1. Information We Collect

When you use our services or visit our website, we collect different types of information to provide better educational experiences and improve our budget foundation programs.

Personal Information You Provide

This includes data you give us directly when signing up for courses, contacting us, or participating in our programs:

• Name and contact details (email address, phone number)
• Billing information and payment details for course enrollment
• Educational background and learning preferences
• Communication records when you reach out to our support team
• Survey responses and feedback about our programs

Automatically Collected Information

Our systems automatically gather certain technical data when you browse our site:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on each page
• Referring website and navigation patterns
• Cookies and similar tracking technologies

2. How We Use Your Information

We process your data for specific purposes related to delivering quality financial education. Here's what we actually do with it:

3. Legal Basis Under South Korean Law

We comply with the Personal Information Protection Act (PIPA) of South Korea. Our legal grounds for processing your data include:

• Contract Performance: Processing necessary to provide educational services you've enrolled in
• Consent: Where you've given explicit permission for specific uses
• Legal Obligations: When required by South Korean regulatory bodies
• Legitimate Interests: Improving services while respecting your rights

You can withdraw consent at any time, though this might limit our ability to provide certain services.

4. Data Sharing and Third Parties

Sometimes we need to share information with trusted partners who help us run our educational platform. But we're selective about who gets access:

Service Providers We Work With

• Payment Processors: Secure handling of financial transactions
• Email Services: Delivering course communications and updates
• Cloud Hosting: Storing course materials and user data safely
• Analytics Tools: Understanding how learners use our platform

All these partners sign contracts that require them to protect your information and use it only for specified purposes. They can't repurpose your data for their own marketing or other activities.

When We Must Disclose Information

In rare cases, we're legally required to share data:

• Court orders or legal processes from South Korean authorities
• Protecting rights and safety of our users or staff
• Investigating potential fraud or security issues
• Business transfers (if Energy Intellilink is acquired or merged)

5. Your Privacy Rights

Under South Korean law, you have substantial control over your personal information. Here's what you can do:

Access and Portability

Request a copy of all personal data we hold about you. We'll provide it in a commonly used electronic format within 10 business days.

Correction and Updates

Found an error in your profile or contact details? You can update most information directly through your account settings, or contact us for assistance.

Deletion Rights

Request complete deletion of your account and associated data. We'll comply within 30 days unless we're legally required to retain certain records (like transaction histories for tax purposes).

Processing Restrictions

Ask us to limit how we use your data while you contest its accuracy or legitimacy. We'll stop active processing but may retain the information.

Objection Rights

Object to data processing based on legitimate interests. We'll stop unless we can demonstrate compelling reasons that override your interests.

6. Data Security Measures

Protecting your information isn't just a legal requirement—it's fundamental to how we operate. Here's what we do:

Technical Safeguards

• 256-bit SSL encryption for all data transmissions
• Encrypted storage for sensitive personal and payment information
• Regular security audits and vulnerability assessments
• Multi-factor authentication for staff accessing user data
• Automated backup systems with secure off-site storage

Administrative Controls

Only authorized team members can access personal data, and only when necessary for their job functions. We maintain detailed access logs and conduct regular training on data protection practices.

Despite our precautions, no system is completely secure. If we detect a data breach that could affect you, we'll notify you within 24 hours along with steps we're taking to address it.

7. Data Retention Periods

We don't keep information longer than necessary. Here's our retention schedule:

After these periods expire, we securely delete or anonymize your data. Anonymized information (stripped of personal identifiers) may be kept indefinitely for statistical analysis.

8. Cookies and Tracking Technologies

Our website uses cookies—small text files stored on your device—to enhance your experience. You control whether to accept them.

Types of Cookies We Use

• Essential Cookies: Required for basic site functionality like login sessions
• Performance Cookies: Help us understand which pages are popular and how users navigate
• Functional Cookies: Remember your preferences and settings

Most browsers let you refuse cookies or alert you when they're being sent. Check your browser settings under privacy or security options. Blocking essential cookies might prevent you from accessing certain features.

9. International Data Transfers

While Energy Intellilink operates primarily in South Korea, some of our service providers are based overseas. This means your data might be transferred to and stored in other countries.

When we transfer data internationally, we ensure adequate protections through:

• Standard contractual clauses approved by regulatory authorities
• Partnering only with providers in countries with strong data protection laws
• Additional technical safeguards like encryption during transfer

You can request specific details about where your data is stored by contacting our privacy team.

10. Children's Privacy

Our financial education services target adults. We don't knowingly collect information from anyone under 14 years old. If you're a parent who believes your child has provided us with personal data, please contact us immediately. We'll delete it within 48 hours of verification.

11. Changes to This Policy

We review and update this privacy policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify active users via email at least 30 days before they take effect.

The "Last Updated" date at the top shows when the current version became effective. Continuing to use our services after changes go live means you accept the updated terms.

12. Filing Complaints

If you're unhappy with how we handle your personal information, please reach out to us first. We take complaints seriously and will work to resolve your concerns.

You also have the right to file a complaint with the Personal Information Protection Commission of South Korea if you believe we've violated your privacy rights. You can contact them through their website or by visiting their office in Seoul.