Effective date: 21 August 2026
Introduction
SANGHA Co., Ltd. (“SANGHA”, “we”) processes personal data collected through this website in accordance with Korea’s Personal Information Protection Act and this Policy. It applies to company information, business and product pages, the PR section (notices, project records, certifications, downloads), quote requests, A/S intake, and admin operation.
1. Purpose of processing
We use personal data only for the purposes below. If a purpose changes, we will notify you or obtain a new consent as required by law.
- Reviewing quote requests, responding, follow-up discussions, and checking attached drawings
- Handling A/S requests, understanding product/site conditions, scheduling, and after-sales support
- Operating website content such as notices, project records, certifications, and downloadable files
- Admin sign-in, role management, request handling, and site security
- Keeping inquiry records, handling disputes, and complying with applicable law
2. Personal data we collect
We collect the items below through website forms and admin features. We do not collect personal data of children under 14. If such data is identified, we delete it without delay.
| Channel | Required | Optional |
|---|---|---|
| Quote request | Company name, contact name, phone, email, request details, privacy consent | Business area, drawing files (PDF, DWG, PNG, JPG, etc., max 10MB each) |
| A/S request | Company name, contact name, phone, product/delivery date, symptom description, privacy consent | Photo files (PNG, JPG, WEBP, etc., max 10MB each) |
| Admin account | Email, password, role, display name | None |
| Common | Language (Korean/English), submission time | Access logs that may remain in cloud infrastructure (IP address, browser data, etc.) |
Attachments may accidentally include extra personal data. Please do not upload files that contain unnecessary personal information.
3. Retention period
We destroy personal data without delay when the purpose is fulfilled. We may keep it for the periods below to handle disputes and meet legal duties.
| Category | Period |
|---|---|
| Quote requests and drawing files | 3 years from the submission date |
| A/S requests and photo files | 3 years from the submission date |
| Admin account data | Until the account is deleted, or longer if the law requires |
4. Disclosure to third parties
We do not provide personal data to third parties without consent, except where:
- you have given prior consent;
- a statute requires disclosure, or a lawful request is made for investigation or court proceedings; or
- it is urgently necessary to protect life or body and consent cannot be obtained.
5. Processors and cross-border transfer
We entrust processing as follows and supervise processors so that personal data is handled securely.
| Processor | Work | Transfer |
|---|---|---|
| Supabase, Inc. (cloud infrastructure) | Storing quote/A/S records, attachments, and admin authentication | Data may be stored or transferred in an overseas cloud region |
| NAVER Cloud (NAVER Map) | Displaying the company location map | The map SDK may process access environment data. We do not send inquiry contents to NAVER |
If you do not want a cross-border transfer, do not submit the quote or A/S form. Contact us by phone (052-254-3580) or email (djkent@naver.com). You may also request deletion of data already submitted.
6. Your rights
You may request access, correction, deletion, suspension of processing, or withdrawal of consent at any time. We will act without delay as required by law.
- How to request: contact the privacy officer below by phone, email, or writing
- An agent may request on your behalf with a power of attorney
- Even after a deletion or suspension request, we may keep data that another statute requires us to retain
7. Destruction
When the retention period ends or the purpose is fulfilled, we destroy personal data so that it cannot be restored.
- Electronic files: permanently deleted in a non-recoverable manner
- Paper records: shredded or incinerated
8. Security measures
- Least-privilege access and authentication for admin accounts
- Encrypted communication (HTTPS) between the website and the cloud
- Access control so that only authorized admins can read submissions
- Limits on attachment size and file type
9. Cookies and similar technologies
Public pages do not use advertising or tracking cookies. Admin sign-in may use browser storage (such as local storage) to keep a session. Clearing stored data signs you out.
Third-party scripts such as NAVER Map may use their own cookies. Their privacy policies then apply.
10. Privacy officer
Privacy officer: Hee-won Yang, CEO
Company: SANGHA Co., Ltd.
Business registration no.: 701-86-01071
Address: 80-23 Godenggol-gil, Eonyang-eup, Ulju-gun, Ulsan, Republic of Korea
Phone: 052-254-3580
Fax: 052-254-3582
Email: djkent@naver.com
11. Remedies
You may also contact the following Korean authorities regarding personal data issues.
- Personal Information Infringement Report Center: privacy.kisa.or.kr / 118
- Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
- Supreme Prosecutors’ Office Cyber Investigation: www.spo.go.kr / 1301
- National Police Agency Cyber Bureau: ecrm.cyber.go.kr / 182
12. Notice of changes
If we change this Policy, we will publish the changes and the effective date on the website.
- Posted: 21 August 2026
- Effective: 21 August 2026
General conditions for using the site are in the Terms of Use.