1. How long we retain information
Project records — briefs, design concepts, signed-off drawings, production schedules — are retained for the duration of the engagement and for seven years afterwards, in line with commercial record-keeping expectations under Korean enterprise practice. Contact form submissions are retained for two years. Marketing subscribers remain on file until they unsubscribe, after which their record is deleted within thirty business days.
2. How we use information
We use information you provide to deliver the work you have engaged us for, to respond to enquiries, to send invoices and project communications, and — where you have asked — to send periodic updates about studio work. We do not sell, rent, or barter personal information to third parties. We do not run behavioural advertising and do not combine data sets across clients.
3. Scope of this notice
This Data Protection notice covers all personal information collected through browse-coreportal.one, through direct correspondence with ShelfForge Studio personnel, and through our project workspace tools when used by clients and partners. It does not cover sites we link to from our content; their privacy practices are governed by their own notices.
4. Information we collect
We collect contact details (name, organisation, email, optional phone), correspondence content, and basic technical data about your visit (browser type, language, anonymised page paths). For active engagements we additionally collect project context — brand, retail channel, campaign timeline. We collect only what we need to do the work and answer the question; we do not log keystrokes, mouse movement, or session replays.
5. Contacting us about your data
Direct your data-related correspondence to hello@browse-coreportal.one. We aim to acknowledge inbound requests within five business days and to substantively respond within thirty days, in line with PIPA service standards. For sensitive enquiries, please mark the email subject with "DATA REQUEST" so it is routed to our data lead.
6. Your rights
Under Korean law you have the right to be informed of how your personal information is processed, to access and correct your records, to request deletion subject to lawful retention obligations, to restrict or object to certain forms of processing, and to lodge a complaint with the Personal Information Protection Commission. Exercising these rights is free of charge except where requests are manifestly unfounded or excessive.
7. Third-party processors
We use a small number of vetted third-party services for hosting, email, and project collaboration. Each provider is contracted to act only on our written instructions, to apply appropriate quality standards, and to assist with rights requests where applicable. International transfers occur only where lawful safeguards are in place, including standard contractual clauses where required.
8. Security and changes to this notice
Personal information is held under technical safeguards including encryption in transit and in storage, role-based access for studio personnel, and quarterly access reviews. We update this notice when our practices change in a way that materially affects you; the date at the top reflects the most recent revision and prior versions are archived internally.