Privacy Policy
Purple Talent Privacy Policy
Effective date: November 1, 2026
Purple With Co., Ltd. (hereinafter referred to as the “Company”) complies with the 「Personal Information Protection Act」 and related laws to protect the freedom and rights of information subjects, processing personal information lawfully and managing it safely. Accordingly, in accordance with Article 30 of the 「Personal Information Protection Act」, we establish and disclose this Privacy Policy to guide information subjects on the procedures and standards for processing and protecting personal information and to ensure that related grievances can be handled quickly and smoothly.
This Policy applies to the Purple Talent website, where candidates register their profiles and hiring companies submit inquiries. The website does not offer membership registration.
1. Purposes, Items, and Retention Period of Personal Information
The Company collects and uses the minimum amount of personal information necessary to provide services in accordance with the 「Personal Information Protection Act」.
The Purple Talent website has no membership registration. The Company collects the following personal information only through its forms, with the consent of the information subject, in accordance with Article 15(1)1 and Article 22(1) of the 「Personal Information Protection Act」. Each consent is requested separately, and no box is pre-checked.
| Service Category | Consent | Purpose of Collection | Items Collected | Retention and Use Period |
|---|---|---|---|---|
| Candidate Registration | Required | Matching and recommending candidates to open roles; contacting you about recruitment; managing the talent database. | Required: full name, email, phone number, current job title, years of experience, industry, what you are looking for. Optional: current company, preferred role / next step, resume/CV (file), LinkedIn profile URL, other information included in your resume or cover note. | 2 years from the date of consent, or until you request deletion, whichever comes first. |
| Candidate Registration | Optional | Matching and recommending candidates to open roles; contacting you about recruitment; managing the talent database. | Required: full name, email, phone number, current job title, years of experience, industry, what you are looking for. Optional: current company, preferred role / next step, resume/CV (file), LinkedIn profile URL, other information included in your resume or cover note. | 2 years from the date of consent, or until you request deletion, whichever comes first. |
| Hiring Company Inquiries | Required | Responding to hiring inquiries; contacting you regarding proposals and contracts. | Required: full name, job title, company, business email, phone number, service of interest. Optional: industry, role, target hiring timeline, inquiry details. | 1 year after the inquiry is resolved (until contract end if a contract is signed), then destroyed without delay. |
Candidate Registration
- Consent
- Required
- Purpose of Collection
- Matching and recommending candidates to open roles; contacting you about recruitment; managing the talent database.
- Items Collected
- Required: full name, email, phone number, current job title, years of experience, industry, what you are looking for. Optional: current company, preferred role / next step, resume/CV (file), LinkedIn profile URL, other information included in your resume or cover note.
- Retention and Use Period
- 2 years from the date of consent, or until you request deletion, whichever comes first.
Candidate Registration
- Consent
- Optional
- Purpose of Collection
- Matching and recommending candidates to open roles; contacting you about recruitment; managing the talent database.
- Items Collected
- Required: full name, email, phone number, current job title, years of experience, industry, what you are looking for. Optional: current company, preferred role / next step, resume/CV (file), LinkedIn profile URL, other information included in your resume or cover note.
- Retention and Use Period
- 2 years from the date of consent, or until you request deletion, whichever comes first.
Hiring Company Inquiries
- Consent
- Required
- Purpose of Collection
- Responding to hiring inquiries; contacting you regarding proposals and contracts.
- Items Collected
- Required: full name, job title, company, business email, phone number, service of interest. Optional: industry, role, target hiring timeline, inquiry details.
- Retention and Use Period
- 1 year after the inquiry is resolved (until contract end if a contract is signed), then destroyed without delay.
You have the right to refuse consent. If you refuse the required consent, we may be unable to register your profile or to receive and respond to your inquiry.
Declining the optional consent for future opportunities does not limit your registration. You may withdraw it at any time.
Candidate information is not provided to hiring companies at registration (see Section 2).
2. Provision of Personal Information to Third Parties
The Company processes personal information only within the scope specified in “1. Purposes, Items, and Retention Period.” It provides personal information to third parties only when it falls under Articles 17 and 18 of the Personal Information Protection Act, such as with the information subject’s consent or special legal provisions.
| Recipient | Purpose of Provision | Items Provided | Retention Period |
|---|---|---|---|
| Hiring companies named in each consent request (see below) | Recommending candidates for open roles and conducting the hiring process | Items listed in the consent request, from among: full name, email, phone number, current job title, years of experience, industry, what you are looking for, and, if provided, current company, preferred role, resume/CV (file), LinkedIn profile URL, other information | 2 years from the date of provision, unless the consent request states otherwise |
Hiring companies named in each consent request (see below)
- Purpose of Provision
- Recommending candidates for open roles and conducting the hiring process
- Items Provided
- Items listed in the consent request, from among: full name, email, phone number, current job title, years of experience, industry, what you are looking for, and, if provided, current company, preferred role, resume/CV (file), LinkedIn profile URL, other information
- Retention Period
- 2 years from the date of provision, unless the consent request states otherwise
Candidate profiles and hiring companies
The Company does not provide candidate information to any hiring company when a candidate registers. Before sharing a profile with a specific hiring company, the Company sends the candidate a separate consent request by email. The request states the company name, the purpose, the items to be provided, the recipient’s retention period, and the right to refuse.
The Company provides the profile only after the candidate agrees. A candidate may refuse without affecting their registration; the profile is then simply not shared with that company. The Company keeps a record of each consent (date, company, and items provided).
3. Entrustment of Personal Information Processing
The Company entrusts the processing of personal information to the parties below to operate its services. When entrusting, the Company enters into a contract that prohibits processing beyond the entrusted purpose, requires safeguards, limits subcontracting, and provides for supervision, and the Company supervises the entrusted party.
| Entrusted Party | Entrusted Task |
|---|---|
| Vercel | Servers and web hosting |
| Amazon Web Services Inc. | Storage of data, including personal information |
- Vercel
- Servers and web hosting
- Amazon Web Services Inc.
- Storage of data, including personal information
If the entrusted parties or tasks change, the Company will disclose the changes through this Policy.
4. Overseas Transfer of Personal Information
The Company stores personal information on cloud servers located overseas, as described below.
| Item | Details |
|---|---|
| Items transferred | Items collected under Section 1, including resume/CV files and candidate data |
| Time and method | Transferred over the network when you submit the form, and stored on the provider’s servers |
| Recipient | Vercel; Amazon Web Services Inc. |
| Purpose and retention | Cloud storage of the data, for the retention periods stated in Section 1 |
| How to refuse, and effect of refusal | Contact the Privacy Officer in Section 9. If you refuse, we may be unable to register your profile or respond to your inquiry |
- Items transferred
- Items collected under Section 1, including resume/CV files and candidate data
- Time and method
- Transferred over the network when you submit the form, and stored on the provider’s servers
- Recipient
- Vercel; Amazon Web Services Inc.
- Purpose and retention
- Cloud storage of the data, for the retention periods stated in Section 1
- How to refuse, and effect of refusal
- Contact the Privacy Officer in Section 9. If you refuse, we may be unable to register your profile or respond to your inquiry
5. Destruction of Personal Information
The Company destroys personal information without delay when it becomes unnecessary, such as upon expiration of the retention period or achievement of the processing purpose.
If personal information must continue to be preserved according to other laws despite the expiration of the retention period, it is moved to a separate database or stored in a different location.
Destruction Procedure: The Company selects the information to be destroyed and destroys it with the approval of the Privacy Officer.
Destruction Method: Electronic files are permanently deleted using technical methods that prevent recovery; paper documents are shredded or incinerated.
6. Measures to Ensure Safety of Personal Information
The Company takes the following measures to ensure the safety of personal information:
Administrative Measures: Establishment and implementation of internal management plans, regular employee training.
Technical Measures: Management of access rights to processing systems, installation of access control systems, encryption of unique identification information, installation of security programs.
Physical Measures: Access control to server rooms or data storage rooms.
7. Installation and Operation of Automatic Collection Devices (Cookies)
The Company uses ‘cookies’ to store and retrieve usage information to provide personalized services.
Cookies are small amounts of information sent by the website’s server (HTTP) to the user’s browser. They are stored on the user’s PC or mobile device and sent back to the server automatically when the user visits the website.
Purpose: To provide optimized information by analyzing access frequency and visit time of services.
Behavioral information: The Company uses cookies to process behavioral information in order to provide customized services and benefits and online customized advertising. The Company collects only the minimum behavioral information necessary and does not collect sensitive behavioral information that could infringe on an individual’s rights, interests or privacy, such as thoughts, beliefs or medical history. The Company obtains the consent of a legal guardian in advance before providing customized advertising to a child it knows to be under 14, and otherwise does not collect behavioral information from children for customized advertising.
How to refuse: Users can allow or block cookies in their browser settings. Chrome: Settings > Privacy and security > Third-party cookies, or Delete browsing data. Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data. Safari on mobile: Settings > Safari > Advanced > Block All Cookies. Blocking cookies may limit some features of the website.
Questions about behavioral information, refusal, and reports of harm can be sent to the Privacy Department in Section 9.
8. Rights and Obligations of Information Subjects
Information subjects may exercise the following rights at any time:
Request to view personal information.
Request correction if there are errors.
Request deletion.
Request suspension of processing.
Withdraw consent that was previously given.
Rights can be exercised in writing or by email to the Privacy Department in Section 9.
When a candidate withdraws consent or requests deletion, the Company deletes the registered profile and stops any contact about future opportunities without delay, except for information that must be kept under other laws.
If a subject requests correction or deletion of errors, the Company will not use or provide the information until the correction/deletion is completed.
Information subjects must not infringe on their own or others’ personal information and privacy in violation of the Act.
9. Privacy Officer and Department
The Company has designated a Privacy Officer to take overall responsibility for personal information processing and handle grievances.
Privacy Officer (CPO)
Name: Kim Livia
Position: CPO
Email: contact@purpleelephant.info
Privacy Department
Department: Platform Management Department
Email: contact@purpleelephant.info
10. Remedy for Infringement of Rights
Information subjects may apply for dispute resolution or consultation with the following organizations for remedies:
Personal Information Dispute Mediation Committee: (Toll-free) 1833-6972 / www.kopico.go.kr
Personal Information Infringement Report Center: (Toll-free) 118 / privacy.kisa.or.kr
Supreme Prosecutors’ Office: (Toll-free) 1301 / www.spo.go.kr
Korean National Police Agency: (Toll-free) 182 / ecrm.cyber.go.kr
11. Modification of Privacy Policy
This Privacy Policy is effective from November 1, 2026. The previous version, effective from February 19, 2026, applies until this version takes effect. Any additions, deletions, or modifications due to changes in laws or policies will be notified through notices at least 7 days prior to the effective date.