Privacy Policy

Ark Academy (hereinafter referred to as the “Company”) establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to ensure the prompt and smooth handling of related complaints.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes.
The personal information processed will not be used for any purpose other than those listed below. If the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent, in accordance with applicable laws and regulations.


1. Membership Registration and Management

  • Confirmation of intent to register as a member

  • Identification and authentication of the member

  • Maintenance and management of membership status

  • Prevention of fraudulent or unauthorized use of services

  • Verification of consent from a legal guardian in the case of children under the age of 14

  • Delivery of notices and handling of complaints


2. Provision of Goods or Services

  • Provision of services and content

  • Issuance of contracts and invoices

  • Payment processing and settlement

  • Identity verification and age verification

  • Debt collection


3. Handling of Complaints

  • Verification of the complainant’s identity

  • Confirmation and investigation of complaint details

  • Notification of processing results

Article 2 (Retention and Processing Period of Personal Information)

The Company processes and retains personal information within the retention and usage period prescribed by applicable laws and regulations or within the period consented to by the data subject.

The retention and processing periods for personal information are as follows


Membership Registration and Management

Retention Period : Until membership withdrawal from the website

However, in the following cases, personal information will be retained until the relevant matter is resolved

  • Where an investigation or inquiry is ongoing due to a violation of applicable laws and regulations

  • Where claims and obligations remain outstanding, until the settlement of such claims and obligations is completed

Article 3 (Outsourcing of Personal Information Processing)

The Company entrusts certain personal information processing tasks to third parties as follows to ensure the smooth handling of personal information-related operations.


Status of Outsourcing

Entrusted Party : I’mweb Co., Ltd.

Scope of Outsourced Work
Provision of shopping mall hosting systems, mobile application services, marketing and additional/affiliate services, and dispatch of AlimTalk, FriendTalk, and SMS messages


Entrusted Parties : Inicis PG, NICEPAY PG

Scope of Outsourced Work
Payment processing and escrow services


When entering into outsourcing agreements, the Company specifies matters related to personal information protection in the contract in accordance with Article 25 of the Personal Information Protection Act and supervises whether the entrusted parties process personal information safely.


If there are any changes to the entrusted tasks or entrusted parties, the Company will disclose such changes without delay through this Privacy Policy.

Article 4 (Rights of the Data Subject and Legal Representative and Methods of Exercise)

The data subject may exercise the following rights with respect to the Company at any time

  • Request access to personal information

  • Request correction of personal information

  • Request deletion of personal information

  • Request suspension of the processing of personal information

Such rights may be exercised in writing, by telephone, email, fax, or other available means, and the Company will take prompt action without delay.

The rights may also be exercised through a legal representative or an authorized agent. In such cases, a power of attorney must be submitted.

Article 5 (Categories of Personal Information Processed)

The Company processes the following categories of personal information


1. Membership Registration and Management

Required Information
Name, date of birth, user ID, password, phone number, gender, email address

Optional Information
None


2. Provision of Goods or Services

Required Information:
Name, date of birth, user ID, password, address, phone number, email address

Payment Information:
Credit card number, bank account information, and other payment-related details


3. Information Collected Automatically

  • IP address, cookies, MAC address

  • Records of service use, access logs, and records of improper or fraudulent use

Article 6 (Destruction of Personal Information)

When the retention period of personal information has expired or the purpose of processing has been achieved, the Company will destroy the relevant personal information without delay.


If personal information must be retained in accordance with applicable laws and regulations, such information will be stored separately in a distinct database.


Method of Destruction

  • Electronic files: Permanently deleted using methods that render the data irrecoverable

  • Paper documents: Shredded or incinerated

Article 7 (Measures to Ensure the Security of Personal Information)

The Company implements the following measures to ensure the security of personal information

  • Administrative Measures
    Establishment of internal management plans and regular employee training

  • Technical Measures
    Access control management, encryption, and installation of security programs

  • Physical Measures
    Access control to computer rooms and data storage facilities

Article 8 (Installation, Operation, and Refusal of Cookies)

The Company uses cookies to provide customized services.


Purpose of Using Cookies
Analysis of user behavior patterns and improvement of services.


How to Refuse Cookie Settings
Users may refuse the storage of cookies by adjusting their browser settings
(Browser Settings → Internet Options → Privacy Settings).


Please note that refusing the storage of cookies may result in limitations in the use of certain services.

Article 9 (Responsibility for Personal Information Protection)

The Company collects only the minimum amount of personal information necessary to provide its services and does not use such information for purposes other than those intended, nor provide it to third parties without the user’s consent.


Users may request access to, correction of, or deletion of their personal information at any time, and the Company will take prompt action without delay in response to such requests.

Article 10 (Management of ID and Password)

  • Members are responsible for the management of their ID and password.

  • Members shall not provide or share their ID or password with any third party.

  • If a member becomes aware of any unauthorized use or misuse of their ID or password, they must immediately notify the Company.

Article 11 (Remedies for Infringement of Rights)

For relief of damages and consultation regarding personal information infringement, users may contact the following organizations:

Article 12 (Effective Date and Amendments)

This Privacy Policy shall take effect on July 24, 2023.


The Company may amend this Privacy Policy in accordance with applicable laws and regulations. In the event of any changes, the Company will provide prior notice through the website before the revised policy becomes effective.

Privacy Policy

Ark Academy (hereinafter referred to as the “Company”) establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to ensure the prompt and smooth handling of related complaints.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes.
The personal information processed will not be used for any purpose other than those listed below. If the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent, in accordance with applicable laws and regulations.


1. Membership Registration and Management

  • Confirmation of intent to register as a member

  • Identification and authentication of the member

  • Maintenance and management of membership status

  • Prevention of fraudulent or unauthorized use of services

  • Verification of consent from a legal guardian in the case of children under the age of 14

  • Delivery of notices and handling of complaints


2. Provision of Goods or Services

  • Provision of services and content

  • Issuance of contracts and invoices

  • Payment processing and settlement

  • Identity verification and age verification

  • Debt collection


3. Handling of Complaints

  • Verification of the complainant’s identity

  • Confirmation and investigation of complaint details

  • Notification of processing results

Article 2 (Retention and Processing Period of Personal Information)

The Company processes and retains personal information within the retention and usage period prescribed by applicable laws and regulations or within the period consented to by the data subject.

The retention and processing periods for personal information are as follows


Membership Registration and Management

Retention Period : Until membership withdrawal from the website

However, in the following cases, personal information will be retained until the relevant matter is resolved

  • Where an investigation or inquiry is ongoing due to a violation of applicable laws and regulations

  • Where claims and obligations remain outstanding, until the settlement of such claims and obligations is completed

Article 3 (Outsourcing of Personal Information Processing)

The Company entrusts certain personal information processing tasks to third parties as follows to ensure the smooth handling of personal information-related operations.


Status of Outsourcing

Entrusted Party : I’mweb Co., Ltd.

Scope of Outsourced Work
Provision of shopping mall hosting systems, mobile application services, marketing and additional/affiliate services, and dispatch of AlimTalk, FriendTalk, and SMS messages


Entrusted Parties : Inicis PG, NICEPAY PG

Scope of Outsourced Work
Payment processing and escrow services


When entering into outsourcing agreements, the Company specifies matters related to personal information protection in the contract in accordance with Article 25 of the Personal Information Protection Act and supervises whether the entrusted parties process personal information safely.


If there are any changes to the entrusted tasks or entrusted parties, the Company will disclose such changes without delay through this Privacy Policy.

Article 4 (Rights of the Data Subject and Legal Representative and Methods of Exercise)

The data subject may exercise the following rights with respect to the Company at any time

  • Request access to personal information

  • Request correction of personal information

  • Request deletion of personal information

  • Request suspension of the processing of personal information

Such rights may be exercised in writing, by telephone, email, fax, or other available means, and the Company will take prompt action without delay.

The rights may also be exercised through a legal representative or an authorized agent. In such cases, a power of attorney must be submitted.

Article 5 (Categories of Personal Information Processed)

The Company processes the following categories of personal information


1. Membership Registration and Management

Required Information
Name, date of birth, user ID, password, phone number, gender, email address

Optional Information
None


2. Provision of Goods or Services

Required Information
Name, date of birth, user ID, password, address, phone number, email address

Payment Information
Credit card number, bank account information, and other payment-related details


3. Information Collected Automatically

  • IP address, cookies, MAC address

  • Records of service use, access logs, and records of improper or fraudulent use

Article 6 (Destruction of Personal Information)

When the retention period of personal information has expired or the purpose of processing has been achieved, the Company will destroy the relevant personal information without delay.


If personal information must be retained in accordance with applicable laws and regulations, such information will be stored separately in a distinct database.


Method of Destruction

  • Electronic files: Permanently deleted using methods that render the data irrecoverable

  • Paper documents: Shredded or incinerated

Article 7 (Measures to Ensure the Security of Personal Information)

The Company implements the following measures to ensure the security of personal information

  • Administrative Measures
    Establishment of internal management plans and regular employee training

  • Technical Measures
    Access control management, encryption, and installation of security programs

  • Physical Measures
    Access control to computer rooms and data storage facilities

Article 8 (Installation, Operation, and Refusal of Cookies)

The Company uses cookies to provide customized services.


Purpose of Using Cookies
Analysis of user behavior patterns and improvement of services.


How to Refuse Cookie Settings
Users may refuse the storage of cookies by adjusting their browser settings
(Browser Settings → Internet Options → Privacy Settings).


Please note that refusing the storage of cookies may result in limitations in the use of certain services.

Article 9 (Responsibility for Personal Information Protection)

The Company collects only the minimum amount of personal information necessary to provide its services and does not use such information for purposes other than those intended, nor provide it to third parties without the user’s consent.


Users may request access to, correction of, or deletion of their personal information at any time, and the Company will take prompt action without delay in response to such requests.

Article 10 (Management of ID and Password)

  • Members are responsible for the management of their ID and password.

  • Members shall not provide or share their ID or password with any third party.

  • If a member becomes aware of any unauthorized use or misuse of their ID or password, they must immediately notify the Company.

Article 11 (Remedies for Infringement of Rights)

For relief of damages and consultation regarding personal information infringement, users may contact the following organizations:

Article 12 (Effective Date and Amendments)

This Privacy Policy shall take effect on July 24, 2023.


The Company may amend this Privacy Policy in accordance with applicable laws and regulations. In the event of any changes, the Company will provide prior notice through the website before the revised policy becomes effective.