K LAW OFFICEPrivacy
Privacy Policy
K LAW OFFICE processes personal information in accordance with the Personal Information Protection Act of the Republic of Korea (“PIPA”) and other applicable laws. This Policy explains how personal information is handled in connection with legal inquiries, legal services, and this website.
Effective date: March 7, 2026
1. Personal information processed, purposes, legal bases, and retention
| Context | Information and purpose | Legal basis | Retention |
|---|---|---|---|
| Initial legal inquiries and engagement review | Name, email address, telephone number if voluntarily provided, organization or affiliation, preferred language, facts concerning the matter, and documents or other information voluntarily submitted. Used to respond, conduct conflict checks, and assess whether K LAW OFFICE can accept the matter. | PIPA Article 15(1)(4), and Article 15(1)(6) where applicable. | Until the inquiry and engagement review are completed. Minimum information may be retained for as long as reasonably necessary for conflict checking, legal compliance, or the establishment, exercise, or defense of legal claims. |
| Legal services after engagement | Identification and contact information, case facts, evidence, communications, and other information necessary to advise or represent the client. | PIPA Article 15(1)(4), applicable legal obligations, and other lawful bases as appropriate. | For the engagement and thereafter for the period reasonably necessary for professional recordkeeping, applicable legal obligations, and dispute or claim management. |
| Website delivery and security | IP address, access time, requested URL, browser, device or user-agent information, and security or traffic metadata that may be generated when the website is accessed. | PIPA Article 15(1)(6), and processing necessary to provide the website requested by the user, as applicable. | K LAW OFFICE does not separately maintain a user-account database or marketing profile from these data. Technical data are handled for the period necessary under the applicable service configuration and provider terms. |
This website does not provide user accounts, online payment, or a web inquiry form. Initial inquiries are generally made by email. Please do not send resident registration numbers, foreign registration numbers, passport numbers, or unnecessary sensitive information unless K LAW OFFICE specifically requests them for a lawful purpose.
2. Sensitive information and unique identifiers
Legal matters may involve sensitive information or unique identification information. K LAW OFFICE processes such information only where a separate consent or a specific legal basis is available as required by PIPA Articles 23 and 24 and related laws, and only to the extent necessary for the relevant legal matter.
3. Disclosure to third parties
K LAW OFFICE does not sell personal information and does not routinely disclose it outside the purposes for which it was processed. Information may be provided where the individual has consented, where disclosure is required or permitted by law, or where submission to a court, investigative authority, administrative body, counterparty, expert, or other relevant person or institution is reasonably necessary to perform legal services.
4. Service providers and entrusted processing
| Service provider | Entrusted processing |
|---|---|
| Microsoft Corporation | Business email and related Microsoft 365 cloud communications and storage. |
| Cloudflare, Inc. | Website hosting and delivery, content delivery network functions, network security, and traffic management. |
These providers may use authorized subprocessors. Current provider disclosures are available from Cloudflare's subprocessor information and Microsoft's applicable privacy, product, and service-trust documentation. K LAW OFFICE manages outsourced processing in accordance with applicable law.
5. International transfer and processing
Cloudflare operates a globally distributed network. In providing this website, technical information may be processed through infrastructure outside the Republic of Korea. The principal data importer identified in Cloudflare's Data Processing Addendum is Cloudflare, Inc. in the United States.
| Legal basis | PIPA Article 28-8(1)(3)(a), to the extent overseas processing or storage is necessary to provide the website service requested by the user and the required information is disclosed in this Policy. |
|---|---|
| Information transferred | IP address, requested URL, date and time of access, browser or user-agent information, and technical security or traffic metadata necessary to deliver and protect the website. |
| Recipient and contact | Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA · [email protected] |
| Country, timing, and method | United States; and, depending on network routing and authorized subprocessors, locations identified in Cloudflare's current service-provider disclosures. Processing occurs electronically when the website is accessed. |
| Purpose | Website hosting and delivery, content delivery, network security, and traffic management. |
| Retention | For the period necessary to provide the applicable Cloudflare service, subject to service configuration, the applicable agreement, and Cloudflare's data-retention obligations. |
| How to refuse and effect of refusal | You may avoid accessing this website and contact K LAW OFFICE directly by email instead. Refusing processing necessary for website delivery may make the website unavailable to you. |
Microsoft publishes data-residency commitments according to the tenant's provisioned geography. Microsoft states that Exchange Online mailbox content for tenants provisioned in South Korea is stored at rest within the South Korea Geo. This does not represent that every Microsoft service operation or authorized support or subprocessor activity occurs only in Korea.
6. Destruction of personal information
When personal information is no longer necessary for its processing purpose and no lawful retention ground remains, K LAW OFFICE destroys it without undue delay. Electronic records are deleted using appropriate methods, and paper records are shredded or otherwise securely destroyed.
7. Cookies and automatically processed information
K LAW OFFICE does not use cookies for behavioral advertising or cross-site tracking on this website. Hosting or security providers may process technical information or use cookies necessary for website delivery, security, traffic management, or protection against malicious activity, depending on enabled service features.
8. Rights of individuals
Subject to applicable law, an individual may request access to, correction or deletion of, or suspension of processing of personal information. Requests may be submitted using the contact information below. Certain requests may be limited where retention or processing is required or permitted by law or necessary in connection with legal claims.
9. Security measures
K LAW OFFICE takes technical and organizational measures appropriate to the nature and scale of the information processed, including access control, account and authentication management, and use of security-enabled communications and cloud services.
10. Privacy contact
11. Changes to this Policy
If this Privacy Policy is materially changed, the revised Policy and its effective date will be made available on this page.