Brother Hyeok Ministries Privacy Policy
브라더혁 미니스트리 개인정보처리방침
Brother Hyeok Ministries (hereinafter referred to as the “Ministry”) values your personal data and complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws and regulations. For residents of the European Union, we also comply with the General Data Protection Regulation (GDPR) and other applicable international data protection standards.
The Ministry conducts its activities globally and respects applicable data protection laws in the countries where our ministry activities are directed, complying with such laws to the extent applicable.
This Privacy Policy explains how we collect, use, retain, and dispose of personal data, as well as your rights regarding your personal data.
1. Categories of Personal Data Collected
① For Donations and Partner Registration
- Full name
- Email address
- Contact information
- Donation amount and donation history
- Payment method (card, bank transfer, etc.)
- Bank information required for automatic transfers
※ We do not collect internet banking passwords, card CVV numbers, authentication credentials, or similar sensitive financial information.
② For Conference/Event Registration
- Name
- Contact information
- Email address
- Other information provided in the registration form
③ Automatically Collected Information
- IP address
- Access logs
- Browser and device information
- Cookie data
- Visit history
Analytics tools such as Google Analytics may be used.
2. Purpose of Collection and Use of Personal Data
Personal data is collected and used for the following purposes:
- Processing and managing donations
- Accounting and tax compliance
- Managing partners (regular supporters)
- Sending ministry news and newsletters (with consent)
- Operating conferences and events
- Responding to inquiries
- Enhancing security and improving service quality
3. Photography and Media Production Notice
Photography and video recording may take place during the Ministry’s conferences and events.
Recorded photos and videos may be used for the following purposes:
- Archiving events and publishing video recordings
- Producing promotional materials
- Multilingual translation and international distribution
Consent for photography and use of media content is obtained separately during the event registration process.
Such content may be publicly distributed worldwide. Accordingly, personal data (including image and voice data) may be transferred internationally.
4. Retention and Disposal of Personal Data
① Payment Information
Card payment information is securely managed by Stripe in encrypted tokenized form.
The Ministry does not store card numbers, CVV codes, or similar payment details.
Stripe complies with the international security standard PCI-DSS.
② Retention Period
- Donation and accounting records: Retained for the period required by applicable laws
- Inquiry records: Up to six (6) months after resolution
- Newsletter subscription information: Until withdrawal of consent
③ Disposal Method
- Electronic files: Permanently deleted using irrecoverable technical methods
- Paper documents: Shredded or incinerated
5. Third-Party Provision and Processing
Personal data may be processed by the following service providers:
- Stripe (payment processing)
- Email service providers
- IT maintenance providers
- Accounting and tax advisory institutions
The Ministry does not sell personal data.
6. International Data Transfers
Certain service providers, including Stripe and Google Analytics, may operate servers located outside the Republic of Korea.
Accordingly, personal data may be transferred outside of Korea. The Ministry implements appropriate safeguards to protect personal data in such cases.
7. Security Measures
The Ministry implements the following safeguards:
- SSL-encrypted communication
- PCI-DSS compliant payment systems
- Internal access control measures
- Donation data accessible only to a minimal number of authorized finance team members
- Ongoing security education and training
8. Data Subject Rights
You may exercise the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to request suspension of processing
- Right to restrict processing
- Right to data portability (where GDPR applies)
- Right to withdraw consent
Requests may be submitted to:
9. Governing Law
This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of Korea.
Any disputes arising in connection with this Policy shall be subject to the jurisdiction of the courts of the Republic of Korea.
10. Changes to This Policy
This Privacy Policy may be amended.
General changes will be announced at least seven (7) days in advance.
Material changes will be announced at least thirty (30) days in advance.