TOEIC Breakthrough ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard information about you when you use our website and services.
Note: This privacy policy must be reviewed by a Korean lawyer specializing in e-commerce law before site launch to ensure full compliance with the Personal Information Protection Act (개인정보보호법, PIPA).
1. Information We Collect
We collect the following categories of personal information:
- Identification information: Name, email address, phone number
- Account information: Login credentials (stored encrypted)
- Payment information: Transaction details (card numbers are never stored on our servers; processed by Toss Payments)
- Diagnostic data: Quiz responses, score history, study progress
- Usage data: Pages visited, features used, device and browser information
- Communications: Messages sent to our support team
2. Purpose of Collection
We collect personal information for the following purposes:
- To provide and personalize our TOEIC preparation services
- To process payments and manage your account
- To send course materials, progress updates, and support communications
- To send marketing communications (only with your explicit consent)
- To improve our platform and develop new features
- To comply with legal obligations
3. Retention Period
We retain personal information for the following periods:
- Account and service data: Duration of your account plus 3 years
- Payment records: 5 years (required by Korean Commercial Act)
- Consumer complaint records: 3 years (required by Korean e-commerce law)
- Marketing consent records: Until consent is withdrawn
4. Third-Party Sharing
We do not sell your personal information. We share data only with:
- Toss Payments: For payment processing
- Email service provider: For sending course materials and support communications
- Analytics providers: Google Analytics, Naver Analytics (anonymized data)
- Legal authorities: When required by Korean law
5. Your Rights
Under the Korean Personal Information Protection Act, you have the right to:
- Access your personal information we hold
- Correct inaccurate personal information
- Request deletion of your personal information
- Withdraw consent for marketing communications
- Object to processing in certain circumstances
- Data portability (receive your data in a structured format)
To exercise any of these rights, contact us at: privacy@toeicbreakthrough.com
6. Data Protection Measures
- All data is transmitted over SSL/TLS encryption
- Passwords are stored using bcrypt hashing
- Payment card data is never stored on our servers
- Access to personal data is restricted to authorized staff only
- Regular security audits are conducted
7. Cookies
We use cookies to improve your experience. Essential cookies are required for the site to function. Analytics cookies (Google Analytics, Naver Analytics) help us understand usage patterns. Marketing cookies support advertising and retargeting. You can manage cookie preferences through the cookie banner on our site or through your browser settings.
8. Privacy Officer Contact
Privacy Officer: [Name]
Email: privacy@toeicbreakthrough.com
Address: [Business Address], Seoul, Korea
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on our website at least 7 days before changes take effect.