LEGAL / PRIVACY

Privacy Policy

Effective Date: December 23, 2025 ยท Last Updated: December 23, 2025

This Privacy Policy explains how Abstor Inc. collects, uses, retains, and protects personal information. If you have any questions, please contact us using the details in Section 9.

1. Purpose of Collection and Use of Personal Information

We process personal information for the following purposes:

  • Receiving and responding to inquiries
  • Improving service quality through usage statistics and analysis
  • Security and legal compliance, including access control, log management, and incident response

2. Items of Personal Information Collected

This website can be used without providing personal information. Personal information is collected on a limited basis when a user chooses to submit an inquiry.

Required for inquiries
Name, email address, and message
Optional for inquiries
Organization or affiliation
Automatically collected
IP address, browser or device information such as User-Agent, and submission timestamp

Providing personal information is voluntary. However, we may be unable to respond to an inquiry if the required information is not provided. We collect only the information necessary for the stated purposes.

3. Methods of Collection

  • Information voluntarily submitted through the website inquiry form
  • Information automatically generated when an inquiry is submitted, such as IP address, User-Agent, and timestamp

4. Retention and Use Period

  • Personal information is destroyed without delay once the purpose of processing is achieved.
  • If retention is required by applicable law, the information is retained for the period specified by that law.
  • Inquiry and consultation records are retained for up to three years under internal policy.
  • Service usage logs are retained for up to one year for security and incident response.

Retention items and periods may vary according to the service and applicable law. Changes will be reflected in this policy.

5. Provision to Third Parties and Outsourcing

We do not provide personal information to third parties in principle, except in the following cases:

  • When the user has given explicit prior consent
  • When disclosure is required by applicable law or regulation
  • When processing is entrusted to a service provider as necessary to provide the service

There are currently no personal information processing outsourcing arrangements. If this changes, the service provider, scope of work, and retention period will be disclosed through this policy.

Where processing is outsourced, contracts will limit the scope of processing and require appropriate security measures.

6. Measures to Ensure Security of Personal Information

  • Access control and authority management based on the principle of least privilege
  • Encryption of data in transit using HTTPS/TLS and encryption of sensitive information at rest where applicable
  • Storage and regular review of access logs and monitoring for malicious traffic
  • Internal management measures and security awareness activities
  • Regular vulnerability checks and application of security patches

7. User Rights and How to Exercise Them

To the extent permitted by applicable law, users may request access to, correction or deletion of, or suspension of processing of their personal information. Requests may be sent to contact@abstor.com.

We may request reasonable identity verification before processing a request and will respond without undue delay.

8. Changes to This Privacy Policy

This Privacy Policy may be amended due to changes in law or service policy. Material changes will be announced through the website or a similar method at least seven days before they take effect.

9. Data Protection Officer

Telephone
070-4335-1013
Role
Privacy Manager or designated person in charge

10. Data Destruction Procedure and Method

  • Electronic files are securely deleted so that restoration is not reasonably feasible.
  • Printed materials, if any, are destroyed by shredding or an equivalent method.

11. Overseas Transfer

We do not currently intend to transfer personal information outside the Republic of Korea. If an overseas transfer becomes necessary, the required details will be disclosed before the change takes effect in accordance with applicable law.

12. Governing Law

This Privacy Policy is governed by and interpreted in accordance with the laws of the Republic of Korea, unless otherwise required by applicable law.