ieumBio Co., Ltd. (hereinafter the "Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act ("PIPA") of the Republic of Korea, in order to protect the personal information of data subjects and handle related complaints in a swift and smooth manner.
Article 1. Purpose of Processing Personal Information
The Company processes personal information for the following purposes. Personal information being processed will not be used for purposes other than those stated below; should the purpose of use change, the Company will take necessary measures, including obtaining separate consent in accordance with Article 18 of PIPA.
- Responding to and replying to inquiries, quotation requests, and proposals received through the website
- Communications related to service information and business collaboration
- Record retention for dispute resolution and complaint handling
Article 2. Personal Information Items Processed
The Company processes the following personal information items.
- Items collected through the Contact form (Contact Us)
- Required: Name, Email address, Message
- Optional: Contact number (Phone number)
- Items automatically generated and collected during the use of the internet services
- IP address, cookies, Service usage records, Visit dates and times, Browser type, and Device information
Article 3. Period of Processing and Retention
- The Company processes and retains personal information within the period of retention and use prescribed by law or within the period of retention and use consented to by the data subject upon collection.
- The processing and retention periods for each type of personal information are as follows.
- Responses to website inquiries: Until the inquiry is resolved. However, the records will be retained for three (3) years after resolution to support dispute and complaint handling, and will be destroyed thereafter without delay.
- Automatically generated information such as access logs: Three (3) months from the date of collection (in accordance with the obligations under the Protection of Communications Secrets Act).
Article 4. Provision of Personal Information to Third Parties
The Company processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information), and does not provide personal information to third parties without the prior consent of the data subject. The following cases are exceptions:
- Where the data subject has given separate consent
- Where there is a special provision in any law, or where it is unavoidable to fulfill obligations under the law
- Where an investigative authority requests it for investigative purposes pursuant to the procedures and methods prescribed by law
Article 5. Entrustment of Personal Information Processing
For the smooth provision of services, the Company entrusts personal information processing tasks as follows.
| Entrusted Party | Entrusted Task |
|---|---|
| Cafe24 Corp. | Website hosting and server operation |
| Google LLC | Google Analytics (website usage statistics and analysis) |
When entering into an entrustment contract, the Company specifies in writing — in accordance with Article 26 of PIPA — matters including the prohibition of processing personal information for purposes other than the entrusted task, technical and managerial protection measures, restrictions on re-entrustment, supervision of the entrusted party, and liability for damages. The Company supervises whether the entrusted party processes personal information safely.
If the content of the entrusted task or the entrusted party changes, the Company will disclose it through this Privacy Policy without delay.
Article 6. Rights and Obligations of the Data Subject and Legal Representatives, and Methods of Exercise
- The data subject may exercise the following rights related to personal information protection against the Company at any time:
- Request to view personal information
- Request correction in case of errors
- Request deletion of personal information
- Request suspension of personal information processing
- The exercise of rights under Paragraph 1 may be conducted in writing, by email, or by facsimile (FAX) to the Company pursuant to Article 41 (1) of the Enforcement Decree of PIPA, and the Company will take action without delay.
- If the data subject is a child under the age of 14, the Company must obtain the consent of the legal representative when collecting the child's personal information. In this case, the legal representative may exercise the rights to view, correct, delete, or suspend the processing of the child's personal information.
- The rights may be exercised through a legal representative or an agent authorized by the data subject. In this case, a power of attorney in accordance with Form 11 of the "Notification on Personal Information Processing Methods" must be submitted.
Article 7. Procedures and Methods of Destroying Personal Information
- The Company destroys personal information without delay when it becomes unnecessary, such as upon expiration of the retention period or achievement of the processing purpose.
- The procedures and methods of destruction are as follows:
- Destruction Procedure: Personal information subject to destruction is selected and destroyed with the approval of the Privacy Officer.
- Destruction Method
- Electronic files: Permanently deleted in a manner that prevents restoration.
- Printed personal information: Shredded or incinerated.
Article 8. Measures to Ensure the Safety of Personal Information
Pursuant to Article 29 of PIPA, the Company implements the following technical, managerial, and physical measures to ensure the safety of personal information.
- Managerial measures: Establishment and implementation of internal management plans, and regular employee training
- Technical measures: Access rights management for personal information processing systems, installation of access control systems, encryption of unique identification information, installation and updates of security programs, and application of HTTPS communication security
- Physical measures: Access control to server rooms and data storage facilities
Article 9. Installation, Operation, and Refusal of Devices that Automatically Collect Personal Information
- The Company uses "cookies" to store and retrieve usage information in order to provide individualized, customized services to users.
- Cookies are small pieces of information that the server operating the website sends to the user's browser,
and may be stored on the user's computer or mobile device.
- Purpose of using cookies: To identify visit and usage patterns, popular searches, and access frequency for each page visited, and to use such data for service improvement.
- Installation, operation, and refusal of cookies:
Users have the option to install cookies. You can refuse to store cookies through the settings menu of each web browser.
- Chrome: Settings > Privacy and security > Clear browsing data OR Cookies and other site data
- Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
- Safari: Preferences > Privacy > Block all cookies
- Impact of refusal: Refusing to store cookies may cause difficulties in using customized services.
- The Company uses Google Analytics by Google LLC for website usage statistics.
Users may opt out of data collection through the following link:
- Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
Article 10. Privacy Officer
The Company has designated the following Privacy Officer to take overall responsibility for personal information processing tasks, handle complaints, and provide remedies in connection with personal information processing.
| Category | Details |
|---|---|
| Name | Yumi Kim |
| Position | Chief Executive Officer |
| [email protected] | |
| Phone | +82-10-3098-2755 |
Data subjects may contact the Privacy Officer regarding any inquiries, complaints, or requests for remedy related to personal information protection that arise while using the Company's services. The Company will respond and address such inquiries without delay.
Article 11. Remedies for Infringement of Rights
For remedies regarding personal information infringement, data subjects may apply for dispute resolution or consultation to the following organizations.
- Personal Information Dispute Mediation Committee: (no area code) 1833-6972 / www.kopico.go.kr
- Personal Information Infringement Report Center: (no area code) 118 / privacy.kisa.or.kr
- Supreme Prosecutors' Office Cyber Investigation Division: (no area code) 1301 / www.spo.go.kr
- National Police Agency Cyber Investigation Bureau: (no area code) 182 / ecrm.police.go.kr
Article 12. Changes to the Privacy Policy
This Privacy Policy is effective from the date of enforcement. In the event of additions, deletions, or corrections due to changes in laws and policies, the Company will provide notice through the announcement section of the website at least 7 days prior to the effective date of such changes.
Company Information
- Company Name : ieumBio Co., Ltd.
- CEO : Yumi Kim
- Business Registration No. : 263-87-03384
- Address : Room 611, Building 251, 50 UNIST-gil, Eonyang-eup, Ulju-gun, Ulsan, Republic of Korea
- Phone : +82-10-3098-2755
- Email : [email protected]
This Privacy Policy is effective as of May 28, 2026.
Note: In case of any discrepancy between the Korean and English versions, the Korean version shall prevail.
