Privacy Policy

Todea ("we", "us") respects the privacy of visitors to todea.co.kr (the "Site"). This Privacy Policy explains what limited personal information we process when you visit the Site or contact us by email, and the choices you have. It is written to comply with the Republic of Korea's Personal Information Protection Act (PIPA).

1. Personal information we process

The Site does not host contact forms, newsletter sign-up, or account registration. We process personal information only in the following narrow cases.

a. Information you send us by email. When you write to marketing@todea.co.kr, we receive your email address, your name (if disclosed), and the contents of your message. We use this only to respond to your enquiry.

b. Information collected automatically when you visit the Site.

• Standard server access information: IP address, user-agent string, referrer, requested URL, and timestamp. Collected by our hosting provider for security and reliability.
• Cookie consent state: a single value (granted or declined) stored in your browser's localStorage under the key cookie-consent. This stays on your device and is not transmitted to us.
• Google Analytics (only if you accept analytics cookies): client identifier, page views, approximate location derived from IP, device and browser metadata. Analytics is disabled by default and only activates after you click "Accept" in the cookie banner.

We do not collect special-category data (health, beliefs, biometric, etc.) and we do not knowingly collect information from children under 14.

2. Purposes of processing

We use the information above only to:

• respond to email enquiries;
• operate, secure, and debug the Site;
• measure aggregate usage of the Site (only with your consent).

3. Third parties

We do not sell or rent personal information. The following third parties process Site data on our behalf:

Personal information may be transferred outside the Republic of Korea to these providers' infrastructure. We rely on the providers' standard contractual safeguards.

4. Retention

• Email correspondence: kept for as long as needed to handle the enquiry and any follow-up business relationship, then deleted.
• Server access logs: retained by the hosting provider for a short rolling window (typically up to 90 days).
• Cookie consent value: stored in your browser until you clear it or change your selection.
• Google Analytics data: retained according to the property's configured retention window (currently 14 months) and then automatically deleted.

5. Your rights

Under PIPA you may, at any time:

• ask what personal information we hold about you;
• ask us to correct or delete it;
• ask us to stop processing it;
• withdraw consent for analytics cookies (clear the cookie banner state, or block cookies in your browser).

To exercise any of these rights, email marketing@todea.co.kr. We respond within 10 days. You may also lodge a complaint with the Korea Internet & Security Agency (KISA) at https://privacy.kisa.or.kr (call 118 within Korea).

6. Security measures

We protect personal information through:

• HTTPS for all Site traffic;
• a strict Content Security Policy and standard browser-security headers;
• access controls and least-privilege on email and analytics consoles;
• prompt patching of dependencies.

No system is perfectly secure; please do not send sensitive information by unencrypted email.

7. Links to external sites

The Site links to external resources (LinkedIn, GitHub, etc.). This Privacy Policy does not apply to those sites. Please review their own policies.

8. Changes to this policy

We will publish any revision on this page at least 7 days before it takes effect. Material changes affecting your rights will be notified at least 30 days in advance.

9. Contact

Todea 396 Seocho-daero, 16F, Seocho-gu, Seoul 06619, Republic of Korea Email: marketing@todea.co.kr

Effective date: 24 April 2026 Version: 1.0