Privacy Policy.

We process personal information only for the purposes below. If a purpose changes, we take the steps Article 18 of the Act requires, such as asking for separate consent.

• 01Newsletter: sending the journal to people who subscribed, and handling unsubscribe requests
• 02Admin accounts: identifying our own staff, keeping them signed in, managing permissions and sending password reset links
• 03Improving the site: usage statistics, fixing errors and security checks

We process the items below. Optional items can be left blank. We do not collect sensitive information, and we never ask for a resident registration number or any other national ID number.

We keep personal information only for the period required by law or agreed with you.

Where another law requires us to keep a record for longer, we keep it for the period that law sets.

We do not provide personal information to third parties, except with your separate consent or where a law specifically requires it, for example a lawful request from an investigative agency.

We use the providers below to run the site. Our agreements with them require secure handling, limit sub-processing and prohibit use for any other purpose, and we check that they comply.

If these providers or their tasks change, we will say so in this policy.

We transfer personal information outside Korea as listed below. In every case it is sent over an encrypted connection (HTTPS) at the moment you use the feature.

You can refuse these transfers. You can block the analytics transfer yourself with your browser's cookie settings or Google's opt-out add-on (section 9). To refuse any other transfer, contact us (section 11). We will look at each request, but a feature that cannot work without the transfer may become unavailable to you.

When personal information is no longer needed, because its retention period has ended or its purpose has been met, we delete it without delay.

• 01Procedure: we identify information whose period or purpose has ended and delete it after review by our privacy officer. Information another law requires us to keep is stored separately and deleted when that period ends.
• 02Method: electronic files are deleted so they cannot be recovered. Anything printed on paper is shredded or burned.
• 03Web server logs are removed by the server's log rotation.

You can ask us at any time to show, correct, delete or stop processing your personal information, and you can withdraw your consent.

• 01To unsubscribe, email us at ddokddak.inc@gmail.com (section 11) and we will remove you from the list. Unsubscribing costs you nothing.
• 02Staff with an admin account can ask a top-level administrator, or email us (section 11), to see, correct or delete their account details.
• 03You can make a request in writing or by email, and we will act on it without delay. If someone asks on your behalf, they need to submit a power of attorney in the form the Act prescribes.
• 04Requests to see or stop processing may be limited under Articles 35(4) and 37(2) of the Act, and information another law requires us to collect cannot be deleted on request.

Automated decisions

We make no decisions that significantly affect your rights or obligations without a person involved.

We do not check age when you subscribe. If we learn that we hold personal information of a child under 14, we delete it without delay, and a legal guardian can ask us to check or delete it using the contact in section 11.

We use an analytics tool that relies on cookies. A cookie is a small file stored by your browser that helps us understand visits and how the site is used.

• 01Tool: Google Analytics 4 (cookies such as _ga)
• 02What it records: device and browser details, pages visited, clicks on email, phone, map and social links, and whether you started typing in the subscribe box and whether the subscription went through. The email address you type is never sent to this tool.
• 03How long: Google Analytics keeps user and event data for up to 14 months from collection (the longest period it offers). The cookies themselves disappear when they expire or when you delete them.
• 04How to refuse: block or delete this site's cookies in your browser's site settings, or install the Google Analytics opt-out browser add-on. Blocking them does not stop you from using the site.
• 05Admin sign-in cookie: a cookie that keeps staff signed in (ametage_admin) is set only when our staff sign in to the admin screen. Visitors never get it.

We take the following measures.

• 01Password hashing: admin passwords are stored only as a one-way hash (scrypt), so not even we can read them. Password reset links are not stored in readable form and stop working after 30 minutes or one use.
• 02Encryption in transit: the whole site runs on HTTPS (TLS).
• 03Access control: only signed-in staff can open the admin screen, and personal accounts work only after an administrator approves them. Accounts with editing rights only cannot see inquiries or the subscriber list, and repeated failed sign-ins are blocked for a while.
• 04Minimal sharing: our subscription notices carry only the first two characters of your email address and its domain, never the full address.

Our privacy officer is responsible for how we handle personal information and answers questions, complaints and requests for remedy. Requests to see your information go to the same contact.

Write to the contact above with any privacy question, complaint or request for remedy, and we will respond without delay.

If you believe your privacy has been infringed, you can also ask these Korean public bodies for mediation or advice.

• 01Personal Information Dispute Mediation Committee: +82 1833-6972 · www.kopico.go.kr
• 02Personal Information Infringement Report Center (KISA): 118 in Korea · privacy.kisa.or.kr
• 03Supreme Prosecutors' Office: 1301 in Korea · www.spo.go.kr
• 04Korean National Police Agency: 182 in Korea · ecrm.police.go.kr

Anyone whose rights are infringed by a public institution's decision, or failure to act, on a request under Articles 35 to 37 of the Act can file an administrative appeal under the Administrative Appeals Act.

This policy applies from its effective date. If we add, remove or change anything because of changes in law, policy or our services, we will post the reason and the change on this page at least 7 days before it takes effect, or 30 days before for changes that significantly affect your rights.