Privacy Policy

The Company processes personal information for the purposes below. The personal information processed is not used for any purpose other than the following, and if the purpose of use changes, the Company will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Receiving and responding to consultation requests: Receiving consultation requests related to U.S. college tennis admissions and mental wellness, identifying and contacting the applicant, conducting the consultation, and informing of results.

2. Handling grievances: Verifying the identity of an inquirer/complainant, confirming the inquiry, contacting/notifying for fact-finding, and notifying of the outcome.

3. Membership registration and management: Confirming intent to register, identifying and authenticating members for membership services, maintaining and managing membership, and notifying/contacting regarding service use.

① Consultation request service: The Company processes the following personal information to provide the consultation request service.

· Required: Guardian's name, contact (phone or email)

· Optional: Child's age/grade, track of interest, inquiry details, email

② Membership service: The Company processes the following personal information for membership registration and membership services.

· Required: Name, email, phone number, password, gender, date of birth, role (player/amateur/parent)

③ The Company does not collect unique identifiers such as resident registration numbers, and does not provide payment functions.

① The Company processes and retains personal information within the retention/use period required by law or consented to by the data subject.

② Consultation request information is retained for 1 year after the purpose of the consultation is achieved and then destroyed. However, if the data subject requests deletion before then, it is destroyed without delay; where retention is required under applicable laws, it is kept for the required period.

③ Membership information is retained until membership withdrawal and destroyed without delay upon withdrawal. However, where retention is required under applicable laws, it is kept for the required period.

① The Company processes the data subject's personal information only within the scope specified in Article 1, and does not provide it to third parties except where it falls under Articles 17 and 18 of the Personal Information Protection Act, such as the data subject's consent or special provisions of law.

② The Company currently does not provide the data subject's personal information to third parties. If third-party provision becomes necessary in the future, the Company will obtain separate prior consent from the data subject and disclose it through this policy.

① For smooth service provision, the Company outsources personal information processing tasks as follows.

· Processor: Supabase, Inc. / Task: Storage and management of consultation request data (database)

· Processor: Vercel, Inc. / Task: Website hosting and operation

· (When email notifications are operated) Processor: Resend, Inc. / Task: Sending consultation-receipt notification emails

② The above processors may operate servers overseas (e.g., in the United States). When entering into outsourcing agreements, the Company specifies matters regarding safe processing in accordance with the Personal Information Protection Act and manages and supervises the processors.

③ If the content of the outsourced tasks or the processor changes, the Company will disclose it without delay through this policy.

① The data subject may, at any time, exercise rights such as requesting access to, correction of, deletion of, or suspension of processing of their personal information.

② Such rights may be exercised in writing, by phone, or by email, and the Company will act on them without delay.

③ If the data subject requests correction or deletion of errors in personal information, the Company will not use or provide the relevant personal information until the correction or deletion is completed.

④ Rights may be exercised through an agent, such as the data subject's legal representative or an authorized delegate.

⑤ Personal information of children under the age of 14 is processed with the consent of a legal representative, and consultation requests through this service are, in principle, made by a guardian (legal representative).

① When personal information becomes unnecessary due to the expiration of the retention period or achievement of the processing purpose, the Company destroys it without delay.

② Method of destruction: Information in electronic form is deleted using technical methods that render it unrecoverable; paper documents are shredded or incinerated.

The Company takes the following measures to ensure the security of personal information.

1. Administrative measures: Minimizing access privileges and authenticating administrators.

2. Technical measures: Data access control (only authenticated administrators may view), transmission encryption (HTTPS), and database access policies (RLS).

3. Physical measures: Data is stored in secure cloud infrastructure (Supabase, Vercel).

① The Company uses a visit-statistics tool (Vercel Analytics) to analyze service use, which collects anonymous statistics that do not identify individuals.

② The data subject may allow or block cookies through their web browser settings. However, blocking cookies may cause difficulty in using some services.

③ The Company does not use identifying cookies for marketing/advertising purposes or third-party trackers.

① The Company designates a Personal Information Protection Officer, as below, to take overall responsibility for personal information processing and to handle data subjects' complaints and remedies.

· Personal Information Protection Officer: [Name/Title to be specified]

· Contact: tennis.gcm@gmail.com

② The data subject may direct any inquiry, complaint, or request for remedy regarding personal information protection arising from service use to the contact above, and the Company will respond and handle it without delay.

The data subject may seek remedies or consultation for personal information infringement from the following organizations (Korea).

· Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)

· Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)

· Supreme Prosecutors' Office: 1301 (www.spo.go.kr)

· National Police Agency: 182 (ecrm.police.go.kr)

This Privacy Policy applies from its effective date. If there are additions, deletions, or amendments due to laws, policies, or content, the Company will announce them through the site from 7 days before the effective date of the changes.