Privacy Policy
Effective date: June 8, 2026
This English version is provided for the convenience of readers. In the event of any discrepancy, the Korean version shall prevail.
SPACEBASE (the “Company”) establishes and discloses this Privacy Policy pursuant to Article 30 of the Personal Information Protection Act (PIPA) of the Republic of Korea, in order to protect the personal information of data subjects and to handle related concerns promptly and effectively.
Through this policy, the Company explains what personal information it collects, for what purposes, and what measures it takes to protect that information.
Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes. The information is not used for any purpose other than those stated below, and should the purpose change, the Company will take necessary measures such as obtaining separate consent in accordance with Article 18 of PIPA.
- Inquiry response and consultation — replying to and consulting on design/estimate inquiries (Contact) and project requests (RFP)
- Service delivery — project review, proposal preparation, and contract-related discussions
- Website operation and improvement — enhancing content and service quality through visit analytics (when cookies are consented to)
Article 2 (Personal Information Items Collected)
The Company processes the following personal information items.
| Category | Items Collected | Method |
|---|---|---|
| Contact form | Name, email, phone (optional), project type, inquiry content | Website form entry |
| Project request (RFP) form | Company name, contact person, title, email, phone, project details (location, area, scale, budget, schedule, space program, current status, design direction, referral source), attachments, additional message | Website form entry |
| Automatically collected | IP address, browser/device info, visit date and time, page usage records, cookies | Automatically generated during service use (when cookies are consented to) |
Article 3 (Processing and Retention Period)
The Company processes and retains personal information within the retention/use period required by law or consented to by the data subject at the time of collection.
- Inquiry / project request information: 3 years from the date of inquiry, or until the data subject requests deletion (whichever comes first). If a contract is concluded, the retention period required by relevant laws applies.
- Automatically collected information (cookies / visit analytics): up to 26 months from collection (per Google Analytics policy) or until consent is withdrawn.
Article 4 (Provision of Personal Information to Third Parties)
The Company processes personal information only within the scope specified in Article 1 and does not process it beyond the original purpose or provide it to third parties without the data subject’s prior consent.
The Company currently does not provide personal information to any third party, except where required by law.
Article 5 (Outsourcing of Personal Information Processing)
The Company outsources personal information processing tasks as follows, and stipulates the necessary matters to ensure that personal information is managed safely in accordance with Article 26 of PIPA.
| Processor | Outsourced Task |
|---|---|
| Vercel Inc. | Website hosting and infrastructure operation |
| Supabase, Inc. | Database and attachment file storage |
| Google LLC | Visit analytics (Google Analytics) — when cookies are consented to |
Article 6 (Rights of Data Subjects and How to Exercise Them)
Data subjects may at any time request access to, correction, deletion, or suspension of processing of their personal information.
Such requests may be made to the Company in writing or by email, and the Company will act without delay. Requests may be directed to the Personal Information Protection Officer (Article 10).
Article 7 (Destruction of Personal Information)
When personal information becomes unnecessary due to the expiry of the retention period or achievement of the processing purpose, the Company destroys it without delay.
Information in electronic file form is permanently deleted using methods that prevent recovery, and information recorded on paper is shredded or incinerated.
Article 8 (Measures to Ensure Security)
The Company takes the following measures to ensure the security of personal information.
- Administrative: minimizing access privileges and managing personnel
- Technical: access control of processing systems, encryption of transmission (HTTPS)
- Physical: access control to systems where personal information is stored
Article 9 (Installation, Operation, and Refusal of Cookies)
The Company may use cookies for visit analytics. Cookies are collected only when the data subject consents upon visiting the site.
Data subjects may withdraw consent via the “Cookie Settings” at the bottom of the website, or refuse cookie storage through their web browser settings. Refusing cookies does not restrict use of the website.
Article 10 (Personal Information Protection Officer)
The Company designates a Personal Information Protection Officer as below to take overall responsibility for personal information processing and to handle inquiries, complaints, and remedies from data subjects.
- Personal Information Protection Officer: Kim Young-un
- Email: hello@spacebase.co.kr
- Phone: +82-2-517-9728
Article 11 (Remedies for Infringement of Rights)
Data subjects may apply to the following organizations for dispute resolution or consultation regarding personal information infringement.
- Personal Information Dispute Mediation Committee: +82-1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: +82-118 (privacy.kisa.or.kr)
- Supreme Prosecutors’ Office Cyber Investigation: +82-1301 (www.spo.go.kr)
- National Police Agency Cyber Bureau: +82-182 (ecrm.police.go.kr)
Article 12 (Changes to This Privacy Policy)
This Privacy Policy applies from the effective date. Any additions, deletions, or amendments due to changes in laws, policies, or security technology will be announced on the website prior to taking effect.