Privacy policy
Effective October 11, 2026 (first published September 5, 2026). This is an English translation of the Korean policy; where they differ, the Korean text governs.
Dodannylab handles only the minimum personal data needed for website enquiries and for running the subscription service. This document says what we collect and why, how long we keep it, and how we delete it.
1. What we collect and why
| When | Items | Purpose |
|---|---|---|
| “Contact” on the website | Email, what you wrote | Replying to your enquiry, discussing a contract |
| Customer portal sign-in and sign-up | Google account email and name, company name when you sign up | Identifying the account holder (Google accounts only), sign-up, invoices and payment notices |
| Card registration | Card issuer, masked card number, payment authorisation data | Monthly subscription payment. The full card number is held only by the payment provider |
| Website visit | Access log, browser information, how you arrived (ad parameters) | Visit statistics, measuring ads |
| Requesting screens and the screens we build | Your email, the three answers you wrote, files you attach (spreadsheets, documents, photos — real work data is fine), what we exchange by email or in the screen’s chat, the screens and content we build, and a company and contact name if you sign up | Building the screens you asked for and emailing them to that address, changing them when you reply, creating your account if you sign up. The screens open only through the link sent to that email |
| Forms on the site Cheetah built (Cheetah PLUS) | What visitors write (name, contact, enquiry — the fields you choose) | Delivering it to your organisation — processing on your behalf. You decide how long it is kept; within 30 days of cancellation we return it and delete it |
2. How long we keep it
- Enquiries: one year after the enquiry. If it leads to a contract, five years after the contract ends (transaction records under Korean e-commerce law).
- Portal account and payment data: five years after the subscription ends (retention required by tax and e-commerce law).
- Access logs: three months.
- Screens built from a request, and the files you attached: 14 days from the request. Sign up within that time and the screens carry on; otherwise we delete the screens and the files together.
- The email you left and the emails we exchanged: one year, like enquiries.
When the period ends we delete without delay — electronic files irrecoverably, paper by shredding.
3. Sharing with third parties
We don’t give your data to anyone else without consent. The only exception is a request required by law.
4. Processors
| Who | What they do for us |
|---|---|
| Amazon Web Services (Seoul region) | Running and backing up servers and databases |
| Payment provider | Card registration and recurring payment |
| Dodannylab (own visit statistics) | One random ID in your browser counts which pages you saw and what you clicked. No name, email or IP address, deleted after 400 days |
| Google (Tag Manager, Analytics) | Website visit statistics and ad measurement — only when enabled |
5. Your rights
You can ask at any time to see, correct or delete your data, or to stop its processing. Send it through “Contact” on the website or the customer portal and we answer within 10 days.
6. Cookies and visit records
The website uses cookies to keep you signed in and for visit statistics. You can block cookies in your browser; the website still works without them. For visits from ads, the parameters in the address (utm) are stored with your enquiry.
7. Security
All connections are HTTPS only. Server access is limited to one person, card numbers exist only at the payment provider, and our servers hold only a masked number and an encrypted payment key. Backups run daily and are encrypted.
8. Data protection officer
The CEO of Dodannylab. Reach us at gilrokdo@gmail.com, through “Contact” on the website, or the customer portal.
If this policy changes, the new version goes up on this page with its effective date.