PiFl Labs Co., Ltd. ("Company", "we", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and disclose information when you use our website at pifl-labs.com.
1. Information We Collect
We collect the following categories of personal information:
| Category | Items | Collection Method |
|---|---|---|
| Email Inquiries | Email address, name (optional), inquiry content | Direct email submission |
| Website Access | IP address, browser type, device and operating system type, access timestamp, pages visited, referrer | Automatic collection |
2. Purpose of Processing
- Inquiry handling: Receiving customer inquiries via email, contacting for verification, and notifying processing results
- Recruitment inquiries: Receiving and responding to employment-related inquiries
- Website operation: Analyzing access statistics and improving services
3. Retention Period
- Email inquiry records: 3 years after inquiry resolution (Korean Act on Consumer Protection in Electronic Commerce)
- Website access logs: 3 months (Korean Protection of Communications Secrets Act)
- Website visit statistics (Cloudflare Web Analytics): raw data for 7 days, then sampled aggregates for up to 6 months
4. Disclosure to Third Parties
We do not sell, trade, or transfer your personal information to third parties except as required by law or with your explicit consent in accordance with Articles 17 and 18 of the Korean Personal Information Protection Act.
5. Processing Entrustment
For service operation, we entrust personal data processing to the following providers:
| Processor | Purpose | Retention |
|---|---|---|
| Cloudflare, Inc. | Website hosting and delivery, and visit statistics (Cloudflare Web Analytics) | Until contract termination |
| Google LLC | Web font delivery (Google Fonts) | Until contract termination |
| Notion Labs, Inc. | Internal data management | Until contract termination |
6. Data Destruction
- Procedure: Unnecessary personal data is destroyed after approval by the Data Protection Officer.
- Method: Electronic files are permanently deleted using non-recoverable methods. Paper documents are shredded or incinerated.
7. Your Rights
You have the following rights regarding your personal data:
- Right to be informed about the processing of your personal data
- Right to consent to and determine the scope of processing
- Right to access and request information about your personal data
- Right to request correction, deletion, suspension, or destruction of your data
- Right to seek redress for damages caused by processing
You may exercise these rights via written request or email, and we will respond without delay.
8. Security Measures
- Access control and permission management
- SSL/TLS encryption for data in transit
- Security headers (CSP, HSTS, X-Frame-Options, etc.)
- Access logging and retention
9. Cookies
We do not use cookies to identify you or to collect personal data. For convenience, the website uses the following:
- Language cookie (pref-lang): stores only the code of the language the website shows you (ko, ja or en) and lasts one year.
- Browser storage (localStorage): stores only your theme and text size settings on your device; it is not sent to us.
Website visit statistics are counted with Cloudflare Web Analytics, which uses no cookies or browser storage and does not identify individuals from IP addresses or browser information. You can delete or block cookies and site data in your browser settings; the website still works, except that your language and display settings will not be remembered.
10. International Data Transfers
| Recipient | Country | Purpose | Items |
|---|---|---|---|
| Cloudflare, Inc. | United States and countries where Cloudflare data centers are located | Web hosting and visit statistics | Access logs (IP address, browser type, device and operating system type, pages visited, referrer) |
| Google LLC | United States | Web font delivery (Google Fonts) | IP address, browser information |
| Notion Labs, Inc. | United States | Internal data management | Inquiry content |
11. Data Protection Officer
- Company: PiFl Labs Co., Ltd.
- Email: privacy (at) pifl-labs.com
12. GDPR (European Economic Area)
If you are located in the EEA, you have additional rights under the General Data Protection Regulation, including the right to access, rectify, erase, restrict processing, data portability, and object to processing. To exercise these rights, contact us at privacy (at) pifl-labs.com.
13. Remedies
Korean residents may seek remedies through the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency, and other relevant authorities:
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- KISA Privacy Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
- National Police Agency: 182 (ecrm.cyber.go.kr)
14. Changes to this Policy
This Privacy Policy is effective as of November 3, 2026. Compared with the previous version (effective March 10, 2026), it corrects the website hosting and visit-statistics provider to Cloudflare, Inc., which actually operates the site, and discloses Google Fonts web font delivery, the cookie-free visit statistics tool with the items it records (pages visited, referrer, device and operating system type) and their retention, and the language cookie and display-setting storage. Any changes will be announced on our website.