Privacy Policy
Last updated: 2026-03-14
Related policies live on the imprint page for terms, cookies, and refunds.
-
1. Third-parties
Velvet Harbour Academy may engage processors to host forms, deliver email, or support scheduling widgets. Each processor is bound by written agreements that limit use to the instructions provided and require appropriate technical and organizational measures. We do not sell personal data. Where a processor operates outside the Republic of Korea, we assess transfer mechanisms and document safeguards in line with applicable data export rules. You may request a current list of processor categories by writing to the contact email below.
-
2. Rights
Depending on applicable law, you may have rights to access, rectify, delete, or restrict processing of your personal data, as well as rights related to portability and objection. Requests are verified to protect account integrity. We respond within a reasonable period, typically within thirty days, unless law requires a shorter timeline. If we decline a request, we explain the rationale and outline appeal paths available to you under Korean personal information protection statutes or other relevant frameworks.
-
3. Retention
Contact form submissions are retained for twenty-four months unless a longer period is required for legitimate dispute resolution. Analytics identifiers tied to cookie preferences are retained according to the durations listed in the Cookie Settings annex. When retention periods expire, we delete or irreversibly anonymize records except where a narrow legal hold applies. Backup systems may briefly retain deleted data until rotation completes.
-
4. Use-of-data
We use personal data to respond to inquiries, schedule consultations, improve site reliability, and maintain security logs. Marketing communications are sent only when you have opted in or when applicable law allows soft opt-in with a clear unsubscribe path. We do not use inquiry data to train generalized public models. Automated decision-making that produces legal or similarly significant effects is not applied to visitors of this site.
-
5. Data-collected
Categories may include identifiers (name, email address), professional details (company, role), project descriptors you supply, technical data (IP address, device type, browser), and cookie-related records reflecting your consent state. Calendar widgets may collect appointment metadata you submit through the embedded interface. We avoid collecting sensitive categories unless you voluntarily include them in a message, in which case we process them solely to handle your request.
Contact: hello@bridge-core.one