Privacy Policy

Shin, Hwang, Yeo & Lee takes the protection of your personal information seriously and complies with all applicable laws and regulations.

Pursuant to Article 30 of the Personal Information Protection Act, Shin, Hwang, Yeo & Lee (the “Firm”) establishes and publicly discloses the following Privacy Policy in order to protect all personal information we handle and to ensure that any related grievances are handled promptly and effectively.

Article 1 (Purposes of Processing Personal Information)

The Firm processes personal information for the following purposes. Personal information will not be used for any purpose other than those stated below. In the event that the purposes of processing change, the Firm will take necessary measures in accordance with Article 18 of the Personal Information Protection Act, including obtaining separate consent where required.

• Website Usage Analytics: Cookie and log data may be collected for the purposes of analyzing service usage records and access frequency, and improving our services.
• Client Inquiries and Consultation Management: Personal information is processed for the purposes of verifying identity, confirming relevant facts, and notifying clients of outcomes in connection with legal consultation inquiries submitted via email or other means.
• Service Provision and Contract Performance: Personal information is processed for the purposes of providing legal advice, executing and performing legal engagement agreements, and issuing invoices.

Article 2 (Retention Period for Personal Information)

The Firm processes and retains personal information within the retention and use period prescribed by applicable laws and regulations, or within the retention and use period agreed upon at the time of collection.

• Retention Period: Until the purpose of collection has been fulfilled, or until the expiration of any retention obligation required under applicable laws and regulations.
• Provided, however, that where an investigation or inquiry is ongoing in connection with a violation of applicable laws and regulations, personal information may be retained until such investigation or inquiry is concluded.

Article 3 (Rights and Obligations of Data Subjects and How to Exercise Them)

Data subjects may exercise the following rights with respect to their personal information at any time:

• Right to access personal information
• Right to rectification in the event of errors or inaccuracies
• Right to erasure
• Right to restriction of processing

Such rights may be exercised against the Firm in writing, by telephone, by email, or by facsimile (FAX), and the Firm will take prompt action in response.

Article 4 (Categories of Personal Information Processed)

The Firm processes the following categories of personal information:

• Required Information: Full name, organizational affiliation, and contact information (telephone number and email address)
• Automatically Collected Information: IP address, cookies, access logs, and service usage records

Article 5 (Deletion of Personal Information)

The Firm will delete personal information without delay when it is no longer necessary, including upon the expiration of the retention period or the fulfillment of the processing purpose. Electronic files are destroyed using technical methods that render the records irrecoverable, and paper documents are destroyed by shredding or incineration.

Article 6 (Data Protection Officer)

The Firm has designated a Data Protection Officer to oversee all matters relating to the processing of personal information and to handle complaints and concerns from individuals in connection with such processing, as follows:

Article 7 (Amendments to this Privacy Policy)

This Privacy Policy is effective as of February 7, 2026.