B the B (btheb.sba.kr, the "Website"), operated by the Seoul Business Agency ("SBA"), establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of Korea to protect the personal information of data subjects and to handle related complaints promptly and smoothly.
※ The Website does not offer membership registration, inquiry forms, or any other feature through which users directly enter personal information.
※ This Privacy Policy applies only to the Website. The privacy policy of the SBA main website (sba.seoul.kr) is available on that website.
※ This English version is provided for reference. In case of any discrepancy, the Korean version shall prevail.
① The Website does not directly collect personal information from users through membership registration, inquiry forms, or similar features.
② However, information automatically generated while using the Website is processed for the following purposes only:
① The Website does not collect personal information entered directly by users.
② The following information is automatically generated and processed while using the Website.
| Legal Basis | Purpose | Items | Retention Period |
|---|---|---|---|
| PIPA Article 15(1)6 (Legitimate interest) |
Website operation and security, visitor statistics |
IP address, access time, referrer, browser information |
1 year |
| PIPA Article 15(1)6 (Legitimate interest) |
Session maintenance, popup display settings |
Cookies | Until the browser is closed or the set period (up to 1 day) expires |
③ If an investigation or inquiry is in progress due to a violation of relevant laws, information is retained until its conclusion.
SBA does not provide personal information to third parties, except as permitted under Articles 17 and 18 of the Personal Information Protection Act, such as special provisions of law.
① SBA outsources the following personal information processing tasks for the smooth operation of the Website.
| Contractor | Outsourced Task | Period |
|---|---|---|
| iLab Media Co., Ltd. | Management, operation and maintenance of the B the B Website and SNS |
Apr. 1, 2026 ~ Feb. 28, 2027 |
② In accordance with Article 26(6) of the Act, the contractor re-outsources the following tasks with SBA's consent.
| Contractor | Sub-contractor | Re-outsourced Task | Period |
|---|---|---|---|
| iLab Media Co., Ltd. | Mir Web Design | Server management, operation and maintenance of the B the B Website |
Within the outsourcing period (Apr. 1, 2026 ~ Feb. 28, 2027) |
③ When concluding an outsourcing contract, SBA specifies in writing, in accordance with Article 26 of the Act, the prohibition of processing for purposes other than the outsourced task, technical and administrative safeguards, restrictions on re-outsourcing, management and supervision of the contractor, and liability for damages, and supervises whether the contractor and sub-contractor process personal information safely.
④ Any change in the outsourced task, contractor or sub-contractor will be disclosed through this Privacy Policy without delay.
① Data subjects may at any time exercise their rights to request access, correction, deletion, or suspension of processing of their personal information.
② These rights may be exercised in writing, by e-mail, or by fax in accordance with Article 41(1) of the Enforcement Decree of the Act, and SBA will take action without delay.
③ These rights may also be exercised through a legal representative or an authorized agent. In this case, a power of attorney in the form prescribed by the relevant public notice must be submitted.
④ Requests for access or suspension of processing may be restricted under Article 35(4) and Article 37(2) of the Act.
⑤ SBA verifies whether the person exercising the rights is the data subject or a legitimate representative.
① SBA destroys personal information without delay when it is no longer needed, such as when the retention period expires or the purpose of processing is achieved.
② The procedure and method of destruction are as follows:
SBA takes the following measures to ensure the security of personal information.
① The Website uses cookies for user convenience.
② A cookie is a small amount of information sent by the website server to the user's browser and stored on the user's PC or mobile device.
③ The Website does not collect or use behavioral information for targeted advertising.
① SBA designates the following Privacy Officer and staff to oversee the processing of personal information and to handle complaints and remedies of data subjects.
| Role | Department | Name | Contact |
|---|---|---|---|
| Divisional Privacy Officer |
Beauty Industry Division | Kim Sung-min | +82-2-6951-2109 |
| Privacy Manager | Beauty Business Development Team | Kim Ki-beom | +82-2-6951-2309 |
② Data subjects may contact the Privacy Officer and the department in charge regarding any inquiries, complaints, or remedies related to personal information protection arising from the use of the Website. SBA will respond without delay.
Data subjects may submit a request for access under Article 35 of the Act, and exercise other rights under Article 5, to the following department.
Requests for access may also be submitted through the Personal Information Portal (www.privacy.go.kr, Korean only).
Data subjects may apply for dispute resolution or consultation to the following organizations for remedies regarding infringement of personal information.
This Privacy Policy is effective from November 5, 2026.