Arbalest Co., Ltd. (“Arbalest,” “we,” “our,” or “us”) complies with applicable privacy laws and is committed to protecting users’ personal information. This Privacy Policy explains how we collect, use, store, and safeguard personal data.

We collect the following personal information for inquiries, service delivery, and contract execution.

① Personal information collected through inquiry forms and service requests

• Required: Name, Email
• Optional: Website URL, Reference or inspiration URL
  
  

② Personal information collected during service delivery and contract execution

• Name, Email, Position
  
• Company name and business-related information
  
• Billing and payment information
  
• Project-related materials voluntarily provided by the client
  
• Shopify or other platform data provided for project execution
  
  

③ Automatically collected information

• IP address
  
• Cookies
  
• Device information
  
• Browser type
  
• Access logs
  
• Usage data (via analytics tools)
  
  

④ Methods of collection

• Inquiry forms on our website
  
• Email communications (admin@arbalest.co.kr)
  
• Automatic collection through analytics tools such as Google Analytics
  
• Documents or materials submitted during the contract or project process

We use personal information for the following purposes:

• Responding to inquiries and providing customer support
  
• Project analysis, proposal development, and cost estimation
  
• Executing service agreements and delivering contracted services
  
• Providing essential notifications and communications
  
• Improving website performance and user experience
  
• Complying with legal obligations

Personal information is retained for the periods below and securely destroyed thereafter.

We do not provide personal information to third parties unless:

1. The user has given explicit consent
   
2. Required by applicable laws
   
3. Necessary for service delivery
   

• For example, information may be provided to Shopify, Inc. when required for platform integration
  
• In such cases, we will inform users of the recipient, purpose, and retention period, and obtain consent in advance.

Arbalest currently does not outsource any personal information processing activities. If outsourcing becomes necessary, we will disclose the details and the entrusted party in this Privacy Policy.

Users may exercise the following rights at any time:

• Request access to personal information
  
• Request correction or deletion
  
• Request suspension of processing
  
• Withdraw previously given consent
  

Requests may be submitted via email (admin@arbalest.co.kr), and we will respond without delay.

Personal information is destroyed without delay once the retention period expires or the purpose of collection is achieved:

• Electronic files: Permanently deleted using irreversible technical methods
  
• Paper documents: Shredded or incinerated
  
  

We implement the following safeguards to protect personal information:

• Access control and minimization of privileges
  
• Encryption of sensitive information
  
• Intrusion prevention and security monitoring
  
• Log storage and integrity management
  
• Regular security checks
  
• Security review of external service providers such as Shopify

Purpose of Cookies

• Analytics and visitor statistics
  
• Improving website performance and user experience
  
• Understanding usage patterns
  
  

Cookie Management

Users may disable cookies through browser settings.
Some features may be limited if cookies are disabled.

• Name: Daniel, Yoo
  
• Position: Data Protection Officer
  
• Email: admin@arbalest.co.kr
  
• Phone: (Phone support is not provided; inquiries are handled via email.)
  
  

This policy may be updated due to legal or operational requirements. We will notify users at least 7 days prior to any changes, and at least 30 days in advance for significant updates.