(Privacy policy)

Privacy Policy

HD PRODUCTION (에이치디프로덕션, the "Company") complies with the Personal Information Protection Act of the Republic of Korea and related laws, and establishes and publishes this Privacy Policy to protect data subjects' personal information and to handle related complaints smoothly.

Article 1 (Purposes of Processing)

The Company processes personal information for the following purposes. If the purposes change, the Company will take the necessary measures required by law, such as obtaining separate consent.

  1. Production consultation and quotes: receiving inquiries, reviewing designs, calculating and replying with quotes
  2. Contract formation and performance: sampling and production, progress updates, delivery and shipping
  3. Payment settlement and tax handling: issuing tax invoices, keeping transaction records
  4. Customer support: handling inquiries, requests and complaints, delivering notices

Article 2 (Items Processed and Collection Methods)

  1. Quote inquiries (Google Form): brand and contact name, contact details (KakaoTalk ID, Instagram handle, WhatsApp or phone number), item(s) to produce, expected quantity, whether fabric and trims are confirmed, whether a sample or pattern is available, target delivery date, other notes, and attachments such as reference images and tech packs. When files are attached, a Google account sign-in is required under Google Forms' policy, and your Google account name may be passed to the Company together with the attachments.
  2. KakaoTalk channel, email and WeChat consultation: name (or profile name), contact details, conversation content and attachments
  3. During contract and production: contact name, phone and email; business information (company name, representative, business registration number); delivery address and recipient information; email for tax invoices
  4. Collected automatically while using the website: access records such as IP address, access time and browser information

The Company does not collect sensitive information or unique identifiers (such as resident registration numbers), and does not collect personal information of children under 14.

Article 3 (Processing and Retention Periods)

  1. Consultation or quote inquiry only, with no transaction: destroyed one year after the last consultation
  2. Where a transaction takes place: destroyed three years after the transaction ends. However, information that must be kept under the laws below is retained for the stated period.

Article 4 (Provision to Third Parties)

The Company processes personal information only within the scope of the purposes in Article 1 and does not currently provide it to third parties. If personal information is provided in the future with the data subject's consent or under a specific legal provision, this will be disclosed through this policy. The Company does not pass customers' personal information to overseas partners such as production factories.

Article 5 (Outsourcing of Processing)

For smooth operations, the Company outsources the processing of personal information as follows.

ProcessorOutsourced task
Google LLCReceiving quote inquiries (Google Forms), email operations (Google Workspace)
Cloudflare, Inc.Website hosting and security
Kakao Corp.KakaoTalk channel consultation
Tencent (WeChat)WeChat consultation (only for customers who contact us via WeChat)
Freight / delivery carriersDelivery of finished goods after customs clearance (outsourced per shipment)

When outsourcing, the Company specifies the necessary matters so that personal information is managed safely, and supervises the processors. If the outsourced tasks or processors change, this will be disclosed through this policy.

Article 6 (Transfer of Personal Information Overseas)

To conclude and perform contracts with data subjects, the Company entrusts the processing or storage of personal information overseas as follows (Personal Information Protection Act, Article 28-8(1)(iii)).

Recipient (contact)CountryItems transferredWhen and howPurposeRetention / use period
Google LLC (policies.google.com/privacy)United StatesQuote inquiry items and attachments, email contentTransmitted over the network when inquiries and emails are sent or receivedReceiving quotes, email operationsRetention period in Article 3, or until the outsourcing contract ends
Cloudflare, Inc. (cloudflare.com/privacypolicy)United StatesIP address, access recordsTransmitted over the network when the website is accessedWebsite hosting and securityUntil the outsourcing contract ends
Tencent (WeChat, wechat.com)ChinaConsultation content, profile informationTransmitted over the network during WeChat consultation (only for customers who contact us via WeChat)ConsultationUntil the outsourcing contract ends

If you do not want your information transferred overseas, you can ask us at [email protected]. We will then point you to other channels (such as phone), but some services, such as quote intake and email consultation, may be limited.

Article 7 (Destruction Procedures and Methods)

  1. The Company destroys personal information without delay once the retention period has passed or the purpose of processing has been achieved.
  2. Where information must be kept under the law, it is stored separately.
  3. Electronic files are deleted in a way that cannot be recovered; paper documents are shredded or incinerated.

Article 8 (Rights of Data Subjects and How to Exercise Them)

  1. Data subjects may at any time ask the Company to view, correct or delete their personal information, to suspend its processing, or to withdraw consent.
  2. You can exercise these rights by email ([email protected]) or through our KakaoTalk channel, and the Company will act without delay (within 10 days).
  3. Rights may also be exercised through an agent, in which case a power of attorney must be submitted.
  4. Personal information that the law requires us to keep cannot be requested for deletion.

Article 9 (Measures to Ensure Security)

The Company takes the following measures to keep personal information secure.

  1. Administrative: limiting the people who handle personal information to the representative and designated staff
  2. Technical: managing business account passwords, applying two-step verification to business accounts, managing access permissions

Article 10 (Automatic Collection Devices and Refusal)

The Company's website does not use cookies for advertising or analytics. However, our hosting provider (Cloudflare) may set essential cookies for security and service stability. You can refuse cookies in your browser settings, but parts of the website may then be limited.

Article 11 (Portfolio Posts and Personal Information)

The Company may use its finished work as a portfolio (see the Portfolio Policy). If a post includes information that can identify an individual, such as a face or name, it will not be posted without that person's consent. Business information such as brand names is not personal information, but we will keep it private on the customer's request.

Article 12 (Chief Privacy Officer)

The Company designates a Chief Privacy Officer, as below, to oversee the handling of personal information and to handle related complaints and remedies.

Article 13 (Remedies for Infringement of Rights)

Data subjects may apply to the following bodies for dispute resolution or counselling regarding infringement of personal information.

Article 14 (Changes to This Policy)

This Privacy Policy applies from October 20, 2026. If content is added, deleted or modified, we will announce it on the website from 7 days before it takes effect.

Business Information