Note. This English text is a convenience translation. The legally binding version of this policy is the Korean original; in case of any discrepancy, the Korean version prevails.
ACE LABS Inc. (the "Company") complies with the Personal Information Protection Act of Korea (PIPA) and related laws, and publishes this privacy policy to protect data subjects' personal information. This policy applies to personal information collected through the inquiry and consultation forms on the Company's website (e.g., "Request an expert assessment") and through the CRA newsletter ("CRA Watch") subscription form.
1. Purposes of processing
- Receiving consultation/assessment requests, verifying identity, and responding to inquiries
- Introducing services (regulatory readiness and gap-assessment advisory) and conducting consultations
- Managing requests and keeping response records
- Delivering the CRA newsletter ("CRA Watch") and managing subscriptions — double opt-in confirmation, newsletter delivery, and unsubscribe handling
If the purposes change, we will obtain prior consent.
2. Items collected
| Category | Items |
|---|---|
| Required | Company name, contact name, email, phone number |
| Optional | Role/department, product or service overview, EU launch timing, regulatory areas of interest, message |
| Sent together | Self-check result and answer summary (product-related information), submission time and referring page |
| Newsletter — required | Email address |
| Newsletter — optional | Company name, name, role |
| Newsletter — generated | Subscription request/confirmation (consent) time, consent text version, referring page, language, unsubscribe time |
The Company does not collect sensitive information (beliefs, health, etc.) or unique identification numbers.
3. Retention period
- Records are kept for 1 year after the inquiry is closed, then destroyed without delay.
- Newsletter subscription data is kept until you unsubscribe (withdraw consent). Unconfirmed (pending) requests are destroyed within 7 days after the confirmation link expires (72 hours). After you unsubscribe, your email address is converted to a SHA-256 hash and kept for 2 years solely to prevent re-delivery, then destroyed; delivery logs are kept for 6 months.
- Where retention is required by law, records are kept for the period set by the relevant law.
4. Provision to third parties
The Company does not provide personal information to third parties beyond the purposes in Section 1, except with the data subject's separate consent or where specifically required by law.
5. Outsourcing and cross-border transfer
The Company entrusts the storage and processing of personal information to an overseas provider (Google) as follows. Under Article 28-8 of PIPA, disclosure through this policy serves as notice of the cross-border transfer to the extent necessary for performing the contract and providing the service.
| Recipient | Google LLC |
|---|---|
| Contact | Google privacy inquiries: support.google.com/policies |
| Country | United States and other countries where Google data centers are located |
| Entrusted work | Storage and management of inquiry data (Google Sheets/Apps Script); notification and reply emails (Gmail) |
| Items transferred | Items in Section 2 (company name, contact name, email, phone, and other entered information) |
| When and how | Transmitted over the network at the time the user submits the form |
| Retention | The period in Section 3 (1 year after the inquiry is closed) or until the outsourcing contract ends |
You may refuse the cross-border transfer. However, since the inquiry form depends on this processing, refusing may limit use of the form (in that case, please contact us directly at ceo@acelabs.co.kr).
In addition, for delivery of the CRA newsletter ("CRA Watch"), the Company entrusts personal information processing to an overseas provider (Resend) as follows. Under Article 28-8 of PIPA, disclosure through this policy serves as notice of the cross-border transfer to the extent necessary for performing the contract and providing the service.
| Recipient | Resend, Inc. |
|---|---|
| Contact | privacy@resend.com (data processing: resend.com/legal/dpa) |
| Country | United States |
| Entrusted work | Email delivery and transmission-history management |
| Items transferred | Email address (and name, if optionally provided) |
| When and how | Transmitted over the network when newsletters and confirmation emails are sent |
| Retention | Until you unsubscribe or the outsourcing contract ends |
| Right to refuse | You may choose not to subscribe, or unsubscribe at any time (footer link in every issue, or ceo@acelabs.co.kr). If you refuse, the newsletter cannot be delivered. |
6. Your rights
- You may request access, correction, deletion, or suspension of processing at any time.
- Newsletter unsubscribe: ① the "unsubscribe" link in the footer of every issue ② your mail client's unsubscribe button ③ a request to ceo@acelabs.co.kr — processed immediately, and we will notify you of the result.
- Send requests to ceo@acelabs.co.kr; we will act without delay.
7. Destruction
- Personal information is destroyed without delay once it is no longer needed (retention period expired, purpose achieved).
- Newsletter subscription requests that remain unconfirmed past their retention period, and delivery logs past theirs, are destroyed automatically.
- Electronic files are permanently deleted in a non-recoverable way; printed materials are shredded or incinerated.
8. Security measures
- Minimized access rights and access control
- Encryption in transit (HTTPS)
- Data minimization and retention management
9. Cookies and similar technologies
This site uses the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) to measure advertising performance and for retargeting, only where you have given prior consent. Via cookies, it collects access-related information such as pages visited, device, and browser; the collected information is sent to LinkedIn and used for ad performance analysis and interest-based advertising. It does not collect identifying information such as your name or contact details.
The newsletter (CRA Watch) uses no open-tracking pixels or click tracking.
You can choose whether to consent to cookies via the banner shown on your first visit; if you do not consent, the tool does not run. Even after consenting, you may refuse or delete cookies in your browser settings, or opt out of interest-based advertising via your LinkedIn account settings or ad preferences. The site also uses Vercel Web Analytics, which does not use cookies, for visit statistics.
10. Privacy officer
- Officer: Minseok Ro (CEO)
- Contact: ceo@acelabs.co.kr
11. Remedies (Korea)
For dispute resolution or counseling regarding privacy infringement, you may contact the following Korean authorities.
- Personal Information Dispute Mediation Committee: +82 1833-6972 (kopico.go.kr)
- Privacy Infringement Report Center (KISA): 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: 1301 · Korean National Police Agency: 182
12. Changes to this policy
This policy applies from its effective date; additions, deletions, or changes will be announced on this page before they take effect.
- Announced: 28 June 2026 (initial) · 18 July 2026 (revised: Section 9, automatic data collection) / Effective: 18 July 2026
- Announced: 15 August 2026 (revised: CRA newsletter subscription — scope, purposes, items, retention, cross-border transfer, rights, automatic collection) / Effective: 15 August 2026