Langcode Privacy Policy
Langcode (the “Company”) processes personal information lawfully and manages it securely in accordance with the Personal Information Protection Act of the Republic of Korea. The Company establishes and publishes this Privacy Policy under Article 30 of the Act to explain its processing procedures and standards and to address privacy-related complaints.
1. Scope
This policy applies to personal information processed for inquiries, newsletter subscriptions and website security at langcode.io. Information about consent to collect and use personal information and consent to receive the newsletter is provided separately in the relevant submission forms.
2. Purposes, information and retention
| Activity | Purpose | Information | Retention criterion |
|---|---|---|---|
| Inquiries and responses | Reviewing and answering inquiries, communicating outcomes and making necessary business contact | Required: name, email address and inquiry message Optional: company name and telephone number | One year after the inquiry has been handled |
| Newsletter subscription | Sending the requested newsletter and managing the subscription contact list | Required: email address Optional: name and company name | Until unsubscription or withdrawal of consent |
| Newsletter consent and subscription records | Verifying consent and the processing of subscription requests | Email address, privacy-consent and newsletter-consent choices, notice version at the time of consent, submission date and time, notice language and subscription request reference | Until unsubscription or withdrawal of consent |
| Website security | Preventing automated inquiry submissions, reuse of verification tokens and service abuse | IP address, request and verification times and results, security verification token and a token hash used to prevent reuse | For as long as needed for security verification and abuse prevention; deleted when those purposes have been fulfilled and the information is no longer needed |
3. Collection and consent records
The Company collects personal information entered directly into the inquiry and newsletter forms. Individuals may refuse consent to the collection and use of their personal information. However, the Company may be unable to handle an inquiry or provide the newsletter without consent for the required information.
The Company obtains privacy consent and newsletter consent separately. Providing optional information is not a condition of submitting an inquiry or subscribing to the newsletter.
The Company retains the email address, consent choices, notice version, submission date and time, notice language and subscription request reference to verify consent and the processing of subscription requests.
4. Service providers and processing roles
The Company uses the following services to operate the website and handle submissions.
| Service | Outsourced activities |
|---|---|
| Microsoft (Azure) | Operating website servers, databases and file storage in the Republic of Korea, and storing operational information and consent records |
| Twilio Inc. (SendGrid) | Transmitting inquiry notifications and automated replies, and registering and managing contacts for newsletter delivery |
| Cloudflare, Inc. (Turnstile) | Security verification to identify automated inquiry submissions for site protection |
Subprocessors and their activities are described in the Microsoft Data Protection Addendum and related lists, Twilio subprocessor list and Cloudflare subprocessor list.
5. International transfers
For the international outsourcing of email delivery and contact-list management necessary to provide requested inquiry responses and newsletter subscriptions, the Company discloses the relevant information under Article 28-8(1)(3)(a) of the Personal Information Protection Act.
| Service and privacy contact | Processing details |
|---|---|
| Twilio Inc. (SendGrid) privacy@twilio.com | Information and purpose: Inquiry names, email addresses, messages and optional company names and telephone numbers are processed for inquiry notifications and automated replies. Subscriber email addresses and optional names and company names are processed for newsletter delivery and contact-list management. Country and method: Service infrastructure in the United States is used. Information is transmitted over encrypted connections (HTTPS) when an inquiry or subscription is submitted. Retention: Subscription contacts are managed until unsubscription or withdrawal of consent. Email content is processed for as long as needed for transmission. Delivery and security records are subject to the SendGrid retention and deletion criteria. |
| Cloudflare, Inc. (Turnstile) dpo@cloudflare.com | Information and purpose: IP addresses, browser information and verification signals are processed on the inquiry page to identify automated requests. The Company's server verifies the token and does not send inquiry names, email addresses or messages to Cloudflare. Locations and method: Information is processed over encrypted connections during security verification on the inquiry page. Cloudflare identifies the United States and the European Economic Area as its primary storage locations in its published policy and explains that information may also be accessed or processed in other countries where it operates. Purposes and retention: Cloudflare acts as the Company's processor for site protection and also processes verification signals for its own detection-technology improvements. Information is processed for as long as needed for those purposes, under the criteria described in the Turnstile Privacy Addendum and Cloudflare Privacy Policy. |
Individuals may choose not to submit an inquiry or newsletter subscription, or request suspension of processing or withdrawal of consent at support@langcode.io. The Company may be unable to handle inquiries or provide newsletters if essential processing is stopped. Minimal information needed to maintain an opt-out is managed separately from delivery contact lists.
6. Deletion of personal information
The Company deletes or destroys personal information without delay when it is no longer needed, including when the retention period expires or the processing purpose has been fulfilled. Electronic records are handled using the relevant system’s deletion methods. Where separate retention is required by law, the applicable grounds, information and period will be identified.
When a deletion request is received, the Company checks the relevant website records, business email accounts and provider contact lists. You may request that newsletter delivery stop, that personal information be deleted, or both.
7. Rights requests and newsletter opt-out
Data subjects may request access to, correction or deletion of personal information, suspension of processing, or withdrawal of consent. Requests may be submitted to support@langcode.io. The Company verifies the identity of the data subject or authorized representative, handles the request in accordance with applicable law and communicates the outcome.
To stop receiving the newsletter, send an unsubscription request to the same email address. The Company will check the request and process the delivery stop. You may also use this contact to request information about your consent or subscription records.
If applicable law provides grounds to restrict all or part of a request, the Company will explain those grounds.
For privacy-infringement consultation, you may contact the Personal Information Infringement Report Center at 118. For dispute mediation, you may contact the Personal Information Dispute Mediation Committee at 1833-6972.
9. Security measures
The Company manages access to personal information and the website through authentication and authorization for administrative functions, encrypted communications, verification of automated requests and review of operational records.
Access permissions and storage settings for systems and external services handling personal information are managed for their processing purposes.
10. Privacy contact
- Chief Privacy Officer
- Minjun Kim
- Privacy inquiries and rights requests
- support@langcode.io
11. Effective date and previous versions
This policy takes effect on November 7, 2026. The Company announces subsequent changes and their effective dates on this website.