This Privacy Policy explains how Koreva World Beauty Academy (Gwangju, Gyeonggi-do, Republic of Korea) collects, protects, processes, and utilizes your personal information when you enroll in our masterclasses, visit our campus, or access our digital student portal.
Effective Date: August 31, 2026•Compliance: Korean PIPA & EU GDPR
1Introduction & Academy Scope
Koreva World Beauty Academy ("Koreva", "we", "our", or "us") operates international clinical aesthetic masterclasses, Korean skincare device workshops, accommodation facilities in Gwangju, Gyeonggi-do, South Korea, and the digital online learning portal.
We are fully committed to protecting your privacy in strict compliance with the Republic of Korea's Personal Information Protection Act (PIPA), the General Data Protection Regulation (EU GDPR) for international participants, and applicable cross-border education data privacy standards.
2Information We Collect
We collect personal information in several operational categories:
Student Enrollment & Identity
Full legal name, passport information, nationality, date of birth, contact email, WhatsApp/KakaoTalk phone number, and student profile photo for official international certification.
Billing & Payment Data
Course tuition transactions, payment receipts, and billing addresses. Credit card and digital wallet transactions are processed via our authorized Merchant of Record (Paddle.com) and encrypted tier-1 payment partners, and are never stored on our servers.
Clinical Performance & Progress
Course progress, video lecture viewing timestamps, practical assessment scores, clinical protocol completion records, and instructor evaluations.
Accommodation & Travel
Arrival flight dates, South Korea entry visa confirmation documents, room assignments at our Gwangju accommodation facility, and emergency contact details.
3Purpose & Legal Basis for Processing
We process your data strictly under the following lawful legal bases:
Contractual Obligation: To register your enrollment, provide curriculum materials, issue international diplomas, and coordinate your Korea stay.
Legal Compliance: To satisfy South Korean educational reporting standards, tax accounting obligations, and visa verification guidelines.
Legitimate Interest: To maintain secure digital streaming infrastructure, improve clinical teaching methodologies, and safeguard academy intellectual property.
4Clinical Practice & Media Consent
Hands-on practical training involves live model demonstrations, device operation, and clinical treatments. Photography and high-definition instructional video recordings may be captured in academy training rooms for pedagogical review and student portfolios.
• Student Media Opt-Out: If you prefer not to appear in academy promotional showcases or public social media highlights, you may submit a written notice to sedax@naver.com prior to the start of your training session.
5Information Sharing & Third Parties
We do not sell, rent, or trade your personal data. Your information is only shared with verified service providers necessary to deliver educational services:
Payment Processor & Merchant of Record: Paddle.com (along with card networks and PayPal) for secure PCI-DSS Level 1 compliant transactions.
Cloud & Media Infrastructure: Dedicated secure VPS streaming servers for video delivery and encrypted database backups.
Certification Authorities: South Korean Aesthetic Partner Associations for accredited certification verification.
6International Cross-Border Transfers
As an international beauty academy based in South Korea, student data submitted from around the world is securely transferred to and stored on servers in South Korea. All cross-border transfers implement Standard Contractual Clauses (SCCs) and advanced TLS 1.3 encryption.
7Data Retention & Archival Policy
Certification and graduation records are retained permanently in our academic registry so that employers and international verification boards can validate credentials. Account credentials and communication logs are retained for 5 years following course completion, after which they are securely sanitized.
8Your Legal Rights & Data Controls
You have the legal right under Korean PIPA and GDPR to:
Right to Access: Request a full copy of your personal data and enrollment records.
Right to Rectification: Correct any inaccurate personal details or passport numbers.
Right to Erasure: Request deletion of your online portal account and marketing data.
Right to Restrict: Limit processing of specific promotional communications.
9Technical & Operational Security
We implement industry-standard technical safeguards, including HTTPS AES-256 encryption in transit, strict role-based access control (RBAC) for academy staff, and isolated token-authenticated API endpoints.
10Cookies & Tracking Technologies
Our portal utilizes essential session cookies to remember authentication tokens and course playback positions. We do not use third-party intrusive advertising tracking networks. You can configure your browser to reject cookies, though some student portal features may be limited.
11Data Protection Officer & Contact
If you have questions regarding this Privacy Policy or wish to exercise your legal data rights, please contact our Academy Privacy & Data Protection Officer:
Koreva World Beauty Academy — Privacy Office
Gwangju, Gyeonggi-do, Republic of Korea (Near Seoul)
