Privacy Policy
1. Personal Information Collected and Method of Collection
The Operator collects the following personal information through the reservation application screen for the purpose of group viewing reservations.
- Required items: Group name, contact person's name, contact number (mobile phone), email, participating country, number of viewers, desired visit date and session
- Optional items: Requests (remarks)
- Payment and refund records: approval number, transaction date and time, payment method, amount (generated when a payment or refund is made)
- Information generated automatically while using the Service: access IP address, access logs
- Detailed payment method information such as card numbers is processed by the payment gateway (KICC), and the Operator does not store it.
2. Purpose of Collection and Use of Personal Information
- Receipt, approval, confirmation, and guidance for group viewing reservations
- Responding to customer inquiries regarding reservation changes, cancellations, and refunds
- Contact and notices necessary for viewing operations
3. Retention and Use Period of Personal Information
Collected personal information is destroyed without delay after the viewing has concluded and the purpose of use has been achieved. However, where retention is required under applicable laws, the information is retained for the relevant period.
- Records concerning contracts or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce)
- Records concerning payment and supply of goods, etc.: 5 years (Act on Consumer Protection in Electronic Commerce)
- Records concerning consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
- Access IP address and access logs: 3 months (server log retention standard)
4. Provision of Personal Information to Third Parties
The Operator does not provide Users' personal information to third parties beyond the scope of purposes specified in this Policy, except where required by law or upon a lawful request from an investigative agency.
5. Outsourcing of Personal Information Processing
The Operator outsources personal information processing tasks as follows for the smooth provision of the Service.
| Trustee | Outsourced Task |
|---|---|
| Korea Information & Communications Corp. (KICC) | Processing of credit card and other payments |
| Google LLC (Google Workspace) | Sending reservation guidance emails (overseas transfer: see Section 6) |
| Telegram Messenger Inc. (Telegram) | Sending reservation alerts to operations staff (overseas transfer: see Section 6) |
| Oracle Korea Ltd. (한국오라클 유한회사, Oracle Cloud Infrastructure) | Server storage (Seoul and Chuncheon regions in Korea) |
6. Transfer of Personal Information Overseas
Pursuant to Article 28-8 of the Personal Information Protection Act of Korea, the Operator transfers Users' personal information overseas as follows.
| Item | Google LLC | Telegram Messenger Inc. |
|---|---|---|
| Information transferred | Group leader's name, email address, and reservation details contained in guidance emails (group name, visit date and session, number of viewers, payment amount, requests, etc.) | Reservation details contained in alerts: group name, visit date and session, number of viewers, amount, group leader's name and contact number, requests, etc. |
| Country | United States and other countries where Google data centers are located | Countries where Telegram servers are located (Telegram states that it may share information with group companies in the British Virgin Islands, the United Arab Emirates, etc.) |
| Time and method | Transmitted in encrypted form over the information network each time a reservation guidance email is sent | Transmitted through the Telegram Bot API (HTTPS) each time a reservation is received, approved, cancelled, etc. |
| Recipient and contact | Google LLC googlekrsupport@google.com Domestic representative in Korea: Google Korea LLC (구글코리아 유한회사), +82-2-722-7778 · data-access-requests@google.com | Telegram Messenger Inc. Telegram app: Settings > Ask a Question |
| Purpose of use | Sending reservation guidance emails and keeping a record of them | Notifying operations staff of reservation status |
| Retention and use period | The retention period stated in Section 3 of this Policy | |
Users may refuse the overseas transfer of their personal information. To refuse, please contact the Personal Information Protection Officer listed below before submitting a reservation. However, because the above transfers are essential for sending reservation guidance emails and operating reservations, the online reservation service cannot be used if you refuse.
7. Rights of Data Subjects and How to Exercise Them
Users may at any time request access to, correction of, deletion of, or suspension of processing of their personal information, by contacting the Personal Information Protection Officer listed below.
8. Destruction of Personal Information
Personal information for which the retention period has elapsed or the processing purpose has been achieved is destroyed without delay. Electronic files are deleted by a method that prevents recovery, and printed materials are shredded or incinerated.
9. Personal Information Protection Officer
- Officer: 이기성 (Buheung Gallery)
- Contact: 031-8078-3088 · admin@bhgallery.co.kr
10. Measures to Ensure Security
The Operator implements necessary technical and administrative safeguards for the secure processing of personal information, including access control management, retention of access logs, and encrypted communication (HTTPS).
Effective Date: November 1, 2026
Revision history: enacted July 25, 2026 · revised November 1, 2026 (items processed, outsourcing, and overseas transfer supplemented)
Address : 경기도 가평군 설악면 미사리로 324-260, 지하2층 B24호 · Phone : 031-8078-3088 · Email : admin@bhgallery.co.kr
Hosting Service Provider : Oracle Korea Ltd. (한국오라클 유한회사) (Oracle Cloud Infrastructure)