Biobook

Biobook

Privacy Policy

Effective date: June 2, 2026

1. Purpose of Processing Personal Information

Biobook processes personal information to provide membership registration, user identification, service access, company inquiry forwarding, customer support, service improvement, and a secure user environment.

If the purpose of processing changes, Biobook will take the measures required by the Personal Information Protection Act and obtain separate consent where required.

2. Personal Information Collected

Membership Registration and Service Use

  • Purpose: membership registration, user identification, account management, email verification, and service provision
  • Required items: name, email address, password, organization, job title, phone number, email verification information, consent to the Terms of Service and Privacy Policy
  • Optional items: department
  • Retention period: until membership withdrawal, unless retention is required by applicable law.

Company Inquiries and Customer Support

  • Purpose: forwarding company inquiries, reviewing inquiry details, responding, and follow-up support
  • Required items: name, phone number, email address
  • Optional items: selected companies, inquiry message
  • Retention period: up to 3 years from receipt of the inquiry, unless retention is required by applicable law.

Automatically Generated and Collected Information

  • Collected items: access logs, cookies, IP address, browser and device information, and service usage records
  • Google Analytics items: page visit history, traffic source, search and click behavior, browser and device information, and approximate location information
  • Microsoft Clarity items: page visit history, click, scroll, mouse movement, and other usage behavior, screen interaction information used for session replay and heatmap generation, browser and device information, IP address, cookies, and device identifiers
  • Purpose: service usage analytics, service quality improvement, error response, and secure service operation
  • Retention period: until the analytics purpose is fulfilled or according to Google Analytics and Microsoft Clarity retention settings.

3. Retention and Use Period

Member information is retained until membership withdrawal and is deleted without delay after withdrawal unless retention is required by applicable law.

Inquiry records may be retained for 3 years from receipt for dispute response and service quality management.

Where applicable laws such as the Act on Consumer Protection in Electronic Commerce or the Protection of Communications Secrets Act require retention, Biobook retains the information for the statutory period.

4. Personal Information of Children Under 14

Biobook does not provide services to children under 14 and does not collect personal information related to children under 14.

If Biobook becomes aware that personal information of a child under 14 has been collected, it will delete the information without delay or take other measures required by applicable law.

5. Provision of Personal Information to Third Parties

Biobook does not provide personal information to third parties unless the data subject has consented or there is a special provision under applicable law.

When a user requests an inquiry to a specific company, Biobook may provide the user's name, contact information, email address, inquiry details, and selected company information to that company or its representative for inquiry forwarding.

6. Entrustment and Overseas Transfer of Personal Information

Biobook entrusts certain personal information processing tasks as follows for smooth service operation and supervises the entrusted service providers so that personal information is processed securely.

Domestic Entrustment

  • Microsoft Corporation (email delivery service): email verification for registration, password reset, and inquiry response emails (retention period: until membership withdrawal or termination of the entrustment agreement)
  • Amazon Web Services Korea LLC (cloud and server operation service): service infrastructure operation, data storage, and security management (retention period: until membership withdrawal or termination of the entrustment agreement)

Overseas Transfer and Entrustment

  • Recipient: Google LLC (https://support.google.com/analytics)
  • Country: United States
  • Transferred items: service usage records, access logs, cookies, device identifiers, IP address, and related information
  • Timing and method: transmitted over the network through Google Analytics during service use
  • Purpose: website usage behavior analysis and service statistics
  • Retention period by recipient: according to Google Analytics settings, up to 14 months
  • Refusal method and effect: users may refuse collection by changing browser cookie settings or installing the Google Analytics Opt-out Browser Add-on. Refusal may limit analytics through Google Analytics but does not prevent general service use.

Microsoft Clarity Overseas Transfer and Entrustment

  • Recipient: Microsoft Corporation and Microsoft affiliates (https://privacy.microsoft.com/privacystatement)
  • Country: United States and other countries where Microsoft operates the service
  • Transferred items: service usage records, access logs, cookies, device identifiers, IP address, browser and device information, click, scroll, mouse movement, and other usage behavior, and screen interaction information used for session replay and heatmap generation
  • Timing and method: transmitted over the network through Microsoft Clarity during service use
  • Purpose: website usage behavior analysis, session replay and heatmap analysis, service quality improvement, security, and fraud prevention
  • Retention period by recipient: according to Microsoft Clarity policies and settings
  • Refusal method and effect: users may limit collection through browser cookie blocking or deletion settings, Microsoft privacy choice tools, or supported privacy signals such as Global Privacy Control. Refusal may limit analytics through Microsoft Clarity but does not prevent general service use.

7. Destruction of Personal Information

Biobook deletes personal information without delay when the retention period expires, the processing purpose is fulfilled, or the information otherwise becomes unnecessary.

Electronic files are deleted in a way that prevents recovery, and paper documents are shredded or incinerated.

8. Rights of Data Subjects and Legal Representatives

Data subjects may request access, correction, deletion, suspension of processing, or withdrawal of consent regarding their personal information at any time.

These rights may be exercised through account management features or email inquiries, and Biobook will process requests without delay after verifying identity in accordance with applicable law.

9. Security Measures

Biobook implements technical and administrative safeguards such as access control, password encryption, access log retention, security programs, and encrypted transmission to protect personal information.

10. Automatic Collection Tools and Refusal Methods

Biobook may use cookies and similar automatic collection tools to maintain login status, store language settings, improve convenience, and analyze services.

Biobook may use Google Analytics to collect and analyze major user behavior. The collected information is used as statistical information that is unlikely to directly identify a specific individual.

Biobook may use Microsoft Clarity to analyze website usage behavior through behavioral metrics, heatmaps, and session replay. This information is used to improve usability, identify errors, support security, and prevent fraudulent use.

Users may refuse or delete cookies through browser settings. However, refusing cookies may restrict use of some services.

Automatic Collection Tools and Analytics

  • Analytics tool: Google Analytics
  • Purpose: service usage statistics, traffic source analysis, and service quality improvement
  • Collected items: page visit history, search and click behavior, browser and device information, and approximate location information
  • Refusal method: users may refuse collection by blocking or deleting cookies in the browser or using the Google Analytics Opt-out Browser Add-on.

Microsoft Clarity

  • Analytics tool: Microsoft Clarity
  • Purpose: service usage behavior analysis, session replay and heatmap analysis, service quality improvement, security, and fraud prevention
  • Collected items: page visit history, click, scroll, mouse movement, and other usage behavior, browser and device information, IP address, cookies, device identifiers, and screen interaction information used for session replay and heatmap generation
  • Refusal method: users may limit collection through browser cookie blocking or deletion settings, Microsoft privacy choice tools, or supported privacy signals such as Global Privacy Control.

Browser Cookie Settings

  • Chrome: Settings > Privacy and security > Third-party cookies or site data settings
  • Edge: Settings > Cookies and site permissions > Manage cookies and stored data
  • Safari: Settings > Privacy > Cookies and website data settings

11. Pseudonymized Information

Biobook does not process pseudonymized information. If Biobook processes pseudonymized information in the future, it will revise and disclose this policy in accordance with applicable law.

12. Criteria for Additional Use and Provision

When Biobook additionally uses or provides personal information without consent under Articles 15(3) and 17(4) of the Personal Information Protection Act, it considers the following criteria comprehensively.

Criteria Considered

  • Whether the additional use or provision is reasonably related to the original collection purpose
  • Whether the additional use or provision is predictable considering the collection context or processing practices
  • Whether the interests of the data subject are unfairly infringed
  • Whether necessary safeguards such as pseudonymization or encryption have been applied

Current Status

  • Biobook currently does not additionally use personal information or provide it to third parties without the data subject's consent.

13. Privacy Officer and Contact Information

For inquiries, access requests, complaints, or damage relief requests related to personal information processing, please contact the following.

Privacy Officer

  • Name: Youngwoo Jo
  • Email: youngwoo.jo@biobook.co.kr
  • Title: Financial Advisory Team Lead

Privacy Contact

  • Name: Chanhee Kim
  • Email: chanhee.kim@biobook.co.kr
  • Title: IT Development Team Lead

Department for Personal Information Access Requests

  • Department: IT Development Team
  • Contact: Team Lead Chanhee Kim
  • Email: chanhee.kim@biobook.co.kr

14. Remedies for Rights Infringement

Data subjects may request consultation or dispute resolution regarding personal information infringement from relevant institutions such as the Privacy Infringement Report Center, the Personal Information Dispute Mediation Committee, the Supreme Prosecutors' Office, or the National Police Agency.

15. Changes to This Privacy Policy

This Privacy Policy applies from June 2, 2026.

If this policy changes due to changes in law, policy, or service, Biobook will disclose the changes and effective date on the service screen.