Privacy Policy
Effective: August 16, 2026
S&D KOREA processes only the personal and access data needed to operate technical inquiries, requests for quotation and the public AI assistant. Confidential customer drawings, cost data and customer-format quality records should not be entered in the general web form or Public AI.
1. Information processed
For technical inquiries and RFQs, we process company and contact name, email, optional phone/country/project information, industry, equipment, quantity, inquiry text and technical conditions entered by the user. When non-confidential files are attached, filename and file contents may be processed for email delivery. Security, anti-spam and attribution may use landing/referral/UTM data, browser/device information and country/city information provided in request headers.
2. Purpose
We use information to identify the inquirer, review fabrication and technical scope, prepare quotations, reply, manage inquiry and sales history, send receipts, analyze attribution, secure the service and prevent spam. Public AI input is used only to generate guidance based on approved public S&D information.
3. Retention
S&D KOREA generally retains inquiry and RFQ records for one year after handling, then deletes or destroys them. Longer retention may apply when a contract, legal obligation, dispute or required quality record creates a separate basis. Technical logs and temporary data at processors follow the transfer table and the applicable provider agreement/settings.
4. Processors and external services
Vercel provides hosting, security and performance. Resend is used when RFQ email delivery is enabled. When lead storage is enabled, inquiry records may be stored in an S&D-designated Supabase project. When Public AI is enabled, OpenAI API receives the question and recent conversation context needed for the answer; RFQ attachments are not sent to OpenAI.
5. Confidential material
General upload is for non-confidential technical material. Do not submit trade secrets, confidential customer drawings, cost or contract information, or customer-format quality documents through the general form, ordinary email or Public AI. Arrange an NDA and controlled Secure Project Data channel first.
6. Your rights
Subject to applicable law, you may request access, correction, deletion or restriction of processing. Reasonable identity or representative verification may be required.
7. Security measures
We use HTTPS, input validation, rate limits, file type/size controls, access control and server-side secret management. Confidential project information is separated from public channels.
8. Contact
Privacy contact: info@sndkor.kr · 031-432-9490
International processing / transfers
When the following functions are enabled, service delivery may involve international processing or storage. S&D KOREA manages this against the active account, region, contract and retention settings and updates this table when the stack changes.
Vercel Inc.
- Country / Region
- United States (primary facilities) and Vercel/subprocessor operating locations
- Data
- Request/access information, service-generated logs and data in transit for web requests
- Purpose
- Hosting, security, network and performance operations
- Timing / Method
- On website access/request over encrypted networks
- Retention
- According to the service term and production account/log retention settings
- Recipient contact
- privacy@vercel.com
Plus Five Five, Inc. (Resend) — when email delivery is enabled
- Country / Region
- United States
- Data
- Name, email, RFQ content, recipient data, non-confidential attachments and email metadata
- Purpose
- RFQ notification and inquiry receipt delivery
- Timing / Method
- When an RFQ/receipt email is sent over encrypted networks
- Retention
- Processed while the service agreement is active; Resend DPA states customer data is deleted within 90 days after account termination, subject to legal exceptions
- Recipient contact
- support@resend.com
OpenAI OpCo, LLC and approved subprocessors — when Public AI is enabled
- Country / Region
- United States and published OpenAI API processing locations
- Data
- AI question, recent conversation context, language and page path needed to generate the response
- Purpose
- Generate public technical and quotation guidance
- Timing / Method
- When an AI question is submitted through the encrypted API
- Retention
- Responses API is called with store=false; default abuse-monitoring logs may be retained for up to 30 days unless approved/configured retention controls apply
- Recipient contact
- privacy@openai.com
How to refuse international processing
If you do not want the relevant international processing, do not use the affected online function (RFQ email delivery or Public AI) and request an alternative channel through 031-432-9490 or info@sndkor.kr. Vercel is infrastructure required to serve this website, so related network processing may occur while using the site; use a non-web channel such as phone if you do not want that processing. Refusal may limit the affected online function.