In-House Counsel Forum

IHCF complies with the Personal Information Protection Act and related laws and regulations to safeguard the freedom and rights of data subjects. We handle personal information lawfully and ensure its secure management and processing. In compliance with Article 30 of the Personal Information Protection Act, we have established and published the following privacy policy to safeguard the personal information of data subjects and facilitate the timely and efficient resolution of associated complaints.

※ For more details, please refer to the Privacy Policy below.

• 1. IHCF complies with the privacy protection provisions of the Act on Promotion of Information and Communications Network Utilization and Information Protection as well as "Personal Information Protection Guidelines" and "Technical/Management Standards for Protection of Personal Information." In addition, we have established a "Privacy Policy" and declares our commitment to protecting the personal information of our members.
• 2. IHCF's Privacy Policy may be subject to changes due to amendments in relevant laws and government guidelines, as well as internal policy changes at IHCF. If any changes are made to IHCF's Privacy Policy, the changes will be posted on the IHCF website for a minimum of 7 days

• IHCF provides a procedure where you will be given an opportunity to click the "Agree" or "Disagree" button after reading the Terms of Use. If you click the "Agree" button, you are deemed to have consented to the collection of your personal information. In addition, if you click the "Agree" button, you are deemed to have agreed that IHCF shares your personal information collected, except for the "Password," with a third party* to fulfil our services.
• *Third Party Name: Homepage Korea, Outsourced Task: Homepage construction and management, etc.
• 1. Under the Act on Promotion of Information and Communications Network Utilization and Information Protection, personal information refers to information about a living individual that can identify the individual by such items as the person's name, resident registration number, etc. included in the personal information (this includes items that can easily identify the individual when combined with other information even if the specific piece of information alone cannot identify a specific individual).
• 2. IHCF collects and uses members' personal information to authenticate users, to process payment, to confirm the ownership of services used, to provide members with personalized services and other additional services. The specific purposes for collecting and using specific data are as follows:
• - Name, ID, and password: These data are used to authenticate users for membership services and to confirm the ownership of services used.
  - Email address and phone number: These data are collected to secure essential information in compliance with domain management regulations, to establish communication channels to deliver notifications and process complaints, and to provide information on new services and events.
  - Bank information and credit card information: These data are used to process payment for paid information and services.
• 3. IHCF does not outsource the management of members' personal information.
• 4. We do not request sensitive personal information that may pose a risk of violating the basic human rights of users (e.g., race, ethnicity, belief and creed, birthplace and domicile, political orientation, criminal records, health status or sexual life, etc.)
• 5. Personal information is retained "from when a member joins IHCF until the member terminates the membership." IHCF's member database automatically deletes the exiting member's personal information upon termination of membership. However, if the law requires, IHCF may retain members' personal information in compliance with such legal requirements even if the purposes of collecting and using personal information have been fulfilled.
  • - 5 years under Article 6(1) subparagraphs 2 and 3 of the Enforcement Decree of the Act on the Consumer Protection in Electronic Commerce.
  • - 3 years under Article 6(1) subparagraph 4 of the Enforcement Decree of the Act on the Consumer Protection in Electronic Commerce.

• 1. IHCF does not provide members' personal information to other individuals, companies, or institutions without authorization, except under following circumstances.
• • - When the applicant's information is shared with the domain registrar for domain name registration.
  • - When personal information is shared for WHOIS domain name service.
  • - When government agencies or designated consumer organizations request members' personal information under relevant laws, such as the Act on Promotion of Information and Communication Network Utilization and Information Protection.
  • - When dispute resolution bodies or courts request the contact information of a domain registrant involved in a dispute
  • - When members' personal information is requested for criminal investigation, or statutory bodies, such as the Korea Communications Commission, Korea Internet & Security Agency, etc. request members’ personal information.
  • - When using members’ information (name, email address, phone number) for business communication.
  • - When necessary for statistical analysis, promotional materials, academic research, or market research, if provided in a form that cannot identify specific users.
• 2. IHCF will obtain consent from each member in advance before providing or sharing their personal information with partner companies when necessary to offer a wider range of services. We will notify each member individually via email about the identity of the partner companies, the specific items of personal information to be shared, the reasons for sharing such data, the retention period, and how such data will be protected. You will be given an opportunity to provide or withhold your consent. If you do not consent, we will not provide or share your personal information with any partner companies.

• 1. As a member of IHCF, you can access and correct your personal information at any time.
  If you wish to view or correct your personal information, please log in to the IHCF website and click on "Manage Personal Information" on My Page.
• 2. If you have lost your ID or password, please click on Forgot ID or Forgot Password on the website to find your ID or password.
• 3. Individual members are responsible for managing their IHCF ID and password. To safeguard your personal information effectively, we recommend that you exercise proper care in handling your ID and password. IHCF cannot be held responsible if your ID or password is compromised. If your ID or password was exposed due to the negligence or deliberate actions of IHCF, however, you may hold IHCF accountable. After you access the IHCF website using your IHCF account, please close the account and the web browser. In particular, if you share a computer with another or use it in a public place, please make sure you are logged out or close the web browser.

• IHCF members may cancel their membership at any time at their discretion. If you decide to withdraw from your membership, you can do so on the Member Information Management page.

• IHCF has implemented the following technical measures to ensure that members' personal information is not lost, stolen, leaked, tampered with, or damaged.
• • 1. Each member’s personal information is protected by a password and their personal data is further safeguarded through separate security features.
  • 2. We have established, and are enforcing, password set-up guidelines to ensure that users and personal information handlers do not use easily predictable numbers as a passwords, such as birthdays, resident registration numbers, or phone numbers.
  • 3. IHCF employs antivirus programs and malware defense software to prevent damage from computer viruses and updates these programs daily on a regular schedule.
  • 4. IHCF uses high-cost routers and L3 switch devices outfitted with intrusion prevention and detection capabilities to offer dual-layer protection for personal information on the network.
  • 5. In addition, we have built a separate intrusion prevention system (firewall), effectively operating a triple-layered privacy protection system.
  • 6. IHCF encrypts and securely stores personal information within its privacy protection system. It also implements a system that encrypts personal data before being stored when it is transmitted outside of the IHCF network or saved on PCs.

• As an IHCF member, if you have any concerns regarding our handling of personal information, we encourage you to share your feedback with our Privacy Officer. We will promptly take action and notify you of the result. If you have knowledge of or suspect any unauthorized disclosure of personal information or other serious breaches, you may contact the Personal Information Infringement Report Center operated by the government to file a complaint or a request for mediation (Website: https://privacy.kisa.or.kr, Phone: 02-118).

• IHCF has established a separate computer management policy within its regulations to address and comply with the following:
  • 1. Matters concerning the designation of a privacy officer and the creation and operation of a personal data protection organization.
  • 2. Matters concerning the education of personal information handlers.
  • 3. Retention of access records for IHCF’s personal data processing system and regular monitoring of the access logs.
  • 4. Employing protective measures when printing or copying personal information.
  • 5. Any other matters necessary for the protection of personal information.

• IHCF appoints a Privacy Officer responsible for receiving feedback and handling complaints concerning personal data protection.
• - Privacy Officer
  Name: CY Park
  Position: President of In-House Counsel Forum
  E-mail: president@ihcf.or.kr

• 1. To ensure the protection of children's personal information, IHCF requires the consent of a child's legal guardian (parent) when the child applying for membership is under 14 years old. IHCF reserves the right to revoke the membership of minors under 14 who have not obtained parental consent.
• 2. The legal guardian of a minor under the age of 14 may request access, correction, or withdrawal of consent regarding the personal information of the minor under their responsibility. If such a request is received, IHCF will promptly take necessary actions.

• 1. IHCF has the discretion to send emails to its members to inform them of IHCF's services, service announcements, and other relevant notifications.
• 2. IHCF may send advertising information to its members. In such cases, we will ensure that the word "(Advertisement)" is displayed to help our members identify the nature of the communication. We will not send advertising information to members who have expressed their refusal to receive such content.