Privacy policy
STEAMuP Academy Privacy Policy
Chapter 1: General Provisions
https://www.steamup.academy (hereinafter referred to as "STEAMuP Academy") complies with the personal information protection regulations of relevant laws that information and communication service providers must observe, such as the Act on Promotion of Information and Communications Network Utilization and Information Protection, Personal Information Protection Act, Protection of Communications Secrets Act, and Telecommunications Business Act. We are doing our best to protect the rights and interests of users by establishing a Privacy Policy in accordance with relevant laws.
"STEAMuP Academy" announces the following through its Privacy Policy:
The purpose and method of using the personal information provided by "Members."
Measures taken for information protection.
"STEAMuP Academy" makes the Privacy Policy available at all times on the website and application so that "Members" can easily view it.
Chapter 2: Methods and Items of Personal Information Collection
"STEAMuP Academy" collects the minimum amount of personal information necessary for membership registration, smooth consultation, and provision of various services.
Items collected upon membership registration:
Sign up via Email: Email address, user name (nickname), password, mobile phone number.
Sign up via Facebook: Facebook account email address (ID), user name (nickname).
Sign up via Google: Google account email address (ID), user name (nickname).
Range of personal information that may be collected during service use:
Information entered by the user and works created during the service use process.
In case of error reporting: Device information (manufacturer, model name, OS type and version, App version).
Date of birth, mobile phone number, telecommunication carrier, Connecting Information (CI).
Method of Collection:
- Mobile application, website, written form, fax, email, telephone and online consultation via customer center, event participation.
Chapter 3: Purpose of Collection and Use of Personal Information
The collected personal information of "Members" is used for the following purposes:
Smooth provision and operation of the Service.
Member Management: Use of membership services, personal identification, prevention of unauthorized/illegal use by bad members, confirmation of intent to join, restriction on the number of sign-ups, preservation of records for dispute resolution, handling complaints, delivery of notices, verification of legal representatives, and fee settlement for paid services.
Marketing and Advertising: Provision of customized services, service provision and ad placement based on demographic characteristics, sending periodicals, validating service effectiveness, providing event/advertising information and participation opportunities, identifying access frequency, and statistics on member service use. (Your personal information is not provided to individuals or organizations that requested the advertisement.)
Separate consent is obtained when using information for marketing and advertising, and there is no restriction on service use even if you refuse consent.
The Company may pseudonymize collected personal information so that specific individuals cannot be identified for purposes such as statistical compilation, scientific research, and preservation of records for public interest.
Chapter 4: Procedure and Method of Destruction of Personal Information
In principle, the "Company" destroys personal information without delay once the purpose of collection and use has been achieved. The procedure and method are as follows:
Destruction Procedure
Information entered by the member for registration, etc., is transferred to a separate DB (or a separate file box for paper) after the purpose is achieved. It is stored for a certain period according to internal policies and other relevant laws (refer to retention and use period) before being destroyed.
Personal information transferred to a separate DB is not used for any other purpose unless required by law.
Destruction Method
Personal information stored in electronic file format is deleted using technical methods that make the record unrecoverable.
Personal information printed on paper is destroyed by shredding or incineration.
Chapter 5: Provision of Personal Information
In principle, the "Company" does not provide users' personal information to external parties. However, exceptions are made in the following cases:
When users have consented in advance.
When there is a request from an investigation agency in accordance with the procedures and methods prescribed by laws for investigation purposes, or as required by law.
In the event of a business transfer requiring the transfer of personal information, the Company will notify the facts regarding the transfer in advance in accordance with the procedures prescribed by relevant laws (e.g., Information and Communications Network Act) and grant members the right to withdraw consent.
Chapter 6: Processing and Retention Period of Personal Information
The "Company" destroys personal information without delay when the purpose of collection and use is achieved, except when it is necessary to preserve it in accordance with laws or internal policies.
Personal information and relevant laws retained by the "Company" are as follows:
| Retention Item | Relevant Law | Retention Period |
|---|---|---|
| Records on contract or withdrawal of subscription | Act on Consumer Protection in Electronic Commerce, Etc. | 5 years |
| Records on payment and supply of goods | Act on Consumer Protection in Electronic Commerce, Etc. | 5 years |
| Records on consumer complaints or dispute handling | Act on Consumer Protection in Electronic Commerce, Etc. | 3 years |
| Records on display/advertising | Act on Consumer Protection in Electronic Commerce, Etc. | 6 months |
| Books and evidentiary documents for all transactions prescribed by tax laws | Framework Act on National Taxes | 5 years |
| Subscriber telecommunication date/time, start/end time, other party number, usage frequency | Protection of Communications Secrets Act | 1 year |
| Computer communication, internet log records, access tracking data | Protection of Communications Secrets Act | 3 months |
If other consent is obtained from the customer, personal information is retained until the agreed period.
Retention after Withdrawal: The "Company" retains the "Member's" personal information for 7 days after withdrawal for customer request processing and A/S purposes. This is to prevent illegal use and damage caused by reckless withdrawal and re-joining, and to restore activity history/points if the withdrawal request is retracted due to mistake or change of mind.
Dormant Members: To protect personal information and prevent accidents, the Company may convert members who have not used the service for more than 1 year into "Dormant Members" and manage them separately.
Conditions for conversion: No login/visit history, no payment/usage history, and no customer consultation history for over 1 year.
Notice: The "Company" will notify the "Member" of the separate storage, expiration date, and items of personal information via email, written notice, or similar methods 30 days prior to the expiration of the 1-year period.
Destruction: Personal information converted to a dormant ID is stored separately for 4 years and then destroyed without delay.
Restoration: You can prevent conversion by logging in before the transition. Even after conversion, you can restore the dormant account by logging in and following the consent procedures.
Chapter 7: Access, Correction, Withdrawal, and Consent Withdrawal
"Members" may view, correct, withdraw, delete, or request suspension of processing of their personal information through the following methods:
Request via writing, phone, or email to the Chief Privacy Officer (refer to Chapter 11).
If a "Member" requests correction of errors in personal information, the Company will not use or provide the relevant personal information until the correction is completed.
Rights under this Article may be exercised through a legal representative or an authorized agent. In this case, a power of attorney pursuant to Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
Chapter 8: Rights of Users and Legal Representatives
The "Company" must obtain the consent of a legal representative when collecting personal information of a child under the age of 14, and collects the legal representative's name and contact information.
Legal representatives may view, modify, or request cancellation of membership for the child's personal information at any time.
Procedure:
View/Modify: Click "Change Personal Information" (or 'Modify Member Information') and go through identity verification.
Withdrawal (Termination): Click "Withdraw Membership" and go through identity verification.
Or contact the Chief Privacy Officer via writing, phone, or email for immediate action.
Personal information terminated or deleted at the request of the user or legal representative is processed as specified in the "Retention and Use Period" and is not used for other purposes or provided to third parties.
Chapter 9: Installation, Operation, and Rejection of Automatic Collection Devices (Cookies)
The "Company" uses "Cookies" to store and retrieve "Member" information to provide personalized services.
Definition: A cookie is a small text file sent by the server operating the website to the "Member's" browser and stored on the hard disk. Cookies expire upon browser closure or logout.
Purpose: To maintain environment settings, analyze access frequency/visit time, understand usage patterns and event participation for marketing and personalized services.
Rejection: "Members" have the option to accept all cookies, confirm each time a cookie is saved, or refuse all cookies via web browser settings. However, refusing cookies may cause difficulties in using some services requiring login.
Chapter 10: Technical/Managerial Protection Measures
The "Company" takes the following measures to ensure safety and prevent loss, theft, leakage, forgery, or damage of personal information:
Internal Management Plan: Established and implemented for safe processing.
Password Encryption: Member IDs and passwords are encrypted, stored, and managed. Only the user knows the password.
Countermeasures against Hacking:
Frequent data backup and use of the latest antivirus programs.
Encrypted communication for safe transmission on networks.
Intrusion blocking systems to control unauthorized external access.
Minimization and Training of Staff: Handling of personal information is limited to designated personnel who are given separate, regularly updated passwords and receive frequent training on compliance.
Note: The Company is not responsible for issues caused by user negligence or internet communication problems where ID/password is leaked.
Chapter 11: Entrustment of Collected Personal Information
The "Company" entrusts personal information to external professional companies for service contract implementation and manages it strictly according to laws.
Trustee and Entrusted Tasks:
| Trustee | Entrusted Task | Retention & Use Period |
|---|---|---|
| KG Inicis Co., Ltd. | Payment and refund processing (Mobile phone, bank transfer, credit card, etc.) | Until membership withdrawal or termination of entrustment contract |
| AWS | Infrastructure management for service provision and analysis | Until membership withdrawal or termination of entrustment contract |
Chapter 12: Sharing and Provision to Third Parties
The "Company" does not use or provide "Member's" personal information to third parties beyond the scope specified in this policy, except in the following cases:
With the "Member's" consent.
For fee settlement regarding service provision.
Request from relevant agencies for investigation/trial/administrative purposes under relevant laws.
Processed in a form where specific individuals cannot be identified for statistics, research, or market surveys.
Requests based on procedures defined in laws (e.g., Real Name Financial Transactions Act, Telecommunications Business Act, etc.).
Business Transfer: If rights/obligations are transferred due to merger/inheritance/business transfer, the "Company" will notify the "Member" to guarantee their rights.
Third-Party Provision: If provision to a third party is necessary for better service, the "Company" will seek prior consent by notifying: 1) The recipient, 2) Purpose and items provided, 3) Retention period, and 4) Protection methods. Notification will be made via website notice (7 days prior) and email.
Chapter 13: Rights and Obligations of "Members"
"Members" should input and update their personal information accurately to prevent accidents. "Members" are responsible for accidents caused by inaccurate information.
Using false information or stealing another's information may result in account restriction.
"Members" have the right to protection but also the obligation to protect themselves and not infringe on others' information.
"Members" must be careful not to leak their account (email) and password. Failure to do so may result in punishment under relevant laws.
Chapter 14: Responsibility for Linked Sites
The "Company" may provide links to other websites. However, this "Privacy Policy" does not apply to the personal information collection activities of linked websites.
Chapter 15: Chief Privacy Officer
The "Company" designates the following Chief Privacy Officer (CPO) in accordance with the Information and Communications Network Act.
Customer Service & Chief Privacy Officer
| Name | Position | Contact |
|---|---|---|
| Kim Hyuk | Chief Privacy Officer / Director | (Email) steamup@cemware.com |
The CPO is responsible for protecting customer information and preventing leaks.
"Members" may contact the CPO or relevant department for any inquiries or complaints regarding personal information while using the "Company's" service. The "Company" will respond without delay.
Reporting Agencies: For other infringements or consultations, please contact:
Personal Information Infringement Report Center: privacy.kisa.or.kr (118 without area code)
Supreme Prosecutors' Office Cyber Investigation Division: www.spo.go.kr (1301 without area code)
National Police Agency Cyber Investigation Bureau: cyberbureau.police.go.kr (182 without area code)
Chapter 16: Amendment of Privacy Policy
The "Company" may modify the Privacy Policy to reflect legal or service changes.
Changes will be posted via Notice.
The amended policy takes effect 7 days after posting.
However, if there are significant changes to user rights, notice will be given 30 days in advance.
Addendum
This policy applies from: February 11, 2026
Announcement Date: February 4, 2026
Effective Date: February 11, 2026