Privacy Policy

1. Information we process

We receive the following through the inquiry form.

• Required: name, email, message
• Optional: company or brand, phone, inquiry type, budget, target schedule
• Processed without consent: your IP address, to block repeated submissions, and connection records for website delivery and security. We process them only as needed for our legitimate interest in keeping the service secure (PIPA Article 15(1)(6)). The inquiry server keeps IP addresses in memory for under two minutes and does not write them to files or logs. To avoid sending repeated receipt confirmations to the same address, the inquiry server keeps an irreversible value derived from the email address (a hash made with a key discarded when the server restarts) in memory for no more than 24 hours.

2. Purpose

• Confirming receipt of and replying to inquiries
• Project consultation and quotes

3. Retention

We keep inquiries for one year after we finish replying and consulting, then delete them without delay.

If an inquiry leads to a contract, any personal information needed after that is disclosed and handled separately when the contract is made.

4. Provision to third parties

We do not provide personal information to third parties unless you consent or the law specifically requires it.

5. Processors

To deliver inquiries to our team and keep them, we entrust processing to the companies below, only to the extent needed for that work.

• Discord Inc.: delivering and keeping inquiries in our internal notification channel
• Google LLC (Google Workspace): sending and keeping inquiry emails for our team, and sending a receipt confirmation to you
• Cloudflare, Inc.: website and form delivery and security
• Google LLC (Google Analytics): visit statistics

6. Transfers abroad

To entrust and store the processing needed for replying and consulting, we transfer personal information abroad as set out below, disclosed in this policy under PIPA Article 28-8(1)(3). Transfers happen over encrypted connections when you send the form (or when an email is received).

• Discord Inc. (privacy@discord.com) · USA · Items: the form fields you entered and the consent record · Purpose: delivery to and storage in our notification channel · Retention: one year after we finish replying and consulting (deleted by us)
• Google LLC (Google Workspace, privacy contact: support.google.com/policies/contact/general_privacy_form) · USA and other Google data centers · Items: the form fields you entered and the consent record (only your email address for the receipt confirmation) · Purpose: sending and keeping inquiry emails for our team, and sending a receipt confirmation to you · Retention: inquiry emails in our mailbox, one year after we finish replying and consulting (deleted by us); sending logs, per Google Workspace’s log retention policy
• Cloudflare, Inc. (privacyquestions@cloudflare.com) · USA and the Cloudflare network · Items: connection data (IP, browser) and transmitted content · Purpose: website delivery and security · Retention: per Cloudflare’s retention policy
• Google LLC (Google Analytics) · USA · Items: cookie identifiers and usage records · Purpose: visit statistics · Retention: Google Analytics data retention setting (2 months)

If you do not want your information transferred abroad, please contact us by post (393 Incheontower-daero, Yeonsu-gu, Incheon, Korea, and&end) instead of the form or email. If you refuse the transfer, we cannot receive inquiries through the form or by email.

7. Deletion

Each month we check for inquiries past the retention period and delete the messages in our Discord channel and the emails in our mailbox, including trash. Electronic files are deleted so they cannot be recovered, and printouts are shredded.

8. Your rights

You may ask at any time to access, correct, delete, or stop the processing of your personal information, or to withdraw consent. Email contact@andnend.com or write to us and we will act and let you know within 10 days.

A legal representative or a person you authorize may also make a request with a power of attorney. Requests may be limited where another law requires retention.

9. Security measures

• Administrative: only the staff in charge can see inquiries, and inquiries past the retention period are deleted every month.
• Technical: inquiries are sent over encrypted connections (HTTPS) and are not stored on the website server. Access to the notification channel and mail accounts is restricted.
• Physical: printed inquiries are kept in a locked place.

10. Cookies and visit statistics

We use visit statistics to help improve the website. Cloudflare Web Analytics (Cloudflare, Inc., USA) uses no cookies and counts only aggregate data such as pages visited, referrers, browser and device type, and country.

Google Analytics 4 (Google LLC, USA) uses cookies (such as _ga) to collect usage records such as pages visited, time spent, and clicks, along with device and browser information and approximate location (estimated from IP; the IP is not stored). Cookie identifiers and usage records can be personal information if they can identify you when combined with other information. The data is deleted according to the Google Analytics data retention setting (2 months).

If you do not want cookies stored, you can block or delete them in your browser settings, or install the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout). Blocking cookies does not affect browsing or sending an inquiry.

11. Privacy officer and contact

• Privacy officer: CEO Jiwon Seo
• Department: and&end operations
• Contact: contact@andnend.com, Tel. 032-859-9935

12. Remedies

For reports or advice on privacy infringement, you may contact the following Korean authorities.

• Personal Information Infringement Report Center: 118, privacy.kisa.or.kr
• Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
• Supreme Prosecutors’ Office: 1301, www.spo.go.kr
• Korean National Police Agency: 182, ecrm.police.go.kr

13. Changes

This policy applies from October 9, 2026. Any change will be announced on this page with its effective date.

Changes from the previous policy (effective September 24, 2026): inquiry emails are now sent through Google Workspace, so Resend was removed from our processors and overseas recipients, and sending a receipt confirmation to the person who made the inquiry was added to the work entrusted to Google Workspace. The contact address for privacy matters changed to contact@andnend.com. Resend, listed in the September 24 version, was never actually used; during that time inquiries were delivered only to our internal notification channel (Discord).