All That Beauty Academy complies with the 『Personal Information Protection Act』 and related laws to protect users' freedoms and rights. We process personal data lawfully and manage it safely.
In accordance with Article 30 of the 『Personal Information Protection』 Act, we establish and disclose this Privacy Policy to inform users about the procedures and standards of personal data processing and to promptly and smoothly handle related grievances.

Article 1 (Purpose, Items, and Retention Period of Personal Information)

All That Beauty Academy collects and uses the minimum necessary personal information for the purposes below. The information is destroyed without delay once the purpose is fulfilled or the retention period expires. If the purpose of use changes, separate consent will be obtained in accordance with laws.

Article 2 (Processing of Personal Information of Children Under 14)

All That Beauty Academy requires legal guardian consent when collecting personal data of children under 14. Separate procedures are in place to verify consent, and data will not be collected without it.

Article 3 (Provision of Personal Information to Third Parties)

All That Beauty Academy does not provide personal information to third parties without the data subject’s consent, except in the following cases:

• 1. When required by law
• 2. When separate consent is obtained from the data subject
• 3. In cases of urgent need for life, physical safety, or property

※ Currently, All That Beauty Academy does not provide personal data to third parties.

Article 4 (Entrustment of Personal Information Processing)

All That Beauty Academy entrusts the following tasks related to personal information processing:

Article 5 (Destruction Procedures and Methods of Personal Information)

All That Beauty Academy promptly destroys personal information once the retention period expires or the purpose is fulfilled.

- Electronic files: Deleted using irreversible methods

- Paper documents: Shredded or incinerated

Destruction records are managed according to internal regulations and retained for at least 3 years.

Article 6 (Rights of Data Subjects)

Data subjects may exercise the following rights regarding personal data:

1. Request access

2. Request correction of errors

3. Request deletion

4. Request processing suspension

Requests can be submitted via writing, email, fax, website, or customer center. Korea Education Group will respond within 10 days.

Article 7 (Measures to Ensure Security)

All That Beauty Academy implements the following measures to ensure data security:

- Administrative: Internal management plans, training, regular audits

- Technical: Access control, encryption, log storage

- Physical: Restricted access to computer rooms and records storage

Article 8 (Call Recording and CCTV Management)

For quality assurance, phone consultations may be recorded. If a counselor records a conversation directly, it may be done without prior notice. Call recordings are stored for 1 year and then deleted. External provision is prohibited in principle.

Article 9 (Personal Information Protection Officer)

All That Beauty Academy appoints a Personal Information Protection Officer responsible for overseeing personal data processing and handling data subjects' complaints and remedies:

- Protection Officer: Director Jongmin Lee

- Contact: 1588-5177

- Email: privacy@koreaedugroup.com

Article 10 (Remedies for Rights Infringement)

Data subjects may report or consult with the following institutions in case of data infringement:

- Personal Information Infringement Report Center: 118

- Personal Information Dispute Mediation Committee: 1833-6972

- Supreme Prosecutors’ Office: 1301

- National Police Agency: 182

Article 11 (Changes to the Privacy Policy)

- Any changes to this policy will be notified at least 7 days in advance via the website notice board.

- This policy takes effect on May 1, 2025. Future changes will be announced on the website.