M&A Center Privacy Policy

Bridgecode values your personal information and complies with the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection.

Through this privacy policy, the company informs you of how the personal information you provide is used, in what manner, and what measures are taken to protect it.

Article 1 (Purposes of Processing Personal Information)

Bridgecode processes personal information for the following purposes. The personal information being processed is not used for any purpose other than those below, and if the purpose of use changes, we take necessary measures such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

1. Providing M&A consultation services

* Receiving consultation requests and responding to inquiries
* Reviewing and recording basic materials for the consultation
* Scheduling and booking meetings
* Deal matching and consultation management through registration with the M&A AX solution and M&A exchange

2. Marketing and advertising (with separate consent)

* Sending newsletters and email campaigns
* Announcing M&A news, seminars, and events

Article 2 (Personal Information Collected and Collection Methods)

Items collected

When requesting a sell-side consultation

* Required: name, company name, email, phone number (mobile), inquiry type, revenue

When requesting a buy-side consultation

* Required: name, company name, email, phone number (mobile), inquiry type, industry, target industries, acquisition budget
* Optional: reason and purpose of the acquisition

Automatically collected items

* IP address, cookies, service usage records, visit history
* Visit statistics via Google Analytics (page views, session duration, traffic sources, etc.)
* Recipient behavior such as open and click rates via links in newsletters and emails

Collection methods

* Consultation request form on the website
* Additional information collected through the scheduling service
* Automatic collection through the email delivery system

Article 3 (Processing and Retention Period of Personal Information)

Bridgecode processes and retains personal information within the retention and use period prescribed by law or agreed upon when collected from the data subject.

* Consultation purposes: 5 years from the date of collection
* Marketing purposes: until consent is withdrawn

However, the following records are preserved in accordance with applicable laws.

* Records on contracts or withdrawal of offers: 5 years (E-Commerce Act)
* Records on consumer complaints or dispute resolution: 3 years (E-Commerce Act)
* Website visit records: 1 year (Protection of Communications Secrets Act)

Article 4 (Outsourcing of Personal Information Processing)

Bridgecode outsources personal information processing tasks as follows to provide seamless services.

Contractor	Outsourced task	Retention period
Amazon Web Services (AWS)	Server infrastructure operation and data storage	Until the outsourcing contract ends
Google LLC	Website visit statistics via Google Analytics	Until the outsourcing contract ends

When entering into outsourcing contracts, Bridgecode periodically verifies the contractor's data protection capabilities and fulfillment of obligations such as safe management and destruction.

Article 5 (Provision of Personal Information to Third Parties)

Bridgecode does not provide personal information to third parties without the consent of the data subject, except where the data subject has consented or where required by law.

Article 6 (Destruction of Personal Information)

Bridgecode destroys personal information without delay when it becomes unnecessary due to the expiration of the retention period or the achievement of the processing purpose.

Destruction procedure: Personal information subject to destruction is selected and destroyed with the approval of the privacy officer.

Destruction methods

* Electronic files: permanently deleted in an unrecoverable manner
* Paper documents: shredded or incinerated

Article 7 (Rights and Obligations of Data Subjects and How to Exercise Them)

Data subjects may exercise the following rights against Bridgecode at any time.

* Request to access personal information
* Request to correct or delete personal information
* Request to suspend the processing of personal information

Rights may be exercised by email (contact@bridgecode.kr) or phone (+82-2-6952-0319), and Bridgecode will take action without delay.

Article 8 (Cookies)

Bridgecode uses cookies for user convenience and statistical analysis.

What are cookies? Small pieces of information sent by the server operating the website to the user's browser.

Purpose of collection: analyzing website visit statistics and improving services

Cookies used

* Essential cookies: required for the website to function properly and cannot be declined
* Analytics cookies: visitor statistics via Google Analytics (can be declined)

How to decline cookies: Browser settings → Privacy → Block cookies. Declining cookies may limit the use of some services.

Article 9 (Measures to Ensure the Security of Personal Information)

Bridgecode takes the following measures to ensure the security of personal information.

* Administrative measures: establishing and implementing an internal management plan, employee training
* Technical measures: access control, security software, encryption
* Physical measures: access control to server rooms and data storage rooms

Article 10 (Privacy Officer)

Bridgecode designates a privacy officer as follows to oversee personal information processing and to handle related complaints and remedies.

* Name: Jisoo Kim
* Position: Executive Director
* Phone: +82-2-6952-0319
* Email: contact@bridgecode.kr

For other reports or consultations regarding personal information infringement, please contact the following organizations.

* Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
* Supreme Prosecutors' Office Cyber Investigation Division (www.spo.go.kr / 1301)
* National Police Agency Cyber Investigation Bureau (police.go.kr / 182)

Addendum

This privacy policy takes effect on May 14, 2025.

(Previous policy: enacted on November 13, 2023)