Linkup Infotech, Inc. ("Company") complies with the PersonalInformation Protection Act and other applicable laws, and herebyestablishes and discloses the following Privacy Policy.
Article 1 Purposes of Processing Personal Information
The Company processes personal information for the following purposes.Personal information processed will not be used for any purpose otherthan the following, and if the purpose of use changes, the Company willtake necessary measures, such as obtaining separate consent, pursuantto Article 18 of the Personal Information Protection Act.
1. Responding to inquiries and consultations (contact form, live demo requests, etc.)
2. Performing consulting/implementation contracts and managing customer relationships
3. Providing the LU Cloud free trial and paid subscription service, and processing and settling fees4. Marketing and advertising (only where separate consent is obtained)
Article 2 Items of Personal Information Collected and Method ofCollection
1. Items collected
- Required: name, company name, e-mail address, phone number
- Additional items for paid subscription sign-up: payment method information (card issuer, approval information, etc. — sensitive payment information such as card numbers is not stored directly by the Company and is processed through a payment gateway (PG) provider)
- Optional: inquiry details, job title
2. Method of collection: website inquiry/subscription forms, e-mail, phone, event applications, etc.
Article 3 Processing and Retention Period of Personal Information
The Company processes and retains personal information within theretention period required by law or the period consented to by thedata subject. In particular, pursuant to the Act on Consumer Protectionin Electronic Commerce, the Company retains the following records forthe stated periods:
- Records of contracts or withdrawal of subscription: 5 years
- Records of payment and supply of goods/services: 5 years
- Records of consumer complaints or dispute resolution: 3 years
- Records of labeling and advertising: 6 months
- Other inquiry/consultation records: 3 years after the inquiry is resolved
- Marketing consent: until consent is withdrawn
Article 4 Provision of Personal Information to Third Parties
The Company processes data subjects' personal information only withinthe scope of the purposes specified in Article 1, and provides personalinformation to third parties only in cases falling under Articles 17and 18 of the Personal Information Protection Act, such as with thedata subject's consent or pursuant to a special provision of law.
Article 5 Outsourcing of Personal Information Processing
The Company outsources certain personal information processing tasks asfollows, to ensure smooth handling of personal information, andstipulates, in the relevant outsourcing agreement, the mattersnecessary to keep personal information secure pursuant to Article 26 ofthe Personal Information Protection Act.
- Contractor: Odoo S.A. (hosting: Odoo.sh) Outsourced task: operation of cloud infrastructure and data storage
- Contractor: [Payment Gateway (PG) provider name to be confirmed] Outsourced task: processing and settlement of paid subscription payments
Article 6 Rights and Obligations of Data Subjects and How to ExerciseThem
A data subject may exercise the following rights regarding personalinformation protection against the Company at any time.
1. Request to access personal information
2. Request to correct errors, if any
3. Request to delete personal information
4. Request to suspend processingSuch rights may be exercised in writing, by e-mail, or by other means,and the Company will take necessary action without delay.
Article 7 Destruction of Personal Information
1. When personal information becomes unnecessary, such as upon the lapse of the retention period or achievement of the processing purpose, the Company destroys the personal information without delay.
2. Personal information stored in electronic file form is destroyed using a technical method that renders the record unrecoverable, and personal information printed on paper is destroyed by shredding or incineration.
Article 8 Measures to Ensure the Security of Personal Information
The Company takes the following measures to ensure the security ofpersonal information:
1. Minimizing and training the staff handling personal information
2. Restricting and managing access to personal information
3. Processing sensitive information such as payment details through a specialized PG provider, so that the Company does not directly store or retain such information
Article 9 Privacy Officer
The Company has designated the following Privacy Officer, who isresponsible for personal information processing overall and forhandling data subjects' complaints and providing remedies related topersonal information processing. Privacy Officer
- Name: Junho Kang
- Title: CEO
- Contact: kangjg@link-up.co.kr, +82-70-4731-5376
Article 10 Remedies for Infringement of Rights
A data subject may apply for dispute resolution or consultationregarding infringement of personal information rights to the followingorganizations:
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
- National Police Agency: 182 (ecrm.cyber.go.kr)
Article 11 Changes to this Privacy Policy
This Privacy Policy applies from its effective date, and where there isany addition, deletion, or correction to its content pursuant toapplicable law or Company policy, the Company will give notice througha notice on its website from 7 days before the change takes effect.
Article 12 Language and Governing Document
This Privacy Policy is originally written in Korean. The Company mayprovide translations, including an English version, for theconvenience of data subjects. In the event of any conflict between atranslation and the Korean original, the Korean original shall prevail.
Supplementary ProvisionThis Policy shall take effect as of 2026-07-28.