Policy

Privacy Policy (Proposed Revision)

A proposed version aligned with the current Personal Information Protection Act framework — to replace the existing policy after legal review.

Privacy Policy · Proposal

Privacy Policy (Proposed Revision)

Proposed Revision

The following is a newly drafted proposal aligned with Article 30 of the current Personal Information Protection Act and the Privacy Policy Drafting Guidelines (2025 and 2026 revisions). It may replace the official policy after legal review and the appointment of a Privacy Officer. The official policy is available Privacy Policy page.

SquareTech Co., Ltd. (the “Company”) establishes and discloses the following Privacy Policy pursuant to Article 30 of the Personal Information Protection Act in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.

Article 1 Purposes of Processing Personal Information

The Company processes personal information for the following purposes. Personal information processed is not used for any purpose other than those listed below, and if the purpose of use changes, the Company takes the necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.

  • Website inquiries and responses: receiving product, quotation, IR, recruitment, and media inquiries and responding with the outcome
  • Site visitor registration: access control, safety, and security
  • Recruitment: receiving applications, conducting the selection process, notifying results
  • Ethics reporting: receiving, investigating, and responding to reports

Article 2 Items of Personal Information Processed and Retention and Use Period

CategoryInformation CollectedRetention Period
Contact UsName, company name, email, contact details, inquiry details, attachments1 year after the inquiry is resolved
Visitor RegistrationName, affiliation, contact details, date, time and purpose of visit, host1 year from the date of visit
Job ApplicationsName, contact details, email, information stated in the resume and cover letterDestroyed within 180 days after the selection process ends (immediately upon request for return or deletion)
Ethics ReportingName and contact (optional), report details3 years after case closure
Automatic CollectionIP address, browser type, access date and time, cookies3 months (access logs: 1 year as required by applicable law)

Article 3 Provision of Personal Information to Third Parties

The Company processes the personal information of data subjects only within the scope of the purposes set out in Article 1, and provides it to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or under special provisions of law. No personal information is currently provided to third parties.

Article 4 Outsourcing of Personal Information Processing

ProcessorOutsourced Task
Amazon Web Services (Seoul Region, ap-northeast-2)Static file hosting for the website (S3 · CloudFront)

The website is hosted in Korea (Seoul Region), and personal information collected through inquiries, job applications, and similar channels is not transferred abroad.

Article 5 Destruction of Personal Information

The Company destroys personal information without delay once it is no longer needed, such as when the retention period has expired or the purpose of processing has been achieved. Electronic files are permanently deleted by irrecoverable means, and paper documents are shredded or incinerated.

Article 6 Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them

Data subjects may at any time exercise their rights against the Company, including requesting access to, correction of, deletion of, or suspension of processing of their personal information, and withdrawing consent. Such rights may be exercised in writing, by email, or by fax, and the Company will act on them without delay.

Article 7 Measures to Ensure the Security of Personal Information

  • Administrative measures: establishing and implementing an internal management plan, minimizing and training personal information handlers
  • Technical measures: access rights management, access control, encryption in transit (HTTPS), retention of access logs and prevention of their forgery or alteration
  • Physical measures: access control for server rooms and records storage

Article 8 Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

The Company's website may use cookies for user convenience. Users may refuse the storage of cookies in their browser settings, in which case some features may be limited. The Company does not use third-party cookies for advertising or the collection of behavioral information.

Article 9 Privacy Officer

  • Privacy Officer: [name and title of the Privacy Officer to be confirmed]
  • Contact: privacy@squaretech.co.kr (to be confirmed) · 031-376-5400

Article 10 Remedies for Infringement of Rights

  • Personal Information Dispute Mediation Committee: 1833-6972 (no area code) / www.kopico.go.kr
  • Personal Information Infringement Report Center: 118 (no area code) / privacy.kisa.or.kr
  • Supreme Prosecutors' Office Cyber Investigation Division: 1301 (no area code) / www.spo.go.kr
  • Korean National Police Agency Cyber Bureau: 182 (no area code) / ecrm.police.go.kr

Article 11 Changes to the Privacy Policy

This Privacy Policy applies from November 1, 2026 (scheduled to take effect · to be confirmed). Any changes will be announced on the website at least 7 days before they take effect.