What is collected, where it is used, and when it is deleted

This policy applies to personal information processed on this website by the office of Attorney Joo Youngjae of Saeyeoul Law Firm (hereinafter the “firm”). This includes inquiries sent through the site, conversations with the guide assistant on the site, and records automatically left while using the site.

Records of cases already accepted are managed separately under the Attorney Act, relevant statutes, and the retainer agreement, not under this policy. Content exchanged during phone or in-person consultations is also not subject to processing on this site.

This site is not directed at children under 14. If the firm learns that a child's personal information has been submitted without legal guardian consent, it will not use it and will destroy it without delay.

The only place the firm asks for personal information is the written inquiry form. Name, email address, and inquiry content are required; the email address is needed for the reply. Contact number is optional. Address or resident registration number is never requested. The guide assistant does not ask for identity. Below are items that visitors send themselves or that are automatically left for the site to function. The guide assistant asks for consent to collection and overseas transfer separately before the first message leaves the browser.

Email inquiry

Name, email address, contact number if provided, inquiry content, and the language in which the inquiry was written. The time received and consent records (consent to collection and use of personal information, consent to processing of sensitive information, and the version of the policy posted at that time) are recorded together. All of this becomes a single email sent to the firm's mailbox, and that email is the only record of the inquiry. No database or copy remains on the website server.

Guide assistant conversation

Questions entered by the visitor, answers sent by the firm, an identifier distinguishing the conversation, and the language of the conversation. For conversations not in Korean, a Korean translation of the questions and answers is stored for staff to read, which is a second copy of the same content. In addition, the consented items, the time of consent, the version of the policy posted at the time of consent, the time each message was sent, and the start and end times of the conversation are stored. Also stored are a status indicating whether the conversation is in automated response, waiting to be connected to the firm, or being answered by a staff member, and the time it was transferred to a person.

Browser storage items

A copy of the conversation content, conversation identifier, conversation status, the number of the last read message, and consent records (consented items and time of consent). These are stored in the visitor's browser.

Access log

Time of request, request path, and response status. These are records to confirm that the server is operating normally.

IP address

Used only in memory to prevent excessive requests from the same source over a short period. Not stored in files or databases.

Conversations with the guide assistant remain as a copy in the visitor's browser and are transmitted to the server each time a message is sent to continue the conversation. The copy left in the browser can be deleted by the visitor, and records left on the server are deleted according to the retention period below.

This site has no third-party tracking tools for advertising or visitor analytics. No pixels or tags are placed to recognize visitors on other sites.

Processed to answer inquiries, schedule consultations, and confirm factual details to the extent needed for the consultation.

Processed so that the guide assistant can generate answers based on the firm's guide materials and transfer questions it cannot answer to the firm's staff.

Processed to confirm that the site is provided normally and to block automated mass requests and fraudulent access.

Collected personal information is not used beyond the above purposes. If the purpose changes, the firm will notify and obtain consent again at that time.

The firm primarily handles criminal cases. Therefore, inquiries sent by visitors often contain sensitive information under Article 23 of the Personal Information Protection Act, such as criminal records, progress of investigations and trials, health, and residence status.

The firm does not request sensitive information first. Content that visitors write and send on their own is processed only to the extent needed to answer the inquiry and is not used for other purposes. Consent varies by channel. In the written inquiry form, separate consent for processing sensitive information under Article 23 is obtained apart from consent to collection and use of personal information; if either is absent, the server does not send the inquiry. This consent record, along with the time received and the version of the policy posted at that time, is written in the notification email sent to the firm and remains in the firm's mailbox. In the guide assistant, two consents are obtained: consent to collection and use and consent to overseas transfer; no separate consent under Article 23 is obtained, and the consent records are stored on the server with the conversation logs.

It is safer to discuss specific facts over the phone or in an in-person consultation rather than with the guide assistant. Content written to the guide assistant is transmitted to an overseas processor to generate answers, and this transmission occurs only if consent under the overseas transfer clause below has been obtained.

This site publishes pages introducing the progress of cases handled by the attorney. Since this is where the site handles the most personal information, it is described separately.

Published posts do not contain the names, birth dates, addresses, contact numbers, or case numbers of the parties involved. However, they do contain information that qualifies as sensitive, such as nationality, residence status, family relations, alleged facts, and disposition results, or content that allows someone who knows the circumstances to recognize whose case it is.

Publication is made without separate consent from the parties involved. The firm requires that the above items (name, birth date, address, contact number, case number) not be included as a condition for publication.

If you believe information about yourself is published, you may request deletion from the personal information protection officer below. Upon request, the firm will stop public access to the page until verification is complete.

Personal information whose retention period has passed is destroyed without delay. Electronically stored data is deleted in a way that cannot be recovered, and any paper output is shredded or incinerated.

Email inquiry

1 year from the date received.

Guide assistant conversation records

90 days from the date the last message was sent. After the period, a scheduled deletion job deletes the conversation and its messages together.

Copies stored in the browser

Until the visitor deletes them. They can be deleted at any time via the browser's site data deletion.

Access log

Determined by size, not by date. Access logs are kept only up to three files of 10 MB each; when full, the oldest are discarded. Therefore, the period a single line remains depends on the volume of subsequent requests, and discarded records are not moved elsewhere.

IP address

Kept only in memory while calculating request limits. Not stored separately.

Where statutes require longer retention, the firm retains the data for the period required by those statutes and then destroys it, using it only for the purposes prescribed by those statutes during retention.

The firm does not provide visitors' personal information to third parties. It is not sold, not used for advertising, and not shared with other firms.

Provision is made only to the extent required by a lawful request from an investigative authority based on statutes or a request under court proceedings, within the scope defined by that request.

Processing consignment and overseas transfer for operating the site have different characteristics and are described separately in the following clauses.

This site uses three overseas service providers. The matters prescribed by Article 28-8 of the Personal Information Protection Act are stated for each below. However, since the third provider processes email at facilities in Korea, the facts necessary for judgment are stated as they are without asserting its nature.

The map on the directions page loads OpenStreetMap's screen directly. At that time, the visitor's browser connects directly to OpenStreetMap's server, so access logs may remain on that server. The firm does not send the visitor's information to that server, and this connection does not occur unless that page is opened.

How the recipient handles personal information is confirmed through contracts and the policies disclosed by that provider. Inquiries about overseas transfer and withdrawal of consent may be directed to the personal information protection officer below.

This site stores the following two things in the visitor's browser. No cookies for advertising or visitor analytics are used.

NEXT_LOCALE (cookie)

A cookie that remembers the language chosen by the visitor and shows the same language on the next visit. Retention period is 1 year.

Browser storage items

Stores conversation copy, conversation identifier, conversation status, the number of the last read message, and consent records (consented items and time of consent) under the name juyoungjae-law.chat, juyoungjae-law.chat.id, juyoungjae-law.chat.status, juyoungjae-law.chat.seen:<Conversation identifier>, juyoungjae-law.chat.consent. This is to keep the conversation going across pages and to avoid asking for consent already given again.

Cookies can be refused or deleted in browser settings. Deleting the language cookie will open the site in the default language on the next visit.

Browser storage items can be deleted using the browser's site data deletion. Note that these items do not remain only in the browser; they are transmitted to the server each time a message is sent to continue the conversation.

Data subjects may exercise the following rights against the firm at any time.

Access

You may confirm your personal information held by the firm and receive a copy of it (Article 35 of the Personal Information Protection Act).

Correction and deletion

You may request correction or deletion of content that is not factual (Article 36).

Suspension of processing

You may request that processing of personal information be stopped (Article 37).

Withdrawal of consent

For processing based on consent, you may withdraw consent at any time, and withdrawal affects only future processing. Consent for the guide assistant can be withdrawn directly via 'Withdraw consent and delete conversation' at the bottom of the chat window. This button requests deletion of the copy left in the browser and deletion of the conversation from the firm's records. However, the button reaches only that conversation. Content already read by staff or answered in other ways, such as notes written down separately or contact moved to email, is not reached by the button; in that case, please contact the address below. If the request does not reach the server, the screen will inform you of that fact and show the phone number.

Requests may be made to the personal information protection officer below by phone, email, or in writing. If made through a representative, a power of attorney is required. The firm will take action within 10 days of receiving the request and notify you of the result.

If statutes require retention, or if there is a risk of unfairly infringing on another person's life, body, property, or interests, the firm may refuse all or part of the request. In that case, the firm will inform you of the reason for refusal and how to raise an objection.

Answers from the guide assistant are guidance only and do not automatically make decisions that affect the visitor's rights or obligations.

Only what is actually done is stated. Stating measures not taken is not a security measure but an advertisement.

Encryption in transit

Communication between the visitor and the server, and between the server and overseas processors, is all over HTTPS.

Access control

The staff screen for viewing conversation logs is password-protected and limits the number of login attempts. Currently, this screen is protected by a single password shared by the firm; per-person accounts and role separation are not yet in place.

Minimization of collection

The written inquiry form collects name, email address, and inquiry content, with contact number optional. Address and resident registration number are not requested, and the guide assistant does not ask for identity. IP addresses are not stored.

Limitation of retention period

The only data deleted by the scheduled deletion job is guide assistant conversation logs. Conversations 90 days after the last message are deleted along with their messages. Written inquiries exist only in the firm's mailbox, so their retention period is maintained by a person deleting the email. The notification email sent to the firm includes the date until which it should be kept and a request to delete it afterward.

This site is designed to handle as little personally identifiable information as possible. Nevertheless, content that a visitor writes in an inquiry can itself be sensitive, so detailed facts are better discussed in a phone or in-person consultation.

The person responsible for overseeing tasks related to personal information processing and handling data subjects' inquiries, complaints, and remedies is as follows.

Personal information protection officer

주영재 / 파트너변호사

Contact

+82-10-9690-9805 / ianlaw09@saeyeoul.co.kr

Department receiving access requests

주영재

For matters related to personal information, complaints, or remedies, please contact the address above and a response will be given without delay.

If you need consultation or remedy for personal information infringement, you may contact the following institutions. All are separate from the firm.

Personal Information Dispute Mediation Committee

1833-6972 (www.kopico.go.kr)

Personal Information Infringement Reporting Center

118 without area code (privacy.kisa.or.kr)

Supreme Prosecutors' Office

1301 without area code (www.spo.go.kr)

National Police Agency

182 without area code (ecrm.police.go.kr)

If you have suffered loss due to processing that violates the Personal Information Protection Act, you may claim damages in court under Article 39 of the same Act.

If the content of this policy changes, the changes and the effective date will be announced on this page first. Changes that are unfavorable to visitors or important will be announced at least 7 days before the effective date.

If you need the content of past policies, request it from the contact below and it will be sent.