Privacy Policy

Effective date: 2026-07-29

FindHouse Korea (hereinafter the "Company") establishes and discloses the following Privacy Policy in accordance with Article 30 of the Personal Information Protection Act, in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes, and the personal information being processed shall not be used for any purpose other than the following.

Membership registration and management: Confirming the intent to register, identifying the individual, maintaining and managing membership status, preventing fraudulent use, and handling grievances
Provision of property matching services: Providing property information suited to the user's desired conditions (residency status, language, region, budget, etc.) and connecting users with partner brokerage offices
Provision of daily necessities sales services: Processing product orders and delivery, payment, and withdrawal of subscriptions
Multilingual guidance and interpretation support: Supporting communication between users and partner brokerage offices
Grievance handling: Verifying the identity of the complainant, confirming the details of the complaint, and notifying the results of processing

Article 2 (Processing and Retention Period of Personal Information)

The Company processes and retains personal information within the retention period prescribed by law or the period consented to by the data subject.

Purpose of Processing	Retention Period
Membership registration and management	Until membership withdrawal (however, if an investigation or inquiry is underway due to a violation of relevant laws, until the conclusion of such proceedings)
Property matching-related information (residency status, properties of interest, etc.)	1 year after termination of the matching service
Transaction records related to daily necessities sales	In accordance with the Act on the Consumer Protection in Electronic Commerce, Etc.: records of contracts and withdrawal of subscriptions for 5 years, records of consumer complaints and dispute handling for 3 years, and records of labeling and advertising for 6 months
Information provided to partner brokerage offices (information provided for the progress of a contract)	1 year after completion of the contract or termination of matching (see Article 3 regarding provision to third parties)

Article 3 (Provision of Personal Information to Third Parties)

The Company processes the personal information of data subjects only within the scope of the purposes specified in Article 1, and in principle does not provide it to third parties without the consent of the data subject.
However, when a user requests an inquiry regarding a specific property, the Company may provide the following information to the partner brokerage office that posted the property. In such cases, the Company shall notify the user in advance of the purpose of provision, the items to be provided, and the retention and use period, and obtain the user's consent.
- Name (as shown in passport), nationality, contact information, desired conditions (move-in date, budget, etc.), and residency-related information (current residency status, status of stay, etc.)
The partner brokerage office may not use the personal information provided for any purpose other than the progress of the relevant property contract, and the Company specifies matters concerning this in its partnership agreement with the partner brokerage office.
Exceptions apply where there are special provisions in the law, or where an investigative agency requests the information for investigative purposes in accordance with the procedures and methods prescribed by law, and in other cases falling under Article 17 of the Personal Information Protection Act.

Article 4 (Entrustment of Personal Information Processing)

For the smooth processing of personal information tasks, the Company may entrust personal information processing tasks as follows.

Trustee	Details of Entrusted Task
Electronic payment gateway provider (PG company)	Payment processing
Cloud server operator	Data storage and system operation

When concluding an entrustment agreement, the Company stipulates the matters necessary to ensure that personal information is managed safely and supervises and oversees the trustee.

Article 5 (Rights and Obligations of Data Subjects and Methods of Exercising Them)

The data subject may exercise the following rights against the Company at any time.
- Request to access personal information
- Request to correct information in case of errors, etc.
- Request for deletion
- Request to suspend processing
The exercise of rights may be made to the Company in writing, by telephone, by email, etc., and the Company shall take action without delay.
The data subject may exercise their rights through a legal representative or an authorized agent.

Article 6 (Personal Information Items Processed)

The Company collects personal information in stages according to the stage of service use, as follows. You have the right to refuse to provide the required items; however, in this case, the use of the service may be restricted.

(1) Upon membership registration

Required: Name (as shown in passport), nationality, email or alternative means of contact (KakaoTalk ID, WhatsApp, etc.), password (or social login information)

(2) Onboarding (start of service use) stage

Optional: Whether currently residing in Korea, preferred language, university/region of interest, status of stay

(3) Property inquiry stage

Optional: Affiliated university, expected date of entry, desired budget, lifestyle preferences (pets, smoking status, etc.), and referral source

(4) Actual contract progress stage (only where applicable, collected to a minimum)

Passport information, visa-related information, etc. are collected only at the point when the actual contract progress is confirmed, and are destroyed without delay after the purpose is achieved.
Payment information (card number, etc.) is not directly collected or stored by the Company, but is processed through the PG company.

(5) Automatically collected information

In the course of service use, information such as IP address, cookies, access logs, and service usage records may be automatically generated and collected.

Article 7 (Destruction of Personal Information)

When personal information becomes unnecessary due to the expiration of the retention period, the achievement of the processing purpose, etc., the Company destroys the relevant personal information without delay.
Personal information stored in the form of electronic files is deleted using a technical method that renders the records irreproducible, and personal information recorded on paper documents is destroyed by shredding or incineration.

Article 8 (Measures to Ensure the Safety of Personal Information)

The Company takes the following measures to ensure the safety of personal information.

Administrative measures: Establishment and implementation of an internal management plan, minimization of personnel in charge, and training
Technical measures: Management of access rights to the personal information processing system, installation of an access control system, and encryption of unique identifying information, etc.
Physical measures: Access control of computerized data in which personal information is stored

Article 9 (Cross-Border Transfer of Personal Information)

Where the payment gateway providers, cloud servers, etc. used by the Company are located overseas, the Company shall notify matters concerning the cross-border transfer in advance and obtain consent in accordance with relevant laws.

Article 10 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)

The Company may use cookies to provide customized services to users.
Users may refuse the storage of cookies through their web browser settings, in which case there may be some restrictions on the use of the service.

Article 11 (Personal Information Protection Officer)

Category	Details
Name	(to be announced)
Position	Personal Information Protection Officer
Contact	(to be announced)

Data subjects may contact the above officer regarding inquiries, complaint handling, and damage relief related to personal information that arise during the use of the service.

Article 12 (Remedies for Infringement of Rights and Interests)

Data subjects may inquire with the following organizations for damage relief and consultation regarding personal information infringement.

Personal Information Infringement Report Center (Korea Internet & Security Agency (KISA)) — 118 without area code, privacy.kisa.or.kr
Personal Information Dispute Mediation Committee (KOPICO) — 1833-6972, www.kopico.go.kr
Supreme Prosecutors' Office Cyber Crime Investigation Unit — 02-3480-3573
National Police Agency Cyber Bureau — 182 without area code

Addendum

This Privacy Policy is effective from July 29, 2026.