Privacy policy

Version 1.3 · Effective 2026-09-27

TMseo (티엠세오, "TMseo", "we") builds websites for businesses. This policy explains how we handle personal information on our website and in our project process, in accordance with the Personal Information Protection Act of the Republic of Korea (PIPA). 1. What we collect and why • Contact / custom feature form — name, email, company (optional), your message, reference website (optional), and the time you confirmed this policy and its version. Purpose: replying to your enquiry and preparing a proposal. • Estimate — selected options; email (optional, only if you submit the estimate). Purpose: preparing and following up on your estimate. • Live chat (optional) — your messages and any files you send, and your name and email if you give them. Purpose: answering your questions in real time. The chat window loads on most pages, so the chat provider also receives your network address, approximate location, browser and device details and the pages you view, even if you do not start a chat. • Project brief — contact name, email, phone (optional), business details, final approver's name and email, files you upload (logos, photos, documents) and any personal information they contain. Purpose: scoping, quoting and building your website. • Payments (after a quote is agreed) — payer name, email, invoice reference, amount and status. Payment requests are sent and paid through PayPal; we do not receive your card or bank details. PayPal handles the payment details you give it under its own privacy statement. Purpose: issuing payment requests and keeping transaction records. • Usage statistics — collected automatically by the Google Analytics tag when a page loads: the page you view (its path without query parameters, and its title), the referring web address, browser, device, screen and language details, approximate location (country and city) derived from your network address, and the time of your visit. They are sent to Google without cookies or other identifiers stored in your browser, and are not collected on quote, share, checkout, demo or admin pages. Purpose: understanding which pages are used so we can improve the website. • Security — a one-way hash of your network address, used only in memory to limit repeated submissions (not stored), and a coarse device category (bot / mobile / other). Purpose: preventing spam and abuse. We do not ask for national ID numbers, payment card details or passwords. Please do not include them in messages or uploads; to give us access to your accounts, invite us to the account instead. If you upload files that show other people (for example staff photos), you confirm you have the right to share them with us for your project. 2. Legal basis We process this information because you asked us to respond to an enquiry or to prepare or perform a contract (PIPA Art. 15(1)4), to keep records required by law (Art. 15(1)2), to keep our services secure, and to produce usage statistics that help us improve the website (Art. 15(1)6; you can refuse them as described in section 7). Confirming this policy on our forms records that you were informed; it is not a separate marketing consent. We do not send marketing messages. 3. How long we keep it • Enquiries, estimates, chats and briefs that do not become a project — 3 months after our last contact, then deleted. • Project brief, uploaded files and project correspondence — until project handoff and the 30-day stabilization period end, then deleted within 3 months unless you ask us to keep them longer. • Contract and payment records — 5 years, as required by Korean tax law (Framework Act on National Taxes). • Usage statistics — event-level data is kept in Google Analytics for 2 months and then deleted automatically; aggregated reports that no longer contain event-level data may remain available longer under Google's retention rules. When the period ends we delete electronic records so they cannot be restored and destroy any paper copies. 4. Sharing and processors We do not sell or rent personal information and do not provide it to third parties except where required by law. We use these service providers to run our website and communicate with you: • Cloudflare, Inc. — website hosting, network delivery and security; global network, United States (headquarters). • Supabase, Inc. — database and file storage; Singapore (AWS ap-southeast-1). • Google LLC — email (replying to your enquiries) and website usage statistics (Google Analytics); United States. • tawk.to, inc. — live chat; United States (Google Cloud). • PayPal Pte. Ltd. — payment requests (invoices) and payment processing; Singapore. Overseas transfer (PIPA Art. 28-8). The information in section 1 is transferred to these providers over encrypted connections when you submit a form, send an email, open a page where the chat window loads, or pay an invoice, for the purposes and retention periods above. The transfer is necessary to answer your enquiry and perform our contract. If you do not want your information transferred, please contact us by email before submitting; we may then be unable to provide the service. Usage statistics are different: they are sent to Google LLC (United States) over encrypted connections when you open a page of our website, for the purpose and retention period above, and you can refuse them as described in section 7 without affecting your use of the website. 5. Your rights You may ask to access, correct, delete or stop the processing of your personal information, or withdraw a confirmation you gave, by emailing tmseo4800@gmail.com. We reply within 10 days. A legal representative or someone you authorize may make the request for you. If you live outside Korea, we will also honor the rights your local law gives you (for example access, correction, deletion and portability). 6. Security Our website is served only over HTTPS. Access to personal information is limited to the people who need it, uses separate least-privilege database roles, and is logged. We do not store your network address on our own systems (the chat and analytics providers receive it as described in section 1), and we keep secrets out of documents and code. 7. Cookies We do not use advertising or analytics cookies. Google Analytics runs without cookies: we do not let it store identifiers in your browser, and we do not use it for advertising. To refuse usage statistics, use the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout) or block googletagmanager.com in your browser; the website works the same either way. The live chat keeps a visitor identifier and connection state in cookies and browser storage (for example twk_uuid_… and TawkConnectionTime) so a conversation continues across pages; they are not used for advertising. Our hosting provider may set strictly necessary security cookies to protect the site from abuse. 8. Children Our services are for businesses and are not directed to children under 14. 9. Privacy officer Seo Yeeun (서예은) · tmseo4800@gmail.com 10. Help and complaints (Korea) • Personal Information Dispute Mediation Committee: 1833-6972 · www.kopico.go.kr • Personal Information Infringement Report Center (KISA): 118 · privacy.kisa.or.kr • Supreme Prosecutors' Office: 1301 · www.spo.go.kr • Korean National Police Agency Cyber Bureau: 182 · ecrm.police.go.kr 11. Changes We announce changes on this page at least 7 days before they take effect (30 days for changes that reduce your rights). Previous versions remain available on request. Business information TMseo (티엠세오) · Business registration no. 257-30-01806 · tmseo4800@gmail.com