Privacy Policy
Draft · pending attorney reviewEffective date: 1 December 2026
1. Who we are
RecoverKR is a debt recovery service operated by Han Kyeongjae Law Office (the “Law Office”, “we”), a law office in Seoul and a member of the Seoul Bar Association. The Law Office decides how your personal information is used and is responsible for it under the Korean Personal Information Protection Act (PIPA) and, where it applies, the EU and UK General Data Protection Regulation (GDPR).
Block C, 1102-20, 128 Beobwon-ro, Songpa-gu, Seoul 05854, Republic of Korea · cases@recoverkr.com
2. What we collect
- About you: name, email, company, country, and billing name and address if you ask for an invoice.
- About your claim: the debtor’s name, the amount owed, your notes, and documents you upload or email (invoices, contracts, correspondence).
- Technical data: the time of your request and your browser type, used to keep the service secure.
Your documents may contain personal information about the debtor or other people. We use it only to assess and pursue your claim. Please do not send national ID numbers, card numbers or health information unless we ask for them.
3. Why we use it
- To check for conflicts of interest, assess your claim and reply with a quote (steps taken at your request before an engagement).
- To issue invoices and keep accounting records (legal obligation).
- To provide legal services once you sign an engagement (contract).
- To keep the service secure and prevent misuse (legitimate interest).
We do not sell your information or use it for advertising.
4. How long we keep it
- If no engagement follows: deleted 12 months after our last contact.
- If you engage us: case records are kept for 3 years after the matter ends, as required by the Attorney-at-Law Act, or longer if needed for a dispute.
- Invoices and payment records: 5 years, as required by the Framework Act on National Taxes.
5. Who helps us
These providers process information on the Law Office’s behalf, under contract and only for the purposes above.
| Provider | What they do | Where |
|---|---|---|
| Theone Co., Ltd. ((주)테오네) | Builds and runs the website and intake system | Republic of Korea |
| Supabase, Inc. | Stores intake details and uploaded documents | Servers in Seoul, Republic of Korea; company in the United States |
| Vercel, Inc. | Hosts the website and processes form submissions | United States and global edge network |
| Resend, Inc. | Sends confirmation and notification emails | United States |
| Google LLC (Google Workspace) | Receives documents sent by email | United States |
6. Transfers outside Korea
Some of the providers above are outside Korea. Your information is sent to them over an encrypted connection when you submit the form or email us, only as needed to provide the service, and is kept for the periods in section 4. You can object by emailing us, but we may then be unable to accept your case online. For clients in the EU or UK, transfers to Korea are covered by the EU and UK adequacy decisions for Korea. Transfers to our US providers rely on Standard Contractual Clauses or the EU-US Data Privacy Framework.
7. Your rights
You can ask to see, correct, delete or stop the processing of your information, and, under the GDPR, to receive a copy or object to processing. Email cases@recoverkr.com. We reply within 10 days. Some records must be kept by law. You can also complain to the Personal Information Protection Commission of Korea (privacy.go.kr) or your local data protection authority.
8. Security
Documents are stored in a private, access-controlled store. Only the Law Office, and the operator for maintenance, can access them. Data is encrypted in transit and at rest.
9. Privacy officer
Kyeongjae Han, Attorney · cases@recoverkr.com
10. Changes
We will post any changes on this page with a new effective date.