Privacy Policy
Effective: September 30, 2026
IOTA MEDIA LAB (“we”, “us”) complies with the Personal Information Protection Act of Korea and related laws. This policy explains how we handle personal information of people who use our website (https://iotamedialab.com, the “Site”).
This English version is provided for convenience. If it differs from the Korean version, the Korean version prevails.
1. Why we process personal information
We process personal information only for the purposes below. If a purpose changes, we will take the steps the law requires, such as asking for separate consent.
- Answering inquiries: reviewing and replying to your inquiry, and sending free samples or our service overview
- Service information: consultations and quotes for the services you asked about
- Running the Site: remembering your language choice, security and abuse prevention
2. What we collect
| Category | Items | How |
|---|---|---|
| Inquiry (required) | Clinic name, your name, email, message, inquiry type | Contact form |
| Inquiry (optional) | Phone number | Contact form |
| Automatic | Language cookie, IP address, browser information, time of access | Generated as you use the Site |
We do not collect resident registration numbers or sensitive information such as health data. Please do not include patient information or other sensitive details in your message.
3. How long we keep it
- Inquiry information: kept for one year after your inquiry is resolved, then destroyed.
- If we sign a service contract: kept for as long as needed to perform it, and for the periods required by law such as the Framework Act on National Taxes (transaction records, five years).
- Language cookie: stored in your browser for up to one year.
- Access logs: kept briefly by our hosting provider for security and troubleshooting, under its own retention policy.
4. Sharing with third parties
We use personal information only for the purposes in section 1 and do not provide it to third parties, except with your consent or where Articles 17 and 18 of the Personal Information Protection Act allow, such as when required by law.
5. Service providers
We use the following providers to run the Site. Our agreements with them require that personal information is handled securely, as the law requires.
| Provider | What they do |
|---|---|
| Resend, Inc. | Delivers contact form submissions by email |
| Vercel Inc. | Hosts the Site and processes access logs |
6. Transfers outside Korea
To use the providers in section 5, we transfer personal information outside Korea as below. This is outsourcing and storage needed to perform our agreement with you, under Article 28-8(1)(3) of the Personal Information Protection Act.
| Recipient | Country | Items | When and how | Purpose and retention |
|---|---|---|---|---|
| Resend, Inc. (resend.com/legal/privacy-policy) | United States | Clinic name, your name, email, phone, message | Sent over the network when you submit the form | Email delivery / kept under the provider’s retention policy, then deleted |
| Vercel Inc. (vercel.com/legal/privacy-policy) | United States and other countries where Vercel operates infrastructure | IP address, browser information, time of access, form submissions | Sent over the network when you visit the Site or submit the form | Hosting and security / kept under the provider’s retention policy, then deleted |
If you do not want your information transferred outside Korea, you may choose not to use the contact form. In that case, we won’t be able to receive your inquiry online.
7. How we destroy personal information
When the retention period ends or the purpose is achieved, we destroy personal information without delay. Electronic files are deleted so they cannot be recovered, and paper documents are shredded or incinerated. Where another law requires us to keep information, we store it separately.
8. Your rights
You can ask us at any time to access, correct, delete or stop processing your personal information, or withdraw your consent. Email the privacy officer in section 11 and we will act on your request and reply within 10 days.
Information that another law requires us to keep cannot be deleted, and requests to stop processing may be limited by law. You can also exercise your rights through a representative, who must submit a power of attorney.
9. How we keep it safe
- Encrypted transmission (HTTPS)
- Access to personal information limited to the people who handle inquiries
- Inquiries are not stored in a separate database; they are delivered only to our inquiry inbox
- Spam protection to block automated abusive submissions
10. Cookies
The Site uses a single cookie, “NEXT_LOCALE”, to remember the language you chose. It does not identify you and is stored for up to one year. We do not use analytics or advertising cookies or other tracking tools.
You can block or delete cookies in your browser settings. If you do, the Site may show in the default language (Korean).
11. Privacy officer
We have appointed the following privacy officer to oversee how we handle personal information and to respond to complaints and requests.
- Name: BHATIA SANSKRITI
- Title: Representative
- Email: hello@iotamedialab.com
12. Getting help
If you need to report or discuss a privacy violation, you can contact the following Korean authorities.
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
13. Children
The Site is intended for medical institutions and businesses. We do not collect personal information from children under 14.
14. Changes to this policy
This policy applies from the effective date. If we add, remove or change anything, we will announce it on the Site at least 7 days before it takes effect (30 days for significant changes).
- Company: IOTA MEDIA LAB
- Representative: BHATIA SANSKRITI
- Business registration no.: [to be added]
- Address: [to be added]
- Email: hello@iotamedialab.com