Privacy Policy

Effective 2024.10.30

Blockspoon Inc. handles your personal data with care and complies with the PIPA and related laws.

1.Purpose of processing

Blockspoon Inc. ("Blockspoon" or the "Company") values the personal data of users of the Kolleges service and complies with the PIPA and other domestic data-protection laws.

a. Membership sign-up and management

Confirming intent to join, identity verification, maintaining membership, preventing misuse, checking guardian consent for children under 14, notices, and grievance handling.

b. Providing goods or services

Providing services/content, delivery, contracts/invoices, personalization, identity/age verification, payment/settlement, paid-service purchase/change/termination, and debt collection.

c. Customer support

Verifying identity of inquirers, confirming complaints, communication channels, fact-finding contact, notifying results, and keeping records for dispute mediation.

d. Marketing and advertising

Developing new/personalized services, events and promotional information, demographic-based services and ads, validating services, usage statistics, and ads accompanying free services.

2.Processing and retention period

Blockspoon processes and retains personal data within the periods required by law or consented to by the data subject. Data for sign-up, services, support, and marketing is retained from the date of consent until account deletion.

Where retention is required by law, the Company keeps member data for the periods below and uses it only for that purpose.

Items, basis, and period required by law
ItemBasis (law)Period
Contracts/withdrawalsE-Commerce Act5 yrs
Payment & supply of goodsE-Commerce Act5 yrs
Electronic financial transactionsElectronic Financial Transactions Act5 yrs
Tax invoicesVAT Act5 yrs
Consumer complaints/disputesE-Commerce Act3 yrs
Credit informationCredit Information Act3 yrs
Comms/internet logs, access trackingProtection of Communications Secrets Act3 mo

3.Items and collection method

a. Items collected
  • Email sign-up — (required) email, password, name / (optional) phone
  • Social sign-up (Google, Naver) — (required) name, email, user identifier / (optional) nickname, birthday, age range, gender, mobile
  • Settlement — (required) company, representative & resident no., business address, phone, admin contact, bank account details
  • Payment — card or bank account info, payment records, business info, name, DOB, email, phone, address
  • Auto-generated — IP, cookies, usage records, access logs
b. Collection methods

Website, paper forms, fax, phone, support board, email, and provision from partners.

4.Children under 14

When collecting data on children under 14, Blockspoon obtains the legal guardian's consent and collects the minimum necessary. (Required: guardian's name, relationship, contact.)

Blockspoon may ask the child for minimal guardian info and verifies the guardian's consent by one of the following methods.

  • On-site consent confirmed by SMS to the guardian
  • On-site consent plus guardian's card information
  • On-site consent plus guardian's mobile identity verification
  • Signed paper form delivered in person, by mail, or fax
  • Email with consent, returned by the guardian
  • Phone notice and consent, or a follow-up call
  • Any equivalent method confirming consent

5.Provision to third parties

Blockspoon processes data only within stated purposes and provides it to third parties only where Articles 17 and 18 of the PIPA apply, otherwise never.

For smooth service, the following is provided only with consent and to the minimum extent.

  • Recipient: the operator of the Kolleges site joined, and the instructor of the enrolled class
  • Purpose: same as Section 1
  • Items: name, email, phone, payment info
  • Retention: same as Section 2

6.Delegation and overseas transfer

Blockspoon delegates some tasks to external processors as below. If you don't use the related service, your data isn't shared with that processor.

Domestic delegation (retained until deletion / service or contract end)
ProcessorTask
Naver Cloud (Seoul)Data storage & system operation
SupabaseStorage infra & usage-history management
Channel Corp.Chat support
NurigoAlert/SMS dispatch
StibeeEmail dispatch
NICE PaymentsPayment gateway
KG InicisPayment gateway
KakaoPayPayment gateway
PayPal Pte. Ltd.Payment gateway
Toss PaymentsPayment gateway

Blockspoon does not provide data to overseas businesses, except it delegates the following processing tasks overseas for contract performance and user convenience.

Overseas transfer
RecipientPurpose · itemsCountry · methodRetention
PayPal Pte. Ltd.Overseas card payment · card infoUSA · over the network at useUntil deletion / service or contract end
Google, Inc. (Google Analytics)Usage analytics for recommendations/ads · cookie dataUSA · over the network at useUntil deletion / service or contract end

7.Destruction procedure and method

Blockspoon destroys personal data without delay once it is no longer needed. Data that must be kept under other laws is moved to a separate database or location.

  • Procedure: selected and destroyed with the privacy officer's approval.
  • Method: electronic files irrecoverably erased; paper shredded or incinerated.

8.Inactive users

Accounts inactive for 1 year are moved to dormant status and stored separately, then destroyed after 1 year. Notice (status, date, items) is sent 30 days in advance by email/SMS. Signing in beforehand prevents conversion; signing in afterward restores the account with consent.

9.Data subject rights

Data subjects may request access, correction, deletion, or suspension at any time. For children under 14, the guardian must act; minors 14+ may act themselves or via a guardian.

  • Exercised via writing, email, or chat under the PIPA Enforcement Decree Art. 41; the Company acts without delay.
  • May be exercised via a guardian or authorized agent with a power of attorney.
  • Access/suspension may be limited per Arts. 35(4) and 37(2); data mandated by other laws can't be deleted.

10.Security measures

  • Administrative: internal plan, limited personnel, regular training
  • Technical: access control, encryption, security software, log retention
  • Physical: access control to server/work areas

12.Behavioral data

Blockspoon collects behavioral data to provide personalized services, benefits, and online-tailored ads.

FieldDetail
ItemsVisit records, activity logs, search history, ad identifiers
MethodCookies and auto-collection tools on web/app visit/launch
ToolsGoogle Analytics, Meta Pixel, Amplitude, Microsoft Clarity
PurposeRecommendations (incl. ads) and product-improvement metrics
Retention1 year, then destroyed

Ad providers (Meta, Google LLC, Microsoft) may collect behavioral data, retained 1 year. You can block/allow tailored ads via browser cookie settings (e.g., tracking prevention or third-party cookie blocking in Edge/Chrome). Blockspoon collects no sensitive behavioral data and serves no tailored ads to children under 14.

13.Privacy officer & department

Blockspoon designates the following privacy officer to oversee data processing and handle complaints and remedies.

  • Privacy officer — CEO · Yoon Chang-jin · 070-8998-4469 · support@kolleges.net
  • Privacy department — Dev team · Yoon Chang-jin · 070-8998-4469 · support@kolleges.net

You may direct all privacy inquiries, complaints, remedies, and access requests to the department above; Blockspoon responds without delay.

14.Remedies for infringement

You may apply for dispute resolution or counseling to the agencies below.

  • Personal Info Dispute Mediation Committee : 1833-6972 (kopico.go.kr)
  • Privacy Infringement Report Center : 118 (privacy.kisa.or.kr)
  • Supreme Prosecutors' Office : 1301 (spo.go.kr)
  • National Police Agency : 182 (ecrm.cyber.go.kr)
  • Central Administrative Appeals Commission : 110 (simpan.go.kr)

15.Changes to this policy

This Privacy Policy applies from 30 Oct 2024. Additions, deletions, or corrections are announced at least 7 days before they take effect via pop-up or individual notice. Previous versions are available under "Previous versions."

If translations differ, the Korean version prevails. · If translations differ, the Korean version prevails.
Previous versions

View the version, effective date, and key changes.

Contact

Privacy officer: Yoon Chang-jin
070-8998-4469 · support@kolleges.net