Legal
MACS Learning Lab Academy explains here how it collects, uses, stores, transfers and protects personal information for the global English website.
Controller: MACS Learning Lab Academy
Representative and privacy contact: Yoon Geun-hye
Address: 2F, 15 Seocho-daero 53-gil, Seocho-gu, Seoul, Republic of Korea
Telephone: +82 2 532 0858
Email: macs5320858@gmail.com
Effective date: September 10, 2026
Document version: 2026-09-10-r2
1. This Policy applies to personal information the Company handles through the English website, enquiries and related institutional discussions.
2. If a culture centre, school, booking provider or payment provider collects information on its own page and in its own name, its privacy notice applies to that collection. This Policy applies once the Company receives information for its own programme operations.
3. The Company processes information only for stated or compatible purposes and does not sell personal information.
1. Enquiries: name, email, applicant type, message, optional phone number, privacy and optional marketing choices, submission time and receipt number.
2. Automatically generated information: access time, source path, browser language, device and network information, and security-check values. Cloudflare may process the IP address when routing and securing a request.
3. If a programme proceeds: applicant, guardian and participant details, attendance and scheduling information, and safety information voluntarily supplied by a guardian.
4. Institutional work: contact name, organisation, role, contact details, quotation, contract, billing and operational correspondence.
5. The Company receives information from the individual, an authorised guardian or organisation, a partner lawfully providing operational information, and records generated through use of the Services.
1. To receive, verify and answer enquiries; identify the applicant; issue a receipt; and maintain response records. Depending on applicable law, the bases are consent, steps requested before a contract and the Company’s legitimate interest in operating an enquiry service.
2. To plan and deliver classes or institutional programmes, manage safety, administer contracts and resolve disputes. The bases are contract, legal obligation, legitimate interests and consent where required.
3. To protect the website, prevent abuse, diagnose faults, establish legal claims and respond to rights requests. The bases are legitimate interests in security and legal compliance.
4. To send news and promotions only with opt-in consent or another exception expressly permitted by applicable law.
5. The Company will identify another valid basis and provide any required notice or consent before using personal information for an incompatible new purpose.
1. Enquiries and related communications are retained for one year after handling is complete. Security records are retained for one year after creation.
2. Programme operational information is ordinarily retained for one year after a programme. Sensitive safety information is deleted promptly after the programme unless it is needed for an incident or dispute.
3. Institutional information is retained until discussions or the contract end. Contract, accounting and dispute records are retained for the period required by law or reasonably needed to establish or defend claims.
4. Marketing information is retained until consent is withdrawn. Identifiable images and testimonials are retained for the period stated in the separate consent.
5. Information may be isolated and retained while an investigation, legal proceeding, debt or security incident is pending. At the end of the applicable period, it is deleted or anonymised using a method appropriate to the medium.
1. The Company does not disclose personal information to an independent third party unless the individual consents, disclosure is needed to perform a requested transaction, or law permits or requires it.
2. Before a programme requires a disclosure to a school, venue or co-organiser, the Company will provide the information and choice required by applicable law.
3. The Company may transfer information in a merger, business sale or reorganisation subject to applicable notice, confidentiality and lawful-purpose requirements.
4. Service providers acting for the Company are described in Article 6 and are not permitted to use information for their own unrelated purposes.
1. Google LLC: enquiry database storage and processing in the United States.
2. Cloudflare, Inc.: global website hosting and delivery, enquiry proxying, Turnstile bot checks, security and abuse prevention.
3. Resend, Inc.: delivery of an enquiry notification email to authorised Company staff.
4. Authorised Company staff in the Republic of Korea: enquiry review, response, programme discussion and legal administration.
5. These providers may use approved subprocessors. The Company applies contracts, access restrictions and other safeguards required by applicable law.
1. Information submitted on the English site is stored and processed in the United States by Google. Cloudflare may process request and security data through its global network. Resend processes the enquiry to deliver an email, and authorised Company staff access the enquiry in the Republic of Korea.
2. Depending on where the individual is located, these activities may be international transfers. The Company uses a lawful transfer mechanism required in the relevant jurisdiction, such as an adequacy decision, contractual safeguards or a permitted derogation, together with supplementary safeguards where required.
3. A person may contact the Company for information about the safeguard applicable to their transfer. If a transfer is necessary to answer an enquiry and the person does not want to use the web form, they may contact the Company by telephone.
1. The web enquiry form is intended for adults. A parent or authorised guardian should make an enquiry concerning a child.
2. Users should not place identity documents, medical records, financial account details or other unnecessary sensitive information in the free-text field.
3. If a programme requires allergy, health or other sensitive safety information, the Company will collect the minimum necessary information from a guardian and obtain explicit consent or use another lawful condition where required.
4. The Company does not knowingly direct personalised advertising to children.
1. The English website uses Cloudflare and Turnstile for delivery, security and bot detection. Those services may use essential cookies or similar storage.
2. Automated security checks may block a submission or require another verification, but they do not make a decision producing legal or similarly significant effects about the individual.
3. If a legitimate request is blocked, the user may reload and try again or contact the Company by telephone or email. Browser controls may block storage, but doing so can prevent the enquiry form from working.
1. Subject to applicable law, an individual may request access, correction, deletion, restriction, portability, objection to certain processing, withdrawal of consent and review of an automated decision. Consent withdrawal does not affect processing already lawfully completed.
2. A request may be made by email, telephone or writing. The Company may verify identity and authority before acting.
3. A request may be limited where another person’s rights, legal obligations, contract administration, record integrity, legal claims or an exception under applicable law requires continued processing. The Company will explain a refusal and available complaint route where required.
4. An individual may object at any time to direct marketing, and the Company will stop it for that person.
The Company applies safeguards proportionate to the information and risk, including data minimisation, access management, encrypted transport, security software and records, provider oversight, physical access controls, incident response and secure deletion procedures.
1. The Company may update this Policy when law, the Services or processing practices change.
2. The Company posts the change and its effective date on the website. It follows any advance-notice or consent procedure required by law, while an urgent security or mandatory legal update may be applied immediately.
3. A new consent will be obtained when applicable law requires one. The revised Policy otherwise applies prospectively from its effective date.
Privacy contact: Yoon Geun-hye
Telephone: +82 2 532 0858
Email: macs5320858@gmail.com
The Company will review privacy enquiries and rights requests without undue delay. Depending on applicable law, an individual may also complain to the data-protection or consumer authority in their place of residence or bring a claim before a competent court.