B the B (btheb.sba.kr, the "Website"), operated by the Seoul Business Agency ("SBA"), establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of Korea to protect the personal information of data subjects and to handle related complaints promptly and smoothly.
※ The Website does not offer membership registration, inquiry forms, or any other feature through which users directly enter personal information.
※ This Privacy Policy applies only to the Website. The privacy policy of the SBA main website (sba.seoul.kr) is available on that website.
※ This English version is provided for reference. In case of any discrepancy, the Korean version shall prevail.
Key Information at a Glance
Personal Information
No direct collection
(Auto-generated: IP address, access logs, cookies)
Purpose
Website operation and security
Visitor statistics
Retention Period
Access logs: 1 year
Cookies: per browser settings
Provision to Third Parties
None
Outsourcing
Contractor: iLab Media Co., Ltd.
Sub-contractor: Mir Web Design
Department in Charge
Beauty Business Development Team
+82-2-6951-2309
Article 1 (Purpose of Processing)
① The Website does not directly collect personal information from users through membership registration, inquiry forms, or similar features.
② However, information automatically generated while using the Website is processed for the following purposes only:
- Stable operation of the Website and prevention of misuse
- Prevention of and response to security incidents such as hacking
- Visitor statistics, such as access frequency
Article 2 (Items Processed and Retention Period)
① The Website does not collect personal information entered directly by users.
② The following information is automatically generated and processed while using the Website.
| Legal Basis |
Purpose |
Items |
Retention Period |
PIPA Article 15(1)6
(Legitimate interest) |
Website operation and security,
visitor statistics |
IP address, access time,
referrer, browser information |
1 year |
PIPA Article 15(1)6
(Legitimate interest) |
Session maintenance,
popup display settings |
Cookies |
Until the browser is closed or
the set period (up to 1 day) expires |
③ If an investigation or inquiry is in progress due to a violation of relevant laws, information is retained until its conclusion.
Article 3 (Provision to Third Parties)
SBA does not provide personal information to third parties, except as permitted under Articles 17 and 18 of the Personal Information Protection Act, such as special provisions of law.
Article 4 (Outsourcing of Processing)
① SBA outsources the following personal information processing tasks for the smooth operation of the Website.
| Contractor |
Outsourced Task |
Period |
| iLab Media Co., Ltd. |
Management, operation and maintenance of
the B the B Website and SNS |
Apr. 1, 2026 ~ Feb. 28, 2027 |
② In accordance with Article 26(6) of the Act, the contractor re-outsources the following tasks with SBA's consent.
| Contractor |
Sub-contractor |
Re-outsourced Task |
Period |
| iLab Media Co., Ltd. |
Mir Web Design |
Server management, operation and
maintenance of the B the B Website |
Within the outsourcing period
(Apr. 1, 2026 ~ Feb. 28, 2027) |
③ When concluding an outsourcing contract, SBA specifies in writing, in accordance with Article 26 of the Act, the prohibition of processing for purposes other than the outsourced task, technical and administrative safeguards, restrictions on re-outsourcing, management and supervision of the contractor, and liability for damages, and supervises whether the contractor and sub-contractor process personal information safely.
④ Any change in the outsourced task, contractor or sub-contractor will be disclosed through this Privacy Policy without delay.
Article 5 (Rights and Obligations of Data Subjects and Legal Representatives)
① Data subjects may at any time exercise their rights to request access, correction, deletion, or suspension of processing of their personal information.
② These rights may be exercised in writing, by e-mail, or by fax in accordance with Article 41(1) of the Enforcement Decree of the Act, and SBA will take action without delay.
③ These rights may also be exercised through a legal representative or an authorized agent. In this case, a power of attorney in the form prescribed by the relevant public notice must be submitted.
④ Requests for access or suspension of processing may be restricted under Article 35(4) and Article 37(2) of the Act.
⑤ SBA verifies whether the person exercising the rights is the data subject or a legitimate representative.
Article 6 (Destruction Procedure and Method)
① SBA destroys personal information without delay when it is no longer needed, such as when the retention period expires or the purpose of processing is achieved.
② The procedure and method of destruction are as follows:
- Procedure : Access logs whose retention period has expired are destroyed with the approval of the Privacy Officer.
- Method : Information in electronic form is deleted using technical methods that make it impossible to restore.
Article 7 (Security Measures)
SBA takes the following measures to ensure the security of personal information.
- Administrative : Establishment and implementation of an internal management plan, minimization of administrator accounts
- Technical : Access control for the admin page, encrypted storage of passwords, SSL, firewall operation
- Physical : Access control to the server location (IDC)
Article 8 (Installation, Operation and Refusal of Automatic Collection Devices)
① The Website uses cookies for user convenience.
② A cookie is a small amount of information sent by the website server to the user's browser and stored on the user's PC or mobile device.
- Purpose of cookies : Session maintenance, keeping the popup "Don't show today" setting
- How to refuse cookies : You can block or delete cookies through your browser settings.
- Chrome (PC) : '⋮' at the top right > Settings > Privacy and security > Third-party cookies / Delete browsing data
- Microsoft Edge (PC) : '···' at the top right > Settings > Cookies and site permissions > Manage and delete cookies and site data
- Chrome (Mobile) : '⋮' at the top right > Settings > Site settings > Third-party cookies
- Safari (iPhone) : Settings > Apps > Safari > Advanced > Block All Cookies
- Samsung Internet : Menu > Settings > Privacy > turn off Allow cookies
- If you refuse cookies, some features such as keeping popup settings may not work properly.
③ The Website does not collect or use behavioral information for targeted advertising.
Article 9 (Privacy Officer)
① SBA designates the following Privacy Officer and staff to oversee the processing of personal information and to handle complaints and remedies of data subjects.
| Role |
Department |
Name |
Contact |
Divisional
Privacy Officer |
Beauty Industry Division |
Kim Sung-min |
+82-2-6951-2109 |
| Privacy Manager |
Beauty Business Development Team |
Kim Ki-beom |
+82-2-6951-2309 |
② Data subjects may contact the Privacy Officer and the department in charge regarding any inquiries, complaints, or remedies related to personal information protection arising from the use of the Website. SBA will respond without delay.
Article 10 (Request for Access)
Data subjects may submit a request for access under Article 35 of the Act, and exercise other rights under Article 5, to the following department.
- Department : Beauty Business Development Team
- Contact Person : Kim Ki-beom
- Phone : +82-2-6951-2309
Requests for access may also be submitted through the Personal Information Portal (www.privacy.go.kr, Korean only).
Article 11 (Remedies for Infringement)
Data subjects may apply for dispute resolution or consultation to the following organizations for remedies regarding infringement of personal information.
- Personal Information Dispute Mediation Committee : 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center (KISA) : 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office : 1301 (www.spo.go.kr)
- Korean National Police Agency : 182 (ecrm.police.go.kr)
Article 12 (Changes to This Privacy Policy)
This Privacy Policy is effective from November 5, 2026.
