PRIVACY
Privacy Policy
Effective date: October 14, 2026
NEWKiT STUDIO (the "Company") values your personal information. Under Article 30 of Korea's Personal Information Protection Act, the Company sets out and publishes this policy to explain how it processes personal information and to handle related concerns promptly. The Korean text governs.
1. Purposes, items and retention
The Company processes personal information for the purposes below and for no other use. If a purpose changes, the Company will take the necessary steps, such as asking for separate consent under Article 18 of the Act.
The Company keeps personal information for the period you consented to and deletes it without delay once that period ends or the purpose is achieved.
| Audition application | Purpose: identifying applicants, reviewing auditions and informing results, checking duplicate applications · Items: [Required] name, gender, date of birth, nationality, mobile number, e-mail, category, photos, videos [Optional] education/job, training period, languages, height, weight, SNS, additional information · Retention: one year from the day the application is submitted |
|---|---|
| Job application | Purpose: identifying applicants, running the document and interview rounds, informing results · Items: [Required] name, e-mail, mobile number, team, resume, cover letter [Optional] portfolio, portfolio link, other notes · Retention: one year from the day you apply |
| Inquiry | Purpose: receiving inquiries and replying with the result of our review · Items: [Required] name, e-mail, inquiry type, inquiry [Optional] company · Retention: one year from the day we receive it |
| Collected automatically | Items: IP address and time of access when an application or inquiry is sent · Purpose: preventing abuse and confirming receipt · Retention: same as that application or inquiry |
2. Children under 14
Where consent is needed to process the personal information of a child under 14, the Company obtains it from the child's legal guardian, and collects the guardian's name, mobile number, e-mail and relationship to the applicant for that purpose.
The Company confirms the guardian's consent by e-mailing the guardian what they consent to and a verification code, which is then entered on the application. Without it the application is not received.
For a child under 14, the legal guardian has the right to see, correct, delete or stop the processing of the child's information and to withdraw consent.
3. Provision to third parties
The Company processes personal information only within the purposes stated above, and provides it to third parties only where Articles 17 and 18 of the Act apply, such as your consent or a specific provision of law. Otherwise it does not provide your personal information to third parties.
4. Outsourcing of processing
The Company outsources processing as follows to handle personal information smoothly.
Under Article 26 of the Act, the Company's contracts with processors state the ban on processing beyond the outsourced work, technical and managerial safeguards, limits on further outsourcing, supervision and liability, and the Company supervises that processors handle the information safely. Any change of work or processor is published in this policy without delay.
| Processor | Outsourced work |
|---|---|
| Vercel Inc. | Running the website; keeping applications, inquiries and their files |
| Plus Five Five, Inc. (Resend) | Sending notice mails and guardian verification codes |
| Cloudflare, Inc. | Spam protection (Turnstile) and the domain |
5. Collection and transfer abroad
Under Article 28-8(1)(3) of the Act, the Company transfers personal information abroad for outsourced processing and storage as follows. Applications, inquiries and files are kept in Vercel Inc.'s Seoul, Korea region.
When and how: sent over the network whenever an application or inquiry is submitted · Items: those in section 1 · Retention: the periods in section 1
If you do not want your information transferred abroad, you can refuse by contacting the privacy officer; the application and inquiry pages may then not be available to you, and you can write to the Company's e-mail instead.
| Recipient (contact) | Country |
|---|---|
| Vercel Inc. (privacy@vercel.com) | USA |
| Plus Five Five, Inc. (support@resend.com) | USA |
| Cloudflare, Inc. (dpo@cloudflare.com) | USA |
6. Deletion
When personal information is no longer needed, because its retention period has passed or its purpose is achieved, the Company deletes it without delay.
Procedure: applications, inquiries and files past their period are selected and deleted automatically every day. Files uploaded without a finished submission are deleted within one day.
Method: personal information stored as electronic files is deleted with technical methods that make the records unrecoverable. Copies of notice mails sent to staff are deleted on the same terms.
7. Rights of data subjects and legal guardians
You may at any time ask the Company to see, correct, delete or stop the processing of your personal information, or withdraw consent.
You can exercise these rights in writing or by e-mail under Article 41(1) of the Enforcement Decree of the Act, and the Company will act without delay. A legal guardian or an authorized representative may also exercise them for you.
The Company checks that the person making a request is you or your rightful representative.
8. Security measures
The Company takes the following measures to keep personal information safe.
| Managerial | Keeping the staff who handle personal information to a minimum |
|---|---|
| Technical | Access control (private storage that cannot be opened without authentication), encrypted transfer (HTTPS), file links that expire after 7 days |
9. Automatic collection devices
Purpose of cookies: the Company uses one cookie (nk-lang) that remembers the language a visitor chose. It holds nothing that identifies you and expires after one year.
How to refuse cookies: you can refuse cookies in your browser settings and still use the website.
10. Privacy officer
The Company designates the privacy officer below, who is responsible for all work on processing personal information and for handling complaints and remedies.
| Name | Hyojin Hong |
|---|---|
| Phone | +82-(0)2-542-7707 |
| newkitstudio@newkitstudio.com |
11. Remedies
To seek remedies for an infringement, you can apply for dispute resolution or counselling to the bodies below.
| Personal Information Dispute Mediation Committee | 1833-6972 (www.kopico.go.kr) |
|---|---|
| Personal Information Infringement Report Center | 118 (privacy.kisa.or.kr) |
| Supreme Prosecutors' Office | 1301 (www.spo.go.kr) |
| Korean National Police Agency | 182 (ecrm.police.go.kr) |
12. Changes to this policy
This policy applies from its effective date. Any addition, deletion or correction is announced on this page at least 7 days before it takes effect.
This policy takes effect on October 14, 2026.