Privacy Policy
Strategy Salad Co., Ltd. (the “Company”) has established and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of Korea, in order to protect the personal information of data subjects and to handle related concerns promptly.
1. Personal Information We Collect and How We Collect It
The Company processes the following personal information provided directly by users when they contact us by email or telephone.
- Information processed: company name, name, job title, telephone number, email address, details of the enquiry
- Information generated and collected automatically: IP address, date and time of access, browser and device information, cookies
The Company may also process additional information that users provide while we handle their enquiry, such as résumés, telephone consultations and email replies.
2. Purposes of Processing
- Reviewing and replying to enquiries and providing consultations
- Discussing engagements and reviewing contracts for crisis management and issue management advisory services
- Responding to recruitment enquiries
- Analysing website usage statistics and improving the website
The Company does not use personal information for any purpose other than those listed above. If the purpose changes, the Company will take the necessary measures, including obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.
3. Retention Period
The Company destroys personal information without delay once the purpose of collection and use has been achieved. However, the following information is retained for the periods stated.
- Information collected in the course of an enquiry: 3 years after the enquiry has been handled
- Records of contracts or withdrawal of offers: 5 years (Act on the Consumer Protection in Electronic Commerce)
- Records of consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce)
- Communication confirmation data such as access logs: 3 months (Protection of Communications Secrets Act)
4. Provision to Third Parties
The Company processes personal information only within the scope stated in Section 1, and provides it to third parties only where Articles 17 and 18 of the Personal Information Protection Act apply, such as with the consent of the data subject or under specific provisions of law. The Company currently does not provide personal information to any third party.
5. Outsourcing of Processing
To operate the website reliably, the Company outsources website hosting and server operation to an external service provider. When entering into an outsourcing contract, the Company specifies in writing, in accordance with Article 26 of the Personal Information Protection Act, the prohibition of processing for purposes other than the outsourced work, technical and administrative safeguards, restrictions on re-outsourcing, and liability for damages. The Company also supervises whether the service provider processes personal information securely. Any change to the outsourced work or the service provider will be disclosed through this Policy.
6. Rights of Data Subjects and How to Exercise Them
Data subjects may at any time request access to, correction or deletion of, or suspension of processing of their personal information. Requests may be made in writing, by telephone or by email, and the Company will act on them without delay. Where a data subject requests correction of an error in their personal information, the Company will not use or provide that information until the correction is complete.
7. Destruction of Personal Information
When personal information is no longer needed because the retention period has expired or the purpose of processing has been achieved, the Company destroys it without delay. Information stored in electronic files is permanently deleted in a way that cannot be recovered or reproduced, and information recorded on paper is shredded or incinerated.
8. Security Measures
- Minimising the number of staff who handle personal information, and training them
- Restricting and managing access rights to personal information processing systems
- Encrypting data in transit (SSL)
- Retaining access records and preventing their forgery or alteration
- Locking physical storage areas
9. Cookies
The Company uses cookies to provide users with individual services and to analyse usage statistics. Users may refuse the storage of cookies through their web browser settings. If cookies are refused, some functions may be limited.
10. Privacy Officer
The Company has designated the following Privacy Officer, who oversees the processing of personal information and handles complaints and remedies of data subjects relating to it.
- Privacy Officer: James Chung (CEO)
- Telephone: +82-2-554-0827, +82-2-544-9267
- Email: hot@strategysalad.com
11. Remedies for Infringement
Data subjects may apply to the following organisations for dispute resolution or consultation regarding infringement of personal information.
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Cyber Investigation Division, Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
- Cyber Bureau, Korean National Police Agency: 182 (ecrm.police.go.kr)
12. Changes to This Policy
This Privacy Policy takes effect on 12 October 2026. Where content is added, deleted or amended due to changes in law or internal policy, the Company will give notice on the website at least 7 days before the change takes effect.
Announced: 5 October 2026 | Effective: 12 October 2026
This English version is provided for convenience. If there is any discrepancy between the English and Korean versions, the Korean version prevails.