Privacy Policy

ConsentConsent to the Collection and Use of Personal Information

1Purposes of Processing Personal Information

The Company processes personal information for the following purposes: membership registration and account management; identity verification; provision of quotations; conclusion and performance of contracts; translation, review, translation certification, fact verification, certified true copy, and apostille and consular legalization support; e-COT electronic document issuance; QR verification; downloads; confirmation of document status; payment, tax invoice, and refund processing; customer consultation; error correction; complaint handling; dispute response; prevention of forgery, alteration, and fraudulent use; security management; management of access records; compliance with statutory obligations; and responses to lawful requests from authorities.

2Categories of Personal Information Processed

1. The Company may process names, contact information, email addresses, addresses, company names, job titles, payment information, tax invoice information, commission details, submission destination information, document titles, language pairs, issuance numbers, QR verification information, access records, IP addresses, browser information, and download records.
2. Commissioned documents may contain information such as resident registration numbers, passport numbers, alien registration numbers, driver’s license numbers, dates of birth, family relations, addresses, educational background, academic records, career history, military service records, financial information, medical information, immigration records, contract information, and materials filed with courts or administrative agencies.

3Processing and Retention Period

1. The Company retains personal information until the purpose of its collection and use is achieved, and destroys it without delay once that purpose has been achieved. However, where retention is required under applicable laws, the information is retained for the corresponding period.
2. Records on contracts or the withdrawal of offers, and records on payment and the supply of goods or services, may be retained for five years; records on consumer complaints or dispute resolution for three years; and records on labeling and advertising for six months.
3. e-COT issuance and verification information may be retained for 5 years from the date of issuance, or for a period separately agreed with the customer.

4Provision of Personal Information to Third Parties

In principle, the Company does not provide users’ personal information to third parties. However, the Company may provide it to the extent necessary where the user has given prior consent; where provision to notary offices, apostille or consular legalization authorities, embassies, administrative agencies, courts, schools, banks, receiving institutions, or similar bodies is necessary for service performance; where required by law, or upon a lawful request from an investigative agency, court, or administrative authority; or where necessary for dispute response, the protection of rights, or the prevention of forgery, alteration, or fraudulent use.

5Outsourcing of Personal Information Processing

1. The Company may outsource server hosting and cloud infrastructure operation, payment processing, tax invoice issuance, text and email transmission, native-speaker review, specialized translation, on-site verification, notarization, apostille, and consular legalization support, security, backup, system maintenance, and postal, courier, and delivery services.
2. When entering into outsourcing contracts, the Company manages and supervises matters including personal information protection, confidentiality, the prohibition of use beyond the stated purpose, restrictions on sub-outsourcing, security measures, and destruction upon termination of the outsourcing arrangement.

6Cross-Border Transfers

1. Personal information may be transferred abroad where overseas submission, service to overseas customers, overseas native-speaker review, the use of cloud services, or filing with overseas institutions is required.
2. Where a cross-border transfer is required, the Company informs the user in advance, to the extent practicable, of the recipient, the destination country, the items transferred, the purpose of the transfer, and the retention period, and obtains any necessary consent.

7Destruction of Personal Information

1. The Company destroys personal information without delay when it becomes unnecessary, such as upon expiry of the retention period, achievement of the processing purpose, membership withdrawal, or termination of the services.
2. Electronic files are securely deleted so that they cannot be recovered or reconstructed, and paper documents are shredded or incinerated. Information that must be retained under applicable laws is stored separately from other personal information.

8Rights of Data Subjects

1. Users may exercise their statutory rights against the Company, including the right to access, correct, and delete their personal information, to request the suspension of its processing, and to withdraw consent.
2. Rights may be exercised by email, in writing, or by telephone, and the Company processes such requests without delay after verifying the requester’s identity. However, the exercise of certain rights may be restricted where there are statutory retention obligations, contract performance requirements, dispute response needs, or a risk of infringing third parties’ rights.

9Security Measures

The Company implements the following measures: restriction and management of access rights to personal information; management of passwords, access records, and administrator privileges; encryption of personal information or equivalent protective measures; technical safeguards such as security programs, firewalls, and backups; training and confidentiality obligations for personal information handlers; restricted access to document storage areas; and management of Verification Information such as QR codes, issuance numbers, and hash values to prevent forgery and alteration.

10Cookies and Access Records

1. The Company may process cookies, access records, IP addresses, browser information, and device information for the normal operation of the website, login persistence, security management, QR verification, electronic document downloads, the prevention of fraudulent use, and service usage statistics.
2. Essential cookies are used to the extent necessary for service provision and the maintenance of security. Where cookies are used for analytics or marketing purposes, separate notice is given or consent is obtained.
3. Users may block or delete cookies through their browser settings. However, blocking cookies may restrict the use of certain services, such as login, QR verification, and document downloads.

11Personal Information of Children Under 14

In principle, the Company does not accept direct membership registration from children under the age of 14. However, the Company may process documents containing children’s personal information, such as family relation certificates, school documents, and visa documents, where necessary for service performance; in such cases, the Client must secure lawful authority, such as that of a legal representative.

12Privacy Officer

Privacy Officer

Choonghwan Lee (Darren Lee)

Affiliation

World Administrative Attorneys

Email

darren@wtrans.kr

Telephone

+82-2-6405-0341

13Remedies for Infringement of Rights

Users who need to report, or seek consultation regarding, an infringement of their personal information may contact the relevant institutions, such as the Personal Information Infringement Report Center and the Personal Information Dispute Mediation Committee.

14Amendments to the Privacy Policy

The Company may amend this Privacy Policy in response to changes in laws, the services, security policies, or internal operations, and upon amendment will post the effective date and the principal changes on the website.