Privacy Policy

Effective 22 August 2026

GRIDAEND Co., Ltd. (“the Company”) complies with 개인정보 보호법 (Personal Information Protection Act) and other applicable laws. To protect the personal information of data subjects and to handle related complaints promptly and smoothly, the Company has established and published the privacy policy set out below.

Article 1 (Purposes of Processing Personal Information)

The Company processes personal information for the purposes below. It does not use that information for any other purpose. Where the purpose of use changes, the Company takes the necessary steps, including obtaining separate consent under Article 18 of 개인정보 보호법 (Personal Information Protection Act).

1. Handling feasibility assessment and consultation requests: receiving the request, reviewing the site, returning the result, and scheduling consultations
2. Corporate energy consulting inquiries: receiving the inquiry and providing a proposal
3. Sending materials: checklists, sample reports, and other requested documents
4. Newsletters and marketing information (only where consent has been given)
5. Service improvement and statistical analysis; responding to inquiries and handling disputes

Article 2 (Personal Information Processed)

The Company does not collect personal information from children under 14 years of age.

Article 3 (Processing and Retention Periods)

1. Feasibility assessment and consultation request records: three years after the purpose is achieved, to maintain consultation records and handle disputes. Destroyed without delay if the data subject requests deletion.
2. Newsletter and marketing information: until consent is withdrawn
3. Where a contract has been concluded: the retention period set by applicable law, including 전자상거래법 (Act on the Consumer Protection in Electronic Commerce) and 국세기본법 (Framework Act on National Taxes)
4. Service usage records (access logs): three months, under 통신비밀보호법 (Protection of Communications Secrets Act)

Article 4 (Provision to Third Parties)

Except where required by law, the Company does not provide personal information to third parties. The Company provides the information set out below only where the data subject has consented to third-party provision separately from consent to collection and use. If you do not consent, you still receive the Company’s initial feasibility assessment.

Article 5 (Entrusted Processing)

To operate the service, the Company may entrust the processing of personal information as set out below. Contracts with processors specify the requirements for keeping personal information secure.

Article 5-2 (Transfer of Personal Information Overseas)

To run the website and to send inquiry notifications, the Company transfers personal information overseas as set out below. Data subjects may refuse the overseas transfer. If you refuse, you can submit an inquiry by email (master@gridaend.com) or by telephone (02-855-1843).

Transfers are made over the information and communications network at the point the service is used, and the information is held until the processing contract ends.

Article 6 (Rights of Data Subjects and Legal Representatives, and How to Exercise Them)

Data subjects may at any time ask the Company for access to their personal information, or ask it to correct that information, delete it, or suspend its processing. The Company acts on such a request without delay. Requests may be made by email (master@gridaend.com) or in writing. The Company verifies that the requester is the data subject or a duly authorized representative.

Article 7 (Destruction of Personal Information)

When the retention period has passed or the purpose of processing has been achieved and the personal information is no longer needed, the Company destroys it without delay. Information held in electronic files is deleted permanently, by a method that makes recovery impossible; paper documents are shredded or incinerated.

Article 8 (Measures to Keep Personal Information Secure)

• Establishing and implementing an internal management plan
• Keeping the number of staff who handle personal information to a minimum, and managing their access rights
• Operating an access control system
• Encrypting data in transit (HTTPS)
• Retaining access logs
• Installing and updating security software
• Physical access control

Article 9 (Installation and Operation of Automatic Collection Devices, and How to Refuse Them)

The Company does not currently use cookies or any other device that automatically collects personal information for targeted advertising or usage analytics. If that changes, the Company will amend this policy and give notice in advance. Users can refuse cookie storage in their web browser settings.

Article 10 (Privacy Officer)

Data subjects may raise questions, complaints, and requests for redress relating to personal information with the officer above.

Article 11 (Remedies for Infringement of Rights)

To obtain redress for infringement of their personal information, data subjects may apply to the following bodies for dispute resolution or advice.

• 개인정보분쟁조정위원회 (Personal Information Dispute Mediation Committee): 1833-6972 (www.kopico.go.kr)
• 개인정보침해신고센터 (Privacy Infringement Report Center): 118 (privacy.kisa.or.kr)
• 대검찰청 사이버수사과 (Supreme Prosecutors’ Office, Cyber Investigation Division): 1301 (www.spo.go.kr)
• 경찰청 사이버수사국 (National Police Agency, Cyber Investigation Bureau): 182 (ecrm.cyber.go.kr)

Article 12 (Changes to This Privacy Policy)

This policy applies from its effective date. Where content is added, deleted, or amended because of changes in law, policy, or security technology, the Company posts notice on this website at least seven days before the change takes effect.