How Archai collects and uses data across all markets.
This policy explains what personal data Archai Electronics Inc. collects through www.archai.co.kr, why we use it, who processes it for us and where, how long we keep it and how you can exercise your rights. We collect little: what you send us through the contact form, the technical data needed to deliver and protect the website, and an optional language cookie.
1. Who we are
Archai Electronics Inc. (주식회사 아카이전자), a company incorporated in the Republic of Korea, operates www.archai.co.kr (the "website") and decides why and how the personal data described in this policy is processed. In this policy, "Archai", "we" and "us" mean Archai Electronics Inc.
- Address: Room 710, 7th floor, 643 Dongtan-daero, Dongtan-gu, Hwaseong-si, Gyeonggi-do 18468, Republic of Korea
- Telephone: +82-33-731-7778
- Privacy contact: h.bai@archai.co.kr
This policy covers the website and the inquiries you send us through it. It is supplemented by:
- Republic of Korea: our 개인정보 처리방침 (Personal Information Processing Policy), which contains the information required by the Personal Information Protection Act (PIPA). For processing governed by PIPA, the Korean text of that policy prevails.
- United Kingdom and EU/EEA: our UK / EU GDPR Addendum & Cookie Policy, which sets out legal bases, transfer safeguards, your rights and how to complain under the UK GDPR and the EU GDPR.
Our group also includes ARCHAI POWERTECH LTD in Manchester, United Kingdom, and Yoono Energy Technology (Jiangsu) Co., Ltd., a manufacturing affiliate in Kunshan, China. ARCHAI POWERTECH LTD does not receive personal data collected through the website. Yoono Energy Technology (Jiangsu) Co., Ltd. operates, as our service provider, the server on which our internal content-management system runs (section 5); it does not use the data for its own purposes.
2. Personal data we collect
2.1 Information you send us
When you use the contact form, we receive:
- your name;
- your organisation (optional);
- your work e-mail address;
- your project brief (free text).
If we reply by e-mail, we also hold that correspondence. Please do not include sensitive information (for example about health) or other people's personal data in the project brief.
2.2 Technical data
To deliver and protect the website, our hosting provider Cloudflare processes your IP address, the date and time of each request, the page requested and the browser information your device sends (user agent). Cloudflare's security features may also process technical signals, such as your TLS fingerprint, to tell people apart from automated traffic.
Default language. When you open the home page, Cloudflare derives your country from your IP address. If it is the Republic of Korea, we show the Korean site; otherwise we show the English site. We use the country only for that request and do not store it, although Cloudflare's short-term runtime logs (section 7) may record request details.
2.3 Cookies
We use one functional cookie, archai_lang, and only if you choose a language in the language menu. Cloudflare, which delivers and protects the website, sets one security cookie, cf_clearance, only if it shows your browser a security check. The website itself has no sign-in.
We do not use analytics, advertising or tracking cookies, tracking pixels or social media plug-ins. Our fonts and scripts are served from our own website. The full cookie table is in the Cookie Policy section of the UK / EU GDPR Addendum & Cookie Policy.
2.4 Staff sign-in
The "AetherAccess" entry on the website is for Archai employees only. How we process employees' personal data is explained in a separate internal notice.
3. Why we use your data
| Purpose | Data used |
|---|---|
| Answer your inquiry and discuss a possible project with you or your organisation | Contact form data, e-mail correspondence |
| Keep a record of inquiries and correspondence for follow-up, and establish, exercise or defend legal claims | Contact form data, e-mail correspondence |
| Deliver the website, keep it secure and protect the contact form against spam and abuse | Technical data, security cookies, bot-detection signals |
| Show the website in your language | Country at the time of the request (not stored), archai_lang cookie |
| Comply with legal obligations and lawful requests from authorities | Any of the above, where required |
We do not sell personal data, use it for advertising or profiling, or make decisions about you based solely on automated processing that have legal or similarly significant effects for you.
4. Legal bases in summary
- Republic of Korea (PIPA): we handle your inquiry because you ask us to take steps towards a possible contract (Article 15(1)(4)) and on the basis of our legitimate interests (Article 15(1)(6)). We keep records and secure the website on the basis of our legitimate interests (Article 15(1)(6)). Details: 개인정보 처리방침.
- United Kingdom and EU/EEA (UK GDPR and EU GDPR): we rely on steps taken at your request before entering into a contract (Article 6(1)(b)) where you contact us on your own behalf, and otherwise on our legitimate interests (Article 6(1)(f)) in answering business inquiries, keeping records and securing the website. Where UK or EU law requires processing, we rely on legal obligation (Article 6(1)(c)). Details, including the cookie rules: UK / EU GDPR Addendum & Cookie Policy.
- Other countries: we process your data on the bases above to the extent your local law allows.
5. Who receives your data
Service providers that process data for us under contract:
| Provider | Service | Location |
|---|---|---|
| Cloudflare, Inc. | Website hosting and delivery, security and bot protection, database and file storage, short-term runtime logs | United States, where the inquiry database is stored, and Cloudflare's global network of data centres, which handles each request at a data centre near the visitor |
| Alibaba Cloud (Alibaba Mail) | Company e-mail: our e-mail replies to you and any e-mail you send us. The alert that tells our staff a new inquiry has arrived contains no personal data. | Republic of Korea |
| Yoono Energy Technology (Jiangsu) Co., Ltd. (our affiliate) | Operates the server on which our internal content-management system runs. Inquiries pass through that server while authorised Archai staff review them; they are not stored there. | China |
Cloudflare also processes some network and security data, such as IP addresses and bot-detection signals, for its own purposes of securing and improving its services, under its own privacy policy.
Within Archai, inquiries are visible only to authorised staff, working in the Republic of Korea and in China, who sign in to our internal content-management system through AetherAccess.
Apart from the server operation described above, we do not share inquiries or other personal data collected through the website with our group companies in the United Kingdom or China.
We disclose personal data to courts, regulators or law-enforcement authorities only where the law requires it. We do not sell or rent personal data.
6. International transfers
We are based in the Republic of Korea, and our service providers operate in other countries. Your data may be processed in the Republic of Korea, the United States, China and the countries where Cloudflare data centres are located. Inquiries are stored in the United States; whenever our staff review them, they pass through our internal system, which runs on a server operated by our affiliate in China. Our company e-mail is stored in the Republic of Korea.
We protect these transfers as the law that applies to you requires:
- UK and EU/EEA: the Republic of Korea, where we are based and where our company e-mail is stored, is covered by adequacy decisions of the European Commission and the UK Government. Transfers to Cloudflare rely on the EU–U.S. Data Privacy Framework and its UK Extension, and on standard contractual clauses. Our affiliate in China processes your data for us under an intra-group processing agreement that incorporates the EU standard contractual clauses and the UK Addendum. Details: UK / EU GDPR Addendum & Cookie Policy.
- Republic of Korea: the transfers, the recipients and how to refuse them are set out in our 개인정보 처리방침, as required by Article 28-8 of PIPA.
You can ask us for a copy of the relevant safeguards.
7. How long we keep your data
| Data | Retention |
|---|---|
| Contact form inquiries and related e-mail correspondence | 3 years after our last exchange with you. If the inquiry leads to a contract, related records are kept for the periods required by law, such as the Commercial Act and tax laws of the Republic of Korea. |
| Cloudflare runtime logs | Up to 7 days |
| Database backups (point-in-time recovery) | Deleted inquiries remain recoverable for up to 30 days and are then overwritten |
archai_lang cookie | 1 year, or until you delete it |
| Cloudflare security cookies | See the Cookie Policy |
When the retention period ends, we delete the data or make it anonymous, unless the law requires us to keep it longer or it is needed for an ongoing investigation or legal claim.
8. Security
- All traffic to the website is encrypted (HTTPS with HTTP Strict Transport Security).
- Inquiries are stored in a database that only authorised staff can reach after signing in through AetherAccess.
- Cloudflare's data processing terms require encryption of the disks that store personal data.
- The website loads no third-party analytics or advertising code.
- We have an internal privacy management plan, check its implementation at least once a year and train the staff who handle personal data at least once a year.
- Our website management system can be reached only from our internal network. Only its administrators and the staff they designate can see inquiries. Each view, change, export and deletion of an inquiry is recorded with the account, time and IP address, and these records are kept for at least one year.
If a personal data breach affects you, we will notify you and the competent authorities where the law requires.
9. Your rights
Depending on the law that applies to you, you can ask us to:
- confirm whether we hold personal data about you and give you a copy;
- correct inaccurate data;
- delete your data;
- stop or restrict processing, or object to processing based on our legitimate interests;
- give you your data in a portable format, where the law provides this right.
Where we rely on your consent, you can withdraw it at any time.
To exercise your rights, contact us at h.bai@archai.co.kr or +82-33-731-7778. We may ask you to confirm your identity. We will respond within the time limit set by the applicable law, for example one month under the UK GDPR and the EU GDPR, and 10 days under PIPA. You can also complain to a data protection authority: see the UK / EU GDPR Addendum (UK and EU/EEA) and the 개인정보 처리방침 (Republic of Korea).
10. Children
The website is intended for business users and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, please contact us and we will delete it.
11. Changes to this policy
We will update this policy when our processing changes. The current version and its effective date are shown at the top of this page, and previous versions remain available on this page. We announce material changes on this page at least 7 days before they take effect.
12. Contact
Archai Electronics Inc., Room 710, 7th floor, 643 Dongtan-daero, Dongtan-gu, Hwaseong-si, Gyeonggi-do 18468, Republic of Korea
- E-mail: h.bai@archai.co.kr
- Telephone: +82-33-731-7778
- Chief Privacy Officer under Korean law: see the 개인정보 처리방침
- Representatives in the UK and the EU: see the UK / EU GDPR Addendum