Privacy Policy and Consent for the Collection and Use of Personal Information

AESK Co., Ltd. (“AESK”) values the privacy of its users and provides the following information regarding the purpose, collection, and retention of personal data. AESK is committed to securely processing and protecting personal information in compliance with relevant laws and regulations.

1. Purpose of Personal Information Collection and Use

AESK collects and uses personal information for the following purposes:

Service Provision: Matching users with experts, booking consultations, processing payments and billing, and other necessary operations.
Membership Management: Account registration, identity verification, service usage history management, handling complaints, and responding to inquiries.
Service Improvement: Analyzing service usage data, providing personalized services, and enhancing customer satisfaction.
Legal Compliance: Fulfilling obligations and maintaining records as required by relevant laws.

2. Collected Personal Information

When Signing Up and Using the Service

Required Information: Name, email address, mobile phone number, date of birth, password.
Optional Information: Occupation, areas of interest, address.

For Payments

Payment Information: Credit card provider, card number, bank account details, etc.

Automatically Collected Information During Service Use

IP address, cookies, service usage history, access logs.

3. Retention and Usage Period of Personal Information

AESK retains personal information until the purpose of collection is achieved or for the period required by law.

Upon Account Deletion: Personal information is immediately destroyed unless retention is required by law.
Retention Periods as per Relevant Laws:
- Records of contracts, cancellations, payments, and supply of goods: 5 years (E-Commerce Act).
- Records of consumer complaints or dispute resolution: 3 years (E-Commerce Act).
- Access logs and records: 3 months (Communications Privacy Protection Act).

4. Provision of Personal Information to Third Parties

AESK does not provide personal information to third parties without the user’s prior consent, except in the following cases:

When the user has given explicit consent.
When required by law.

5. Delegation of Personal Information Processing

AESK may outsource certain personal information processing tasks to external professional service providers to facilitate service delivery and system operations. Currently, AESK has delegated personal information processing as follows:

Entrusted Company: Supabase Inc.
Details of Delegated Work: Data storage and management (operation of a PostgreSQL-based database)

All outsourced partners are required to handle personal data securely.

6. Personal Information Destruction Procedures and Methods

AESK promptly destroys personal information when the retention period expires or the purpose of use is achieved.

Electronic Data: Deleted using irreversible methods to prevent recovery.
Paper Documents: Shredded or incinerated.

7. User Rights and How to Exercise Them

Users may exercise the following rights regarding their personal information:

Request to view, correct, delete, or restrict processing of their personal data.
Withdraw consent for data collection, use, or sharing.

Requests can be made via written notice, email, or phone through the AESK Customer Support, and AESK will respond promptly.

8. Measures to Protect Personal Information

AESK takes the following security measures to protect personal information:

Technical Measures: Data encryption, antivirus programs, firewall installation.
Administrative Measures: Restricted access to personal data, regular employee training.

9. Personal Information Protection Officer & Inquiries

AESK is responsible for handling personal information and has appointed a Data Protection Officer to address related inquiries.

Data Protection Officer: Sangyoon Bae
Contact: ceo@aesk.co.kr / +82-10-8282-0223
Address: Suite 610, Gyeonggi Startup Bridge, 52 Geumto-ro, Seongnam, Gyeonggi-do, South Korea
Company Name: AESK Co., Ltd.

This policy is effective as of December 24, 2024.