Privacy Policy

Last updated: [Month DD, YYYY]

This Privacy Policy explains what personal information STUDIO-K (“we”, “us”) collects when you visit our website or book an experience with us, how we use it, and the choices you have. We run our business in the Republic of Korea and handle personal information in line with the Korean Personal Information Protection Act (PIPA) and other applicable laws.

1. Information we collect

When you make a booking

• Full name (as shown in your passport)
• Nationality
• Email address
• Mobile number
• Anything you choose to tell us in the notes field
• Booking details: the experience, date and time, number of people, entertainers, location and options you select

When you pay

Payments are processed by PayPal. We never see or store your card or bank details. PayPal shares with us the payment status, amount and transaction ID so we can match the payment to your booking.

When you write a review

• Your rating, headline and review text
• The name and country you choose to show with your review
• Any photos you upload

Reviews are published on our website only after we approve them. The name, country, review text and photos you submit will be visible to the public once published.

When you browse our website

• A cookie called “kstar_lang” that remembers your language choice for 30 days
• Your in-progress booking details, kept in your browser’s session storage so you don’t lose them if you reload the page. They are deleted when you complete the booking or close the browser tab.
• A scrambled (hashed) form of your IP address, kept for one minute to limit repeated booking look-ups and other abuse
• Our website loads fonts from Google Fonts, so your browser connects to Google’s servers and shares your IP address with Google

We do not use advertising or tracking cookies.

2. How we use your information

• To confirm, manage and deliver your booking
• To process payments and refunds
• To contact you about your booking, including changes, reminders and cancellations
• To ask you for a review after your experience and to publish approved reviews
• To answer your questions and handle complaints
• To keep our website secure and prevent fraud or abuse
• To meet our legal and tax obligations

We do not sell your personal information, and we do not use it for marketing without your consent.

3. Who we share it with

We share personal information only as needed to provide our service:

• Entertainers and staff who take part in your experience receive the details they need, such as your name, the number of people and the schedule.
• Service providers that process data on our behalf (listed in section 4).
• Authorities, when the law requires it.

4. Service providers and international transfers

We use the following providers. Some of them store or process data outside Korea.

• PayPal (PayPal Pte. Ltd. and affiliates; Singapore, United States and other countries): payment processing. Data: name, email, booking reference, amount.
• Google LLC (United States): sending booking emails through Gmail, and serving web fonts. Data: name, email, booking details in email content; IP address for fonts.
• Aligo (Republic of Korea): text message alerts sent to our staff when a booking is made. Data: your name, mobile number and booking summary.
• [Hosting provider, e.g. Cafe24 Corp.] (Republic of Korea): website and database hosting. Data: all information described in this policy.

Data is transferred over encrypted connections when you book, pay, or when we send you an email. If you don’t want your data transferred abroad, please contact us before booking. Note that we cannot take online payments or send booking emails without these providers.

5. How long we keep it

• Booking, contract and payment records: 5 years, as required by the Korean Act on Consumer Protection in Electronic Commerce
• Records of complaints and disputes: 3 years
• Published reviews: until you ask us to remove them or we remove the review
• Language cookie: 30 days
• Hashed IP addresses used for abuse prevention: 1 minute

When a retention period ends, we delete the data so it cannot be recovered.

6. Your rights

You can ask us at any time to:

• See the personal information we hold about you
• Correct information that is wrong
• Delete your information, or stop processing it
• Remove a review you wrote

Some records must be kept for the periods required by law, even if you ask us to delete them. We will reply within 10 days. To make a request, email us at the address below with your booking reference.

7. Children

Our booking service is meant for adults. If you are under 14, please ask a parent or guardian to make the booking. We do not knowingly collect information from children under 14 without their guardian’s consent.

8. Security

We use HTTPS encryption, restricted admin access and secure payment processing through PayPal. Booking pages that show your details are protected by a private link or by your booking reference and email address. No system is perfectly secure, but we take reasonable steps to protect your information.

9. Privacy officer

• Name: [Name]
• Title: [Title]
• Email: [privacy@example.com]
• Phone: [+82-0-0000-0000]

If you are not satisfied with our response, you can also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, +82-118) or the Personal Information Dispute Mediation Committee (www.kopico.go.kr, +82-1833-6972).

10. Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date at the top. If the changes are significant, we will post a notice on our website at least 7 days before they take effect.

11. Contact us

• Company: [Company legal name]
• Representative: [Name]
• Address: [Address], Seoul, Republic of Korea
• Email: [contact@example.com]
• Phone: [+82-0-0000-0000]