Privacy Policy
Baro Studio Co., Ltd. (hereinafter the "Company") complies with the Personal Information Protection Act and other applicable laws and regulations, and establishes and publishes this Privacy Policy in order to handle users' personal information safely.
Article 1 (Purposes of Processing Personal Information)
The Company processes personal information for the following purposes. If the purposes change, the Company will take the necessary measures, such as obtaining separate consent, in accordance with the Personal Information Protection Act.
1. Receiving and responding to inquiries: verifying the identity of the inquirer, handling the content of the inquiry, and replying
Article 2 (Personal Information Items Processed)
The Company processes the following items of personal information.
1. Required items: name, contact information (email address or phone number), content of inquiry
2. Items collected automatically: IP address, access date and time, cookies, service usage records
Article 3 (Processing and Retention Period of Personal Information)
1. The Company processes and retains personal information within the retention and use period prescribed by law or the retention and use period to which the data subject consented when the personal information was collected.
2. The processing and retention period for each type of personal information is as follows.
- Inquiry receipt and handling records: 1 year after the inquiry is resolved
- Access log records: 3 months (Protection of Communications Secrets Act)
3. Personal information whose retention period has expired or whose processing purpose has been achieved will be destroyed without delay.
Article 4 (Provision of Personal Information to Third Parties)
The Company processes users' personal information only within the scope stated in Article 1, and does not provide personal information to third parties, except where the user has consented or where otherwise permitted under the Personal Information Protection Act, such as under special provisions of law. The Company currently does not provide personal information to any third party.
Article 5 (Entrustment of Personal Information Processing)
The Company does not currently entrust the processing of personal information to any external party. If any entrustment arises in the future, the Company will disclose the entrusted party and the entrusted tasks in this Privacy Policy.
Article 6 (Procedures and Methods for Destroying Personal Information)
1. When personal information becomes unnecessary, such as when its retention period has expired or its processing purpose has been achieved, the Company will destroy it without delay.
2. If personal information must continue to be retained under applicable laws, the Company will retain it by moving it to a separate database (DB) or storing it in a separate location.
3. Methods of destruction
- Information in electronic file form: permanently deleted using a technical method that makes recovery impossible
- Paper documents: shredded or incinerated
Article 7 (Rights and Obligations of Data Subjects and How to Exercise Them)
1. Users may exercise the following rights regarding personal information protection against the Company at any time.
- Request access to personal information
- Request correction of errors, if any
- Request deletion
- Request suspension of processing
- Withdraw consent
2. These rights may be exercised in writing, by email, or by other means, and the Company will take action without delay.
3. These rights may also be exercised through a representative, such as a legal guardian of the data subject or a person authorized by the data subject.
Article 8 (Measures to Ensure the Security of Personal Information)
The Company takes the following measures to ensure the security of personal information.
1. Administrative measures: establishment and implementation of an internal management plan, minimization of personnel handling personal information
2. Technical measures: management of access authority to personal information processing systems, installation of access control systems, installation of security programs
3. Physical measures: access control for computer rooms, document storage rooms, and similar facilities
Article 9 (Installation, Operation, and Refusal of Automatic Data Collection Tools such as Cookies)
1. The Company may use cookies, which store usage information and retrieve it from time to time, in order to provide users with individualized services and to analyze usage statistics.
2. Users may allow or refuse the storage of cookies through their web browser settings. However, if cookies are refused, some services may be difficult to use.
Article 10 (Chief Privacy Officer)
The Company has designated a Chief Privacy Officer as set out below, who is responsible for overall management of personal information processing and for handling user complaints and providing remedies for damages related to the processing of personal information.
- Name: Junhyung Kim
- Title: Chief Executive Officer (CEO)
- Email: jh@baro-studio.com
Users may direct all inquiries, complaints, and requests for remedies relating to personal information protection that arise while using the Company's services to the email address above, and the Company will respond and take action without delay.
If you need to report or seek advice regarding a personal information infringement, you may also contact the following organizations through their websites.
- Personal Information Infringement Report Center: privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: kopico.go.kr
- Supreme Prosecutors' Office: spo.go.kr
- National Police Agency Cyber Bureau: ecrm.police.go.kr
Article 11 (Changes to this Privacy Policy)
This Privacy Policy is effective as of October 27, 2026.
[Required] Consent to the Collection and Use of Personal Information
Baro Studio Co., Ltd. collects and uses personal information as described below in order to receive and respond to inquiries.
1. Purpose of collection and use: Receiving and responding to inquiries
2. Items collected: Name, contact information (email address or phone number), content of inquiry
3. Retention and use period: 1 year after the inquiry is resolved
4. Right to refuse consent and consequences of refusal: You have the right to refuse consent to the collection and use of your personal information. However, if you refuse consent, we will be unable to receive and respond to your inquiry.
For more details, please refer to our Privacy Policy.
