Privacy Notice
Last updated: 2026-01-09
Your rights
Under the Personal Information Protection Act (PIPA) and related regulations, you may request access, correction, deletion, and suspension of processing of your personal data where grounds exist. You may withdraw consent for optional processing without affecting the lawfulness of earlier processing.
We respond to verified requests within thirty days unless complexity requires an extension, in which case we notify you with reasons. You may lodge complaints with the Personal Information Protection Commission.
How we use data
We use contact details to confirm workshop seats, send schedule updates, and—if you opt in—share community digests. Analytics cookies, when allowed, help us see which pages are unreadable on mobile so we can fix layout issues.
We do not sell personal information. Marketing messages are sent only with explicit consent and include an unsubscribe control.
Scope
This Privacy Notice covers data collected through foramulfa.digital, registration forms, email correspondence, and moderated community channels we operate. It does not govern third-party sites linked from our pages; read their notices separately.
Enterprise customers who purchase team packages remain independent controllers for employee rosters they supply; we process that data strictly to deliver the contracted workshops.
Data collected
Identifiers (name, email, company, phone where provided), professional context (role, industry), technical logs (IP address, browser type, device category), payment-related correspondence references (not full card numbers), and community content you post in forums or forms.
Workshop exercises should use fictional or anonymized scenarios; if you voluntarily paste real data, we treat it as submitted content subject to moderation and deletion upon request where feasible.
Retention
Registration records for tax and operational purposes are retained for seven years where Korean law requires bookkeeping traces. Marketing consents and mailing lists are refreshed annually; inactive accounts may be archived after two years of no opens or logins.
Forum posts may persist until you delete them or request removal; backups can take up to ninety days to purge.
Contact
Questions about this Privacy Notice or to exercise rights: write to [email protected] with “Privacy” in the subject line. Postal inquiries may be sent to our Seoul office listed on the contact page.
We verify identity before disclosing or deleting records to prevent fraudulent requests.
Third parties
We rely on subprocessors for email delivery, video conferencing, ticketing, and web hosting. Contracts require confidentiality, data minimization, and assistance with your rights requests. A current list is available on request to enterprise purchasers.
If we change material subprocessors for personal data, we will update this notice and—where required—seek renewed consent.
We apply role-based access, encrypted transport for web traffic, and least-privilege credentials for staff. No method is perfect; if we become aware of an incident affecting your personal data, we will notify regulators and affected users as required by Korean law. You should use unique passwords for community accounts and enable device protections on machines you use during hybrid sessions.
Questions: [email protected]