Privacy Policy
Lapis Global Co., Ltd. ("the Company") complies with the Personal Information Protection Act of Korea and processes personal data as set out below.
1. Data collected and how
The Company collects the following through the website inquiry form and email. - Required: name, email address, message - Optional: company, phone number, project or site, inquiry type, items of interest and sample list, files attached to your email (such as drawings) - Generated automatically: connection logs such as IP address and access time may be generated and processed by our hosting provider when you visit the site or submit the form. Visit statistics (pages viewed, referrer, browser and device type, country) are aggregated without cookies. The site has no user accounts, and we use no advertising cookies or behavioural tracking.
2. Purpose of processing
Collected data is used solely to respond to quotation, sample, material and consulting inquiries and for related follow-up. We do not use it for any other purpose, including marketing.
3. Retention period
Data is retained for three years after the inquiry is resolved, then destroyed without delay, unless a longer period is required by applicable Korean law.
4. Destruction procedure and method
Personal data is destroyed without delay once the retention period ends or the purpose has been fulfilled. Electronic files (including inquiry emails) are permanently deleted so that they cannot be recovered, and paper documents are shredded or incinerated.
5. Third-party provision and outsourcing
The Company does not provide personal data to third parties. The following processors are engaged to operate the website and Company email. - Cloudflare, Inc.: website hosting, inquiry form transmission, forwarding of Company email, and visit statistics (Cloudflare Web Analytics, no cookies) - Microsoft Corporation: operation of the mailboxes for Company email (lapisglobal.co.kr addresses) and storage of messages The processors handle data only within the scope of the engagement, under the Company’s supervision as required by law.
6. Overseas transfer
To operate the website and Company email, the Company entrusts the processing of personal data overseas as follows. This transfer is necessary to answer your inquiry and to enter into a contract, and is disclosed in this policy under Article 28-8(1)(3) of the Personal Information Protection Act. - Recipient: Cloudflare, Inc. (privacy contact: privacyquestions@cloudflare.com) - Country: United States (including Cloudflare’s global network) - Data: information entered in the inquiry form, emails received at Company addresses (content and attachments), connection logs, visit statistics - When and how: transmitted over the network when you visit the site, submit the form or email us - Purpose: website hosting, inquiry form transmission, forwarding of Company email, visit statistics - Retention: until the purpose is fulfilled or the engagement ends - Recipient: Microsoft Corporation (privacy contact: privacy.microsoft.com) - Country: United States (under Microsoft’s policy, data may also be stored in other countries where Microsoft has data centres, including Korea) - Data: all inquiry details listed in section 1 (name, email address, message, company, phone number, project or site, inquiry type, items of interest and sample list), plus email content and attachments - When and how: transmitted over the network through Cloudflare Email Routing when an email is received - Purpose: receiving and storing inquiry emails - Retention: until the end of the retention period in section 3, then destroyed as described in section 4 If you do not wish your data to be transferred overseas, you may contact us by phone (+82 10-9321-7212) instead of the form or email. You can ask us to delete inquiries you have already sent, as described in section 9. Visiting the website still involves the processing of connection logs, and any quotation or document we send you by email also passes through the Microsoft mailbox above.
7. Cookies and automatic collection
This website uses no advertising or analytics cookies and collects no behavioural data for targeted advertising. Page assets, including web fonts, are served from our own domain. Visit statistics are aggregated with Cloudflare Web Analytics, which sets no cookies and does not identify individual visitors. Our hosting provider (Cloudflare) processes connection logs to operate and secure the site, as described in section 6.
8. Security measures
The Company takes the following measures to keep personal data secure. - Administrative: access is limited to the minimum number of staff, and viewing for any other purpose is prohibited. - Technical: all connections are encrypted (HTTPS), and access to the inquiry mailbox is controlled. - Physical: any printed documents containing personal data are kept in a locked place.
9. Your rights
You may request access, correction, deletion or suspension of processing at any time via hello@lapisglobal.co.kr. We respond within 10 days of receipt.
10. Data protection officer
Officer: the CEO Contact: hello@lapisglobal.co.kr, +82 10-9321-7212
11. Remedies for infringement
For reports or advice on infringement of personal data, you may contact the following bodies. - Personal Information Dispute Mediation Committee: 1833-6972 (kopico.go.kr) - Personal Information Infringement Report Center (KISA): 118 (privacy.kisa.or.kr) - Supreme Prosecutors’ Office: 1301 (spo.go.kr); Korean National Police Agency cyber bureau: 182 (ecrm.police.go.kr)
12. Changes
This policy is effective from 11 October 2026. When it changes, we publish the effective date and the changes on this page. Changes made on 11 October 2026: Microsoft Corporation (Company email mailboxes) added to sections 5 and 6 as a processor and overseas recipient; email attachments added to section 1; the legal basis for the transfer, recipient contact details, and how to refuse and its effect added to section 6.
Effective 11 October 2026
Previous version effective 16 August 2026