Privacy Policy
Effective 2024.10.30Blockspoon Inc. handles your personal data with care and complies with the PIPA and related laws.
1.Purpose of processing
Blockspoon Inc. ("Blockspoon" or the "Company") values the personal data of users of the Kolleges service and complies with the PIPA and other domestic data-protection laws.
Confirming intent to join, identity verification, maintaining membership, preventing misuse, checking guardian consent for children under 14, notices, and grievance handling.
Providing services/content, delivery, contracts/invoices, personalization, identity/age verification, payment/settlement, paid-service purchase/change/termination, and debt collection.
Verifying identity of inquirers, confirming complaints, communication channels, fact-finding contact, notifying results, and keeping records for dispute mediation.
Developing new/personalized services, events and promotional information, demographic-based services and ads, validating services, usage statistics, and ads accompanying free services.
2.Processing and retention period
Blockspoon processes and retains personal data within the periods required by law or consented to by the data subject. Data for sign-up, services, support, and marketing is retained from the date of consent until account deletion.
Where retention is required by law, the Company keeps member data for the periods below and uses it only for that purpose.
| Item | Basis (law) | Period |
|---|---|---|
| Contracts/withdrawals | E-Commerce Act | 5 yrs |
| Payment & supply of goods | E-Commerce Act | 5 yrs |
| Electronic financial transactions | Electronic Financial Transactions Act | 5 yrs |
| Tax invoices | VAT Act | 5 yrs |
| Consumer complaints/disputes | E-Commerce Act | 3 yrs |
| Credit information | Credit Information Act | 3 yrs |
| Comms/internet logs, access tracking | Protection of Communications Secrets Act | 3 mo |
3.Items and collection method
- Email sign-up — (required) email, password, name / (optional) phone
- Social sign-up (Google, Naver) — (required) name, email, user identifier / (optional) nickname, birthday, age range, gender, mobile
- Settlement — (required) company, representative & resident no., business address, phone, admin contact, bank account details
- Payment — card or bank account info, payment records, business info, name, DOB, email, phone, address
- Auto-generated — IP, cookies, usage records, access logs
Website, paper forms, fax, phone, support board, email, and provision from partners.
4.Children under 14
When collecting data on children under 14, Blockspoon obtains the legal guardian's consent and collects the minimum necessary. (Required: guardian's name, relationship, contact.)
Blockspoon may ask the child for minimal guardian info and verifies the guardian's consent by one of the following methods.
- On-site consent confirmed by SMS to the guardian
- On-site consent plus guardian's card information
- On-site consent plus guardian's mobile identity verification
- Signed paper form delivered in person, by mail, or fax
- Email with consent, returned by the guardian
- Phone notice and consent, or a follow-up call
- Any equivalent method confirming consent
5.Provision to third parties
Blockspoon processes data only within stated purposes and provides it to third parties only where Articles 17 and 18 of the PIPA apply, otherwise never.
For smooth service, the following is provided only with consent and to the minimum extent.
- Recipient: the operator of the Kolleges site joined, and the instructor of the enrolled class
- Purpose: same as Section 1
- Items: name, email, phone, payment info
- Retention: same as Section 2
6.Delegation and overseas transfer
Blockspoon delegates some tasks to external processors as below. If you don't use the related service, your data isn't shared with that processor.
| Processor | Task |
|---|---|
| Naver Cloud (Seoul) | Data storage & system operation |
| Supabase | Storage infra & usage-history management |
| Channel Corp. | Chat support |
| Nurigo | Alert/SMS dispatch |
| Stibee | Email dispatch |
| NICE Payments | Payment gateway |
| KG Inicis | Payment gateway |
| KakaoPay | Payment gateway |
| PayPal Pte. Ltd. | Payment gateway |
| Toss Payments | Payment gateway |
Blockspoon does not provide data to overseas businesses, except it delegates the following processing tasks overseas for contract performance and user convenience.
| Recipient | Purpose · items | Country · method | Retention |
|---|---|---|---|
| PayPal Pte. Ltd. | Overseas card payment · card info | USA · over the network at use | Until deletion / service or contract end |
| Google, Inc. (Google Analytics) | Usage analytics for recommendations/ads · cookie data | USA · over the network at use | Until deletion / service or contract end |
7.Destruction procedure and method
Blockspoon destroys personal data without delay once it is no longer needed. Data that must be kept under other laws is moved to a separate database or location.
- Procedure: selected and destroyed with the privacy officer's approval.
- Method: electronic files irrecoverably erased; paper shredded or incinerated.
8.Inactive users
Accounts inactive for 1 year are moved to dormant status and stored separately, then destroyed after 1 year. Notice (status, date, items) is sent 30 days in advance by email/SMS. Signing in beforehand prevents conversion; signing in afterward restores the account with consent.
9.Data subject rights
Data subjects may request access, correction, deletion, or suspension at any time. For children under 14, the guardian must act; minors 14+ may act themselves or via a guardian.
- Exercised via writing, email, or chat under the PIPA Enforcement Decree Art. 41; the Company acts without delay.
- May be exercised via a guardian or authorized agent with a power of attorney.
- Access/suspension may be limited per Arts. 35(4) and 37(2); data mandated by other laws can't be deleted.
10.Security measures
- Administrative: internal plan, limited personnel, regular training
- Technical: access control, encryption, security software, log retention
- Physical: access control to server/work areas
11.Automatic collection (cookies)
Blockspoon uses cookies for personalization (visit/use patterns, popular queries, secure connection). You may refuse cookies in your browser settings, though personalized features may be limited.
12.Behavioral data
Blockspoon collects behavioral data to provide personalized services, benefits, and online-tailored ads.
| Field | Detail |
|---|---|
| Items | Visit records, activity logs, search history, ad identifiers |
| Method | Cookies and auto-collection tools on web/app visit/launch |
| Tools | Google Analytics, Meta Pixel, Amplitude, Microsoft Clarity |
| Purpose | Recommendations (incl. ads) and product-improvement metrics |
| Retention | 1 year, then destroyed |
Ad providers (Meta, Google LLC, Microsoft) may collect behavioral data, retained 1 year. You can block/allow tailored ads via browser cookie settings (e.g., tracking prevention or third-party cookie blocking in Edge/Chrome). Blockspoon collects no sensitive behavioral data and serves no tailored ads to children under 14.
13.Privacy officer & department
Blockspoon designates the following privacy officer to oversee data processing and handle complaints and remedies.
- Privacy officer — CEO · Yoon Chang-jin · 070-8998-4469 · support@kolleges.net
- Privacy department — Dev team · Yoon Chang-jin · 070-8998-4469 · support@kolleges.net
You may direct all privacy inquiries, complaints, remedies, and access requests to the department above; Blockspoon responds without delay.
14.Remedies for infringement
You may apply for dispute resolution or counseling to the agencies below.
- Personal Info Dispute Mediation Committee : 1833-6972 (kopico.go.kr)
- Privacy Infringement Report Center : 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office : 1301 (spo.go.kr)
- National Police Agency : 182 (ecrm.cyber.go.kr)
- Central Administrative Appeals Commission : 110 (simpan.go.kr)
15.Changes to this policy
This Privacy Policy applies from 30 Oct 2024. Additions, deletions, or corrections are announced at least 7 days before they take effect via pop-up or individual notice. Previous versions are available under "Previous versions."
View the version, effective date, and key changes.
Privacy officer: Yoon Chang-jin
070-8998-4469 · support@kolleges.net
