Privacy Policy
Privacy Policy
Effective date September 29, 2026
ADL Co., Ltd. (the "Company") establishes and discloses this Privacy Policy pursuant to Article 30 of the Personal Information Protection Act of Korea (the "Act") in order to protect the personal information of data subjects and to handle related complaints promptly and smoothly.
This English version is provided for reference. In case of any discrepancy, the Korean version prevails.
Article 1 (Purposes of and Legal Grounds for Processing)
The Company processes personal information for the following purposes only. Personal information will not be used for any other purpose, and if the purpose changes, the Company will take the necessary measures, including obtaining separate consent under Article 18 of the Act.
| Service | Purpose | Legal ground |
|---|---|---|
| Contact inquiries | Reviewing and answering inquiries, and consultation toward entering into a consulting agreement | Taking steps at the data subject’s request in the course of entering into a contract (Art. 15(1)(4)) |
| India Entry Feasibility Diagnosis | Preparing and delivering the diagnosis report, and consultation follow-up | Consent of the data subject (Art. 15(1)(1)) |
| Receiving information (optional) | Sending India-market news and briefing session invitations by email | Separate consent of the data subject (Art. 15(1)(1) and 22(1)(7) of the Act; Art. 50 of the Act on Promotion of Information and Communications Network Utilization and Information Protection) |
| Service operation & security | Preventing spam, duplicate submissions and other abuse of the diagnosis survey | Legitimate interests of the Company (Art. 15(1)(6)) |
Article 2 (Personal Information Processed and How It Is Collected)
| Service | Required | Optional |
|---|---|---|
| Contact inquiries | Name, email, subject, message | Phone number |
| India Entry Feasibility Diagnosis | Company name, contact person’s name and job title, email, phone number, survey answers (industry, number of employees, product information, target customers and regions, export experience and progress, certifications held, concerns, etc.) | Company website, annual revenue, HS code, ex-factory price, first-year revenue target, information on partners in contact, entry structure under consideration, additional questions, referral source, product brochure (attachment), consent to receive information |
| Collected automatically (on diagnosis submission) | Service usage records (submission time, language, and browser and operating system type and version), referral code (if included in the link you used) | — |
- Collection method: entered directly by the data subject through the contact form and the diagnosis survey on this website.
- To prevent abuse, the IP address of a diagnosis submission is used only to limit the number of submissions. It is processed temporarily in server memory and is not stored in the database or in server logs. IP addresses in memory are deleted once the limit window (up to 24 hours) ends.
- The Company does not collect personal information of children under 14, sensitive information, or unique identification information.
Article 3 (Processing and Retention Periods)
The Company processes and retains personal information within the period prescribed by law or the period consented to at the time of collection.
| Service | Retention period |
|---|---|
| Contact inquiries | 3 years from collection |
| India Entry Feasibility Diagnosis (including attachments) | 3 years from collection |
| Consent to receive information | Until consent is withdrawn or 2 years from collection, whichever comes first (after which the information is no longer used for this purpose) |
| IP address for abuse prevention | Not stored (deleted from server memory once the limit window of up to 24 hours ends) |
However, personal information will be destroyed without delay upon the data subject’s request for deletion.
Article 4 (Destruction Procedures and Methods)
- Procedure: personal information whose retention period has expired or whose purpose has been achieved is destroyed without delay (within 5 days). Where another law requires retention, the Company states the legal basis, items and period in this Policy and stores the information separately from other personal information.
- Method: information in electronic form is deleted in a way that cannot be restored. Submission notice emails in staff mailboxes, and response lists (CSV) and attachments downloaded by staff for work, are deleted as well.
- Backups: the Company makes daily backups against server failure, and backups are deleted automatically after 30 days. Destroyed information may therefore remain in backups for up to 30 days, during which it is not used for any purpose other than recovery.
Article 5 (Provision to Third Parties)
The Company processes personal information only within the scope of Article 1 and does not provide it to third parties except as permitted under Articles 17 and 18 of the Act, such as with the data subject’s consent or under a specific legal provision. The Company currently does not provide personal information to any third party.
Article 6 (Outsourcing of Processing)
The Company outsources the following processing for efficient operations.
| Processor | Outsourced tasks |
|---|---|
| Adullam India Private Limited | (Indian company) Contracting for and operating our business email system (Google Workspace, adullamcorp.com), through which inquiry and diagnosis submission notices and diagnosis confirmation emails are sent and business email is stored |
| Google Asia Pacific Pte. Ltd. | (Sub-processor) Providing the email service (Google Workspace), processed together with Google affiliates including Google LLC; in India, the contract and billing are handled by Google India Private Limited as an authorized reseller |
In accordance with Article 26 of the Act, the Company’s outsourcing arrangements prohibit processing beyond the outsourced purpose and address technical and managerial safeguards, restrictions on sub-outsourcing, supervision of processors, and liability for damages. The Company supervises whether its processors handle personal information securely, and will disclose any change to the outsourced tasks or processors through this Policy without delay.
Article 7 (Transfer of Personal Information Overseas)
Because the Company uses, for email, a Google Workspace account contracted and operated by Adullam India Private Limited, an Indian company, personal information contained in submission notices and reply emails is stored and processed in that Google Workspace account, that is, on Google servers located outside Korea. As outsourcing and storage necessary to enter into and perform an agreement with the data subject (answering inquiries and providing the requested diagnosis report), the Company discloses the following under Article 28-8(1)(3)(a) and Article 28-8(2) of the Act.
| Item | Details |
|---|---|
| Recipient | Adullam India Private Limited (contact: liminae@adullamcorp.com) / Google Asia Pacific Pte. Ltd., Google LLC and other Google affiliates, with the contract and billing in India handled by Google India Private Limited (data protection inquiries: https://support.google.com/cloud/contact/dpo) |
| Country | India (Adullam India Private Limited, Google India Private Limited), and the United States and other countries where Google data centers are located |
| Timing and method | Transmitted over the network when an inquiry or diagnosis is submitted and when emails are exchanged with our staff |
| Items transferred | Name, job title, email, phone number, company name, inquiry subject and message, survey answers, language, referral code, consent to receive information, attachment file name (the attachment itself is not attached to emails and is kept only on the Company’s server) |
| Purpose | Operating the email system, sending notices and replies, and storing business email |
| Retention | Deleted after the retention period set out in Article 3 |
If you do not wish your information to be transferred overseas, you may choose not to submit inquiries or diagnosis requests through this website. In that case, you will not receive email confirmations or the diagnosis report, but you may contact us by phone (see Article 11).
Article 8 (Rights of Data Subjects and How to Exercise Them)
- Data subjects may at any time request access to, correction, deletion or suspension of processing of their personal information, or withdraw consent.
- Rights may be exercised in writing, by email, etc., and the Company will act without delay (within 10 days). Contact: the Privacy Officer in Article 11.
- You can withdraw your consent to receive information by replying to any of our emails or by contacting us as set out in Article 11, after which the Company will stop sending such emails.
- Rights may also be exercised through a legal representative or an authorized agent, who must submit a power of attorney.
- Requests for access or suspension may be restricted under Articles 35(4) and 37(2) of the Act, and deletion cannot be requested for information that other laws require to be collected.
- The Company verifies that the person making the request is the data subject or a duly authorized agent.
Article 9 (Security Measures)
The Company takes the following measures to keep personal information secure.
- Access control: the admin pages that display personal information are available only to authenticated administrators, and the number of staff handling personal information is kept to a minimum.
- Encryption in transit: all communication with this website is encrypted with HTTPS (TLS).
- Attachment protection: diagnosis attachments are stored in the database rather than in any public location and can be downloaded only after administrator authentication.
- Minimal logging: server logs do not record the information you enter or your IP address.
- Abuse prevention: automated-submission traps and submission rate limits are in place for the diagnosis survey.
- Backups: daily backups are made against data loss and deleted automatically after 30 days.
Article 11 (Privacy Officer and Complaint Handling)
The Company has designated the following Privacy Officer, who is responsible for overseeing the processing of personal information and for handling complaints and remedies. Please contact the Privacy Officer with any privacy inquiries or complaints, and the Company will respond without delay.
Privacy Officer
- Name
- Lim In-ae
- Position
- CEO
- Phone
- 010-7641-4018
- Address
- 6F F61, 602 Yeongdong-daero, Gangnam-gu, Seoul, Korea
Article 12 (Remedies for Infringement)
Data subjects may apply to the following organizations for dispute resolution or counseling regarding infringement of personal information.
| Organization | Contact |
|---|---|
| Personal Information Dispute Mediation Committee | 1833-6972 · www.kopico.go.kr |
| Personal Information Infringement Report Center (KISA) | 118 · privacy.kisa.or.kr |
| Supreme Prosecutors’ Office | 1301 · www.spo.go.kr |
| Korean National Police Agency | 182 · ecrm.police.go.kr |
Article 13 (Changes to This Policy)
This Privacy Policy applies from the effective date below. Any changes will be announced on this website.
Effective date: September 29, 2026