PiFl Labs Co., Ltd. ("Company", "we", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and disclose information when you use our website at pifl-labs.com.
1. Information We Collect
We collect the following categories of personal information:
| Category | Items | Collection Method |
|---|---|---|
| Email Inquiries | Email address, name (optional), inquiry content | Direct email submission |
| Website Access | IP address, browser type, access timestamp | Automatic collection |
2. Purpose of Processing
- Inquiry handling: Receiving customer inquiries via email, contacting for verification, and notifying processing results
- Recruitment inquiries: Receiving and responding to employment-related inquiries
- Website operation: Analyzing access statistics and improving services
3. Retention Period
- Email inquiry records: 3 years after inquiry resolution (Korean Act on Consumer Protection in Electronic Commerce)
- Website access logs: 3 months (Korean Protection of Communications Secrets Act)
4. Disclosure to Third Parties
We do not sell, trade, or transfer your personal information to third parties except as required by law or with your explicit consent in accordance with Articles 17 and 18 of the Korean Personal Information Protection Act.
5. Processing Entrustment
For service operation, we entrust personal data processing to the following providers:
| Processor | Purpose | Retention |
|---|---|---|
| Google LLC (Firebase) | Website hosting and infrastructure | Until contract termination |
| Notion Labs, Inc. | Internal data management | Until contract termination |
6. Data Destruction
- Procedure: Unnecessary personal data is destroyed after approval by the Data Protection Officer.
- Method: Electronic files are permanently deleted using non-recoverable methods. Paper documents are shredded or incinerated.
7. Your Rights
You have the following rights regarding your personal data:
- Right to be informed about the processing of your personal data
- Right to consent to and determine the scope of processing
- Right to access and request information about your personal data
- Right to request correction, deletion, suspension, or destruction of your data
- Right to seek redress for damages caused by processing
You may exercise these rights via written request or email, and we will respond without delay.
8. Security Measures
- Access control and permission management
- SSL/TLS encryption for data in transit
- Security headers (CSP, HSTS, X-Frame-Options, etc.)
- Access logging and retention
9. Cookies
We currently do not use cookies or other automatic personal data collection devices. If we begin to do so in the future, this policy will be updated accordingly.
10. International Data Transfers
| Recipient | Country | Purpose | Items |
|---|---|---|---|
| Google LLC | United States | Web hosting | Access logs |
| Notion Labs, Inc. | United States | Internal data management | Inquiry content |
11. Data Protection Officer
12. GDPR (European Economic Area)
If you are located in the EEA, you have additional rights under the General Data Protection Regulation, including the right to access, rectify, erase, restrict processing, data portability, and object to processing. To exercise these rights, contact us at .
13. Remedies
Korean residents may seek remedies through the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency, and other relevant authorities:
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- KISA Privacy Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
- National Police Agency: 182 (ecrm.cyber.go.kr)
14. Changes to this Policy
This Privacy Policy is effective as of March 10, 2026. Any changes will be announced on our website.