Privacy Policy
Seller and buyer contact information is not made public.

1. Purposes and Categories of Personal Information
Seller equipment submission: applicant name, company, phone, email, equipment location/type/manufacturer/model/year/working hours/asking price/condition/repair history/description/photos.
Buyer request: contact name, company, country, email, phone/WhatsApp, requested equipment/year/quantity/budget/trade terms/destination/notes.
Transaction processing: company/contact information and transaction records needed for quotation, contract, payment, shipment, customs and export documents.
Automatically generated information: IP address, access/submission time, browser/device information, security and administrator activity logs.
The Company processes this information for equipment-purchase review, seller/buyer verification, matching, quotation, contract, payment, shipment/export work, inquiry handling and service security.

2. Processing and Retention Period
Seller/buyer inquiries and consultation records are retained for 3 years after work completion or the last contact; transaction records such as contracts, payments, shipment and trade documents for 5 years after transaction completion; access/security and administrator logs for 12 months from creation. Longer statutory periods apply where required, and information is destroyed without delay when the purpose is achieved or the retention period expires.

3. Third-Party Provision
The Company does not provide personal information to external parties in principle. When equipment information/photos are published or seller/buyer contact details must be shared with the counterparty, the recipient, purpose, items and retention period are disclosed and required consent is obtained. When information is provided to carriers, forwarders, customs brokers, insurers or financial institutions as necessary to perform a transaction, the actual recipient and scope are separately explained to the parties. Information may also be provided where required by law.

4. Outsourcing of Personal-Information Processing
For website operations, the Company outsources web hosting, database, file storage, backup and server-security services to HOSTINGER PTE and email delivery to Hostinger. The processor name, outsourced tasks and retention period must match the actual contract and administrator settings; information is processed only as necessary until the outsourcing contract ends or the personal information is deleted.

Current principal external processing services: web hosting, database, file storage, backup and server security by HOSTINGER PTE; email delivery by Hostinger; approved WhatsApp template messages through Meta's WhatsApp Business Platform.

5. Overseas Transfer of Personal Information
If the Hostinger server or email-delivery service is located outside Korea, personal information may be transferred to and stored in Malaysia. The recipient is HOSTINGER PTE; transferred items include website-submission information, attachments, access logs and email-delivery information; purposes include hosting, backup, security and email delivery; transfer occurs through encrypted network transmission when information is submitted or sent; retention follows this policy or lasts until the outsourcing contract ends. A data subject may request refusal of an overseas transfer through the privacy contact, but refusing essential hosting or email processing may limit equipment registration, buyer requests or transaction notices.

The current primary server is located in Malaysia; the backup location confirmed in Hostinger's administration panel is Singapore. When WhatsApp messages are sent, the recipient phone number, variables required for approved templates, and transmission/status data may be processed through the WhatsApp Business Platform of Meta Platforms Ireland Limited (Ireland). A user who does not wish to use WhatsApp may request another available contact method.

6. Destruction Procedures and Methods
Personal information is destroyed without delay when the retention period expires or the processing purpose is achieved. Electronic files are deleted by methods that make recovery difficult; printed records are shredded or incinerated. Information that must be retained by law is stored separately and not used for other purposes. Backup copies are deleted sequentially according to the defined backup cycle.

7. Rights of Data Subjects, Safeguards and Cookies
Data subjects may request access, correction/deletion, suspension of processing and withdrawal of consent, and the Company processes such requests after identity verification in accordance with applicable law. The Company applies administrator access controls, one-way password hashing, HTTPS, access/activity logs, security updates and backups. Essential cookies may be used for sessions and security; refusing them in the browser may limit some functions. The Company currently uses Google Analytics to measure page visits and website-use statistics. Google Analytics may process device/browser information, first-party cookies or identifiers, and website interaction events.

8. Privacy Officer and Remedies
Privacy officer: 박인성 / 대표 / Department: 관리 / Email: kovina.ispark@gmail.com / Phone: 02-585-3524 / Address: 경기도 수원시 장안구 수성로157번길 60, 202-3703. For privacy consultation or remedies, data subjects may contact the Personal Information Dispute Mediation Committee (1833-6972, kopico.go.kr), KISA Privacy Infringement Report Center (118, privacy.kisa.or.kr) or the Korean National Police cybercrime reporting system (182, ecrm.police.go.kr). Changes to this policy are announced on the website, and the effective date is 2026-08-17.