Privacy policy

Article 1. What is processed, and why

• Simply using the site does not create a record that identifies you. There is nothing to sign up for and no profile is created.
• If you write to us by email, we receive your address and your message. They are used only to reply.
• On any website, your IP address is used in the course of delivering pages. On this site the company named in Article 2 processes IP addresses for delivery and security, and we do not see or store them ourselves.

Article 2. What is loaded from elsewhere

Nothing. This site serves its own fonts, images and scripts, and opening a page does not contact another company's server.

Delivery itself is entrusted to one company.

• Cloudflare, Inc. — hosting and delivery. When you open a page, your IP address and request information pass through this company's network.

Article 3. Retention and deletion

Email enquiries are kept only until the reply is finished; after that the address and the message are deleted without delay. Nothing else is retained. The site itself keeps no record of visits.

Article 4. Disclosure to third parties

None. Personal information is not sold, shared, or provided to third parties.

Article 5. Entrusted processing

Delivery of the site is entrusted to Cloudflare, Inc. That company processes request information under its own terms; where that information goes is set out in the next article.

Article 6. Transfer of personal information overseas

Cloudflare is a United States company, so opening the site transfers request information out of Korea.

• Recipient: Cloudflare, Inc. (United States, www.cloudflare.com, privacy enquiries privacy@cloudflare.com)
• Items transferred: IP address and request information (browser type, requested address, and so on)
• When and how: at the moment a page is opened, by network transmission
• Purpose: delivery and security of the site
• Retention period: as long as that purpose requires. The specific period is published by that company in its own privacy policy
• How to refuse, and what that means: there is no separate application or procedure. Every page is delivered through this transmission, so there is no way to prevent it other than not using the site.

Basis for the transfer: Article 28-8(1)3 of the Personal Information Protection Act of the Republic of Korea (where entrusted processing or storage is necessary to conclude and perform a contract with the data subject). In accordance with subparagraph 3(a) of the same paragraph, the matters listed in Article 28-8(2) are disclosed here in this policy in place of individual notice.

Article 7. What is stored on your device

No cookies are used. One value is kept in your browser's local storage so that your settings are remembered.

• vb:settings — the seconds and wording for each part, and whether the wording is shown. It is never transmitted anywhere, and clearing your browser data removes it and returns everything to the defaults.

To refuse it, block or clear this site's storage in your browser settings. The site still works; the only effect is that saved settings return to their defaults.

Article 8. Behavioral information

Behavioral information for online targeted advertising is not collected, not used, and not provided to third parties. There is no advertising on this site.

Article 9. Security measures

• The less that is held, the less there is to protect. There is no membership scheme, and no personal information is collected that the service does not need. Pages are served as static files, so there is no database of visitor information behind them.
• Access to the enquiry mailbox is limited to the minimum needed to reply.
• All traffic is HTTPS only; unencrypted connections are refused (HSTS).
• Once an enquiry has been answered, its contents are destroyed without delay.

Article 10. Your rights

You may request access to, correction of, or deletion of information about you. In practice the only thing we might hold is an email enquiry, so on request we will confirm whether it is still held and delete it.

Article 11. Responsibility and requests for access

Visual Breathing is operated by LumenTree, which is also responsible for the personal information handled here. Enquiries and complaints, requests for access under Article 35 of the Personal Information Protection Act of the Republic of Korea, and any other exercise of your rights all go to the same place: contact-breath@lumen-tree.com

Article 12. Remedies for infringement

If you are not satisfied with how a request was handled, you can apply to the bodies below for dispute resolution or advice. These are Korean authorities. From outside Korea, drop the leading 0 and dial +82.

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Centre: 118, no area code (privacy.kisa.or.kr)
• Supreme Prosecutors' Office: 1301, no area code (www.spo.go.kr)
• National Police Agency: 182, no area code (ecrm.cyber.go.kr)

Article 13. Changes to this policy

Changes are made in the open. A change that alters what actually happens — analytics or advertising, for instance — is made to this policy in the same release that ships the feature, and the effective date above changes at that point too.