Public site policy

Privacy Policy

This page applies to the oneshim.thengd.com marketing site and public inquiry flows. Customer deployments, organization-console environments, private workspaces, and contract-specific data handling may be governed by separate agreements or product terms.

1. Scope and operator information

This policy applies to ONESHIM's public marketing site (oneshim.thengd.com), public inquiry flows, and the personal data or metadata processed when you move from the landing site into public docs or demos.

Customer-specific deployments, organization-console operations, in-product user data, and customer-environment logs may be governed by separate agreements, product documentation, or operational policies.

2. What personal data we process and why

Public inquiry data

Name, family name, work email, company, job title, and inquiry message.

Operational metadata

Source, platform tour route, persona, locale, and UTM values used to understand the inquiry path.

Basic technical data

Standard browser request data, language preference, cookie consent state, and technical log-type information required to deliver the site.

  • Responding to inquiries: to answer adoption requests, product questions, and partnership outreach.
  • Operating the site: to remember language and cookie choices and keep the public site working.
  • Understanding pathways: to learn which product tour, docs, or demo flows lead to real contact requests.
  • Improving content: to improve landing copy, public docs, and demo journeys.
Please do not submit patient records, passwords, API keys, payment data, national ID numbers, or other highly sensitive information through public inquiry forms.

3. Retention period

  • Public inquiry records: retained for up to 3 years after the final response or closure of the inquiry, unless a longer retention period is required by law.
  • Referral metadata: retained together with the inquiry record for up to 3 years, then deleted.
  • Cookie or local storage values: retained until you clear them or your browser removes them.
  • Security and operational logs: may be retained for the standard periods used by service providers for site reliability, security, and incident response.

4. Third-party disclosure

We do not sell or arbitrarily disclose personal data collected through the public site.

  • Required by law: when disclosure is required under applicable law.
  • Separate consent: when you have given separate consent.
  • Service operations: when processing is handled by the service providers listed below as processors or infrastructure providers.

5. Third-party services, processors, and overseas processing

The public site currently uses Google Fonts and Vercel-based hosting and delivery infrastructure. If public inquiry flows are activated, DemoRequestForm + SendGrid may also be used. In those cases, personal data or technical data may be processed outside Korea through the providers' infrastructure.

DemoRequestForm + SendGrid

Inquiry form handling, lead management, and automatic follow-up emails.

Data: public inquiry fields and referral metadata.

Processor and transfer target: Twilio (SendGrid) / United States.

Google Fonts

Web font delivery.

Data: browser request and technical information.

Processor and transfer target: Google LLC / United States.

Vercel or similar hosting/CDN infrastructure

Static hosting, CDN delivery, and operational log-type data.

Data: standard request information and security logs.

Processor and transfer target: Vercel Inc. / United States.

These services are used only to the extent needed to deliver the site, respond to inquiries, and keep the service stable. We do not currently use anti-spam tools such as reCAPTCHA; this policy will be updated first if one is adopted.

6. Cookies and similar technologies

  • oneshim-lang: stores the selected language for the public landing site.
  • oneshim-cookie-consent: remembers whether you accepted or declined the cookie banner.
  • Basic browser/network data: standard request information may be processed while delivering the site and font assets.

The current public landing page does not set third-party advertising cookies for targeting. You can delete or block cookies in your browser, although some features may be limited.

7. Destruction procedure and method

  • Principle: personal data is deleted without undue delay once the retention period ends or the processing purpose is achieved.
  • Electronic files: deleted in a way that makes recovery difficult where reasonably possible.
  • Printed records: shredded, incinerated, or disposed of using an appropriate method.

8. Your rights and how to exercise them

  • Your rights: you may request access, correction, deletion, restriction, or withdrawal of consent where applicable.
  • How to exercise them: contact help.ngd@gmail.com. We may verify identity before processing the request.
  • Cookie controls: you can delete or block cookies in your browser settings.
  • Language preference: the language switch on the landing site and this page may be stored in local browser storage.

9. Security measures

  • Access control: access to inquiry information and operational tools is intended to be limited to a small set of authorized operators.
  • Protected transmission: the public site and integrated services are intended to use HTTPS or similar protected channels.
  • Credential management: operational accounts, API tokens, and form settings are managed in restricted scopes.
  • Operational monitoring: minimal operational logs may be reviewed for incident response, stability, and security.

10. Children's data

The public site and inquiry flow are intended for general B2B contact and are not designed for children under 14. If we learn that a child's data was submitted through the public flow, we will review and remove it as appropriate.

11. Privacy contact and dispute relief

For privacy questions, complaints, or rights requests, contact help.ngd@gmail.com.

The privacy lead is Richard Kim, and privacy requests are currently handled through help.ngd@gmail.com. There is no separate public phone line at this time.

  • KISA Privacy Infringement Report Center: privacy.kisa.or.kr / 118
  • Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
  • Supreme Prosecutors' Office: www.spo.go.kr / 1301
  • Korean National Police Agency Cyber Bureau: ecrm.police.go.kr / 182

12. Changes to this policy

This policy takes effect on March 15, 2026.

This is the first public version of this policy for the current landing site.

If applicable laws, public inquiry flows, third-party services, or retention practices change, we will update this page. Material changes will be announced through a reasonable notice on the public site.