Privacy Policy

Sphere D (hereinafter referred to as the “Company”) values users’ personal information and complies with the Personal Information Protection Act and all applicable laws and regulations.
To ensure the secure management of personal information, the Company has established and operates the following Privacy Policy.

Article 1 (Purpose of Personal Information Processing)

The Company processes personal information for the following purposes:

1. Consultation and Project Proposals

   • Receiving inquiries, understanding project requirements, providing quotations, and communication

2. Contract Execution and Service Delivery

   • Performing contracted services such as design, marketing, and website development

   • Production and delivery of project deliverables

3. Accounting and Administrative Processing

   • Issuing invoices, tax invoices, and confirming payments

4. Client Management and Service Improvement

   • Responding to client inquiries, providing portfolio updates, and improving service quality

5. Marketing and Promotional Communications (with optional consent)

   • Announcements of new products or services

   • Design and marketing newsletters

   • Promotions, events, and discount information

   • Clear notice and opt-out options for promotional communications

6. Website Usage Analysis and Improvement

   • Access logs and behavioral analysis (Google Analytics, Meta Pixel)

Article 2 (Personal Information Collected)

1) Required Information

• Name and job title (contact person)

• Email address

• Contact number

• Company or brand name

• Consultation or project request details

2) Optional Information

• Social media accounts and website URLs

• Reference materials, brand guidelines, or other project-related documents

• Consent to receive marketing communications (newsletters, promotions, etc.)

3) Automatically Collected Information

• IP address, cookies, access logs, browser and device information

Article 3 (Retention and Use Period of Personal Information)

The Company retains personal information according to the following standards:

1. Consultation and project proposal records: 3 years

2. Contract and tax-related records: 5 years (in accordance with applicable laws)

3. Information used for marketing purposes: Until consent is withdrawn

4. Access logs: 3 months

If a user requests the deletion of personal information, the Company will delete it without delay within the scope permitted by applicable laws.

Article 4 (Provision of Personal Information to Third Parties)

In principle, the Company does not provide users’ personal information to third parties.
Exceptions may apply in the following cases:

1. When prior consent has been obtained from the user

2. When disclosure is required by applicable laws or regulations

3. When necessary for project execution

   • Developers, freelance designers, and professional partners

In such cases, only the minimum necessary information is provided, and consent is obtained after prior notice.

Article 5 (Outsourcing of Personal Information Processing)

To ensure smooth service delivery, the Company may outsource the processing of personal information to the following service providers:

• Payments & Billing: Stripe, PayPal, etc.

• Hosting & Servers: AWS, Vercel, etc.

• Email Services: Gmail, Mailchimp, SendGrid

• External Professionals: Designers, developers, marketers, and other specialists

The Company supervises and manages all entrusted parties to ensure personal information is processed securely.

Article 6 (Procedures and Methods for Destruction of Personal Information)

When the retention period expires or the purpose of processing has been fulfilled, personal information is destroyed immediately using the following methods:

• Electronic files: Permanently deleted in a non-recoverable manner

• Documents: Shredded or incinerated

Article 7 (Protection of User Rights)

Users may exercise the following rights at any time:

• Request access to, correction of, or deletion of personal information

• Request suspension of personal information processing

• Opt out of receiving marketing communications

Requests may be made via email or customer support, and the Company will take action without delay.

Article 8 (Measures to Protect Personal Information)

The Company implements the following technical and administrative measures to protect personal information:

• Minimization of access rights to personal information

• Password protection and access control

• Encrypted storage and transmission (SSL applied)

• Regular security inspections

• Operation of antivirus software

• Security compliance management for partner companies

Article 9 (Use and Refusal of Cookies)

The Company may use cookies to analyze and improve website usage.
Users may refuse the storage of cookies through their browser settings.

Article 10 (Chief Privacy Officer)

• Name: Hyunyoung Kim

• Title: CEO

• Email: hykim@sphered.kr

Article 11 (Amendments to This Privacy Policy)

If this policy is amended, the Company will provide notice on its website at least 7 days prior to the effective date.
In the event of material changes required by law, notice will be provided at least 30 days in advance.