Privacy Policy
Privacy Policy
Unastella Co., Ltd. (hereinafter "Unastella" or the "Company") establishes and discloses this Privacy Policy as follows, in accordance with Article 30 of the Personal Information Protection Act, to inform data subjects of the procedures and standards for the processing of personal information and to enable the prompt and smooth handling of related complaints.
Unastella Co., Ltd. (hereinafter "Unastella" or the "Company") establishes and discloses this Privacy Policy as follows, in accordance with Article 30 of the Personal Information Protection Act, to inform data subjects of the procedures and standards for the processing of personal information and to enable the prompt and smooth handling of related complaints.
Unastella Co., Ltd. (hereinafter "Unastella" or the "Company") establishes and discloses this Privacy Policy as follows, in accordance with Article 30 of the Personal Information Protection Act, to inform data subjects of the procedures and standards for the processing of personal information and to enable the prompt and smooth handling of related complaints.
Article 1 General Provisions
“Personal information” means information about a living individual that can identify the individual by name, email address, phone number, etc. (including information that can identify a specific individual when easily combined with other information even if it alone cannot identify that individual).
“Data subject” means a person who can be identified by the information being processed and is the person who is the subject of that information, including visitors to the Company’s website and inquirers.
Through this Privacy Policy, the Company informs data subjects of what purposes and methods their personal information provided is being processed for, and what measures are being taken to protect personal information.
Article 1 General Provisions
“Personal information” means information about a living individual that can identify the individual by name, email address, phone number, etc. (including information that can identify a specific individual when easily combined with other information even if it alone cannot identify that individual).
“Data subject” means a person who can be identified by the information being processed and is the person who is the subject of that information, including visitors to the Company’s website and inquirers.
Through this Privacy Policy, the Company informs data subjects of what purposes and methods their personal information provided is being processed for, and what measures are being taken to protect personal information.
Article 2 Items, Purposes, Retention and Use Periods of Personal Information Collection and Use
The Company does not process sensitive information that is likely to significantly infringe on the data subject's privacy, or unique identification information assigned to uniquely distinguish an individual, without a basis in law or the data subject's consent. In particular, it does not process resident registration numbers except in cases falling under each item of Article 24-2 (Restriction on Processing Resident Registration Numbers) paragraph 1 of the Personal Information Protection Act.
The Company collects the following personal information to respond to inquiries on its website (Contact).
Article 2 Items, Purposes, Retention and Use Periods of Personal Information Collection and Use
The Company does not process sensitive information that is likely to significantly infringe on the data subject's privacy, or unique identification information assigned to uniquely distinguish an individual, without a basis in law or the data subject's consent. In particular, it does not process resident registration numbers except in cases falling under each item of Article 24-2 (Restriction on Processing Resident Registration Numbers) paragraph 1 of the Personal Information Protection Act.
The Company collects the following personal information to respond to inquiries on its website (Contact).
Purpose of Collection
Purpose of Collection
Purpose of Collection
Inquiry handling and responses
Inquiry handling and responses
Collection Method
Collection Method
Collection Method
Homepage(www.unastella.com/contact)
Contact form completion/submission
Homepage(www.unastella.com/contact)
Contact form completion/submission
Collected items (required)
Collected items (required)
Collected items (required)
Last Name, First Name, Email, Phone Number, Company, Message
Last Name, First Name, Email, Phone Number, Company, Message
Retention and Use Period
Retention and Use Period
Retention and Use Period
Delete without delay when the purpose of collection or use has been achieved, or when the data subject requests deletion.
Delete without delay when the purpose of collection or use has been achieved, or when the data subject requests deletion.
The data subject may refuse the collection and use of personal information; however, if refused, use of related services, such as responses to inquiries, may be restricted.
This site does not have a membership registration process and collects only the minimum personal information necessary to provide its services.
The data subject may refuse the collection and use of personal information; however, if refused, use of related services, such as responses to inquiries, may be restricted.
This site does not have a membership registration process and collects only the minimum personal information necessary to provide its services.
Article 3 Processing of Personal Information Whose Period of Use Has Expired
Personal information of the data subject is destroyed without delay once the purpose of collection and use has been achieved. However, if it is necessary to retain it for a certain period in accordance with relevant laws and regulations, it will be retained only for that period as follows, and if additional retention is required, only the minimum necessary period and the minimum amount of information will be retained through a separate consent process.
Article 3 Processing of Personal Information Whose Period of Use Has Expired
Personal information of the data subject is destroyed without delay once the purpose of collection and use has been achieved. However, if it is necessary to retain it for a certain period in accordance with relevant laws and regulations, it will be retained only for that period as follows, and if additional retention is required, only the minimum necessary period and the minimum amount of information will be retained through a separate consent process.
Preservation Items
Preservation Items
Website visit history (access logs, IP, etc.)
Website visit history (access logs, IP, etc.)
Legal Basis
Legal Basis
Communications Secrets Protection Act
Communications Secrets Protection Act
Retention period
Retention period
3 months
3 months
Article 4 Procedures and Methods for Destruction of Personal Information
1) Destruction Procedure
The Company shall promptly destroy the collected personal information when the purpose of processing has been achieved or the retention period has ended, except where retention is required with the consent of the data subject or under applicable laws and regulations.
2) Destruction Method
Personal information stored in electronic file form shall be deleted using technical methods that make the records unrecoverable, and personal information printed on paper shall be destroyed by shredding with a shredder or by incineration.
Article 4 Procedures and Methods for Destruction of Personal Information
1) Destruction Procedure
The Company shall promptly destroy the collected personal information when the purpose of processing has been achieved or the retention period has ended, except where retention is required with the consent of the data subject or under applicable laws and regulations.
2) Destruction Method
Personal information stored in electronic file form shall be deleted using technical methods that make the records unrecoverable, and personal information printed on paper shall be destroyed by shredding with a shredder or by incineration.
Article 5 Provision of Personal Information to Third Parties
The Company uses personal information only within the scope notified in Article 2, and does not use personal information beyond that scope or provide or disclose it to third parties. However, exceptions apply in the following cases.
When separate consent is obtained from the data subject
When there are special provisions in other laws or it is unavoidable to comply with legal obligations
When a investigative agency requests it in accordance with the procedures and methods prescribed by law for investigative purposes
When the data subject or their legal representative is unable to express their intent, or prior consent cannot be obtained due to an unknown address, etc., and it is clearly deemed necessary to protect the urgent life, body, or property interests of the data subject or a third party
Article 5 Provision of Personal Information to Third Parties
The Company uses personal information only within the scope notified in Article 2, and does not use personal information beyond that scope or provide or disclose it to third parties. However, exceptions apply in the following cases.
When separate consent is obtained from the data subject
When there are special provisions in other laws or it is unavoidable to comply with legal obligations
When a investigative agency requests it in accordance with the procedures and methods prescribed by law for investigative purposes
When the data subject or their legal representative is unable to express their intent, or prior consent cannot be obtained due to an unknown address, etc., and it is clearly deemed necessary to protect the urgent life, body, or property interests of the data subject or a third party
Article 6 Entrustment of Personal Information Processing
To ensure smooth website operation, the Company entrusts part of its personal information processing tasks to external specialized service providers as follows.
Trustee:
Details of entrusted work: Storage and management of Contact form submission data
Entrusted personal information items: Items collected in Article 2
When entrusting personal information processing, the Company clearly specifies matters regarding prohibition of processing personal information for purposes other than performing the entrusted work, technical and administrative protective measures, restrictions on re-entrustment, management and supervision of the trustee, liability for damages, and other related responsibilities, and supervises whether the trustee safely processes personal information.
If the details of the entrusted work or the trustee changes, we will disclose it promptly through this Privacy Policy.
Entrusted personal information will be destroyed without delay once the purpose of collection and use has been achieved.
Article 6 Entrustment of Personal Information Processing
To ensure smooth website operation, the Company entrusts part of its personal information processing tasks to external specialized service providers as follows.
Trustee:
Details of entrusted work: Storage and management of Contact form submission data
Entrusted personal information items: Items collected in Article 2
When entrusting personal information processing, the Company clearly specifies matters regarding prohibition of processing personal information for purposes other than performing the entrusted work, technical and administrative protective measures, restrictions on re-entrustment, management and supervision of the trustee, liability for damages, and other related responsibilities, and supervises whether the trustee safely processes personal information.
If the details of the entrusted work or the trustee changes, we will disclose it promptly through this Privacy Policy.
Entrusted personal information will be destroyed without delay once the purpose of collection and use has been achieved.
Article 7 Rights, Obligations of the Data Subject, and Methods of Exercising Them
Rights and Obligations of the Data Subject
The data subject may at any time request access to, correction or deletion of, and suspension of processing of their personal information processed by the company. However, where any of the following applies, the company may refuse or limit the above requests.
Where there are special provisions in the law or where it is necessary to comply with obligations under statutes and regulations
Where there is a risk of harming the life or body of another person, or a risk of unfairly infringing on the property or other interests of another person
Where, if personal information is not processed, it would be difficult to perform the contract, such as when the services agreed with the data subject cannot be provided, and the data subject has not clearly expressed an intention to terminate the contract
Methods and Procedures for Exercising Rights
A data subject who wishes to access personal information, etc. may request the personal information protection officer listed in Article 9 via email or other means, and the company will take action without delay.
Unless there is a justifiable reason, the company will take the relevant action within 10 days, and if there is a reason for refusal or restriction, it will inform the reason and how to raise an objection.
When the company receives a request from a data subject for access to personal information, etc., it may verify the identity of the data subject through an identification card or other document.
Article 7 Rights, Obligations of the Data Subject, and Methods of Exercising Them
Rights and Obligations of the Data Subject
The data subject may at any time request access to, correction or deletion of, and suspension of processing of their personal information processed by the company. However, where any of the following applies, the company may refuse or limit the above requests.
Where there are special provisions in the law or where it is necessary to comply with obligations under statutes and regulations
Where there is a risk of harming the life or body of another person, or a risk of unfairly infringing on the property or other interests of another person
Where, if personal information is not processed, it would be difficult to perform the contract, such as when the services agreed with the data subject cannot be provided, and the data subject has not clearly expressed an intention to terminate the contract
Methods and Procedures for Exercising Rights
A data subject who wishes to access personal information, etc. may request the personal information protection officer listed in Article 9 via email or other means, and the company will take action without delay.
Unless there is a justifiable reason, the company will take the relevant action within 10 days, and if there is a reason for refusal or restriction, it will inform the reason and how to raise an objection.
When the company receives a request from a data subject for access to personal information, etc., it may verify the identity of the data subject through an identification card or other document.
Article 8 Withdrawal of Consent to the Collection, Use, and Provision of Personal Information
All data subjects may withdraw at any time the consent they have given for the collection, use, and provision of personal information. Upon withdrawal of consent, if you contact the personal information protection officer in Article 9 by email, etc., we will immediately take necessary measures such as deletion of personal information. If measures such as withdrawal of consent and destruction of personal information are taken, that fact will be notified to the data subject without delay.
Article 8 Withdrawal of Consent to the Collection, Use, and Provision of Personal Information
All data subjects may withdraw at any time the consent they have given for the collection, use, and provision of personal information. Upon withdrawal of consent, if you contact the personal information protection officer in Article 9 by email, etc., we will immediately take necessary measures such as deletion of personal information. If measures such as withdrawal of consent and destruction of personal information are taken, that fact will be notified to the data subject without delay.
Article 9 Measures to Ensure the Security of Personal Information
Technical Measures
1) Implement access rights management and access control measures, such as limiting access privileges to the minimum necessary personnel
2) Encrypt the storage and transmission of personal information, and install and periodically update security programs
3) Operate security solutions against external intrusion such as hacking
Administrative Measures
1) Provide regular training for personal information handlers
2) Conduct work handover of personal information handlers while maintaining security, and manage and supervise compliance obligations regarding personal information protection when joining or leaving the company
3) Establish internal management plans and conduct self-inspections
3. Physical Measures
Implement physical access control measures for the space where the personal information processing system is installed
Article 9 Measures to Ensure the Security of Personal Information
Technical Measures
1) Implement access rights management and access control measures, such as limiting access privileges to the minimum necessary personnel
2) Encrypt the storage and transmission of personal information, and install and periodically update security programs
3) Operate security solutions against external intrusion such as hacking
Administrative Measures
1) Provide regular training for personal information handlers
2) Conduct work handover of personal information handlers while maintaining security, and manage and supervise compliance obligations regarding personal information protection when joining or leaving the company
3) Establish internal management plans and conduct self-inspections
3. Physical Measures
Implement physical access control measures for the space where the personal information processing system is installed
Article 10 Personal Information Protection Officer and Complaint Service
The Company designates a Personal Information Protection Officer as follows to protect the personal information of data subjects and handle complaints related to personal information.
Personal Information Protection Officer
Name: Park Jae-hong
Position: CEO
Email: contact@unastella.com
Contact: 070-4015-3696
If you need to report or consult about other personal information infringements, you may contact the following organizations.
Personal Information Dispute Mediation Committee: (no area code required) 1833-6972 (www.kopico.go.kr)
Personal Information Infringement Report Center: (no area code required) 118 (privacy.kisa.or.kr)
Supreme Prosecutors' Office Cyber Investigation Division: (no area code required) 1301 (www.spo.go.kr)
National Police Agency Cybercrime Report System: (no area code required) 182 (ecrm.police.go.kr)
Article 10 Personal Information Protection Officer and Complaint Service
The Company designates a Personal Information Protection Officer as follows to protect the personal information of data subjects and handle complaints related to personal information.
Personal Information Protection Officer
Name: Park Jae-hong
Position: CEO
Email: contact@unastella.com
Contact: 070-4015-3696
If you need to report or consult about other personal information infringements, you may contact the following organizations.
Personal Information Dispute Mediation Committee: (no area code required) 1833-6972 (www.kopico.go.kr)
Personal Information Infringement Report Center: (no area code required) 118 (privacy.kisa.or.kr)
Supreme Prosecutors' Office Cyber Investigation Division: (no area code required) 1301 (www.spo.go.kr)
National Police Agency Cybercrime Report System: (no area code required) 182 (ecrm.police.go.kr)
Article 11 Changes to the Privacy Policy
If there are any additions, deletions, or revisions to this Privacy Policy, we will notify you through the notices on the Unastella website before the changes take effect.
Article 11 Changes to the Privacy Policy
If there are any additions, deletions, or revisions to this Privacy Policy, we will notify you through the notices on the Unastella website before the changes take effect.
Effective Date: April 20, 2026
Effective Date: April 20, 2026
© 2026 UNASTELLA. All rights reserved.
© 2026 UNASTELLA.
All rights reserved.
© 2026 UNASTELLA.
All rights reserved.