Privacy Policy
Article 1 (Purpose of the Privacy Policy)
① Bluepin Co., Ltd. (hereinafter referred to as the "Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act in order to protect the personal information of data subjects and to resolve related grievances in a prompt and efficient manner.
② The purpose of this Policy is to define matters regarding the categories of personal information collected, the purposes of collection and use, the retention and usage period of personal information, and the provision of personal information to third parties and outsourcing of its processing in connection with the space design and interior construction services provided by the Company.
Article 2 (Purpose of Processing Personal Information)
① The Company processes personal information for the following purposes. The personal information processed will not be used for purposes other than those specified below, and if the purpose of use changes, necessary measures will be implemented, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
1. Consultation and Provision of Estimates: Receipt of customer inquiries, space design consultation, preparation and provision of estimates
2. Execution and Performance of Contracts: Execution of interior construction contracts, performance of contract terms, settlement of payments
3. Delivery and Approval of Design Drawings: Preparation of design documents, facilitation of customer approval procedures, consultation on changes
4. Communication Regarding Construction Progress: Notification of construction schedules, reporting on construction progress, on-site consultations
5. After-Sales Service and Maintenance: Defect repair, regular inspections, and maintenance services post-construction
6. Marketing and Advertising: Guidance on new services, provision of event information, and satisfaction surveys (subject to separate consent)
Article 3 (Categories and Methods of Collecting Personal Information)
① The Company collects the following personal information:
1. Required Items: Name, mobile phone number, email address, company name, department name, job title
2. Optional Items: Area of interest for consultation, details of consultation request
② The Company collects personal information through the following methods:
1. Through inquiry forms on the homepage and the Recatch consultation application program
2. During telephone consultations
3. During inquiry and consultation processes via email
4. Through the exchange of business cards during face-to-face consultations
5. During the process of drafting written contracts
6. During on-site visits and physical inspection processes
7. Through customer information collection via other external websites
③ The Company does not collect personal information of children under the age of 14, nor does it collect sensitive information such as political opinions, religious beliefs, or health information.
Article 4 (Retention and Usage Period of Personal Information)
① The Company processes and retains personal information within the personal information retention and usage period prescribed by relevant laws, or the period consented to by the data subject at the time of collection.
② The processing and retention periods for each category of personal information are as follows:
1. Consultation-related information: Retained and used for 5 years from the date of consent to collection and use
2. Contract customer information: Retained and used for 5 years from the date of contract execution
3. After-sales service-related information: Retained and used for 5 years from the date of completion of service provision
4. Marketing-related information: Retained and used for 5 years from the date of consent or until consent is withdrawn
③ When personal information becomes unnecessary, such as upon the expiration of the retention period or achievement of the processing purpose, the Company shall destroy the relevant personal information without delay.
Article 5 (Provision of Personal Information to Third Parties)
① In principle, the Company does not provide the personal information of data subjects to third parties.
② However, the following cases are exceptions:
1. Where the data subject has given prior consent
2. Where there are special provisions in the law or it is unavoidable to comply with statutory obligations
3. Where the data subject or their legal representative is unable to express intent, or prior consent cannot be obtained due to an unknown address, and it is deemed clearly necessary for the urgent life, bodily, or property interests of the data subject or a third party
Article 6 (Outsourcing of Personal Information Processing)
① The Company outsources personal information processing tasks as follows to ensure efficient business operations:
1. Name of Outsourcee: Recatch
Outsourced Task: Online lead collection and operation of the consultation application system
② When executing an outsourcing agreement, the Company, in accordance with Article 26 of the Personal Information Protection Act, specifies in documents such as the contract the prohibition of processing personal information for purposes other than the outsourced tasks, technical and administrative protection measures, restrictions on re-outsourcing, management and supervision of the outsourcee, and liabilities such as compensation for damages, and supervises whether the outsourcee processes personal information securely.
③ If the content of the outsourced task or the outsourcee changes, it will be disclosed through this Privacy Policy without delay.
Article 7 (Rights and Obligations of Data Subjects and Methods of Exercise)
① Data subjects may exercise their rights related to personal information protection against the Company at any time:
1. Demand for notification of personal information processing status
2. Demand for access to personal information
3. Demand for correction or deletion in case of errors, etc.
4. Demand for suspension of personal information processing
② The exercise of rights pursuant to Paragraph 1 may be made in writing, via email, or facsimile (FAX) in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action on this without delay.
③ If a data subject requests the correction or deletion of errors in personal information, the Company will not use or provide the relevant personal information until the correction or deletion is completed.
④ The exercise of rights pursuant to Paragraph 1 may be performed through an agent, such as a legal representative of the data subject or a person who has been delegated authority. In this case, a power of attorney in accordance with Form 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
⑤ The Company will process the request of the data subject within 10 days of receipt, and if an extension is necessary due to unavoidable reasons, it may be extended for up to 30 days. The results of the processing will be guided to the data subject individually.
Article 8 (Destruction of Personal Information)
① When personal information becomes unnecessary, such as upon the expiration of the retention period or achievement of the processing purpose, the Company shall destroy the relevant personal information without delay.
② Notwithstanding the expiration of the retention period consented to by the data subject or the achievement of the processing purpose, if personal information must continue to be preserved pursuant to other laws, the relevant personal information shall be transferred to a separate database (DB) or preserved in a different location.
③ The procedures and methods for destroying personal information are as follows:
1. Destruction Procedure: The Company selects the personal information for which reasons for destruction have occurred, and destroys the personal information with the approval of the Company's Chief Privacy Officer.
2. Destruction Method
- Information in the form of electronic files is destroyed using technical methods that prevent the records from being reproduced.
- Personal information printed on paper is destroyed by shredding with a shredder or through incineration.
Article 9 (Measures to Ensure the Safety of Personal Information)
① The Company takes technical, administrative, and physical measures necessary to ensure safety in accordance with Article 29 of the Personal Information Protection Act as follows:
1. Technical Measures
- Management of access rights to personal information processing systems, etc.
- Setting and managing passwords on computers processing personal information
- Operation of security programs for the secure storage of other personal information
2. Administrative Measures
- Minimization of personnel handling personal information and conducting training
- Management of access rights for personal information handlers
3. Physical Measures
- Storing documents containing personal information, auxiliary storage media, etc., in a secure location with a locking device
Article 10 (Installation, Operation, and Rejection of Automatic Personal Information Collection Devices)
① The Company uses "cookies" that store and frequently retrieve user information in order to provide personalized services to users.
② Cookies are small amounts of information sent to the user's computer browser by the server (HTTP) used to operate the website, and may also be stored on the hard disk of the user's PC computer.
1. Purpose of using cookies: Used to provide optimized information to users by identifying visits and usage patterns of each service and website visited by the user, popular search terms, secure connection status, etc.
2. Installation, Operation, and Rejection of Cookies: You can refuse to store cookies by setting options in the Tools > Internet Options > Privacy menu at the top of your web browser.
3. If you refuse to store cookies, you may experience difficulties in using customized services.
Article 11 (Chief Privacy Officer)
① The Company is responsible for overall personal information processing, and has designated the Chief Privacy Officer as follows to handle complaints and resolve damages of data subjects related to personal information processing.
▶ Chief Privacy Officer / Department in Charge of Personal Information Protection
Name: Kihan Kim
Department: Marketing Team
Title: Manager
Contact: 1522-5835
Email: [email protected]
② Data subjects may inquire about all privacy protection inquiries, complaint handling, damage relief, etc., that occur while using the Company's services to the Chief Privacy Officer and the department in charge. The Company will respond to and process inquiries from data subjects without delay.
Article 12 (Amendments to the Privacy Policy)
This Privacy Policy shall apply from the effective date, and if there are additions, deletions, or corrections of amendments in accordance with laws and policies, they will be notified through notice announcements from 7 days prior to the implementation of the changes.
Article 13 (Remedies for Infringement of Rights)
Data subjects may apply for dispute resolution or consultation with the Personal Information Protection Commission, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, etc., in order to receive relief from personal information infringement. For other reports and consultations on personal information infringement, please contact the institutions below.
1. Personal Information Protection Commission: (No area code) 118 or 02-2100-3043
2. Personal Information Infringement Report Center (Korea Internet & Security Agency): (No area code) 118
3. Supreme Prosecutors' Office: (No area code) 1301 (www.spo.go.kr)
4. National Police Agency: (No area code) 182 (ecrm.cyber.go.kr)
Any person whose rights or interests have been infringed upon due to a disposition or omission by the head of a public agency regarding requests under the provisions of Article 35 (Access to Personal Information), Article 36 (Correction or Deletion of Personal Information), and Article 37 (Suspension of Processing of Personal Information, etc.) of the "Personal Information Protection Act" may file an administrative appeal in accordance with the Administrative Appeals Act.
※ For details regarding administrative appeals, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).
Article 14 (Miscellaneous)
① The Company's contact information is as follows:
- Corporate Name: Bluepin Co., Ltd.
- Address: Room 811, 8th Floor, 30 Sangwon 12-gil, Seongdong-gu, Seoul (Seongsu-dong 1-ga, Dongjin IT Tower)
- Business Registration Number: 717-88-02216
- CEO: Sangwoon Cha
- Phone: 02-6958-7322
- Website: https://bluepinlabs.com/
② Privacy Policy Effective Date: October 1, 2025. End of Document.
Privacy Policy
Article 1 (Purpose of the Privacy Policy)
① Bluepin Co., Ltd. (hereinafter referred to as the "Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act in order to protect the personal information of data subjects and to resolve related grievances in a prompt and efficient manner.
② The purpose of this Policy is to define matters regarding the categories of personal information collected, the purposes of collection and use, the retention and usage period of personal information, and the provision of personal information to third parties and outsourcing of its processing in connection with the space design and interior construction services provided by the Company.
Article 2 (Purpose of Processing Personal Information)
① The Company processes personal information for the following purposes. The personal information processed will not be used for purposes other than those specified below, and if the purpose of use changes, necessary measures will be implemented, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
1. Consultation and Provision of Estimates: Receipt of customer inquiries, space design consultation, preparation and provision of estimates
2. Execution and Performance of Contracts: Execution of interior construction contracts, performance of contract terms, settlement of payments
3. Delivery and Approval of Design Drawings: Preparation of design documents, facilitation of customer approval procedures, consultation on changes
4. Communication Regarding Construction Progress: Notification of construction schedules, reporting on construction progress, on-site consultations
5. After-Sales Service and Maintenance: Defect repair, regular inspections, and maintenance services post-construction
6. Marketing and Advertising: Guidance on new services, provision of event information, and satisfaction surveys (subject to separate consent)
Article 3 (Categories and Methods of Collecting Personal Information)
① The Company collects the following personal information:
1. Required Items: Name, mobile phone number, email address, company name, department name, job title
2. Optional Items: Area of interest for consultation, details of consultation request
② The Company collects personal information through the following methods:
1. Through inquiry forms on the homepage and the Recatch consultation application program
2. During telephone consultations
3. During inquiry and consultation processes via email
4. Through the exchange of business cards during face-to-face consultations
5. During the process of drafting written contracts
6. During on-site visits and physical inspection processes
7. Through customer information collection via other external websites
③ The Company does not collect personal information of children under the age of 14, nor does it collect sensitive information such as political opinions, religious beliefs, or health information.
Article 4 (Retention and Usage Period of Personal Information)
① The Company processes and retains personal information within the personal information retention and usage period prescribed by relevant laws, or the period consented to by the data subject at the time of collection.
② The processing and retention periods for each category of personal information are as follows:
1. Consultation-related information: Retained and used for 5 years from the date of consent to collection and use
2. Contract customer information: Retained and used for 5 years from the date of contract execution
3. After-sales service-related information: Retained and used for 5 years from the date of completion of service provision
4. Marketing-related information: Retained and used for 5 years from the date of consent or until consent is withdrawn
③ When personal information becomes unnecessary, such as upon the expiration of the retention period or achievement of the processing purpose, the Company shall destroy the relevant personal information without delay.
Article 5 (Provision of Personal Information to Third Parties)
① In principle, the Company does not provide the personal information of data subjects to third parties.
② However, the following cases are exceptions:
1. Where the data subject has given prior consent
2. Where there are special provisions in the law or it is unavoidable to comply with statutory obligations
3. Where the data subject or their legal representative is unable to express intent, or prior consent cannot be obtained due to an unknown address, and it is deemed clearly necessary for the urgent life, bodily, or property interests of the data subject or a third party
Article 6 (Outsourcing of Personal Information Processing)
① The Company outsources personal information processing tasks as follows to ensure efficient business operations:
1. Name of Outsourcee: Recatch
Outsourced Task: Online lead collection and operation of the consultation application system
② When executing an outsourcing agreement, the Company, in accordance with Article 26 of the Personal Information Protection Act, specifies in documents such as the contract the prohibition of processing personal information for purposes other than the outsourced tasks, technical and administrative protection measures, restrictions on re-outsourcing, management and supervision of the outsourcee, and liabilities such as compensation for damages, and supervises whether the outsourcee processes personal information securely.
③ If the content of the outsourced task or the outsourcee changes, it will be disclosed through this Privacy Policy without delay.
Article 7 (Rights and Obligations of Data Subjects and Methods of Exercise)
① Data subjects may exercise their rights related to personal information protection against the Company at any time:
1. Demand for notification of personal information processing status
2. Demand for access to personal information
3. Demand for correction or deletion in case of errors, etc.
4. Demand for suspension of personal information processing
② The exercise of rights pursuant to Paragraph 1 may be made in writing, via email, or facsimile (FAX) in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action on this without delay.
③ If a data subject requests the correction or deletion of errors in personal information, the Company will not use or provide the relevant personal information until the correction or deletion is completed.
④ The exercise of rights pursuant to Paragraph 1 may be performed through an agent, such as a legal representative of the data subject or a person who has been delegated authority. In this case, a power of attorney in accordance with Form 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
⑤ The Company will process the request of the data subject within 10 days of receipt, and if an extension is necessary due to unavoidable reasons, it may be extended for up to 30 days. The results of the processing will be guided to the data subject individually.
Article 8 (Destruction of Personal Information)
① When personal information becomes unnecessary, such as upon the expiration of the retention period or achievement of the processing purpose, the Company shall destroy the relevant personal information without delay.
② Notwithstanding the expiration of the retention period consented to by the data subject or the achievement of the processing purpose, if personal information must continue to be preserved pursuant to other laws, the relevant personal information shall be transferred to a separate database (DB) or preserved in a different location.
③ The procedures and methods for destroying personal information are as follows:
1. Destruction Procedure: The Company selects the personal information for which reasons for destruction have occurred, and destroys the personal information with the approval of the Company's Chief Privacy Officer.
2. Destruction Method
- Information in the form of electronic files is destroyed using technical methods that prevent the records from being reproduced.
- Personal information printed on paper is destroyed by shredding with a shredder or through incineration.
Article 9 (Measures to Ensure the Safety of Personal Information)
① The Company takes technical, administrative, and physical measures necessary to ensure safety in accordance with Article 29 of the Personal Information Protection Act as follows:
1. Technical Measures
- Management of access rights to personal information processing systems, etc.
- Setting and managing passwords on computers processing personal information
- Operation of security programs for the secure storage of other personal information
2. Administrative Measures
- Minimization of personnel handling personal information and conducting training
- Management of access rights for personal information handlers
3. Physical Measures
- Storing documents containing personal information, auxiliary storage media, etc., in a secure location with a locking device
Article 10 (Installation, Operation, and Rejection of Automatic Personal Information Collection Devices)
① The Company uses "cookies" that store and frequently retrieve user information in order to provide personalized services to users.
② Cookies are small amounts of information sent to the user's computer browser by the server (HTTP) used to operate the website, and may also be stored on the hard disk of the user's PC computer.
1. Purpose of using cookies: Used to provide optimized information to users by identifying visits and usage patterns of each service and website visited by the user, popular search terms, secure connection status, etc.
2. Installation, Operation, and Rejection of Cookies: You can refuse to store cookies by setting options in the Tools > Internet Options > Privacy menu at the top of your web browser.
3. If you refuse to store cookies, you may experience difficulties in using customized services.
Article 11 (Chief Privacy Officer)
① The Company is responsible for overall personal information processing, and has designated the Chief Privacy Officer as follows to handle complaints and resolve damages of data subjects related to personal information processing.
▶ Chief Privacy Officer / Department in Charge of Personal Information Protection
Name: Kihan Kim
Department: Marketing Team
Title: Manager
Contact: 1522-5835
Email: [email protected]
② Data subjects may inquire about all privacy protection inquiries, complaint handling, damage relief, etc., that occur while using the Company's services to the Chief Privacy Officer and the department in charge. The Company will respond to and process inquiries from data subjects without delay.
Article 12 (Amendments to the Privacy Policy)
This Privacy Policy shall apply from the effective date, and if there are additions, deletions, or corrections of amendments in accordance with laws and policies, they will be notified through notice announcements from 7 days prior to the implementation of the changes.
Article 13 (Remedies for Infringement of Rights)
Data subjects may apply for dispute resolution or consultation with the Personal Information Protection Commission, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, etc., in order to receive relief from personal information infringement. For other reports and consultations on personal information infringement, please contact the institutions below.
1. Personal Information Protection Commission: (No area code) 118 or 02-2100-3043
2. Personal Information Infringement Report Center (Korea Internet & Security Agency): (No area code) 118
3. Supreme Prosecutors' Office: (No area code) 1301 (www.spo.go.kr)
4. National Police Agency: (No area code) 182 (ecrm.cyber.go.kr)
Any person whose rights or interests have been infringed upon due to a disposition or omission by the head of a public agency regarding requests under the provisions of Article 35 (Access to Personal Information), Article 36 (Correction or Deletion of Personal Information), and Article 37 (Suspension of Processing of Personal Information, etc.) of the "Personal Information Protection Act" may file an administrative appeal in accordance with the Administrative Appeals Act.
※ For details regarding administrative appeals, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).
Article 14 (Miscellaneous)
① The Company's contact information is as follows:
- Corporate Name: Bluepin Co., Ltd.
- Address: Room 811, 8th Floor, 30 Sangwon 12-gil, Seongdong-gu, Seoul (Seongsu-dong 1-ga, Dongjin IT Tower)
- Business Registration Number: 717-88-02216
- CEO: Sangwoon Cha
- Phone: 02-6958-7322
- Website: https://bluepinlabs.com/
② Privacy Policy Effective Date: October 1, 2025. End of Document.
Tel: +82 1522-5835
Suite 810-811, Dongjin IT Tower, 30 Sangwon 12-gil, Seongdong-gu, Seoul
Chief Privacy Officer: Kihan Kim
Tel: +82 1522-5835
Suite 810-811, Dongjin IT Tower, 30 Sangwon 12-gil, Seongdong-gu, Seoul
Chief Privacy Officer: Kihan Kim
Tel: +82 1522-5835
Suite 810-811, Dongjin IT Tower, 30 Sangwon 12-gil, Seongdong-gu, Seoul
Chief Privacy Officer: Kihan Kim
