1. Data Controller

Toolkitcypress Co., Ltd. Office 11, 72 Demo-gil, Changwon 00000, South Korea Email: hello@toolkitcypress.click Phone: +82 55 0000 6364

2. Data We Collect

Contact inquiries: Name, email address, message content, and optional fields such as service interest, vault location, and preferred visit date submitted through our contact form.

Service engagements: Identification details required for vault visits, vault box numbers, branch information, lease copies, and contents descriptions you authorise us to record.

Website usage: Essential cookies for site operation and, with your consent, analytics cookies described in our Cookie Policy.

3. How We Use Your Data

  • Responding to inquiries and scheduling vault documentation visits
  • Producing comparison registers and advisory deliverables
  • Invoicing and payment processing
  • Improving website content and understanding visitor interest in our services
  • Complying with legal obligations

We process personal data based on: (a) performance of a contract when you engage our services; (b) legitimate interests in responding to inquiries and operating our website; and (c) consent where required for non-essential cookies.

5. Data Retention

Contact form submissions are retained for twelve months unless an engagement follows, in which case inquiry data merges into the engagement file. Engagement files are retained for seven years after final delivery to meet record-keeping obligations, then securely destroyed unless you request earlier deletion and no legal hold applies. Analytics data is retained in aggregated form for up to twenty-six months.

6. Data Sharing

We do not sell personal data. We may share information with:

  • Vault branch staff during authorised on-site visits
  • Courier services for deliverable shipping
  • Cloud storage providers under data processing agreements
  • Legal or regulatory authorities when required by law

7. International Transfers

Our primary data processing occurs in South Korea. If we use service providers processing data outside South Korea, we ensure appropriate safeguards such as standard contractual clauses or adequacy decisions.

8. Your Rights

Under applicable South Korean and international privacy laws, you may request access, correction, deletion, restriction, or portability of your personal data. You may withdraw consent for analytics cookies at any time via our cookie banner or browser settings. To exercise rights, contact hello@toolkitcypress.click. You may lodge a complaint with the Personal Information Protection Commission of Korea.

9. Security

We implement administrative, technical, and physical safeguards including encrypted storage for engagement files, access controls limiting staff to assigned engagements, and secure destruction procedures for working notes.

10. Children

Our services are directed at adults managing vault assets. We do not knowingly collect data from individuals under eighteen.

11. Changes

We update this policy as our practices evolve. Check this page for the current version.

Effective date: 1 January 2025