Effective date: July 21, 2025
BlueCanvas (the “Company”) values your privacy and complies with South Korea’s Personal Information Protection Act and other applicable laws. This policy explains how personal information is collected and used in connection with our services and describes your rights.
1. Personal information collected and collection methods
1-1. Information collected
- Quote requests and inquiries: name, email address, phone number, company, job title, and inquiry details
- Partner portal registration: name, email address, organization, and project-code identifiers
- Service use: access logs, IP address, browser and device information, and cookies
- Marketing activities (with optional consent): email address, company, name, and industry
1-2. Collection methods
- Website quote forms, project inquiries, and chat consultations
- Partner portal registration after a project contract and account issuance
- Technical information collected automatically while using the service, including analytics, cookies, and logs
2. Purposes of collection and use
- Entering into and fulfilling project contracts
- Client communication and feedback support
- Creating partner portal accounts and configuring permissions
- Providing marketing and event information, including newsletters with prior consent
- Improving service quality and developing new services
- Fulfilling legal and administrative obligations, including invoices and contract processing
3. Retention and use periods
The Company destroys personal information without delay once its purpose has been fulfilled. Where applicable law requires retention, information is kept according to the periods below.
| Record |
Retention period |
Legal basis |
| Contract and service history |
5 years |
Act on Consumer Protection in Electronic Commerce |
| Payment and transaction records |
5 years |
Framework Act on National Taxes; Act on Consumer Protection in Electronic Commerce |
| Customer complaints and dispute handling |
3 years |
Act on Consumer Protection in Electronic Commerce |
| Access logs, including IP address |
3 months |
Protection of Communications Secrets Act |
4. Disclosure to third parties
As a rule, the Company does not disclose personal information to outside parties. Exceptions may apply in the following cases.
- When the user has provided prior consent
- When disclosure is required to comply with law
- When the minimum information needed to provide a service is shared with a partner after prior notice and separate consent
5. Outsourcing of personal information processing
The Company currently does not outsource personal information processing.
6. Destruction procedures and methods
Personal information is securely destroyed under internal policy when its retention period expires or its processing purpose has been fulfilled.
- Procedure: identify information no longer needed and delete it under internal policy
- Method: permanently delete electronic files and shred or incinerate printed materials
7. Your rights and how to exercise them
You may exercise the following rights at any time.
- Request access, correction, deletion, or suspension of processing
- Withdraw consent to receive marketing communications
- Request account deactivation or deletion of information
Submit requests through the customer support email below.
Customer support email: opci1004@gmail.com
8. Cookies and automated collection technologies
The Company uses cookies and analytics tools, including Google Analytics, to provide tailored services. You may reject cookies through your browser settings, although some service features may then be limited.
9. Security safeguards
- Data encryption and secure storage
- Operation of firewalls and intrusion detection systems
- Regular security reviews and penetration testing
- Permission management and access restrictions
- Privacy training for employees
10. Privacy officer
Privacy Officer: Ja-hyeon Cho, Director
Organization: BlueCanvas
Email: opci1004@gmail.com
11. Policy changes
This policy may be revised due to changes in law, government policy, or internal policy. Changes will be announced on the website or by email. This policy is effective as of July 21, 2025.
