookie consent into four categories: essential, functional, analytics, and advertising. If you do not consent to the analytics category, the GA4 and Plausible scripts will not be loaded. You can change your cookie settings at any time via the “Cookie Settings” button at the bottom of the page.
9. Personal Information Protection Officer
- Officer: Optiscale Personal Information Protection Officer
- Contact: [email protected]
Reports and consultations regarding infringement of personal information may also be submitted to the Korea Internet & Security Agency (KISA) Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118 without an area code).
10. Changes to the Policy
If this Policy is amended, we will give prior notice through a site announcement 7 days before the change. However, if there is a material change affecting the rights of the data subject, notice will be given 30 days in advance.