Privacy Policy
Kuho Studio Privacy Policy
Kuho Studio (the "Company") establishes and discloses this Privacy Policy to protect personal information of data subjects and to handle related complaints promptly and smoothly in accordance with Article 30 of the Personal Information Protection Act of Korea.
Article 1 (Purpose)
This Policy sets out how Kuho Studio (the "Company") collects, uses, stores, provides, and destroys personal information of users on the website it operates (the "Site"), and the protective measures it takes.
Article 2 (Items Collected and Collection Methods)
1. Items collected
Required information
- Email registration: email, password, name (display name)
- Social login (Kakao, Naver, Google, Meta (Facebook)): provider user ID, email (when provided/consented), name/nickname (when provided/consented)
- Inquiries: name (author name), email, phone number, inquiry title and content
Optional information
- Inquiry attachments and other information voluntarily entered or uploaded by the user
Automatically collected information
- When an inquiry is submitted: IP address, country code derived from IP
- During service use: access date/time, service usage records (request and error logs, etc.)
- On the user’s device: login token stored in the browser, inquiry draft data, post-login redirect path information, etc.
The Company does not currently use third-party advertising or analytics cookies (e.g., Google Analytics).
2. Collection methods
- Direct input by the user during registration and service use
- Collection through inquiry posts, email, and phone
- Information received from social login providers within the scope of user consent and settings
- Automatic collection (IP address, logs, browser storage, etc.)
The Company does not allow registration by children under 14 and does not collect children’s personal information without consent of a legal representative.
Article 3 (Purpose of Collection and Use)
Collected personal information is used only for the following purposes.
1. Member management
- Providing membership services, identity verification, and personal identification
- Preventing misuse and unauthorized use
- Confirming intent to register
- Handling complaints and delivering notices
2. Service provision
- Providing Site services such as portfolio and gallery viewing
- Receiving, consulting on, and responding to inquiries
- Providing additional features such as location guidance (map display)
3. Compliance with legal obligations
- Retaining records and fulfilling obligations under applicable laws
Article 4 (Provision to Third Parties)
In principle, the Company does not provide users’ personal information to third parties, except in the following cases:
- Where the user has given prior consent
- Where investigative agencies or others request provision in accordance with procedures and methods prescribed by law
Article 5 (Outsourcing and Integration)
To provide services smoothly, the Company may outsource personal information processing or integrate external services as follows.
| Processor / partner | Work | Retention period |
|---|---|---|
| Company’s own server (or hosting provider in use) | Website and database operation and storage | Until membership withdrawal or end of outsourcing agreement |
| Google (Google Workspace SMTP) | Sending inquiry notification emails | Period necessary for sending |
| IP2Location.io | Looking up country code from inquiry IP | Period necessary for lookup |
| Kakao | Social login authentication | While linked or per Kakao policy |
| Naver | Social login authentication | While linked or per Naver policy |
| Social login authentication | While linked or per Google policy | |
| Meta (Facebook) | Social login authentication | While linked or per Meta policy |
If the outsourced work or processors change, the Company will disclose the change through this Privacy Policy without delay. When using social login, the privacy policies of the relevant providers may also apply.
Article 6 (Overseas Transfer)
For service provision, personal information may be transferred overseas or processed by overseas operators as follows.
| Recipient | Country | Items | Purpose | Retention |
|---|---|---|---|---|
| United States and other countries where Google processes personal information | Social login ID, email, name, and other provided information | Social login authentication | While linked or per Google policy | |
| Meta (Facebook) | United States and other countries where Meta processes personal information | Social login ID, email, name, and other provided information | Social login authentication | While linked or per Meta policy |
| IP2Location.io | Countries where the provider operates (e.g., Malaysia) | IP address | Country code lookup | Period necessary for lookup and per provider policy |
| Google (Google Maps) | United States and others | Access and device information that Google may collect when the map page is used | Displaying the location map (embed) | Per Google policy |
Users may refuse social login or map features that involve overseas transfer; however, use of those features may be limited.
Article 7 (Retention Period and Destruction)
1. Retention period
| Category | Items | Period | Notes |
|---|---|---|---|
| Member information | Email, name, social link information, etc. | Until membership withdrawal | |
| Withdrawn member information | Minimum information needed to prevent misuse | Separately retained for up to 6 months, then destroyed | |
| Inquiry and consultation records | Inquiry content, contact details, processing records | 3 years after completion | Dispute response |
| Access and usage records | IP, access time, service usage logs | 1 year | |
| Retention required by law | Items specified by the relevant law | Period specified by the relevant law |
2. Destruction procedure and methods
- Procedure: destroy when the retention period expires or the processing purpose is achieved
- Electronic files: permanently delete in a manner that prevents recovery
- Paper documents: shred or incinerate
3. Upon membership withdrawal — When a member requests withdrawal, the Company destroys the relevant personal information without delay. Information that must be retained by law is stored separately and destroyed after the retention period ends.
Article 8 (Rights of Data Subjects)
- Users may at any time request access, correction, deletion, suspension of processing, withdrawal of consent, or membership withdrawal regarding their personal information.
- How to exercise rights: email kuho@kuhostudio.com / phone +82 2-518-5282 / mail 280-18, Seongsu-dong 2-ga, Seongdong-gu, Seoul, Republic of Korea
- The Company will take action without delay on legitimate requests.
Article 9 (Automatic Collection Devices)
- The Company may store login tokens, inquiry draft data, and similar information in the user’s browser to provide the service.
- Users may refuse or delete such storage through browser settings; however, some features such as staying logged in or inquiry draft convenience may be limited.
- The Company does not currently use third-party cookies for advertising or behavioral analysis.
Article 10 (Security Measures)
- Technical measures: access control, encryption of important information such as passwords, security programs, retention of access logs
- Administrative measures: internal management plans, minimizing and training staff who handle personal information
- Physical measures: access control for places where personal information is stored
Article 11 (Personal Information Protection Officer)
The Company designates the following Personal Information Protection Officer to oversee personal information processing and to handle complaints and remedies for data subjects.
- Name: Choi Seok-bong
- Phone: +82 2-518-5282
- Email: kuho@kuhostudio.com
- Address: 280-18, Seongsu-dong 2-ga, Seongdong-gu, Seoul, Republic of Korea
Other reporting/consultation: Personal Information Infringement Report Center 118 (privacy.kisa.or.kr), Personal Information Dispute Mediation Committee 1833-6972 (www.kopico.go.kr), Supreme Prosecutors’ Office 1301 (www.spo.go.kr), National Police Agency 182 (ecrm.police.go.kr)
Article 12 (Changes to this Policy)
- This Policy may be amended due to changes in laws or internal policies.
- When amended, the Company will post the changes and effective date on the Site at least 7 days before the effective date.
- For material changes, the Company may provide notice 30 days in advance.
Article 13 (Company Information)
- Company name: Kuho Studio
- CEO: Choi Seok-bong
- Business registration number: 211-06-78788
- Address: 280-18, Seongsu-dong 2-ga, Seongdong-gu, Seoul, Republic of Korea
- Phone: +82 2-518-5282
- Fax: +82 2-518-3641
- Email: kuho@kuhostudio.com
- Personal Information Protection Officer: Choi Seok-bong (kuho@kuhostudio.com)
Addendum
This Privacy Policy takes effect on July 29, 2026.