Privacy Policy

This is an English translation for reference. In case of any discrepancy, the Korean version prevails.

Scope: This policy applies to the processing of personal information on the website operated by Cogniterm (domain: cogniterm.com; the “Website”).

1. Purposes of processing personal information

The Company processes personal information for the following purposes. Personal information processed will not be used for any purpose other than those below, and if a purpose changes, the Company will take the measures required by applicable laws.

  1. Responding to inquiries (Contact us)
    • Reviewing and answering inquiries and managing communication history
  2. Responding to demo requests and providing consultations
    • Providing demos, supporting consultations, quotes, and adoption reviews, and managing follow-up contact and history
  3. Security and service operations
    • Detecting abnormal access, responding to security incidents, improving service quality, and statistical analysis (where applicable)
  4. (Optional) Marketing and sales communications (only with consent)
    • Information on product and service updates, events and webinars, promotions, and newsletters

2. Personal information processed and methods of collection

The Enforcement Decree requires that a privacy policy include the “items of personal information processed.”

2.1 Items collected
(1) Information entered directly by users when submitting Contact us or demo requests

  • Required: company name, contact person’s name, email, mobile phone number, inquiry
  • Optional: industry, expected number of users, additional inquiries

(2) Information collected automatically while using the Website

  • Access logs, IP address, browser and operating system information, date and time of visit, referral path, and information collected through cookies and similar technologies

(3) Sensitive information
As a rule, the Company does not collect or process sensitive information. Users are advised not to include unnecessary sensitive information (e.g., health information) in their inquiries.

2.2 Methods of collection

  • Input forms on the Website (Contact us, demo requests)
  • Information voluntarily provided by users, such as by email or phone
  • Collection of information generated automatically in the course of using the service (cookies, etc.)

3. Processing and retention period of personal information

The Company retains and uses personal information until the purpose of processing is achieved or for the retention period required by applicable laws.

  1. Inquiry (Contact us) information
    • Retention period: 1 year after the inquiry is resolved
  2. Demo request information
    • Retention period: 1 year after the demo or consultation ends
  3. (Optional) Consent to receive marketing information
    • Retention period: until consent is withdrawn
  4. Automatically collected information (logs, cookies, etc.)
    • Retention period: 1 year (within the scope of security and operational purposes)

※ However, where retention is necessary for dispute resolution, settlement or contract performance, or compliance with legal obligations, the information may be retained for the relevant period.

4. Provision of personal information to third parties

As a rule, the Company does not provide data subjects’ personal information to third parties.
However, it may provide such information to the extent permitted by applicable laws, such as with the data subject’s consent or where specifically required by law.

5. Outsourcing of personal information processing

The Company may outsource personal information processing tasks to external parties for smooth business operations, in which case it will disclose the required matters in accordance with applicable laws.

※ Not applicable at present

6. Procedures and methods for destroying personal information

The procedures and methods for destroying personal information are mandatory items of a privacy policy.

  1. When destroyed: Personal information is destroyed without delay once it is no longer needed, such as when the retention period expires or the purpose of processing is achieved.
  2. Destruction procedure: selection of information to be destroyed → internal approval (or confirmation by the officer in charge) → destruction and record-keeping (if necessary)
  3. Destruction methods
    • Electronic files: permanently deleted using methods that make recovery impossible
    • Paper documents: shredded or incinerated

※ However, where retention is required by law, the information is stored separately for the period and on the basis required, and then destroyed.

7. Rights and obligations of data subjects and how to exercise them

Data subjects may exercise the following rights against the Company (except where restricted by law). These are mandatory items of a privacy policy.

  1. Request access to personal information
  2. Request correction or deletion of personal information
  3. Request suspension of personal information processing
  4. (Where processing is based on consent) Withdraw consent

How to exercise these rights (examples)

  • Submit a request by email or in writing to “9. Chief Privacy Officer / Receipt and handling of access requests” below
  • Upon receiving a request, the Company will act without delay and inform you of the outcome.

※ If a user provides a third party’s personal information through a form on the Website, the user must have the lawful authority and consent to do so.

8. Measures to ensure the security of personal information

The Company takes administrative, technical, and physical measures to ensure the security of personal information. Details of these security measures are specified in the Enforcement Decree and related notices, and they are also items that must be included in a privacy policy.

  1. Administrative measures: establishing and implementing an internal management plan, training personal information handlers, managing access rights
  2. Technical measures: access control, account and permission management, encryption (including in transit), malware prevention, retention of access records and prevention of their forgery or alteration
  3. Physical measures: access control to computer rooms and document storage rooms, locking devices, etc.

9. Chief Privacy Officer / Receipt and handling of access requests

9.1 Chief Privacy Officer

  • Name/Title: Soongi Hwang / Senior Associate
  • Phone: 010-4174-6168
  • Email: [email protected]

9.2 Receipt and handling of access requests

  • Channel: email
  • Procedure: identity verification → review of request → action taken and notice of outcome

10. Remedies for infringement of rights

Data subjects who need to report or seek advice on a personal information infringement may contact the following organizations (examples).

  • Personal Information Infringement Report Center: 118 (no area code)
  • Personal Information Dispute Mediation Committee: [phone number as announced by the organization]
  • Personal Information Protection Commission, Korean National Police Agency, and other relevant authorities

(Contact details may change, so please check the latest information.)

11. Personal information of children under 14 (if applicable)

As a rule, the Company does not provide services to children under the age of 14 or knowingly collect their personal information.
However, if it becomes necessary to collect the personal information of a child under 14, the Company will follow the procedures required by applicable laws, such as obtaining the consent of a legal guardian.

12. Changes to this Privacy Policy

The Company may change this Privacy Policy due to changes in laws or services, and will announce any changes on the Website. Changes to the privacy policy are an item that must be included in the privacy policy.

  • Method of notice: posting on the Website (or separate notice)
  • Effective date: February 2, 2026
  • Revision history: v1.0: established February 2, 2026