B&F CO., LTD (the “Company”) complies with applicable privacy laws and explains below how personal information is handled through this website.
1. Purpose, Information Processed, and Retention
The Company processes only the minimum information necessary for the purposes below. Information submitted through the website is not stored in a separate database; it is delivered to and retained only in the responsible staff member's email account.
| Category | Purpose | Information | Retention |
|---|---|---|---|
| Website inquiry | Receiving, reviewing, and responding to product and service inquiries |
Required: product, inquiry type, company, email, name, subject, and message
Optional: telephone number |
Three months from submission |
| Email opt-out | Reviewing and processing requests to stop promotional emails | Email address | Three months from submission |
Where retention is required by law, information is retained for the applicable statutory period. The Company's internal advertising operations database is not used to store website visitors' inquiry information.
2. Collection Methods
- Information entered directly in the website inquiry form
- Information entered directly on the email opt-out page
3. Disclosure to Third Parties
The Company uses personal information only within the stated purposes and does not disclose it to third parties without consent or another lawful basis.
4. External Services Related to Processing
The following external services support website operation and inquiry delivery.
- Netlify, Inc.
-
Purpose: Website hosting and server functions used to transmit inquiries
Information: IP address, access time, browser and device request data, and form data processed temporarily during transmission
Timing and method: Processed over an encrypted network when the site is accessed or an inquiry is submitted
Location and retention: Information may be processed in the United States and other countries where Netlify or its subprocessors operate facilities. The Company does not separately store inquiry data in a Netlify database. Access logs and related data are governed by Netlify's contractual retention policies.
- Microsoft 365
-
Purpose: Transmission and storage of inquiry and email opt-out requests
Information: Inquiry information and opt-out email addresses entered by users
Timing and method: Transmitted through encrypted SMTP communication when a request is submitted
Location and retention: The Exchange Online mailbox location follows the Company's Microsoft 365 tenant configuration. Messages are retained in the Company mailbox for three months from submission.
- Google reCAPTCHA
-
Purpose: Prevention of automated requests, fraud, and abuse
Information: Security token, IP address, browser and device data, interaction signals, and reCAPTCHA cookies
Timing and method: Processed over an encrypted network when the security check is performed before an inquiry
Location and retention: Information may be processed in the United States and other countries where Google or its subprocessors operate facilities. Retention follows the Google Cloud data processing terms and retention policies.
- Kakao Map
-
Purpose: Providing the location map
Information: IP address, browser and device data, cookies, and information generated while using the map
Timing and method: The user's browser connects directly to Kakao when the map is loaded or used on the Location page
Retention: The Company does not transmit inquiry information to or separately store information from Kakao Map. Processing by Kakao is governed by Kakao's policy.
5. Destruction of Personal Information
The Company deletes personal information without delay when the retention period expires or the processing purpose has been fulfilled. Emails and electronic documents are deleted in a manner designed to prevent recovery, and paper records are shredded or incinerated.
6. Your Rights
You may request access, correction, deletion, suspension of processing, or withdrawal of consent. The Company will verify the requester's identity and respond without undue delay in accordance with applicable law.
7. Security Measures
- Limiting access to staff who require personal information for their work
- Managing access to email accounts and administrative functions
- Maintaining encrypted transmission and security software
- Reviewing retention periods and deletion practices regularly
8. Automatically Processed Information
IP addresses, access times, and browser or device information may be generated and processed by hosting and security services. The Company does not operate separate web analytics or behavioral advertising cookies for general visitors. Essential cookies are used on the internal advertising administration pages to maintain administrator authentication.
9. Privacy Responsibility
Responsible officer: Chief Executive Officer
Department: Management Support
Contact: +82-51-988-7400 / sales@bnfi.co.kr
10. Remedies
For advice or reporting concerning privacy infringement in Korea, you may contact the Personal Information Infringement Report Center (118), the Personal Information Dispute Mediation Committee (+82-1833-6972), or the Korean National Police Agency (182).
11. Changes to This Policy
Material changes to this policy will be announced on the website before they take effect.
Effective date: August 28, 2026