Privacy Policy

1. Overview

This Privacy Policy describes how IMOK ("we", "us") handles personal information on the company website at imoklab.com ("the Site"). The Site is a brochure-style showcase: it does not offer accounts, login, or e-commerce, so personal information is collected only when a visitor actively submits the contact form.

IMOK is based in Seoul, Republic of Korea, and the Site is operated in compliance with applicable laws including the Korean Personal Information Protection Act (PIPA).

2. Information we collect

2-1. Information you provide (contact form)

2-2. Information collected automatically

3. How we use it

We use the information collected only for the following purposes. We will obtain separate consent before using it for any new purpose.

1. Replying to and following up on inquiries
2. Blocking spam and automated abuse, and responding to security incidents
3. Aggregated, anonymized analytics to improve the Site
4. Retaining records as required by applicable law

4. Retention

We delete personal information once its purpose is fulfilled, except as listed below.

• Inquiry content — up to 12 months after our final reply, extended for as long as the conversation continues.
• Email delivery logs — per Resend's service policy (typically 30 days).
• Access and security logs — up to 3 months, in accordance with applicable communications and security regulations.
• Dispute records — until the dispute is resolved.

5. Processors

We rely on the following service providers to operate the Site. We update this list whenever a processor changes.

6. International transfers

Because we use global infrastructure, some personal information may be transferred outside the Republic of Korea. All processors operate under their own privacy commitments and standard contractual clauses where required.

• Items transferred — as listed in section 5
• Destinations — Cloudflare's global edge network and Resend (United States)
• Method — automated network transmission when you visit the Site or submit the form
• Recipient contacts — Cloudflare (privacypolicy), Resend (privacy policy)

7. Cookies

The Site may use cookies for the purposes below. You can disable cookies in your browser settings, though some functionality (notably bot protection) may not work.

• Essential — Cloudflare Turnstile uses short-lived tokens to verify that submissions are not from bots.
• Analytics (when enabled) — Google Analytics 4 with the anonymize_ip option.

8. Your rights

You may exercise the following rights at any time, and we will respond without undue delay.

• Request information about how we process your data
• Request access, correction, or deletion of your data
• Request that we suspend processing
• Submit feedback about how we use processors

To exercise any of these, please email the address in section 10. We do not knowingly collect information from children under 14, and will delete such information immediately if we discover it.

9. Security

• Encryption in transit — HTTPS (TLS) across the entire Site
• Access control — only the operator can access submitted data; secrets are stored in Cloudflare's encrypted secret store
• Bot protection — Cloudflare Turnstile plus a hidden honeypot field
• Data minimization — we only ask for the information needed to reply

10. Contact

11. Changes

We will notify you on the Site of any material changes to this policy at least 7 days before they take effect.

This Privacy Policy is effective as of May 4, 2026.