Privacy Policy
Bankware Global (the “Company”) complies with the personal information protection requirements under the Personal Information Protection Act and other applicable laws. To ensure that related complaints are handled promptly and smoothly, the Company establishes and publishes this Privacy Policy as follows.
Article 1. Methods, Categories, and Purposes of Personal Information Processing
“Personal information” means information relating to a living individual that identifies the individual, such as a name or resident registration number. It also includes information that does not identify a specific individual on its own but can readily be combined with other information to identify that individual.
The Company processes personal information as follows:
Method: Submission of the “Contact Us” form on the Company website
Categories of personal information: Email address; any personal information included in the subject or inquiry/request content.
Purpose: To receive, review, and respond to inquiries, and to handle disputes and complaints
Article 2. Processing and Retention Period of Personal Information
The Company retains personal information for up to one year after the purpose of processing a “Contact Us” inquiry has been achieved and destroys it without delay when the retention period expires.
If a data subject withdraws consent or requests deletion, the Company destroys the information without delay unless retention is required by law.
If a different retention period is prescribed by law, the Company follows that period.
The purpose of processing is deemed achieved 30 days after the Company’s final response, provided that the data subject makes no further inquiry during that period.
Article 3. Provision of Personal Information to Third Parties
The Company processes personal information only within the scope of the purposes specified in this Policy.
The Company does not provide collected personal information to third parties. However, it may do so where specific provisions of applicable laws apply or where the data subject has given separate consent.
Article 4. Entrustment of Personal Information Processing
The Company does not currently entrust the processing of collected personal information to external parties. If it does so in the future, the Company will update this Policy without delay to disclose the entrusted party, the scope of the entrusted work, the retention and use period, and other relevant details.
Article 5. Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them
A data subject or legal representative (in the case of a child under 14 years of age) may request access to, correction or deletion of, or suspension of processing of their personal information. The exercise of certain rights may be restricted under the Personal Information Protection Act or other applicable laws.
How to exercise these rights: Send an email to privacy@bankwareglobal.com.
Processing deadline and notice: The Company will process requests without delay and notify the requester by email of the outcome and reasons within 10 days of receiving the request.
Deletion or withdrawal requests: The Company retains the email address and any personal information included in the subject or inquiry/request content only for the retention period stated in Article 2. Upon a deletion request or withdrawal of consent, the Company will immediately destroy the relevant information unless retention is required by law.
When a data subject requests access, correction, deletion, or suspension of processing, or exercises the right to refuse an automated decision or request an explanation of one, the Company verifies that the requester is the data subject or a duly authorized representative.
Article 6. Safeguards for Personal Information
In accordance with Article 29 of the Personal Information Protection Act, the Company implements the following technical, physical, and administrative safeguards necessary to protect personal information.
Technical and physical safeguards
All pages of the website are served over HTTPS. Email is protected in transit using TLS encryption.
To prevent personal information from being leaked through hacking or computer viruses, the Company installs security software and regularly updates and checks it. Systems are installed in access-controlled areas, where the Company monitors them and blocks unauthorized access through technical and physical controls.
Administrative safeguards
Inquiry emails may be shared internally only to the minimum extent necessary to handle the inquiry. Departments and employees receiving the information must follow the same retention and destruction standards set out in this Policy. Automatic forwarding to external parties is prohibited.
Article 7. Procedures and Methods for Destruction of Personal Information
The Company destroys personal information without delay when the retention period expires or the purpose of processing has been achieved.
Emails used to handle inquiries (including received, sent, and draft emails) and copies of their attachments are subject to destruction and are permanently deleted from the email system.
If retention is required by law or due to a dispute, investigation, or similar reason, the information is immediately destroyed once that reason no longer applies.
Article 8. Personal Information Protection Officer and Contact Person
The Company designates the following Personal Information Protection Officer and contact person to oversee personal information processing and to handle data subjects’ complaints and requests for remedies related to personal information processing.
Data subjects may direct personal information protection complaints to the Officer or the contact person.
The Company will respond promptly and appropriately to users’ inquiries.
Personal Information Protection Officer
Name: Sangman Lee
Department: Corporate Management Unit
Contact: +82-2-501-6415
Email: privacy@bankwareglobal.com
Personal Information Protection Contact Person
Name: Jaeseung Yoon
Department: IT Infrastructure Support Team
Contact: +82-2-501-6415
Email: privacy@bankwareglobal.com
Article 9. Remedies for Infringement of Data Subjects’ Rights
Data subjects may seek dispute resolution or consultation through the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency’s Personal Information Infringement Report Center to obtain remedies for infringement of their personal information. For other reports or consultations concerning personal information infringement, please contact:
Personal Information Dispute Mediation Committee (www.kopico.go.kr; Tel. 1833-6972)
KISA Personal Information Infringement Report Center (privacy.kisa.or.kr; Tel. 118, no area code required)
Cybercrime Investigation Division, Supreme Prosecutors’ Office (www.spo.go.kr; Tel. 1301, no area code required)
Cyber Investigation Bureau, Korean National Police Agency (ecrm.cyber.go.kr; Tel. 182, no area code required)
Article 10. Changes to this Privacy Policy
This Privacy Policy takes effect on its effective date. If a material change is made (e.g., a change to the retention period or the addition of a new instance in which personal information is provided to a third party), the Company will give advance notice on its website through reasonable means before the change takes effect.
Effective date: November 13, 2026