'HireVisa' operated by 'Hire Diversity Co., Ltd.' (hereinafter referred to as the 'Company') has established and operates the following privacy policy in order to protect the personal information and rights of users and to promptly handle grievances and complaints related thereto in accordance with Article 30 of the Personal Information Protection Act. Our company is committed to complying with and practicing the responsibilities and obligations stipulated by the relevant laws and regulations.
Effective Date : 2025-05-12
Article 1 Collection and Use of Personal Information
Article 2 Handling of Sensitive Information
Article 3 Handling of Personal Information of Children Under the Age of 14
Article 4 Refusal to Install and Operate Automatic Personal Information Collection Devices
Article 5 Retention, Utilization Period and Destruction of Personal Information
Article 6 Consignment of Personal Information Processing
Article 7 Provision of Personal Information to Third Parties
Article 8 Overseas Transfer of Personal Information
Article 9 Measures to secure the safety of personal information
Article 10 Rights of users and legal representatives and how to exercise them
Article 11 Remedies for infringement of the rights and interests of the personal information manager and users
Article 12 Changes to the Privacy Policy
| Purpose of collection | Required items | Retention and use period |
|---|---|---|
| Receiving applications for insurance business, reviewing the appropriateness of documents, and accepting insurance business | Passport number | Until withdrawal of membership or termination of additional service provision |
| Receiving applications for alien registration cards, reviewing the appropriateness of documents, issuing alien registration cards, and providing buyer visa services | Passport number | Until withdrawal of membership or termination of additional services |
| Purpose of collection | Required fields | Retention and usage period |
|---|---|---|
| Request for free consultation | Up to 3 months from the date of collection | |
| To receive and respond to university agreement inquiries | Name of contact person, school name, company email, contact number | Up to 3 months from the date of collection |
| Receiving recruitment applications and managing the screening process | Name, phone number, email, resume, portfolio | 3 years from the date of collection or until withdrawal of consent |
| To provide referrals to our services | From the date of collection until 3 months |
| Purpose of collection | Required | Retention and use period |
|---|---|---|
| To send service promotion and marketing information | Email, mobile phone number | Until withdrawal of membership or withdrawal of consent |
| Purpose of Collection | Collected items | Period of Retention and Use | Grounds |
|---|---|---|---|
| Identification and management of members for the provision of HireVisa services | Name, email, password | Until withdrawal of membership | Performance of contract |
| Receiving and responding to member inquiries related to the HireVisa service | Name, email, inquiry | Until membership withdrawal | To fulfill the contract |
| Receiving applications for Alien Registration Card, reviewing the adequacy of documents, issuing Alien Registration Card, and providing HireVisa service | Name, email, date of birth, gender, mobile phone number, nationality, address and place of stay in Korea | Until withdrawal | Fulfillment of contract |
| Payment and refund for the service | Email, payment information | For as long as required by applicable laws and regulations | To fulfill the contract |
| Receiving applications for insurance business, reviewing the appropriateness of documents, and accepting applications for insurance business | Name, mobile phone number | Until withdrawal of membership | Contract fulfillment |
| Inquiries regarding extension of period of stay, change of status of residence, and other visa administrative inquiries | Name, email, mobile phone number, inquiry details | Until withdrawal of membership or as long as required by relevant laws and regulations | Contract execution |
The Company does not collect sensitive personal information of users.
The Company does not provide its services to children under the age of 14 and does not collect personal information about them.
The Company shall destroy the personal information without delay when the personal information becomes unnecessary, such as the expiration of the personal information retention period or the achievement of the purpose of processing.
(1) The Company shall delete all personal information of users when the purpose of collecting personal information is achieved.
The grounds for retention and the items of personal information to be retained are as follows.
| Purpose of retention | Grounds Act | Retention Period |
|---|---|---|
| Records of contract or subscription withdrawal | Act on Consumer Protection in Electronic Commerce, etc. | 5 years |
| Records on payment and supply of goods, etc. | Act on Consumer Protection in Electronic Commerce, etc. | 5 years |
| Records on handling consumer complaints or disputes | Act on Consumer Protection in Electronic Commerce, etc. | 3 years |
| Records on display/advertising | Act on Consumer Protection in Electronic Commerce, etc. | 6 months |
| Books and supporting documents for all transactions prescribed by tax laws | National Taxation Act | 5 years |
| Record retention of access | Communications Secrets Protection Act | 3 months |
The Company consigns some personal information processing tasks to ensure the smooth processing of personal information, and when entering into a consignment contract, the Company supervises whether the consignee safely processes personal information in accordance with relevant laws and regulations. If the contents of the consignment or the consignee are added or changed, we will disclose it without delay through the prior consent notice in accordance with the relevant laws and regulations or through this Privacy Policy.
| Trustee | Outsourcing |
|---|---|
| Amazon Web Service | Use of Cloud Services and IDC |
| OpenAI OpCo, LLC | Passport Copy OCR Analysis |
| Jotform Inc. | University Agreement Inquiry |
| DaouTech Co. | Fax documents to government offices (Enfax) |
| EZTask Inc. | Reviewing submissions for appropriateness |
| Doodlin Corporation | Provide recruitment application platform (Greeting) |
| Whattime Corporation | Provided free consultation application platform for HireVisa visa consultation service (Whattime) |
| Channel Corporation | Provides inquiry platform |
| CodeStates Corporation | Provides introduction letter for the service |
| Toss Payments | Payments and refunds for the HireVisa service |
The Company processes the personal information of the information subject only within the scope specified in 'Article 1 Guidance on the Collection and Use of Personal Information' and provides personal information to third parties only with the prior consent of the user or when special requirements of relevant laws and regulations arise.
| Recipients | Purpose of Provision | Items to be provided | Retention and use period |
|---|---|---|---|
| Partner universities/foreign language schools | Issuance and management of foreign student visas | Name, e-mail, date of birth, gender, address and place of stay in Korea, Alien Registration Card application documents, passport | Until the end of the foreign student's stay or until the end of the contract with the agreement university/foreign language school |
| Recipient | Purpose of Provision | Items to be provided | Retention and usage period | Grounds |
|---|---|---|---|---|
| National Health Insurance Service | Management of health insurance premium charges under the National Health Insurance Act | Name, cell phone number, passport, alien registration card | Until the period in accordance with the relevant laws and regulations | Statutory obligations (Act: Article 14, Article 69 of the National Health Insurance Act) |
The Company does not provide personal information to other businesses outside of Korea. However, the Company transfers personal information processing to overseas countries as follows to fulfill contracts related to the provision of information and communication services and to improve user convenience.
| Purpose | Item | When and how | Retention period | Entities and countries | Contact |
|---|---|---|---|---|---|
| Passport copy OCR analysis | Passport number | Transmitted over an encrypted network when providing services | Until the end of the contract or until you withdraw your membership, whichever comes first, or until we stop providing the Services | OpenAI OpCo, LLC / United States | privacy@openai.com |
| To receive university agreement inquiries | Name of contact person, school name, company email, contact number | Transmitted through an encrypted network when providing the service | Up to 3 months from the date of collection or termination of the contract, whichever comes first | Jotform Inc. / United States | privacy@jotform.com |
The Company is committed to safely managing your personal information so that it is not lost, stolen, leaked, altered or damaged, and takes necessary technical, administrative and physical measures.
We take measures to manage personal information by minimizing the number of employees who handle personal information and conducting periodic personal information protection training.
We have established and implemented an internal management plan to ensure the safe handling of personal information.
We keep and manage records (web logs, summary information, etc.) accessed to the personal information processing system for at least one year to facilitate response in the event of a personal information infringement incident, and use security functions to prevent access records from being falsified, stolen, or lost.
Users' personal information is encrypted and stored and managed.
The Company installs security programs and periodically updates and inspects them to prevent leakage and damage of personal information due to hacking or computer viruses. In addition, the Company installs systems in areas with controlled access from the outside and monitors and blocks them technically and physically.
The Company takes measures to control access to personal information by granting, changing, or canceling access rights to the personal information processing system that processes personal information.
The Company has established the following exercise methods to protect the personal information rights of users (or their legal representatives).
Personal Information Protection Officer
Users may contact the person in charge of personal information protection for all personal information protection-related inquiries, complaints, and damage relief arising from the use of the Service. The Company will respond to and handle your inquiries without delay.
If you need further assistance regarding infringement of your rights and interests, please contact the following organizations.
In addition, a person whose rights or interests have been infringed due to a disposition or omission made by the head of a public institution in response to a request for access, correction or deletion of personal information or suspension of processing may file an administrative appeal in accordance with the Administrative Appeals Act.
The Privacy Policy shall be applied from the effective date, and if there are any additions, deletions, or corrections to the Privacy Policy in accordance with relevant laws and policies, we will notify you through the website without delay.