B&F CO., LTD (the “Company”) complies with applicable privacy laws and explains below how personal information is handled through this website.
1. Purpose, Information Processed, and Retention
The Company processes only the minimum information necessary for the purposes below. Information submitted through the website is not stored in a separate database; it is delivered to and retained only in the responsible staff member's email account.
| Category | Purpose | Information | Legal basis | Retention |
|---|---|---|---|---|
| Website inquiry | Receiving, reviewing, and responding to product and service inquiries |
Required: product, inquiry type, company, email, name, subject, and message
Optional: telephone number |
Consent of the data subject
Article 15(1)(1) of the PIPA |
Three months from submission |
| Email opt-out | Reviewing and processing requests to stop promotional emails | Email address | Compliance with legal obligations under Article 15(1)(2) of the PIPA and Article 50 of the Act on Promotion of Information and Communications Network Utilization and Information Protection | Three months from submission |
Where retention is required by law, information is retained for the applicable statutory period. The Company's internal advertising operations database is not used to store website visitors' inquiry information.
2. Collection Methods
- Information entered directly in the website inquiry form
- Information entered directly on the email opt-out page
3. Disclosure to Third Parties
The Company uses personal information only within the stated purposes and does not disclose it to third parties without consent or another lawful basis.
4. Entrustment of Personal Information Processing
The Company entrusts the following providers with website operation and inquiry delivery. The Company specifies privacy obligations in its agreements and oversees the providers' processing activities.
- Netlify, Inc.
- Provides website hosting and server functions for inquiry delivery. Access data and inquiry form data may be processed during transmission.
- Microsoft 365
- Delivers website inquiries and email opt-out requests to the responsible staff mailbox, where they are retained for three months from submission.
5. External Services and Overseas Transfers
The Company uses the following services for security verification and maps. When a feature is used, the user's browser may connect directly to the provider.
- Google reCAPTCHA
- Security tokens, IP addresses, browser and device data, and cookies may be processed under Google's policy to prevent automated requests and abuse.
- Kakao Map
- Provides the location map. Access data and cookies may be processed under Kakao's policy when the map is used.
Personal information may be transferred overseas as described below during website operation and security verification. Information is transmitted over encrypted network connections.
| Recipient and country | Information transferred | Timing and method | Purpose | Retention |
|---|---|---|---|---|
|
Netlify, Inc. / United States
Privacy contact |
Inquiry form data, IP address, access, browser, and device information | Transmitted over an encrypted network when the website is accessed or an inquiry is submitted | Website hosting, inquiry delivery, security, and incident response | Until the purpose is fulfilled, or for the period required by the provider's policy and applicable law |
|
Google LLC / United States
Privacy contact |
Security token, IP address, browser and device information, and cookies | Transmitted over an encrypted network when reCAPTCHA is used | Prevention of automated requests and service abuse | Under Google's privacy policy and applicable law |
Users may refuse overseas transfers. Because processing by Netlify is necessary to provide the website, refusal will restrict use of the website; users may contact the Company by telephone instead. Transfers to Google reCAPTCHA may be refused by not submitting the inquiry form or by blocking third-party cookies and scripts in the browser. Doing so may limit inquiry submission, security verification, or map features.
6. Destruction of Personal Information
The Company deletes personal information without delay when the retention period expires or the processing purpose has been fulfilled. Emails and electronic documents are deleted in a manner designed to prevent recovery, and paper records are shredded or incinerated.
7. Your Rights
You may request access, correction, deletion, suspension of processing, or withdrawal of consent by contacting Management Support by telephone (+82-51-988-7400) or email (sales@bnfi.co.kr). Requests may also be made through a legal representative or authorized agent. The Company will verify the requester's identity and respond without undue delay in accordance with applicable law.
8. Security Measures
- Limiting access to staff who require personal information for their work
- Managing access to email accounts and administrative functions
- Maintaining encrypted transmission and security software
- Reviewing retention periods and deletion practices regularly
9. Automatically Processed Information
IP addresses, access times, and browser or device information may be generated and processed by hosting and security services. The Company does not operate separate web analytics or behavioral advertising cookies for general visitors. Essential cookies are used on internal pages requiring authentication, including advertising administration pages and the RPA dashboard, to maintain login and administrator authentication.
Users can allow or block cookies and delete stored cookies through the privacy or site settings of their web browser. Blocking essential cookies may prevent certain features from working properly, including maintaining a session on internal administration pages or the RPA dashboard, or completing Google reCAPTCHA security checks.
10. Privacy Responsibility
Responsible officer: Chief Executive Officer
Department: Management Support
Contact: +82-51-988-7400 / sales@bnfi.co.kr
11. Remedies
For advice or reporting concerning privacy infringement in Korea, you may contact the Personal Information Infringement Report Center (118), the Personal Information Dispute Mediation Committee (+82-1833-6972), or the Korean National Police Agency (182).
12. Changes to This Policy
Material changes to this policy will be announced on the website before they take effect. Minor changes will be recorded in the revision history below.
Effective date: October 1, 2026
- October 1, 2026
- Added overseas transfer details, RPA authentication cookies, procedures for exercising privacy rights, and a revision history.
- August 28, 2026
- Initial effective date of this Privacy Policy.