Information We Collect

Personal Information You Provide

When you sign up for our working capital analysis courses or contact us, we collect information you directly share with us. This typically includes your name, email address, phone number, and company details if you're enrolling through your workplace. We also collect payment information when you purchase our services, though this is processed securely through third-party payment processors.

Information Collected Automatically

Like most websites, we automatically collect certain technical information when you visit brainshinemark.com. This includes your IP address, browser type, device information, and how you interact with our site. We use this data to understand how people use our platform and to fix technical issues that might affect your experience.

• Browser and device characteristics
• Time spent on different pages
• Links clicked and navigation patterns
• Referring website information
• General geographic location based on IP address

Learning Activity Data

If you enroll in our courses, we track your progress through the material. This helps us understand which sections work well and which might need improvement. We also use this data to personalize your learning experience and provide you with relevant recommendations for additional courses.

How We Use Your Information

We use the information we collect for several purposes, all aimed at providing you with quality educational services and improving our platform over time.

We occasionally send emails about new courses or updates to our platform. You can opt out of these marketing communications at any time, though we'll still need to send you essential information about courses you've enrolled in.

Data Sharing and Disclosure

We share your information only in specific situations and always with care. Here's when and why we might share your data with others.

Service Providers

We work with trusted third-party companies that help us run our business. This includes payment processors, email service providers, and hosting companies. These partners can access your information only to perform specific tasks on our behalf and are required to protect it.

Legal Requirements

We may disclose your information if required by law or if we believe such action is necessary to comply with legal processes, protect our rights, or ensure the safety of our users. Under South Korean law, we're required to cooperate with government agencies when they present valid legal requests.

Business Transfers

If brainshinemark is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We'll notify you before your information becomes subject to a different privacy policy.

Your Rights and Choices

You have several rights regarding your personal information. We respect these rights and have processes in place to help you exercise them.

• Access: You can request a copy of the personal data we hold about you
• Correction: If your information is inaccurate or incomplete, you can ask us to update it
• Deletion: You can request that we delete your personal information, subject to certain legal exceptions
• Data Portability: You can request your data in a structured, commonly used format
• Objection: You can object to certain types of data processing, including marketing communications
• Restriction: You can request that we limit how we use your information in certain circumstances

Under South Korean law, you also have the right to file a complaint with the Personal Information Protection Commission if you're unhappy with how we've handled your data.

Data Security

We use industry-standard security measures to protect your information from unauthorized access, disclosure, or destruction. Our systems are regularly updated and monitored to ensure they meet current security standards.

Technical Safeguards

All data transmitted between your browser and our servers is encrypted using TLS technology. We store your information on secure servers with restricted access, and we regularly back up data to prevent loss. Payment information is processed through PCI-compliant payment gateways and never stored on our servers.

Organizational Measures

Access to personal data is limited to employees and contractors who need it to perform their jobs. All staff members receive privacy training and are bound by confidentiality agreements. We conduct regular security audits to identify and address potential vulnerabilities.

While we take reasonable precautions, no method of transmission over the internet is completely secure. We can't guarantee absolute security, but we work hard to protect your information using all available means.

Data Retention

We keep your information only as long as necessary to provide our services and comply with legal obligations. The retention period varies depending on the type of data and why we collected it.

• Account information: Retained while your account is active, plus 3 years after closure
• Course enrollment records: Kept for 5 years to maintain academic records
• Financial transaction data: Retained for 7 years as required by tax law
• Marketing communications data: Deleted within 1 year after you unsubscribe
• Website analytics data: Aggregated and anonymized after 2 years

When we no longer need your information, we securely delete it or anonymize it so it can no longer identify you. Some information may be retained in backup systems for up to 90 days before permanent deletion.

International Data Transfers

Our primary operations are based in South Korea, but some of our service providers operate in other countries. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information.

We use standard contractual clauses approved by relevant data protection authorities and work only with providers who demonstrate strong privacy practices. If you're located outside South Korea and use our services, you acknowledge that your information may be transferred to and processed in South Korea.

Children's Privacy

Our services are designed for adults in professional settings. We don't knowingly collect information from anyone under 14 years old. If you're a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We'll delete such information from our systems as quickly as possible.

Changes to This Policy

We update this privacy policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email or through a prominent notice on our website. The "Last Updated" date at the top shows when we last revised this policy.

We encourage you to review this policy periodically to stay informed about how we're protecting your information. Continued use of our services after changes become effective means you accept the updated policy.