LabGL Co., Ltd. ('the Company') values the privacy of its users and complies with relevant laws including the Personal Information Protection Act. Through this Privacy Policy, the Company provides information on the categories of personal information collected from users, the purpose of collection and use, the period of retention and use, provision to third parties, and destruction of such information.
1. Categories of Personal Information Collected and Collection Methods
The Company collects the following personal information to provide its services:
(1) Required Information
- Name, email address: For receiving and replying to inquiries
- Device information: Device type, operating system, browser type, etc. for service optimization
- Cookies and log information: Service usage records, access logs, IP information, service usage statistics
(2) Optional Information
- Company name, service of interest, contact details: For understanding and replying to an inquiry
Personal information is collected through the following methods:
- When receiving inquiries through the website contact form, email, etc.
- Information automatically generated during service use
2. Purpose of Collection and Use of Personal Information
The Company uses the collected personal information for the following purposes:
- Service provision and operation: Providing WebAR and WebGL services, content optimization
- Service improvement and development: Developing new services, improving existing services, analyzing usage patterns
- Customer support: Responding to inquiries and providing service-related information
- Safe service provision: Preventing fraudulent use and enhancing service security
3. Retention and Use Period of Personal Information
In principle, the Company destroys personal information without delay after the purpose of its collection and use has been achieved. However, certain information may be retained for a specific period as required by relevant laws and regulations.
- Service activity records: Up to 3 months
- Website visit records, log information: Up to 6 months
- Customer inquiry and response records: Up to 3 years
Personal information that must be stored for a certain period according to relevant laws will be stored and managed separately during the legally required period.
4. Procedures and Methods for Destroying Personal Information
The Company destroys personal information without delay when it is no longer necessary due to the expiration of the retention period or the achievement of the purpose of processing.
- Information in electronic file format: Permanently deleted in a manner that cannot be recovered/reproduced
- Other storage media such as printouts: Destroyed through methods such as shredding or incineration
However, personal information that must be stored for a certain period according to relevant laws will be transferred to a separate database (DB) or stored in a different storage location.
5. Provision of Personal Information to Third Parties
In principle, the Company does not provide users' personal information to external parties. However, exceptions apply in the following cases:
- When a user has explicitly consented to the provision to a third party
- When required by law or when there is a request from an investigative agency according to procedures and methods prescribed by law for investigation purposes
- When providing information in a form that cannot identify specific individuals for the purpose of statistical compilation, academic research, or market research
6. Outsourcing of Personal Information Processing
The Company outsources personal information processing tasks as follows in order to operate the service.
- Processor: Google LLC
- Outsourced task: Analysis of website usage statistics (Google Analytics, Google Tag Manager)
- Processor: Vercel Inc.
- Outsourced task: Website hosting and receiving contact form submissions
- Processor: Cloudflare, Inc.
- Outsourced task: Spam prevention on the contact form (Turnstile)
- Processor: Microsoft Corporation
- Outsourced task: Forwarding inquiries by email and keeping them in the Company mailbox (Azure Communication Services, Microsoft 365)
When entering into an outsourcing agreement, the Company specifies in the contract, in accordance with personal information protection laws, the prohibition of processing personal information for any purpose other than performing the outsourced task, technical and administrative safeguards, restrictions on re-outsourcing, supervision of the processor, and liability including damages. The Company supervises whether the processor handles personal information safely.
If the content of the outsourced task or the processor changes, the Company will disclose it through this Privacy Policy.
7. Transfer of Personal Information Overseas
The Company transfers personal information overseas as follows.
(1) Website usage statistics
- Recipient: Google LLC
- Country of transfer: United States
- Time and method of transfer: Transmitted automatically over the network at the time the service is used
- Items transferred: Online identifiers stored in cookies, device and browser information, the addresses of pages visited and usage records, and IP address (used only to estimate the visitor's region and not stored)
- Purpose of use by the recipient: Analysis of website usage statistics
- Retention and use period: The period set by the Google Analytics data retention setting (up to 14 months)
(2) Website hosting and contact form submissions
- Recipient: Vercel Inc.
- Country of transfer: United States (contact form submissions are processed on servers in Seoul, Republic of Korea)
- Time and method of transfer: Transmitted over the network when you visit the website or send an inquiry
- Items transferred: Access records (IP address, device and browser information, requested page addresses) and what you enter in the contact form (name, email, company, product of interest, message)
- Purpose of use by the recipient: Providing the website and receiving inquiries
- Retention and use period: Contact form entries are not stored after they are forwarded by email. Access records are kept for Vercel's log retention period
(3) Spam prevention on the contact form
- Recipient: Cloudflare, Inc.
- Country of transfer: United States
- Time and method of transfer: Transmitted over the network when you open and send the contact form
- Items transferred: IP address, device and browser information
- Purpose of use by the recipient: Checking that an inquiry was sent by a person (spam prevention)
- Retention and use period: The period set by Cloudflare's processing policy after the check
(4) Receiving and keeping inquiry emails
- Recipient: Microsoft Corporation
- Country of transfer: The Microsoft 365 Asia Pacific geography (a datacenter chosen by Microsoft in Australia, Hong Kong SAR, India, Indonesia, Japan, Malaysia, New Zealand, Singapore or South Korea)
- Time and method of transfer: Transmitted over the network when you send the contact form or email the Company
- Items transferred: What you enter in the contact form (name, email, company, product of interest, message) and emails sent to the Company
- Purpose of use by the recipient: Receiving and keeping inquiry emails
- Retention and use period: Up to three years after the reply
Users may refuse the overseas transfer. For (1), block cookies in your browser or install the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout); refusing does not restrict your use of the website. (2), (3) and (4) are required to provide the website and receive inquiries. To contact us without an overseas transfer, call +82-70-7723-8443.
8. User Rights and How to Exercise Them
Users can exercise the following rights regarding their personal information:
- Request to view, correct, and delete personal information
- Request to stop processing personal information
- Withdraw consent for processing personal information
The above rights can be exercised by contacting the Company through writing, phone, email, etc., and the Company will take appropriate action without delay. However, access to, correction, deletion, or suspension of processing of personal information may be restricted according to relevant laws and regulations.
How to exercise user rights:
- Email: hello@labgl.net
- Phone: +82-70-7723-8443
9. Installation/Operation of Automatic Personal Information Collection Devices and How to Decline
The Company may use cookies to provide customized services to users. Cookies are small pieces of data that a website stores in a user's browser.
- Purpose of cookies: Understanding usage patterns, improving services, session management, etc.
- How to decline cookie settings: You can allow all cookies, get confirmation when cookies are stored, or decline all cookie storage by changing your web browser settings.
- Chrome: Settings > Privacy and security > Cookies and other site data
- Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
- Safari: Preferences > Privacy > Cookies and website data
However, if you decline cookie settings, you may have difficulties using some services.
10. Measures to Ensure the Security of Personal Information
The Company takes the following measures to ensure the security of personal information:
- Administrative measures: Establishment and implementation of personal information protection policies, employee training
- Technical measures: Security system construction, encrypted communication, access control and authority management
- Physical measures: Operation of security facilities, access control
11. Personal Information Protection Officer
The Company designates a personal information protection officer as follows to be responsible for the overall processing of personal information and to handle user complaints and remedies related to personal information processing:
▶ Personal Information Protection Officer
- Name: Chan Hyoung Lee
- Position: CEO
- Contact: hello@labgl.net, +82-70-7723-8443
12. Changes to the Privacy Policy
This Privacy Policy was established on April 15, 2025, and if there are any additions, deletions, and revisions to the content due to changes in laws, policies, or security technologies, we will notify you through the homepage notice at least 7 days before the implementation date of the changes. However, for changes that significantly affect user rights, we will provide notice at least 30 days in advance.
13. Other Inquiries Related to Personal Information
If you have any questions about personal information protection, you can contact the personal information protection officer above. If you need to report or consult regarding the infringement of personal information, please contact the following organizations:
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office Cyber Investigation Division: 1301 (www.spo.go.kr)
- National Police Agency Cyber Safety Bureau: 182 (ecrm.cyber.go.kr)