Glitch Zero Inc. (hereinafter referred to as the "Company", service name "PetoWorks") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and promptly and smoothly handle grievances related thereto.
This Privacy Policy applies to the website operated by the Company (https://peto.works, hereinafter referred to as the "Website").
Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes. The processed personal information will not be used for purposes other than the following, and if the purpose of use changes, necessary measures such as obtaining separate consent under Article 18 of the Personal Information Protection Act will be implemented.
Inquiry Reception and Response: Verification, response, consultation, and notification of processing results for inquiries regarding services, quotations, partnerships, and recruitment received through the Website's Contact form
Article 2 (Categories of Personal Information Processed and Methods of Collection)
Category | Items Processed | Collection Method | Legal Basis for Processing |
|---|---|---|---|
| Inquiry Submission and Response (Required) | Name, email address, inquiry details | Directly entered by the data subject via the website's contact form | Consent of the data subject (Personal Information Protection Act, Article 15, Paragraph 1, Item 1) |
| Automatically Generated During Website Use | Access IP address, date and time of access, browser and device information | Automatically generated access logs from the website hosting service | Legitimate interests for service provision and security maintenance (Article 15, Paragraph 1, Item 6 of the same Act) |
The Company collects only the minimum information necessary to respond to inquiries. Please be careful not to enter uniquely identifiable information or sensitive information, such as resident registration numbers or account numbers, in the inquiry input field.
Article 3 (Processing and Retention Period of Personal Information)
The Company processes and retains personal information within the period of retention and use in accordance with laws and regulations or within the period agreed upon by the information subject.
Category | Retention Period |
|---|---|
| Inquiry receipt and response information | 1 year after inquiry processing is completed |
| Access logs | Subject to the hosting service provider's retention policy (not stored separately by the company) |
However, if the inquiry leads to the conclusion of a contract, the relevant information may be retained for the period stipulated for contract performance and by relevant laws and regulations (such as the Commercial Act, the Framework Act on National Taxes, etc.).
Article 4 (Provision of Personal Information to Third Parties)
The Company processes the personal information of the data subject only within the scope specified in Article 1, and does not provide personal information to third parties except with the consent of the data subject or under special provisions of the law, such as pursuant to Articles 17 and 18 of the Personal Information Protection Act.
Article 5 (Entrustment and Cross-Border Transfer of Personal Information Processing)
To ensure smooth website operations, the Company entrusts the processing of personal information as follows, and during this process, personal information is transferred overseas.
Trustee / Processor | Delegated Tasks |
|---|---|
| Framer B.V. | Website hosting, storage of information submitted through the contact form, and delivery to the company |
| [Email Service Provider — e.g., Google LLC] | Operation of business email for receiving inquiries |
When entering into an entrustment contract, the Company specifies in documents, such as the contract, matters concerning responsibilities—including the prohibition of processing personal information for purposes other than performing the entrusted tasks, technical and managerial safeguards, restrictions on re-entrustment, management and supervision of the trustee, and compensation for damages—in accordance with Article 26 of the Personal Information Protection Act, and supervises whether the trustee processes personal information securely.
Details on Cross-Border Transfer (Article 28-8 of the Personal Information Protection Act)
Item | Details |
|---|---|
| Recipient of Transfer | Framer B.V. (Contact: Privacy inquiry channel on Framer's official website at framer.com) |
| Country of Transfer | The Netherlands and countries where cloud infrastructure utilized by Framer is located (e.g., the United States) |
| Time and Method of Transfer | Transmitted via network at the time the data subject submits the inquiry form |
| Items Transferred | Name, email address, inquiry details, access logs |
| Purpose of Transfer | Website hosting and storage/transmission of inquiry information |
| Retention and Use Period | During the retention period set forth in Article 3 or until the termination of the entrustment agreement |
You may refuse the cross-border transfer of your personal data. In this case, please contact us directly using the contact information (email or phone) provided in Article 11, instead of using the Contact Us form.
Article 6 (Procedures and Methods for Destruction of Personal Information)
The Company destroys personal information without delay when it becomes unnecessary, such as upon the expiration of the retention period or the fulfillment of the processing purpose.
Destruction Procedure: The Company selects the personal information for which the reason for destruction has occurred and destroys it upon receiving approval from the Personal Information Protection Officer.
Destruction Method: Information in the form of electronic files is deleted using technical methods that make recovery and reproduction impossible, and information printed on paper documents is shredded or incinerated.
If personal information must continue to be preserved pursuant to laws and regulations, such personal information shall be transferred to a separate database or stored in a different location.
Article 7 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them)
Rights may be exercised in writing, via email, telephone, etc., to the Personal Information Protection Officer under Article 11, and the Company will take action on this without delay (within 10 days from the date of receiving the request).
Rights may be exercised through an agent, such as the data subject's legal representative or an authorized person. In this case, a power of attorney in accordance with Form No. 11 of the "Notification on the Methods of Processing Personal Information" must be submitted.
The data subject's rights may be restricted with respect to requests for inspection and suspension of processing of personal information pursuant to Article 35, Paragraph 4, and Article 37, Paragraph 2 of the Personal Information Protection Act.
If the personal information is explicitly designated as subject to collection under other laws and regulations, its deletion cannot be requested.
The Company verifies whether the person requesting the exercise of rights is the individual themselves or a legitimate agent.
Article 8 (Measures to Ensure the Security of Personal Information)
The Company takes the following measures to ensure the security of personal information:
Administrative Measures: Establishment and implementation of internal management plans, minimization of personnel handling personal information, and regular training
Technical Measures: Management of access authority for accounts accessing inquiry information and implementation of multi-factor authentication, encryption of transmission sections (HTTPS), and application of security updates
Physical Measures: Storage of documents containing printed personal information in locked locations
Article 9 (Installation, Operation, and Rejection of Automatic Personal Information Collection Devices)
The Company may use automatic collection devices such as cookies to the extent necessary for website operation, and currently does not collect behavioral information for customized advertising.
Cookies are small amounts of information sent by the server used to run the website to the user's browser, which are stored on the user's device.
Users may refuse to store cookies through their web browser settings.
(e.g., Chrome — Settings > Privacy and security > Third-party cookies / Safari — Settings > Privacy) Even if you refuse to store cookies, there are no restrictions on the use of the website.
Article 10 (Processing of Personal Information of Children Under 14 Years of Age)
The Company does not provide services to children under the age of 14 and does not collect personal information from children under the age of 14. If the Company becomes aware that personal information of a child under the age of 14 has been collected, it will destroy such information without delay.
Article 11 (Data Protection Officer and Grievance Handling Department)
The Company has designated a Data Protection Officer as follows to take overall responsibility for the processing of personal information, handle complaints from data subjects, and provide relief for damages related to the processing of personal information.
Category | Details |
|---|---|
| Chief Privacy Officer | Name: Cho Seong-ju / Title: CEO |
| Grievance Handling Department | Management Support Team |
| [email protected] | |
| Phone | 070-4110-1337 |
| Address | #614, SH Dream Tower, 205-15 Gasan digital 1-ro, Geumcheon-gu, Seoul, Republic of Korea |
You can direct any inquiries, complaints, or requests for remedy regarding personal information protection that arise while using the website to the contact information above, and the company will respond and process them without delay.
Article 12 (Remedies for Infringement of Rights and Interests of Data Subjects)
Data subjects may apply for dispute resolution or consultation with the organizations below to seek relief from personal information infringements.
Organization | (Toll-free) 1833-6972 / www.kopico.go.kr |
|---|---|
| Privacy Infringement Report Center (Korea Internet & Security Agency) | (Toll-free) 118 / privacy.kisa.or.kr |
| Supreme Prosecutors' Office | (Toll-free) 1301 / www.spo.go.kr |
| Korean National Police Agency | (Toll-free) 182 / ecrm.police.go.kr |
Article 13 (Amendments to the Privacy Policy)
This Privacy Policy takes effect on [November 1, 2026]. Any additions, deletions, or modifications will be notified through the website starting 7 days prior to the effective date of the changes. In the event of material changes to the rights of data subjects, notification will be provided starting 30 days in advance.