1. Information We Collect

We collect different types of information depending on how you interact with our platform. Some information you provide directly, while other data is gathered automatically through your use of our services.

Personal Information You Provide

When you register for our educational programs or contact us for support, we collect:

• Full name and email address for account creation and communication
• Phone number when you request direct consultation or support
• Professional background and trading experience level for tailored learning paths
• Payment information processed through secure third-party providers
• Communication preferences and feedback you share with our team

Automatically Collected Data

Our systems collect technical information to improve platform performance and user experience:

• IP address and geographic location data (city level, not precise coordinates)
• Browser type, device information, and operating system specifications
• Pages visited, time spent on different sections, and navigation patterns
• Referral sources and search terms that led you to our platform
• Session recordings for troubleshooting and interface improvement (anonymized)

Educational Activity Data

To track your progress and provide personalized learning experiences, we record:

• Course enrollment dates and completion status
• Quiz scores, practice session results, and assessment performance
• Resource downloads and materials you've accessed
• Questions submitted to instructors and participation in discussions
• Learning preferences and areas where you request additional support

2. How We Use Your Information

We process your personal data for specific, legitimate purposes that support our educational mission and platform operations.

Service Delivery and Account Management

Your information helps us provide access to learning materials and maintain your account security. We use your data to verify your identity, process enrollments, and deliver educational content you've requested. When you contact support, we reference your account information to resolve issues quickly.

Educational Experience Enhancement

We analyze learning patterns to recommend relevant courses and resources. Your progress data helps our instructors identify common challenges and adjust teaching approaches. This information stays within our education team and directly improves the quality of guidance you receive.

Communication and Updates

We send important notifications about your enrolled programs, upcoming sessions, and platform changes. You'll also receive educational newsletters with market insights and trading concepts—but only if you've opted in. We respect your inbox and keep promotional content to a reasonable frequency.

Platform Security and Compliance

We monitor activity to detect unauthorized access attempts and prevent fraudulent behavior. This includes reviewing login patterns and flagging unusual account activity. Such measures protect both your personal information and the integrity of our educational community.

Legal Obligations

South Korean law requires us to maintain certain records and respond to valid legal requests. We may process your information to comply with tax regulations, respond to court orders, or cooperate with regulatory investigations when legally required.

3. Data Retention Periods

We don't keep your information longer than necessary. Our retention practices balance your privacy rights with legitimate business needs and legal requirements.

When retention periods expire, we securely delete or anonymize your information. You can request early deletion of certain data categories by contacting our privacy team, though some records must be kept for legal compliance.

4. Information Sharing and Disclosure

We don't sell your personal information to third parties. Period. However, we do share limited data with trusted partners who help us operate our platform and deliver educational services.

Service Providers

Third-party companies process certain data on our behalf under strict contractual obligations:

• Payment processors handle transaction data securely but never see your full payment details
• Email service providers deliver course notifications and newsletters you've requested
• Cloud hosting services store encrypted data with enterprise-grade security measures
• Analytics platforms receive anonymized usage data to help us improve navigation and content
• Customer support tools access your service history when you initiate contact

Each provider signs data processing agreements that limit how they can use your information. They're prohibited from using your data for their own purposes or sharing it further without authorization.

Legal Requirements

We may disclose your information when required by South Korean law, court orders, or government requests. This includes cooperating with tax authorities, responding to subpoenas, or complying with financial service regulations. We review each request carefully and only share the minimum necessary information.

Business Transfers

If RelayGrid is acquired or merged with another company, your information would transfer to the new entity. We'd notify you before any transfer and explain how the new privacy terms might differ from this policy.

5. Your Privacy Rights

South Korean law grants you significant control over your personal information. You can exercise these rights by contacting us through the methods listed at the end of this policy.

Access and Portability

You can request a copy of all personal information we hold about you. We'll provide this in a commonly used electronic format within 10 business days. If you want to transfer your data to another service, we'll export your learning records and profile information in a machine-readable format.

Correction and Updates

Found an error in your profile? You can correct most information through your account settings. For data you can't edit directly, send us a correction request and we'll update our records within 5 business days. We'll notify any third parties who received the incorrect information if necessary.

Deletion Rights

You can request deletion of your account and associated data at any time. However, we may need to retain certain records to comply with legal obligations or complete transactions you've initiated. When deletion isn't possible, we'll explain the specific legal basis for retention and how long we must keep the data.

Processing Restrictions

You can ask us to temporarily suspend processing of your data while we investigate a complaint about accuracy or lawfulness. During this period, we'll store your information but not use it for other purposes.

Objection to Processing

You can object to data processing based on legitimate interests (like analytics for platform improvement). We'll stop unless we can demonstrate compelling reasons that override your privacy interests. You always have an absolute right to object to marketing communications.

Exercising Your Rights

To make a privacy request:

1. Email help@relaygridcom.com with "Privacy Request" in the subject line
2. Provide your full name and the email address associated with your account
3. Specify which right you wish to exercise and include any relevant details
4. We'll verify your identity (usually by sending a confirmation to your registered email)
5. You'll receive a response within 10 business days outlining the actions we'll take

There's no fee for most requests, though we may charge a reasonable administrative fee if you make repeated or manifestly unfounded requests. If we decline a request, we'll explain why and inform you of your right to complain to the Personal Information Protection Commission.

6. Data Security Measures

We've implemented multiple layers of security to protect your information from unauthorized access, alteration, or destruction.

Technical Safeguards

• End-to-end encryption for data transmission using TLS 1.3 protocol
• Encryption at rest for all databases containing personal information
• Multi-factor authentication requirements for administrative access
• Regular security audits and penetration testing by independent firms
• Automated intrusion detection systems that alert our team to suspicious activity
• Firewall protection and network segmentation to isolate sensitive data

Organizational Security

Our team follows strict internal policies governing data access and handling. Employees receive annual privacy training and can only access information necessary for their specific roles. We maintain detailed access logs and review them regularly for unusual patterns.

All service providers undergo security assessments before we share any data with them. We require certifications like ISO 27001 or SOC 2 compliance and conduct periodic reviews of their security practices.

Incident Response

Despite our precautions, no system is completely secure. If a data breach affects your information, we'll notify you within 72 hours of discovery. The notification will explain what happened, what data was affected, and what steps we're taking to prevent recurrence. We'll also report the incident to the Personal Information Protection Commission as required by South Korean law.

7. International Data Transfers

Our primary servers are located in South Korea, but some service providers operate infrastructure in other countries. When we transfer data internationally, we ensure adequate protection through approved mechanisms.

Cloud hosting providers may replicate data across multiple geographic regions for redundancy and performance. These transfers occur only with companies that maintain data centers meeting international security standards. We've established data processing agreements that require overseas processors to provide protection equivalent to South Korean law.

If you're accessing our platform from outside South Korea, your information will be transferred to and processed in South Korea. By using our services, you acknowledge this transfer and agree that South Korean data protection law governs our processing activities.

8. Children's Privacy

Our platform is designed for adults interested in trading education. We don't knowingly collect information from individuals under 18 years of age. If you're under 18, please don't register for an account or provide any personal information.

If we discover that we've inadvertently collected data from someone under 18, we'll delete it immediately. Parents or guardians who believe their child has provided information to us should contact our privacy team right away.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to remember your preferences and analyze how visitors use our platform. You can control cookie settings through your browser, though disabling certain cookies may affect functionality.

Types of Cookies We Use

• Essential cookies enable basic functions like page navigation and secure area access—you can't opt out of these
• Preference cookies remember your settings like language selection and display preferences
• Analytics cookies help us understand which content is most valuable and where users encounter difficulties
• Marketing cookies track visits across websites to show relevant advertisements (only with your explicit consent)

Our cookie banner appears on your first visit, allowing you to accept or reject non-essential cookies. You can change these preferences at any time through the cookie settings link in our footer.

Third-Party Cookies

Some cookies are placed by services that appear on our pages, like embedded video players or social sharing buttons. We don't control how these third parties use cookies. Review their privacy policies to understand their tracking practices.

10. Changes to This Privacy Policy

We update this policy occasionally to reflect changes in our practices or legal requirements. The "Last Updated" date at the top indicates when we made the most recent modifications.

For minor changes like clarifying existing practices, we'll simply post the updated policy on this page. If we make significant changes that affect how we collect or use personal information, we'll notify you by email at least 30 days before the changes take effect. This gives you time to review the new terms and decide whether to continue using our services.

Continuing to use RelayGrid after the effective date means you accept the updated privacy policy. If you disagree with the changes, you can close your account before they take effect.

11. South Korea Specific Provisions

As a business operating in South Korea, we comply with additional requirements under the Personal Information Protection Act (PIPA) and related regulations.

Privacy Officer

We've designated a Privacy Officer responsible for overseeing data protection practices and handling privacy-related inquiries. This officer monitors compliance with PIPA, coordinates incident response, and serves as the primary contact for the Personal Information Protection Commission.

Resident Registration Number

We don't collect or store resident registration numbers (RRN) under any circumstances. This sensitive identifier isn't necessary for our educational services, and we've implemented technical measures to prevent accidental collection.

Destruction of Personal Information

When the retention period expires or processing purpose is achieved, we destroy personal information in a manner that prevents recovery or reproduction. Electronic files are overwritten multiple times or deleted using secure erasure methods. Physical documents are shredded or incin.

Complaint Filing

If you believe we've violated your privacy rights, you can file a complaint with:

• Personal Information Protection Commission (privacy.go.kr)
• Personal Information Dispute Mediation Committee
• Supreme Prosecutors' Office Cybercrime Investigation Unit
• Korean National Police Agency Cyber Safety Bureau