Privacy Policy
Effective Date: October 29, 2026
Wave Company Co., Ltd. (the "Company," "we," "us," or "our"), a company incorporated and headquartered in the Republic of Korea, processes personal information in accordance with the Personal Information Protection Act of the Republic of Korea ("PIPA") and related laws. This Privacy Policy applies to the website wavecompany.net and to inquiries made to us through it.
Company: Wave Company Co., Ltd. (Business Registration No. 215-87-44601)
Address: #716 DMC Hi-Tech Industry Center, 330 Seongam-ro, Mapo-gu, Seoul 03920, Republic of Korea
1. Personal Information We Process and Why
(1) Inquiries, quote and sample requests
- Items: name, company name, job title, email, phone number, inquiry details
- Purpose: responding to inquiries, quotes and sample requests, and related communication
(2) Business newsletters and event invitations
- Items: name, email, company name
- Purpose: sending company news and event invitations. These are sent with your consent, which you may withdraw at any time; every email includes an unsubscribe link.
(3) Automatically collected information
- Items: IP address, browser type, device type, pages visited, visit date and time, and the website usage records described in Section 7
- Purpose: operating, securing and improving the website, and, only if you consent, measuring our advertising
2. Retention Period
We destroy personal information without delay once the purpose of processing has been achieved, unless the law requires us to keep it.
- Inquiry records: until the inquiry is handled and related communication ends
- Newsletter and invitation subscribers: until you unsubscribe
- Website usage records by our own analytics tool: up to 1 year
3. Provision to Third Parties
We do not sell personal information and do not provide it to third parties, except where you have consented or where the law requires it.
If you accept advertising cookies, Meta Platforms, Inc. (Meta Pixel) and LinkedIn (LinkedIn Insight Tag) receive website usage information (cookie ID, pages visited, device information and IP address) to measure and improve our advertising. They process it under their own privacy policies.
4. Entrustment of Processing
We entrust the following work to service providers:
- Wix.com Ltd.: website hosting, forms and email delivery
- Usercentrics GmbH: cookie consent management (stores your consent choice)
- Google LLC: website statistics (Google Analytics)
- Hotjar Ltd.: website usage analysis (heatmaps and session recordings)
5. Transfer of Personal Information Overseas
Some of the entrusted work above involves storing or processing personal information outside Korea.
(1) Wix.com Ltd. (privacy@wix.com)
- Country: Israel, the United States, Ireland and other countries where Wix's data centers are located (see Wix's privacy policy)
- Items: inquiry and newsletter information, access records
- When and how: transmitted over the internet each time you submit a form or visit the website
- Purpose and retention: hosting, forms and email delivery / until the end of our service contract or until the retention period in Section 2 ends
(2) Google LLC (https://support.google.com/policies/contact/general_privacy_form)
- Country: United States
- Items: website usage records (cookie ID, pages visited, device information)
- When and how: transmitted over the internet each time you visit the website
- Purpose and retention: website statistics / according to our Google Analytics data retention setting (up to 14 months)
(3) Hotjar Ltd. (dpo@hotjar.com)
- Country: Malta (servers in Ireland, EU)
- Items: website usage records (clicks, scrolls, mouse movements, device information, IP address, country)
- When and how: transmitted over the internet each time you visit the website, only if you accept analytics cookies
- Purpose and retention: website usage analysis / up to 1 year
(4) Usercentrics GmbH (datenschutz@usercentrics.com)
- Country: Germany
- Items: your consent choice, a random ID, date and time, browser information
- When and how: transmitted over the internet when the cookie banner loads and when you make a choice
- Purpose and retention: recording consent / as long as needed to prove consent
(5) Meta Platforms, Inc. and LinkedIn (LinkedIn Ireland Unlimited Company and LinkedIn Corporation)
- Country: United States and Ireland
- Items: cookie ID, pages visited, device information, IP address
- When and how: transmitted over the internet each time you visit the website, only if you accept advertising cookies
- Purpose and retention: advertising measurement / under each company's privacy policy
If you do not want this transfer, you can refuse it by not submitting forms and by blocking cookies as described in Section 7. In that case, we may not be able to respond to your inquiry or send you newsletters.
6. Destruction Procedures and Methods
When the retention period ends or the purpose has been achieved, we destroy electronic files using technical methods that prevent recovery, and destroy paper records by shredding or incineration.
7. Automatic Collection Devices (Cookies and Analytics) and How to Refuse Them
(1) Our own visitor analytics tool
- It uses browser storage (local and session storage) to record how you interact with the website, such as clicks, taps, scrolls and mouse movements, along with device type, browser, screen size and a random visitor ID.
- We do not use this information to identify you by name. Text you type into forms, long numbers such as card or phone numbers, and email addresses are masked before they are recorded. The recording database of our own tool does not store IP addresses; IP addresses appear only in ordinary web server and Wix access logs.
- The records are stored on servers managed by the Company in Korea and kept for up to 1 year.
(2) Google Analytics and Hotjar use cookies to measure and analyze visits. Meta Pixel and LinkedIn Insight Tag use cookies to measure advertising.
(3) Wix and Usercentrics also set cookies necessary for the website to function, for security and to remember your consent choice.
(4) Cookie banner: you can accept or decline analytics and advertising cookies in the cookie banner, and change your choice at any time using the privacy button at the bottom of the page.
(5) How to refuse: you can block cookies and delete site data in your browser (Chrome: Settings > Privacy and security > Delete browsing data; Edge, Safari and Firefox have equivalent settings). To opt out of Google Analytics, use the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout). If your browser sends a Do Not Track or Global Privacy Control signal, our own tool does not record your visit. Blocking cookies does not limit your use of this website.
8. Your Rights and How to Exercise Them
You may request access to, correction or deletion of, or suspension of processing of your personal information, and you may withdraw your consent at any time. Please contact the Privacy Officer in Section 10 by email or phone. You may also do this through a legal representative or a person you have authorized. We will respond without delay, within 10 days. To ask us to delete your website usage records, please tell us the date, time and device of your visit; because the recording database of our own tool does not store IP addresses, we may not always be able to locate a specific visit.
9. Security Measures
We take the measures required by PIPA, including limiting access to personal information to authorized staff, encrypted transmission (HTTPS), access control on the systems that store personal information, and restricting access to the analytics viewer to authorized staff.
10. Privacy Officer
- Privacy Officer: Diana Choi
- Department handling requests: Operations Team (Lee Dong-su)
- Phone: +82-70-4044-7333
- Email: contact-global@wavecompany.net
11. Children
This website is intended for businesses and is not directed at children under 14. We do not knowingly collect personal information from children under 14.
12. Remedies
If you need to report or seek advice about a privacy infringement, you may contact:
- Personal Information Infringement Report Center (KISA): privacy.kisa.or.kr / +82-118
- Personal Information Dispute Mediation Committee: www.kopico.go.kr / +82-1833-6972
- Supreme Prosecutors' Office Cybercrime Investigation: www.spo.go.kr / 1301
- Korean National Police Agency Cyber Bureau: ecrm.police.go.kr / 182
13. Governing Law
This Privacy Policy is governed by the laws of the Republic of Korea. Residents of other countries may also have rights under the mandatory laws of their country of residence. Where the GDPR applies to you, you may also lodge a complaint with your local supervisory authority.
14. Changes to This Policy
We will announce any changes to this Privacy Policy on this page at least 7 days before they take effect (30 days for material changes). Previous versions are available on request.
- Effective Date: October 29, 2026 (first version)