Privacy Policy

1. Controller and contact

Personal information collected through the reservation form is processed by the Nudge Spoon operator identified in the site environment (currently shown as the operating entity name configured for this preview). For privacy inquiries and requests involving access, correction, deletion, or withdrawal of consent, contact haesangcorp@gmail.com.

2. Personal information collected

When you submit a reservation request, we collect: email address; selected spoon configuration (motif, bowl finish, handle finish, and Lotus engraving accent when applicable); language preference; consent notice version; and the server-side consent timestamp.

To limit abuse of the reservation endpoint, the server also stores SHA-256 hashes of the connecting IP address and a truncated User-Agent string. Raw IP addresses and full User-Agent strings are not stored in the reservation database by this application.

3. Purpose of processing

We process the information to receive and manage reservation requests, prevent abusive submissions, and send updates about your reservation request and related launch information for the selected configuration.

This website does not currently send automated marketing or promotional purchase emails. If promotional email campaigns are introduced later, a separate optional opt-in and a working unsubscribe path will be required before those messages are sent.

4. Retention and deletion

Reservation records are retained for up to 24 months from submission, or until you ask us to delete them, or until they are no longer needed for the stated purposes—whichever comes first.

Deletion requests sent to haesangcorp@gmail.com are handled by removing matching reservation rows through the operator workflow. Rate-limit hash entries may be overwritten as windows expire.

5. Entrusted processing and hosting

The website is deployed on Vercel. Reservation records are stored in a PostgreSQL database configured for this project. Exact production database hosting and any additional email delivery providers remain subject to owner confirmation before production promotion.

Infrastructure providers may process technical logs (including connection metadata) under their own terms. Claims that only hashed network information exists outside the application database require confirmation of each provider’s logging settings.

6. Overseas transfer

Depending on the final hosting and database regions, personal information may be processed on servers outside the Republic of Korea. The specific countries, recipients, and transfer safeguards will be confirmed and disclosed before production use.

7. Cookies and analytics

This marketing site does not currently load a third-party analytics or advertising pixel for the reservation flow. Essential hosting and security cookies or headers may be set by the platform. If analytics are added later, this notice will be updated.

8. Your rights

You may request access, correction, deletion, or withdrawal of consent for reservation data by writing to haesangcorp@gmail.com. You may also decline consent; without consent a reservation request cannot be submitted.

You may report privacy concerns to the Personal Information Protection Commission (PIPC) and related Korean authorities where applicable.

9. Changes to this notice

When this notice changes in a material way, the updated version and date will be posted on this page. New reservation submissions store the consent notice version shown at the time of consent.