Code of Nature
KO
Legal

Privacy Policy

Effective Date: April 1, 2026

Code of Nature (hereinafter referred to as the "Company") establishes and discloses this Privacy Policy in accordance with the Personal Information Protection Act and other applicable laws and regulations in order to protect the personal information of data subjects and to handle related complaints promptly and smoothly.

This Privacy Policy applies to the Company's website (www.c-of-n.com) and the services provided through it.

1. Purpose of Processing Personal Information

The Company processes only the minimum personal information necessary for the following purposes. The personal information processed will not be used for any purpose other than those stated below. If the purpose of use changes, the Company will take necessary measures such as obtaining separate consent in accordance with applicable laws and regulations.

1) Contact Inquiries and Responses

  • Receiving inquiries
  • Reviewing inquiry details and responding
  • Customer support and service improvement reference
  • Record retention for dispute handling

2) Job Application Submission and Recruitment Process

  • Verifying applicants and identifying individuals
  • Conducting recruitment procedures and providing results
  • Managing application history
  • Record retention for dispute handling

2. Items of Personal Information Processed and Methods of Collection

The Company collects only the minimum personal information necessary to provide its services.

1) Contact Inquiries

  • Items Collected: Name, email address, subject, message content
  • Collection Method: Submission through the contact form on the website

2) Job Applications

  • Items Collected: Name, contact information, email address, resume/CV, cover letter, portfolio (if submitted)
  • Collection Method: Submission through the application form and file upload on the website

3. Retention and Use Period of Personal Information

The Company processes and retains personal information within the retention and use period prescribed by applicable laws or agreed to by the data subject at the time of collection.

1) Contact Inquiries

Personal information will be destroyed without delay once the purpose of receiving and responding to the inquiry has been fulfilled.

However, if retention is necessary for purposes such as reviewing inquiry history or handling disputes, the information may be retained for a certain period in accordance with applicable laws or the Company's internal policies.

2) Job Applications

Personal information will be retained for one (1) year from the date of application and then destroyed.

However, if retention is required by applicable laws and regulations, the information will be retained for the period prescribed by such laws.

4. Consent to the Collection and Use of Personal Information

The Company provides procedures for data subjects to review and consent to the collection and use of personal information when submitting inquiries or job applications.

Data subjects have the right to refuse consent to the collection and use of personal information. However, if consent to the collection and use of required information is refused, certain services such as inquiry submission, responses, or job application processing may be restricted.

5. Provision of Personal Information to Third Parties

The Company does not, in principle, provide personal information of data subjects to external parties.

However, exceptions may apply in the following cases:

  • Where the data subject has given prior consent
  • Where disclosure is required by applicable laws or regulations

6. Entrustment of Personal Information Processing

The Company currently does not entrust the processing of personal information to any external party.

If the Company entrusts personal information processing in the future for smoother service operation, it will disclose or notify users in advance of the entrusted party and the details of the entrusted work in accordance with applicable laws and regulations.

7. Procedures and Methods for Destruction of Personal Information

The Company destroys personal information without delay when the retention period expires or when the personal information becomes unnecessary, such as when the purpose of processing has been achieved.

However, if personal information must be preserved in accordance with other laws and regulations, such information will be transferred to a separate database (DB) or stored in a different location and kept securely.

1) Destruction Procedures

The Company selects personal information for destruction once a reason for destruction arises, and destroys it in accordance with its internal policies and applicable laws.

2) Time Limit for Destruction

Personal information whose retention period has expired will be destroyed within five (5) days from the date of expiration.

Personal information that becomes unnecessary due to achievement of the processing purpose will be destroyed within five (5) days from the date it is deemed unnecessary.

3) Destruction Methods

  • Electronic files will be destroyed using technical methods that make recovery or restoration impossible.
  • Printed documents containing personal information will be shredded or incinerated.

8. Rights and Obligations of Data Subjects and Methods of Exercising Them

Data subjects may exercise the following rights with respect to the Company at any time:

  • Request access to personal information
  • Request correction or deletion of personal information
  • Request suspension of processing of personal information
  • Withdraw consent to the collection and use of personal information

Such rights may be exercised by contacting the Company's Chief Privacy Officer in writing, by email, or through other available means, and the Company will take action without delay in accordance with applicable laws and regulations.

Data subjects are responsible for maintaining their personal information accurately and up to date, and must not infringe upon or misuse the personal information of others.

If a legal representative or authorized agent exercises these rights on behalf of a data subject, the Company may request documents necessary to verify such authority in accordance with applicable laws.

9. Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information.

1) Establishment and Implementation of Internal Management Plans

The Company establishes and implements internal management plans for the secure processing of personal information.

2) Technical Safeguards

The Company takes necessary technical measures, such as installing security programs and conducting periodic inspections and updates, to prevent leakage or damage of personal information caused by hacking, computer viruses, and similar threats.

3) Access Control Management

The Company minimizes the number of personnel handling personal information and manages access rights to personal information.

4) Employee Training

The Company provides training to employees who handle personal information regarding their obligations to protect such information.

10. Chief Privacy Officer

The Company designates the following Chief Privacy Officer to take overall responsibility for personal information processing and to handle complaints and provide remedies related to personal information.

  • Name: Park Jaehong
  • Title: Chief Executive Officer
  • Phone: +82-10-5913-4262
  • Email: codeofnature@c-of-n.com

Data subjects may contact the Chief Privacy Officer regarding any inquiries, complaints, or requests for remedies related to personal information protection arising from the use of the Company's services. The Company will respond and take appropriate action without delay.

11. Remedies for Infringement of Rights

If you need to report or seek consultation regarding personal information infringement, you may contact the following institutions:

  • Personal Information Infringement Report Center: 118
  • Personal Information Dispute Mediation Committee: 1833-6972

12. Changes to This Privacy Policy

This Privacy Policy shall take effect on April 1, 2026.

The Company may revise this Privacy Policy in accordance with changes in laws, policies, or services. In the event of any additions, deletions, or modifications, the Company will provide prior notice on the website before the effective date.