Privacy Policy of 주식회사 한식키친랩

This Privacy Policy explains how 주식회사 한식키친랩 (“we,” “us,” or “our”) collects, uses, stores, shares, and protects personal data when you use our cooking-studio services, website, booking channels, customer support, and related services.

1. Introduction and Company Information

The data controller and operator responsible for personal data processing is 주식회사 한식키친랩.

• Company name: 주식회사 한식키친랩
• Address: 한식키친랩, 7-12 Teheran-ro 33-gil, Gangnam-gu, Seoul 06142, South Korea
• Email: [email protected]
• Phone: +82 2-567-8493
• Business type: Cooking-Studio

We process personal data in connection with cooking classes, studio reservations, events, product or service inquiries, marketing communications, customer service, and website functionality.

2. Data Collection and Processing

We may collect and process the following categories of personal data:

• Identification and contact data: name, email address, phone number, postal address, and other contact details you provide.
• Booking and service data: reservation details, class preferences, attendance records, payment confirmations, dietary preferences you choose to provide, and service history.
• Communication data: messages, inquiries, complaint details, survey responses, and customer support interactions.
• Technical and usage data: IP address, browser type, device information, cookies, log data, and website interaction data.
• Payment-related data: transaction status, payment method details processed by payment providers, and billing records. We do not store full card details unless required and lawfully permitted.
• Special category data: only where you voluntarily provide information such as allergies or dietary restrictions for class participation or safety purposes, and only when permitted by applicable law.

We generally collect data directly from you, but we may also receive data from booking platforms, payment service providers, social media platforms, advertising partners, or other service providers acting on our behalf.

3. Purpose of Data Processing

We process personal data for the following purposes:

• to manage registrations, reservations, cancellations, and attendance for cooking-studio classes and events;
• to deliver our services and provide customer support;
• to communicate with you regarding bookings, schedules, policies, updates, and service notices;
• to process payments, refunds, invoices, and related accounting records;
• to personalize our services and improve class offerings, user experience, and website performance;
• to send promotional messages, newsletters, and marketing information where permitted and, where required, with your consent;
• to protect the security and integrity of our systems, premises, staff, participants, and property;
• to comply with legal obligations, tax requirements, regulatory requests, and lawful orders;
• to detect, prevent, and investigate fraud, abuse, or other unlawful activities;
• to maintain business records and manage internal administration.

4. Legal Basis for Processing

We process personal data only when a lawful basis exists under applicable privacy laws. Depending on the circumstances, the legal basis may include:

• Performance of a contract: when processing is necessary to provide booked classes, manage reservations, or respond to service requests.
• Consent: when you have given clear consent, for example for certain marketing communications or optional data such as dietary preference details, where required by law.
• Legal obligation: when processing is required to comply with tax, accounting, consumer protection, or other legal requirements.
• Legitimate interests: when processing is necessary for our legitimate business interests, such as improving services, maintaining security, preventing fraud, or conducting limited direct marketing, provided your rights do not override those interests.
• Protection of vital interests: in limited situations where processing is necessary to protect your safety or that of others.

5. Data Sharing and Third Parties

We may share personal data with third parties only when necessary and lawful, including:

• Service providers: hosting providers, booking system operators, customer support tools, email service providers, analytics providers, and IT support vendors.
• Payment processors: to complete payments, refunds, chargeback handling, and transaction verification.
• Professional advisors: lawyers, accountants, auditors, and insurers, where necessary for business operations or legal compliance.
• Public authorities: where disclosure is required by law, court order, or lawful request.
• Business transferees: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable legal requirements.

We require third parties to handle personal data in accordance with applicable law and to use it only for authorized purposes.

6. Data Transfer to Third Countries

Where necessary for the purposes described in this Policy, personal data may be transferred to, stored in, or accessed from countries outside your country of residence, including jurisdictions that may have different data protection laws.

When we transfer personal data internationally, we take appropriate safeguards as required by applicable law. These safeguards may include contractual protections, security assessments, or other lawful transfer mechanisms. You may contact us for more information about such transfers where required by law.

7. Storage Duration

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.

• Booking and service records: kept for the duration of the customer relationship and for a reasonable period thereafter.
• Financial and accounting records: retained for the period required by tax, accounting, and commercial laws.
• Customer support and communication records: retained as needed to resolve inquiries and maintain service quality.
• Marketing records: retained until you withdraw consent or opt out, or until they are no longer needed.
• Security logs and technical records: retained for a limited period necessary for security, troubleshooting, and fraud prevention.

When data is no longer required, we will delete, anonymize, or securely archive it in accordance with applicable law.

8. User Rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Access: to request confirmation of whether we process your data and to obtain a copy of it.
• Rectification: to request correction of inaccurate or incomplete data.
• Erasure: to request deletion of your data where legally permitted.
• Restriction: to request limitation of processing in certain circumstances.
• Data portability: to request a structured, commonly used, machine-readable copy of certain data and, where feasible, transfer to another controller.
• Objection: to object to processing based on legitimate interests or to direct marketing where applicable.

To exercise your rights, please contact us using the details below. We may need to verify your identity before responding to your request.

9. Withdrawal of Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

If you withdraw consent, we may no longer be able to provide certain optional services or communications, but this will not affect services that do not depend on consent.

10. Right to Complain

If you believe that our processing of your personal data violates applicable privacy law, you may have the right to lodge a complaint with the competent data protection authority in your jurisdiction.

We encourage you to contact us first so that we can address your concerns directly and promptly.

11. Data Security

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction. These measures may include access controls, encryption where appropriate, secure storage, staff training, logging, and regular security reviews.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

12. Contact Information

If you have questions, requests, or concerns about this Privacy Policy or our processing of personal data, please contact:

• 주식회사 한식키친랩
• Address: 한식키친랩, 7-12 Teheran-ro 33-gil, Gangnam-gu, Seoul 06142, South Korea
• Email: [email protected]
• Phone: +82 2-567-8493

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. The updated version will be posted on our website or otherwise made available to you.

Where required by law, we will notify you of material changes in advance or through reasonable means. Your continued use of our services after the effective date of an updated policy means that you acknowledge the revised terms, to the extent permitted by law.