SECTION 01
Scope and controller
This policy applies to SR International Inc. (“SR International”, “we” or “us”) when processing personal information through sr-kc.com and related public pages that we control, including opportunity inquiries, project surveys and website usage information.
A project-specific notice or consent form may apply in addition to this policy where separately provided.
SECTION 02
Information and collection channels
We process information you submit directly or provide during an inquiry. Please do not submit resident-registration numbers, account passwords, health information or other sensitive information that is unnecessary for the initial review of a business opportunity.
| Channel | Required or basic information | Optional or additional information |
|---|---|---|
| Opportunity Brief | Company, contact name, email, opportunity description, desired 90-day outcome | Phone, mission type, execution constraint, budget range |
| Email or phone | Sender contact details and inquiry content | Business information voluntarily provided |
| Project survey | Responses specifically disclosed on the survey page | Optional contact details |
| Website usage | Aggregated route, access and device-related information | Access cookie or localStorage value for limited functions |
SECTION 03
Purposes and basis of processing
Opportunity information is used to receive and assess the inquiry, evaluate mission fit, prepare discussions or proposals and conduct follow-up communication. If an engagement is formed, additional processing may occur as necessary to enter into and perform the agreement, settle fees and address disputes.
Usage information is processed for security, incident response, service quality and user-experience improvement. We do not make a final engagement decision solely through automated processing of an Opportunity Brief.
SECTION 04
Retention
We delete or anonymize personal information when the relevant purpose is achieved unless a longer period is required by applicable law.
| Information | Default retention approach |
|---|---|
| Business inquiry not converted into an engagement | Generally within one year after the last contact or closure of review |
| Inquiry or project record connected to an engagement | For the contract period and any legally required or reasonably necessary dispute-retention period |
| Project survey | Generally within one year after the research and follow-up purpose ends |
| Logs and analytics | For the period reasonably necessary for security/analytics and under provider settings and policies |
SECTION 05
Deletion and destruction
When retention ends, electronic information is deleted through the relevant service or database so that it is not ordinarily recoverable. Paper records, if any, are shredded or destroyed using a comparable secure method.
Information that must be retained under law may be separated and access-restricted for the required period.
SECTION 06
Third-party disclosure
We do not sell or disclose personal information for an independent third party purpose unless required by law or supported by separate consent.
If a specific project requires disclosure to a client, institution or specialist, we provide the legally required notice regarding the recipient, purpose, items and retention before disclosure.
SECTION 07
Processors and service providers
We may use the following providers to operate the website and inquiry function. Actual use may depend on deployment configuration and enabled features.
| Provider | Purpose | Primary information processed |
|---|---|---|
| Vercel Inc. | Website hosting, server runtime and Web Analytics | Access/usage information and data handled during requests |
| Netlify Inc. | Alternative deployment and Preview hosting | Access/usage information and data handled during requests |
| Supabase Inc. | Opportunity Brief database | Submitted opportunity and contact information |
| Plus Five Five, Inc. (Resend) | Inquiry-notification email delivery | Notification recipient and inquiry information included in the message |
SECTION 08
International processing and transfers
Because we use global cloud and email services, certain information may be processed outside Korea. Transfers take place over encrypted network connections when the relevant service is used. The following reflects the current operating configuration.
| Provider / primary location | Information | Purpose / timing | Retention approach |
|---|---|---|---|
| Supabase Inc. / Japan (Tokyo, ap-northeast-1) | Opportunity Brief and contact information | Database storage when a form is submitted | Until deleted by SR International under this policy |
| Plus Five Five, Inc. (Resend) / United States | Notification address and message content | Email notification when an inquiry is submitted | During service use and under the provider deletion policy |
| Vercel Inc. / United States and service regions | Web request, access and usage information | Hosting/analytics when the site is used | Under service settings and provider policy |
| Netlify Inc. / United States and service regions | Web request and access information | Hosting when a Netlify deployment is accessed | Under service settings and provider policy |
SECTION 10
Your rights
You may request access, correction, deletion, restriction/suspension of processing or withdrawal of consent by contacting hbshin@sr-kc.com / 010-6405-6384. We will verify the requester where appropriate and respond in accordance with applicable law.
A request may be limited where retention is required by law or where fulfilling the request would unlawfully affect the rights or safety of others; if so, we will explain the relevant reason.
SECTION 11
Security measures
We apply reasonable technical and organizational safeguards, including access restrictions, server-side storage, deployment-secret management, encryption in transit and database access controls.
The Opportunity Brief database is configured for server-side submission without a public write policy, and operational access is restricted to personnel who need it.
SECTION 12
Privacy contact and remedies
Privacy lead/contact: 신홍범, Representative Director / hbshin@sr-kc.com / 010-6405-6384. Contact us for questions, rights requests or complaints regarding our processing of personal information.
Individuals in Korea may also use the KISA privacy infringement reporting center (118) or the Personal Information Dispute Mediation Committee (1833-6972), as applicable.
SECTION 13
Changes to this policy
We update the revision date and this page when legal requirements, services or processing practices materially change. We may provide additional notice for significant changes.