Privacy Policy

Arclow Inc. ("the Company") complies with applicable laws, including Korea's Personal Information Protection Act, and processes users' personal information securely. This policy explains the items, purposes, and retention periods of the personal information the Company collects, uses, and provides, and users' rights.

1. Items and Methods of Collection

1.1 Required items

• Contact-person info: name, email address, contact (phone), title

• Account info: login email, password (stored encrypted)

• Payment info: billing address, payment-method info (card numbers and the like are collected directly by the payment processor)

1.2 Optional items

• Marketing-consent status, services of interest

• Business documents and data uploaded while using the platform

1.3 Automatically collected items

• Access logs (IP address, browser type, pages visited, access time)

• Device info (operating system, device identifier)

• Service-usage activity via cookies and similar tracking technologies

1.4 Collection methods
Through service sign-up and application; offline contract conclusion via email, phone, etc.; the customer-support process; and automatic generation during website visits and use of the Services.

2. Purposes of Processing

Providing, operating, maintaining, and improving the Services, and developing new services

• Performing the contract and processing billing/payments

• Account management and delivering service changes and notices

• Customer support and complaint handling

• Marketing and promotion (only where separate consent is obtained)

• Analyzing usage statistics and improving service quality

• Legal compliance, dispute resolution, and prevention of fraud and security risks

3. Retention and Use Period

The Company retains personal information according to the following:

After the above periods, personal information is destroyed without delay. Where retention is required by law, it is stored separately for that required period.

4. Provision to Third Parties

As a rule, the Company does not provide users' personal information to outside parties. It may do so only in the following cases:

• Where the user has consented in advance

• Where required by statute, or where an investigative agency requests it for investigation purposes in accordance with legally prescribed procedures and methods

• Where provided to processors entrusted with work necessary to provide the Services (see Article 5)

• Upon transfer of business assets due to a merger, business transfer, or other corporate restructuring (carried out after prior notice)

Where third-party provision purposes/items are collected via a separate consent form, they are specified in that form.

5. Entrustment of Processing

Processors handle personal information only within the scope of the entrusted work and bear confidentiality obligations.

6. Overseas Transfer

The Company may transfer users' personal information abroad to provide the Services.

7. Cookies and Tracking Technologies

The Company uses cookies to improve convenience of use and analyze usage activity. You may refuse cookies through your browser settings, but some service features may be limited.

8. Destruction Procedure and Method

• Electronic files: permanently deleted by an unrecoverable method

• Non-electronic records such as printouts: shredded or incinerated

• Timing: destroyed without delay after the retention period expires

9. Users' Rights and How to Exercise Them

Users (data subjects) may exercise the following rights:

• Request access to their personal information

• Request correction or deletion of their personal information

• Request suspension of processing

• Withdraw consent

Rights may be exercised by written or email request to support@arclow.com; we will inform you of the outcome within 10 days. We do not collect personal information from children under 14.

10. Data Protection Officer

11. Changes to this Policy

This policy may change due to amendments in law or changes to the Services. For material changes, we will notify users via a website announcement or email at least 7 days before the effective date (30 days for sensitive matters).