Privacy Policy

1. Why we process personal information

We process only the information needed to:

1. calculate and receive food truck or catering estimates;
2. check the event date, region, headcount, menu, vehicle and site conditions;
3. reply to questions and discuss a quote;
4. track the status of an inquiry and prevent duplicate submissions;
5. send the optional reply alert (KakaoTalk or email) that a visitor signs up for;
6. answer questions through the AI chat and keep the consultation history;
7. translate and summarise chats received in a foreign language for our team;
8. draft replies for our team to enquiries received on the KakaoTalk channel;
9. analyse website usage and measure Naver search-ad performance (whether an ad visit led to an inquiry);
10. protect the website and respond to service problems; and
11. meet legal obligations and review records if a dispute occurs.

We do not use estimate information for advertising messages unless we obtain separate consent.

2. Information we process

English estimate request

Korean estimate request

Collected automatically with an estimate request

AI chat

AI replies are generated with Anthropic PBC's Claude model. Chat messages are sent to and processed by Anthropic PBC in the United States. Chats in a language other than Korean are translated and summarised for our team with the same AI, and team replies may be translated the same way. See sections 7 and 13.

Technical information

Cloudflare may process IP addresses and access information for security and service operation under its own policies. To stop automated or repeated requests, the estimate, AI chat (start, message, contact, reply alert, resume), first-party statistics APIs and the administrator login store a one-way HMAC hash made from the IP address with the request count and block time; the estimate form and administrator login also record the security event type and time when a check fails. We do not store the original IP address in our database for this purpose.

Temporary estimate data

Event details entered before submission are kept in sessionStorage in your browser so the estimate steps can continue. Contact details are not stored there. This temporary data is removed when the browser tab or window is closed.

3. How long we keep information

There is no separate scheduled job: expired records are cleaned up automatically every time the server processes a new estimate request, a new AI chat or a page-journey record (section 8). Page-journey records arrive daily, so the clean-up effectively runs every day and an expired record is removed within about a day. If an inquiry becomes a transaction, contract, payment and tax records may be kept separately for the period required by South Korean law.

4. Children under 14

The estimate and consultation services are intended for adult event organisers and representatives. A person under 14 should contact us through a parent, guardian or responsible adult. If we must process information from a child under 14, we will follow the consent procedures required by South Korean law.

5. Sharing with third parties

We do not provide personal information to third parties unless the person has separately agreed, the law requires it, or the law allows it to protect an urgent interest in life, health or property. If a new disclosure is needed, we will state the recipient, purpose, data, retention period and right to refuse before obtaining consent.

6. Service providers

The first four providers process personal information on our behalf. The analytics and ad-measurement tools at the bottom of the table (Google Analytics, Microsoft Clarity, Naver Premium Log Analytics) receive data directly from your browser; their classification under South Korean privacy law (processing on our behalf, disclosure to a third party, or direct collection by the provider) is still under review, so they are listed as "external service in use (legal classification under review)". We will adjust the entries once the review is complete.

We manage service providers under the duties required by South Korean privacy law, including purpose limits, security, subcontracting controls and supervision.

7. International transfers

Cloudflare, Inc.

Google LLC (external service in use, legal classification under review, section 6)

Microsoft Corporation (Clarity) (external service in use, legal classification under review, section 6)

Anthropic PBC

If you do not want to use AI chat, you may contact us by email. If you do not want an AI draft used for a KakaoTalk enquiry, tell us there and a team member will reply directly. If you do not want to submit the estimate form, you may also send your inquiry directly to [email protected].

Optional reply alerts (supplement to sections 2, 3, 6 and 7)

You may choose to leave an email address to receive an alert when a member of our team replies. Korean-page visitors may instead leave a mobile number for a KakaoTalk notification. This is optional: you can keep chatting without signing up. AI replies do not trigger these alerts.

We store the selected contact detail, consent time and notification status until the chat's 1-year retention period ends. These records are deleted with the chat. Return links expire within 7 days. You can request that alerts stop and your details be deleted through the contact in section 15.

SOLAPI Co., Ltd. processes Korean mobile numbers and reply-arrival notices for delivery through Kakao's messaging network. Plus Five Five, Inc. (Resend, [email protected]) processes email addresses, generic reply-arrival notices, return links and delivery records in the United States. The full chat reply is not included in the notification.

Email data is transferred over an encrypted API when an alert is sent. Resend's standard plans retain emails and logs for 30 days and backups for 7 days; remaining customer data is deleted within 90 days of account termination. Any separately contracted enterprise retention terms must be checked before use. See Resend's data-processing details. You may decline email alerts and continue reading replies on this website.

8. Deletion

1. We review information when a reason for deletion occurs. Inquiry, chat, page-journey, KakaoTalk reply-draft and request-limit records past their retention period are cleaned up automatically every time the server processes a new estimate request, a new AI chat or a page-journey record; because page-journey records arrive daily, this effectively runs every day.
2. Electronic files are deleted so they are difficult to restore.
3. Paper documents are shredded or securely destroyed.
4. Records that must be retained by law are separated and used only for that legal purpose.

9. Your rights

You may ask to access, correct, delete or stop the processing of your information, or withdraw consent. Send the request by phone or email using the contact in section 15. We may verify your identity or authority to act for someone else. A request may be limited where another law requires us to keep the information, and we will explain the reason.

10. Security measures

1. Access is limited to the representatives and staff who need it.
2. The website uses HTTPS.
3. The database is not directly exposed to the public internet.
4. Records past the retention period are cleaned up automatically each time a new inquiry, chat or page-journey record is processed (section 8).
5. Turnstile, hidden form fields and hashed IP request limits reduce automated abuse.

11. Cookies, browser storage and analytics

We use sessionStorage to keep estimate steps in the current browser tab, together with the referral category and a random visit ID that link the page journey until the tab is closed. Contact details are not stored there. Cloudflare Turnstile may run when a form is submitted.

To let you reopen an AI chat, the chat ID is kept in localStorage. It is a random number, not your name or contact details, and it has no expiry: it is removed when you press "Start a new chat" or clear the site data in your browser. The chat is resumed with this ID alone, without a login, so anyone who knows the chat ID can read that chat and continue it. Do not share the chat ID or the chat screen, and on a shared device press "Start a new chat" when you finish. The reply-alert dismissal and your language choice are kept in the same storage.

We do not collect behavioural information for personalised advertising ourselves. We do collect the following usage statistics to improve the website and measure advertising performance.

• First-party journey statistics: pages visited, time on page, referral category, KakaoTalk and call button clicks, AI chat open and send, and estimate-step events linked to a random visit ID. No name or contact details. Cleaned up after 90 days. If you submit an inquiry or leave contact details in the AI chat, the same visit ID is stored with that record, so the page journey of that visit can be linked to it.
• Google Analytics: visits, time, pages, referral source and estimate-step events using cookie identifiers. See policies.google.com/privacy.
• Microsoft Clarity: page movement, scrolling, clicks and page layout. Text typed into fields, the AI chat conversation, and the estimate form's contact fields and confirmation notice are marked so that they are recorded only in masked form. See sections 6 and 7 and privacy.microsoft.com.
• Naver Premium Log Analytics: measures whether a visit from a Naver search ad led to an inquiry or a KakaoTalk or call button click. Naver's cookie identifier, the page address, the referral (including the ad click value) and the conversion event are sent to NAVER Corp. in South Korea. No name, contact details or inquiry content are sent. Retention follows NAVER Corp.'s policy; Naver's public documentation does not state a period, so none is given here (to be added once confirmed). NAVER Corp. is a Korean company, so this is not an international transfer under section 7; it is listed in section 6 as an external service in use (legal classification under review). See privacy.naver.com.

You can block or delete cookies in Chrome, Safari or Edge settings, use a private browsing window, or install Google's Analytics opt-out extension at tools.google.com/dlpage/gaoptout; the browser settings also cover Clarity and Naver cookies. Blocking cookies does not prevent reading the site or submitting an inquiry, although broad browser storage blocking may stop estimate progress and chat resumption from being retained.

Optional advertising measurement and overseas disclosure (supplement to sections 5, 7 and 11)

Measurement is off unless you separately agree. We use a server connection rather than a browser pixel, so automatic collection of customer information from forms is not enabled. We send the opt_out flag to exclude these events from future user-level personalisation.

OpenAI is an independent controller under its conversion terms and may process the received data to provide, measure, optimise and improve its services. The opt-out flag concerns user-level personalisation; it is not a promise that OpenAI uses the data only for our reports.

Each newly opened or restored enquiry page asks for confirmation again before sending its event. An earlier stored choice alone cannot send an enquiry event, including after a browser storage error.

The existing website analytics described above are separate. This optional measurement control does not change their settings. Browser Global Privacy Control or Do Not Track signals keep this additional measurement off.

OpenAI Ad Tools data-processing terms · OpenAI Privacy Policy

12. Automated estimate

The estimate uses the headcount, region, menu, vehicle and options entered by the visitor to calculate a reference amount. It does not confirm a contract, final price or schedule. A person checks the date and site conditions before a final quote or booking is confirmed. We do not make a fully automated decision that has a major legal effect on the visitor.

13. AI chat

1. The AI chat uses Anthropic's Claude model to generate the first reply. Messages are transferred to Anthropic PBC in the United States as described in section 7.
2. Any estimate from the AI is a reference amount based on the website price data. A person confirms the final price, schedule, payment and contract.
3. You may request a person at any time using the human-support button or by writing the request in the chat.
4. You may ask for the basis of an AI reply, object to it, request a human review or choose not to use AI chat.
5. You can exercise these rights in the chat or through the contact in section 15.
6. Chat content is processed as needed to answer your request; the retention period and a link to this policy are shown at the bottom of the chat. Collection items, retention, service providers and transfers follow sections 2, 3, 6 and 7.
7. Use, storage and training (following the generative-AI recommendations in the Personal Information Protection Commission's April 2026 revision of its privacy-policy drafting guideline):
   • Use: the AI chat is used only to answer website visitors' questions about event food truck estimates, menus and terms; it is not used for other services or advertising.
   • Storage of inputs and outputs: your messages, the AI and team replies and the AI-written summary are kept in our database for 1 year from the chat's creation (section 3). Anthropic PBC deletes API inputs and outputs within 30 days (content flagged as violating its usage policy: up to 2 years, section 7).
   • Model training: under Anthropic's default API policy your inputs and outputs are not used to train models, and we do not provide chat content for AI training either. There is therefore no separate opt-out procedure; if you do not want AI processing at all, ask for a person (item 3) or contact us by phone or email.
   • Sensitive information: do not enter national ID or passport numbers, bank or card numbers, or sensitive information such as health or religion in the chat; they are not needed. If entered, they may be stored and transferred as part of the chat record, and you can ask for deletion through the contact in section 15.
   • Reporting an inappropriate reply: use the human-support button in the chat or the phone or email in section 15; a team member will review it and reply directly.

14. KakaoTalk links

The Korean site can copy an estimate summary to the visitor's clipboard and open the Bureumyeon Ganda KakaoTalk channel. The estimate is not sent until the visitor pastes and sends it in KakaoTalk. If clipboard access fails, the Korean page provides text that can be copied manually. Kakao's policies apply after a message is sent there.

When replying to an enquiry received on the KakaoTalk channel, our team may use AI (Anthropic PBC's Claude model) to draft the reply; the conversation shown on that chat screen is then sent to Anthropic PBC in the United States (section 7). A team member checks the draft and sends the reply. The draft request record (the first 500 characters of the chat screen and the draft) is kept in our database for 90 days from the request and then removed by the clean-up in section 8. Anthropic PBC deletes the transferred content within 30 days and does not use it to train models by default (section 7). This AI use is limited to drafting team replies to KakaoTalk channel enquiries. If you do not want an AI draft used, or you think a reply was inappropriate, tell us in the KakaoTalk chat or through the contact in section 15 and a team member will review and reply directly.

15. Privacy contact

Contact us if you have a question or request about information handled through this website.

16. Complaints and remedies in South Korea

• Personal Information Infringement Report Center: 118 · privacy.kisa.or.kr
• Personal Information Dispute Mediation Committee: +82-1833-6972 · www.kopico.go.kr
• Personal Information Protection Commission: www.pipc.go.kr
• Supreme Prosecutors' Office cyber investigation: 1301 · www.spo.go.kr
• Korean National Police Agency cyber bureau: 182 · ecrm.police.go.kr

These organisations are separate from Bureumyeon Ganda. You may contact our privacy officer first so we can review the issue.

17. Changes to this policy

Changes and their effective dates will be posted on this page. Changes that significantly affect a visitor's rights will be announced before or when they take effect.

• First published and effective: 16 July 2026
• Analytics disclosure updated: 3 and 5 August 2026
• AI chat disclosure effective: 21 August 2026
• English estimate, email contact and English translation added: 27 August 2026
• Optional reply-alert contact details, consent and delivery records, retention, service providers, overseas processing and deletion requests added and effective: 21 September 2026. Signing up for alerts is not required to use the AI chat.
• Optional server-side advertising measurement disclosure added: 28 September 2026. Measurement requires separate consent.
• Revised and effective 1 October 2026: added Naver Premium Log Analytics, the Microsoft Clarity service-provider and transfer disclosure, localStorage use, the visit-ID link between page journeys and inquiries or chats, the wider hashed-IP request-limit scope, AI translation and summary of foreign-language chats, AI reply drafts for KakaoTalk enquiries, the data actually sent to Anthropic, the clean-up timing for expired records, and removed Google Fonts. Also stated the KakaoTalk reply-draft retention (90 days), the Microsoft Clarity retention period and recipient contact, the Cloudflare database region, Anthropic's API retention and training policy; separated the legal basis from the refusal method in the transfer tables; marked the analytics tools (Google, Microsoft, Naver) as under legal-classification review; and added the generative-AI items (use, storage of inputs and outputs, training, sensitive information, reporting) to section 13.