Effective: July 4, 2026
Won. Studio Korea (the “Company”) complies with applicable laws including the Personal Information Protection Act and adopts the following privacy policy to protect users’ personal information.
1. Categories of personal data collected and methods of collection
The Company collects the following personal data to provide its services.
| Category | Data collected | Method |
|---|---|---|
| Inquiries | Name, email, company name, message content | When you submit the website inquiry form |
| Newsletter / marketing | Email address | When you voluntarily subscribe |
| Brand partner / distribution contracts | Contact name, email, phone number, company / brand information, documents required to perform the contract | During partnership application and contracting |
| Service usage | IP address, browser information (User-Agent), cookies / session, page usage history | Automatically collected during service use |
2. Purpose of collection and use
- Responding to inquiries and consulting on projects
- Providing brand distribution, crowdfunding, IT services and performing contracts
- Sending news and announcements (only to users who have consented)
- Improving service quality and analyzing usage statistics
- Preventing fraud and ensuring service stability
- Complying with legal obligations and handling disputes
3. Retention and use period
As a rule, personal data is destroyed without delay once the purpose of collection and use has been achieved. However, the following data is retained for the periods required by applicable law.
| Records retained | Legal basis | Retention period |
|---|---|---|
| Records on contracts or withdrawal of subscription | Act on Consumer Protection in Electronic Commerce | 5 years |
| Records on payment and supply of goods or services | Act on Consumer Protection in Electronic Commerce | 5 years |
| Records on consumer complaints or dispute resolution | Act on Consumer Protection in Electronic Commerce | 3 years |
| Access (log) records | Protection of Communications Secrets Act | 3 months |
4. Provision to third parties
The Company does not provide users’ personal data to third parties beyond the scope stated in this policy, except where the user consents or where required by law. In the course of performing brand distribution or crowdfunding contracts, the minimum information necessary may be shared with overseas partners and platforms (Wadiz, Makuake, Campfire, etc.).
5. Outsourcing of data processing
The Company outsources personal data processing to the following providers to operate the service smoothly.
| Processor | Outsourced task |
|---|---|
| Amazon Web Services, Vercel, Neon | Cloud infrastructure and data storage for service operations |
| Payment gateway providers (when applicable) | Credit card and other payment processing |
| Resend, SendGrid, etc. | Sending transactional and marketing emails |
| Google Analytics | Usage statistics analytics |
6. Overseas transfer of personal data
For some infrastructure operations, information entered by users may be processed on servers located outside Korea.
- Recipients: Amazon Web Services, Vercel, Google, etc.
- Countries: United States, etc.
- Items transferred: Service usage logs, information needed for email delivery
- Purpose: Cloud operations, email delivery, usage statistics analytics
7. Rights of users and legal representatives
Users may at any time request access to, correction of, deletion of, or suspension of processing of their personal data. The Company will act on such requests without delay when submitted via the contact below.
8. Procedure and method of destroying personal data
Personal data whose retention period has expired or whose purpose has been achieved is destroyed without delay. Electronic files are deleted using irrecoverable methods, and printed materials are shredded or incinerated.
9. Measures to ensure security of personal data
- Encrypted storage of sensitive information
- Access controls and least-privilege operation
- Security measures to prevent external intrusion
10. Use of cookies
The Company uses sessions and cookies to provide the service and analyze usage statistics. Users may refuse to store cookies through their browser settings, in which case some features may be limited.
11. Data protection officer and contact
- Data protection officer: Ko Gye
- Contact email: info@wonstudio.net
For other reports or consultations regarding personal data infringement, users may contact the Korea Internet & Security Agency’s Privacy Infringement Report Center (privacy.kisa.or.kr, 118).
12. Changes to this policy
This policy may be amended in accordance with changes in law or service, and any changes will be announced through notices within the service.