Privacy policy
This policy explains what personal information we receive when you visit this website, write to us or apply for a role, and what we do with it.
1. Who we are
Sanghyun (“Sanghyun”, “we”, “us”) operates sanghyun.me and is responsible for the personal information described in this policy. You can reach us at:
Sanghyun
Daejeon, Republic of Korea
[email protected]
For privacy questions, please write to the same address with “Privacy” in the subject line. Our founder acts as the person responsible for personal information management for the purposes of Korea’s Personal Information Protection Act (PIPA).
2. What we collect
When you browse the site
We do not collect personal information through the website ourselves. The site has no user accounts, no analytics scripts, no advertising pixels and no embedded social media widgets.
To deliver the pages, two service providers necessarily receive technical information from your browser:
- Cloudflare hosts the site and provides its content delivery network and security services. Cloudflare processes request data such as your IP address, the pages requested, the date and time, your browser’s user agent and referrer. Cloudflare may set strictly necessary security cookies, for example to tell legitimate visitors apart from automated attacks. These cookies are not used for tracking or advertising.
- Google Fonts serves the typefaces used on this site. When a page loads, your browser requests the font files from Google’s servers, which means Google receives your IP address and the browser information included in that request.
When you contact us
The contact form on this site does not submit data to any server. When you press send, it opens your own email client with a pre-filled message. Nothing is transmitted until you send that email yourself. We then receive whatever the email contains, typically your name, email address, organization, the topic of your inquiry and your message.
When you apply for a role
Applications are made by email to [email protected]. We receive the information you choose to send, such as your CV, cover letter, contact details, education and work history, links to publications or code, and any other information you include. Please do not send sensitive information, such as health information or national identification numbers, unless we specifically request it later in the process for a lawful reason.
3. Why we use it and our legal bases
| Purpose | Information | Legal basis |
|---|---|---|
| Delivering and securing the website | Request data processed by Cloudflare and Google Fonts | Our legitimate interest in operating a secure, functional website; under PIPA, processing necessary to provide the service you request |
| Responding to inquiries and partnership discussions | Contents of the emails you send us | Your consent, given by contacting us, and steps taken at your request before entering into a contract |
| Recruiting | Application materials you send | Your consent, and steps taken at your request before entering into an employment contract |
| Complying with legal obligations | Any of the above, as required | Compliance with legal obligations that apply to us |
We do not sell personal information, use it for advertising, or make decisions about you based solely on automated processing.
4. How long we keep it
- Inquiries and correspondence: up to three years from our last exchange, so that we can follow up on ongoing conversations, unless a longer period is required by law or a contract with you.
- Job applications: one year from the end of the recruiting process for the role. If you agree, we may keep your application longer to consider you for future openings. You can withdraw that consent at any time.
- Hosting and security logs: retained by Cloudflare under its own retention practices. We do not keep separate copies.
When the retention period ends, we delete the information or make it irreversibly anonymous.
5. Who we share it with
We share personal information only with service providers that help us run the company, and only as far as they need it:
- Cloudflare, Inc. for website hosting, content delivery and security.
- Google LLC for font delivery through Google Fonts.
- Our email provider for receiving and storing the emails you send us.
We may also disclose information where required by law, to protect our rights or the safety of others, or in connection with a merger, financing or sale of the company, in which case the recipient will be bound by this policy or an equivalent one.
6. International transfers
Our service providers may process information outside the Republic of Korea, including in the United States and other countries where they operate data centers. Where personal information is transferred abroad, we rely on the safeguards those providers offer, such as contractual commitments and, for transfers from the European Economic Area or United Kingdom, standard contractual clauses or an applicable adequacy decision.
7. Your rights
Under PIPA, you have the right to request access to, correction of, deletion of and suspension of processing of your personal information, and to withdraw your consent at any time. If the GDPR or a similar law applies to you, you also have the right to data portability and to object to processing based on our legitimate interests.
To exercise any of these rights, email [email protected]. We may need to confirm your identity before acting on a request. We will respond within the time required by applicable law, and in any case within 30 days.
If you are unhappy with how we have handled your information, you can complain to the Personal Information Protection Commission of Korea or to the data protection authority in your country. We would appreciate the chance to address your concern first.
8. Cookies
We do not set cookies ourselves. Cloudflare may set strictly necessary security cookies as described above. Because we use no analytics, advertising or preference cookies, we do not show a cookie consent banner. You can block or delete cookies in your browser settings, although doing so may affect how security checks work.
9. Children
This website is intended for professionals and is not directed at children under 14. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, please contact us and we will delete it.
10. Security
The site is served only over encrypted HTTPS connections. We limit access to inquiries and applications to the people who need them, and we use access controls and multi-factor authentication on the accounts that store them. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Changes to this policy
We may update this policy as our practices or the law change. We will post the updated version on this page and change the date at the top. If a change materially affects how we use information you have already given us, we will tell you directly where we can.
12. Contact
Questions about this policy or your personal information can be sent to [email protected], or by post to Sanghyun, Daejeon, Republic of Korea.