CREARC, Inc. (the “Company”) recognises the importance of protecting personal information, complies with the Act on the Protection of Personal Information (the “APPI”), and endeavours to handle and protect personal information appropriately in accordance with this Privacy Policy. Unless otherwise provided herein, terms used in this Privacy Policy have the meanings prescribed by the APPI.
1. Definition of Personal Information
For the purposes of this Privacy Policy, “personal information” means personal information as defined in Article 2, paragraph 1 of the APPI.
2. Purposes of Use of Personal Information
The Company uses personal information for the following purposes:
- to communicate and provide information concerning the Company’s services;
- to provide the Company’s services;
- to confirm subscriptions to email delivery services and deliver emails;
- to send honoraria or other consideration for participation in surveys and similar activities;
- to send prizes or other items in connection with competitions and promotions;
- to research and analyse the use of the Company’s services;
- to improve the Company’s services and develop new services in order to provide greater customer satisfaction;
- to customise the Company’s services for individual customers;
- to assess customer satisfaction with the Company’s services;
- to aggregate statistically processed information and publish it as research results;
- to provide information and notices concerning the Company’s services, new services, and other offerings;
- to request cooperation with surveys or participation in events and to report the results of such activities; and
- to resolve issues arising in connection with the operation of the Company’s services.
3. Changes to the Purposes of Use
The Company may change the purposes of use of personal information within a scope reasonably recognised as relevant to the original purposes. If the purposes are changed, the Company will notify the individual to whom the personal information relates (the “Data Subject”) or publicly announce the change.
4. Restrictions on the Use of Personal Information
Except as permitted by the APPI or other applicable laws and regulations, the Company will not handle personal information beyond the extent necessary to achieve the stated purposes of use without the Data Subject’s consent. This restriction does not apply in any of the following circumstances:
- where required by law;
- where necessary to protect a person’s life, body, or property and it is difficult to obtain the Data Subject’s consent;
- where particularly necessary to improve public health or promote the sound development of children and it is difficult to obtain the Data Subject’s consent; or
- where cooperation is required with a national government body, local government, or a party entrusted by either of them in performing affairs prescribed by law, and obtaining the Data Subject’s consent may impede the performance of those affairs.
5. Proper Acquisition of Personal Information
5.1
The Company acquires personal information by proper means and does not acquire it through deception or other wrongful means.
5.2
Except in the following circumstances, the Company will not acquire special care-required personal information, as defined in Article 2, paragraph 3 of the APPI, without the Data Subject’s prior consent:
- where any of the circumstances set out in Section 4 applies;
- where the special care-required personal information has been made public by the Data Subject, a national government body, a local government, an academic research institution, a person listed in any item of Article 57, paragraph 1 of the APPI, or another person prescribed by rules of the Personal Information Protection Commission;
- where the Company acquires special care-required personal information that is apparent from the Data Subject’s external appearance by observing or photographing the Data Subject; or
- where the Company receives special care-required personal information in a manner that does not constitute provision to a third party under the proviso to Section 7.1.
5.3
When receiving personal information from a third party, the Company will verify the following matters in accordance with rules of the Personal Information Protection Commission. This does not apply where the provision falls under any item of Section 4 or is made in a manner that does not constitute provision to a third party under the proviso to Section 7.1.
- the name and address of the third party and, where the third party is a corporation, the name of its representative (or, in the case of an unincorporated association with a designated representative or administrator, the name of that representative or administrator); and
- the circumstances in which the third party acquired the personal information.
6. Security Management of Personal Information
The Company provides necessary and appropriate supervision of its employees to ensure the secure management of personal information against risks including loss, destruction, alteration, and leakage. When the Company outsources all or part of the handling of personal information, it also provides necessary and appropriate supervision of the contractor to ensure that the information is securely managed.
7. Provision to Third Parties
7.1
Except where any of the circumstances set out in Section 4 applies, the Company will not provide personal information to a third party without the Data Subject’s prior consent. The following circumstances do not constitute provision to a third party:
- where personal information is provided in connection with outsourcing all or part of its handling to the extent necessary to achieve the purposes of use; or
- where personal information is provided as a result of succession to a business due to a merger or other reason.
7.2
Notwithstanding Section 7.1, except where any of the circumstances set out in Section 4 applies, when the Company provides personal information to a third party in a foreign country—excluding a country designated by rules of the Personal Information Protection Commission pursuant to Article 28 of the APPI—and that third party is not a party that has established a system conforming to the standards designated by those rules, the Company will obtain the Data Subject’s prior consent to such provision.
7.3
When the Company provides personal information to a third party, it will create and retain records in accordance with Article 29 of the APPI.
7.4
When the Company receives personal information from a third party, it will conduct the required verification and create and retain records of that verification in accordance with Article 30 of the APPI.
8. Disclosure of Personal Information
When the Company receives a request from a Data Subject for disclosure of personal information pursuant to the APPI, it will verify that the request has been made by the Data Subject and disclose the information without delay. If the relevant personal information does not exist, the Company will notify the Data Subject accordingly. This does not apply where the Company has no obligation to disclose the information under the APPI or other applicable laws and regulations.
9. Correction of Personal Information
Where a Data Subject requests correction, addition, or deletion of personal information (collectively, “Correction”) pursuant to the APPI on the grounds that the information is inaccurate, the Company will verify that the request has been made by the Data Subject, conduct the necessary investigation without delay to the extent required to achieve the purposes of use, and, based on the results, make the Correction and notify the Data Subject accordingly. If the Company decides not to make the Correction, it will notify the Data Subject of that decision. This does not apply where the Company has no obligation to make the Correction under the APPI or other applicable laws and regulations.
10. Suspension of Use of Personal Information
If a Data Subject requests suspension of use or deletion of personal information (collectively, “Suspension of Use”) under the APPI on the grounds that the information is being handled beyond a previously disclosed purpose of use or was acquired through deception or other wrongful means, or requests suspension of its provision to third parties (“Suspension of Provision”) on the grounds that it has been provided to a third party without the Data Subject’s consent, and the Company determines that the request is well founded, the Company will verify that the request has been made by the Data Subject, carry out the Suspension of Use or Suspension of Provision without delay, and notify the Data Subject accordingly. This does not apply where the Company has no obligation to carry out the Suspension of Use or Suspension of Provision under the APPI or other applicable laws and regulations.
11. Use of Cookies and Similar Technologies
The Company’s services may use cookies and similar technologies. These technologies help the Company understand how its services are used and contribute to service improvements. Users who wish to disable cookies may do so by changing their web browser settings. Please note that disabling cookies may prevent certain features of the Company’s services from functioning properly.
12. Contact
For requests for disclosure, opinions, questions, complaints, or other enquiries concerning the handling of personal information, please contact:
CREARC, Inc.Email: info@crearc-design.com
Enquiries are accepted from 10:00 a.m. to 7:00 p.m. on weekdays.
13. Continuous Improvement
The Company periodically reviews the operation of its personal information handling practices and endeavours to improve them continuously. The Company may amend this Privacy Policy as necessary.
Established: August 24, 2026
Last updated: August 24, 2026
