'%3e%3cg%20id='icon'%20transform='translate(24.347%2024.858)'%3e%3cpath%20d='M72.341,0H0A72.873,72.873,0,0,0,1.47,14.579,71.979,71.979,0,0,0,5.685,28.159a72.347,72.347,0,0,0,6.67,12.288,72.86,72.86,0,0,0,8.834,10.706,72.864,72.864,0,0,0,10.706,8.834,72.349,72.349,0,0,0,12.288,6.67,71.976,71.976,0,0,0,13.579,4.215,72.877,72.877,0,0,0,14.579,1.47V0Z'%20transform='translate(-0.434%20-0.434)'%20fill='%230d0c22'/%3e%3cpath%20d='M72.341,0H0A72.873,72.873,0,0,0,1.47,14.579,71.979,71.979,0,0,0,5.685,28.159a72.347,72.347,0,0,0,6.67,12.288,72.86,72.86,0,0,0,8.834,10.706,72.864,72.864,0,0,0,10.706,8.834,72.349,72.349,0,0,0,12.288,6.67,71.976,71.976,0,0,0,13.579,4.215,72.877,72.877,0,0,0,14.579,1.47V0Z'%20transform='translate(-0.434%2071.907)'%20fill='%230d0c22'/%3e%3cpath%20d='M72.341,72.341H0A72.873,72.873,0,0,1,1.47,57.762,71.946,71.946,0,0,1,12.355,31.895,72.552,72.552,0,0,1,44.183,5.685,71.976,71.976,0,0,1,57.762,1.47,72.876,72.876,0,0,1,72.341,0V72.341Z'%20transform='translate(71.908%2071.907)'%20fill='%230d0c22'/%3e%3c/g%3e%3c/g%3e%3c/svg%3e){kind=icon}
'%3e%3cg%20id='icon'%20transform='translate(24.347%2024.858)'%3e%3cpath%20d='M72.341,0H0A72.873,72.873,0,0,0,1.47,14.579,71.979,71.979,0,0,0,5.685,28.159a72.347,72.347,0,0,0,6.67,12.288,72.86,72.86,0,0,0,8.834,10.706,72.864,72.864,0,0,0,10.706,8.834,72.349,72.349,0,0,0,12.288,6.67,71.976,71.976,0,0,0,13.579,4.215,72.877,72.877,0,0,0,14.579,1.47V0Z'%20transform='translate(-0.434%20-0.434)'%20fill='%23fff'/%3e%3cpath%20d='M72.341,0H0A72.873,72.873,0,0,0,1.47,14.579,71.979,71.979,0,0,0,5.685,28.159a72.347,72.347,0,0,0,6.67,12.288,72.86,72.86,0,0,0,8.834,10.706,72.864,72.864,0,0,0,10.706,8.834,72.349,72.349,0,0,0,12.288,6.67,71.976,71.976,0,0,0,13.579,4.215,72.877,72.877,0,0,0,14.579,1.47V0Z'%20transform='translate(-0.434%2071.907)'%20fill='%23fff'/%3e%3cpath%20d='M72.341,72.341H0A72.873,72.873,0,0,1,1.47,57.762,71.946,71.946,0,0,1,12.355,31.895,72.552,72.552,0,0,1,44.183,5.685,71.976,71.976,0,0,1,57.762,1.47,72.876,72.876,0,0,1,72.341,0V72.341Z'%20transform='translate(71.908%2071.907)'%20fill='%23fff'/%3e%3c/g%3e%3c/g%3e%3c/svg%3e){kind=icon}
Introduction
Lawnect Inc. (“the Company”) processes personal data lawfully and manages it securely in accordance with the Personal Information Protection Act and related legislation, in order to protect the rights of data subjects who register as members (“users”). In accordance with the Personal Information Protection Act, the Company establishes and discloses the following privacy policy to inform users of the procedures and standards for processing personal data and to handle related concerns promptly and smoothly.
The Company provides a link on the first screen of its website so that users can view this privacy policy at any time. If the Company amends this privacy policy, it will announce the change through a notice on the website or through individual notice.
Categories of personal data processed
A Lawnect unified account can be used through a social login such as Google or Apple. The Company collects the information provided by the account the user chooses as their login method, the records generated while operating the unified account, and similar data, and uses them to operate and improve the service.
| Data collected | Purpose | Required |
|---|---|---|
| Name (nickname), email address (login ID) | Identifying members of the unified account and managing their accounts | Required |
| Service usage records (sign-in history, devices used, and IP addresses) | Preventing misuse, and operating and improving the unified account | Required |
The information provided through a social login follows the scope the user has set with that login provider. If Apple’s Hide My Email is used, the Company receives an anonymous relay address created by Apple instead of the real address, and uses that anonymous email address to identify the user.
Personal data that an individual service collects and uses separately in order to provide that service, where the user signs in with the unified account, is governed by the privacy policy of that service.
Purposes of processing personal data
| Purpose | Details |
|---|---|
| Unified account member management (identity verification, personal identification, confirmation of intent to register, viewing and updating member details, handling of complaints, delivery of notices) | Name (nickname), email address |
| Provision of unified account sign-in (handling sign-in to the Company’s and partner services used with the unified account) | Name (nickname), email address |
| Operation and improvement of the unified account (preventing misuse, letting members review and sign out devices, maintaining service stability, responding to incidents) | Service usage records (sign-in history, devices used, and IP addresses) |
Processing and retention periods
| Data | Retention period |
|---|---|
| Name (nickname), email address (login ID), service usage records (sign-in history, devices used, and IP addresses) | Deleted without delay after the member withdraws |
| Anonymized service usage statistics and records of abusive use | Deleted without delay one year after use ends |
| Information that must be retained under statute | Deleted after the period prescribed by the relevant legislation |
Disclosure of personal data to third parties
As a rule, the Company does not disclose users’ personal data externally. The following case is an exception.
- Where the data is provided to a partner service that the user has agreed to use with the unified account, to the extent necessary for signing in to and using that service
- Where required by law, or where an investigative agency makes a request for investigative purposes in accordance with the procedures and methods prescribed by law
Entrustment of personal data processing
To handle personal data smoothly, the Company entrusts personal data processing as set out below.
When entering into an entrustment agreement, the Company specifies in the contract or other document (the cloud service agreement) the prohibition on processing personal data beyond the purpose of the entrusted work, technical and administrative safeguards, restrictions on sub-entrustment, supervision of the processor, and liability including damages, in accordance with Article 26 of the Personal Information Protection Act, and supervises whether the processor handles personal data safely.
If the entrusted work or the processor changes, the Company will disclose the change through this privacy policy without delay.
| Processor | Entrusted work | Retention and use period |
|---|---|---|
| Oracle Cloud (Korea region) | Cloud services for operating personal data processing systems | Until the member withdraws or the entrustment agreement ends |
| Cloudflare, Inc. | Cloud infrastructure for operating the unified account site | Until the member withdraws or the entrustment agreement ends |
Destruction of personal data
When personal data is no longer needed because the retention period has passed or the purpose of processing has been achieved, the Company destroys it without delay.
Where personal data must continue to be retained under other legislation even though the consented retention period has passed or the purpose of processing has been achieved, the data is moved to a separate database or stored in a different location.
Personal data is destroyed by the following procedure and method:
Personal data recorded and stored in electronic files is destroyed so that the records cannot be reproduced, and personal data recorded on paper is shredded or incinerated.
Rights of data subjects and how to exercise them
Users and legal representatives may at any time request access to, correction or deletion of, suspension of processing of, or withdrawal of consent to the personal data of the registered user or of a child under 14 for whom they are responsible.
To do so, contact contact@lawnect.com and the Company will act without delay.
The Company may refuse access to, or correction or deletion of, all or part of the personal data in the following cases.
- Where access is prohibited or restricted by law
- Where there is a risk of harm to another person’s life or body, or of unjustly infringing another person’s property or other interests
Where a user requests correction of an error in personal data, the Company does not use or provide that personal data to third parties until the correction is complete. If incorrect personal data has already been provided to a third party, the Company notifies that third party of the result of the correction without delay.
Personal data deleted or suspended at the request of a user or legal representative is handled as set out in “Processing and retention periods” and is made inaccessible and unusable for any other purpose.
Measures to ensure the security of personal data
In processing users’ personal data, the Company takes technical and administrative measures to ensure security so that personal data is not lost, stolen, leaked, altered, or damaged.
Personal data protection officer
The Company designates the following personal data protection officer to take overall responsibility for personal data processing and to handle users’ enquiries, complaints, and requests for remedy in relation to the processing of personal data.
| Item | Details |
|---|---|
| Name | Jongwoo Bae |
| Contact | contact@lawnect.com |
Users may direct to the personal data protection officer any enquiry, complaint, or request for remedy relating to personal data protection that arises while using the Company’s services. The Company will respond to and handle such enquiries without delay.