Policies

Data Protection

Last updated: 2025-03-15

1. Data Controller

Uterebroon, located at 132-11, Yonghyeon 1(il)-dong, Nam-gu, Incheon, Korea, is the data controller for personal information collected through uterebroon.digital and our training programs. Contact: [email protected].

2. Categories of Data Collected

We may collect: identity and contact data (name, email, phone, company); enrollment and communication records; payment-related metadata processed by third-party processors (we do not store full card numbers); technical data (IP address, browser type, device identifiers); cookie and analytics data as described in our Cookie Preferences page; and learner submissions you voluntarily provide for mentor review.

3. Purposes of Processing

We process data to: deliver and administer training programs; respond to inquiries; send operational notices about cohorts and schedules; improve website performance and content; comply with legal obligations; and, with your consent where required, send marketing communications about Uterebroon programs.

4. Legal Basis

Under the Personal Information Protection Act (PIPA) of Korea and applicable guidelines, we rely on: performance of a contract (enrollment); legitimate interests (security, service improvement) balanced against your rights; legal obligation; and consent for optional analytics and marketing where required.

5. Retention

Contact form submissions are retained for up to twenty-four months unless a business relationship continues. Enrollment records are retained for seven years where required for accounting and dispute resolution. Analytics data is aggregated or deleted according to provider settings, typically within fourteen months. You may request earlier deletion subject to legal retention requirements.

6. Third-Party Sharing

We share data with: payment processors for tuition transactions; email and scheduling providers for cohort communications; cloud hosting for website and learning materials; and analytics providers only when you opt in via cookie preferences. We do not sell personal information. Processors are bound by contractual confidentiality and security obligations.

7. International Transfers

Some subprocessors may process data outside Korea (e.g., United States or EU). Where transfers occur, we implement appropriate safeguards such as standard contractual clauses or provider certifications consistent with PIPA requirements and applicable cross-border transfer rules.

8. Security Measures

We apply access controls, encrypted transport (HTTPS), and staff training on data handling. No method of transmission is fully secure; we encourage strong passwords and prompt reporting of suspected unauthorized access to [email protected].

9. Your Rights

Under PIPA and related Korean consumer rules, you may request access, correction, deletion, suspension of processing, or withdrawal of consent where applicable. Submit requests to [email protected] with identity verification. We respond within the timeframe required by law, typically within ten days for access requests.

10. Children's Privacy

Our services are directed at adults and older teens in structured programs. We do not knowingly collect data from children under fourteen without parental consent. If you believe we have collected such data, contact us for prompt deletion.

11. Policy Changes

We may update this Data Protection notice. Material changes will be posted on this page with an updated date. Significant changes affecting enrolled learners will be notified by email when appropriate.

12. Contact and Complaints

Data protection inquiries: [email protected]. Address: 132-11, Yonghyeon 1(il)-dong, Nam-gu, Incheon, Korea. You may also contact the Personal Information Protection Commission (PIPC) or other competent authority if you believe your rights have been violated.

Contact: [email protected]