Privacy Policy

1. Introduction

Epiture (operating under Pluxcon Co., Ltd.) is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our IP Transit, Colocation, and System Integration services.

We comply with the Korean Personal Information Protection Act (PIPA) and other applicable data protection laws. By using our services, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Account Information

When you create an account or order services, we collect:

• Full name and contact information (email address, phone number)
• Company name and business registration number
• Billing address and shipping address
• Job title and department
• Account credentials (username and encrypted password)

2.2 Payment Information

For billing and payment processing, we collect:

• Credit card information (processed by third-party payment processors)
• Bank account details for wire transfers
• Billing history and transaction records
• Tax identification numbers as required by law

2.3 Technical Information

We automatically collect technical data including:

• IP addresses and network routing information
• Device information and browser type
• Network traffic logs and bandwidth usage
• Service access logs and timestamps
• BGP routing announcements and peering data

2.4 Facility Access Information

For colocation customers, we collect:

• Photo identification for facility access
• Access logs and entry/exit timestamps
• Video surveillance footage in common areas
• Authorized personnel lists

2.5 Communications

We maintain records of communications between you and our support, sales, and operations teams, including emails, support tickets, and phone call logs.

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Provision

• Creating and managing your account
• Provisioning and maintaining services
• Processing service orders and changes
• Providing technical support
• Monitoring network performance and uptime

3.2 Billing and Payment

• Processing payments and issuing invoices
• Managing subscriptions and renewals
• Collecting overdue payments
• Complying with tax and accounting requirements

3.3 Security and Fraud Prevention

• Detecting and preventing abuse and security threats
• Investigating violations of our Acceptable Use Policy
• Protecting our network and infrastructure
• Verifying identity and preventing unauthorized access

3.4 Service Improvement

• Analyzing service usage patterns
• Improving network performance and reliability
• Developing new features and services
• Conducting customer satisfaction surveys

3.5 Legal Compliance

• Complying with legal obligations and regulations
• Responding to lawful requests from authorities
• Enforcing our terms and policies
• Protecting our legal rights

4. Legal Basis for Processing

Under Korean PIPA, we process your personal information based on:

• Contractual Necessity: Processing required to provide services under our agreement with you
• Legal Obligation: Processing required to comply with Korean laws and regulations
• Legitimate Interest: Processing necessary for our business operations, security, and fraud prevention
• Consent: Where you have provided explicit consent for specific processing activities

5. Information Sharing and Disclosure

We may share your personal information with:

5.1 Service Providers

• Payment processors for billing and transactions
• Data center partners for colocation services
• Cloud infrastructure providers for service delivery
• IT support and maintenance contractors

5.2 Legal Requirements

We may disclose information when required by law:

• In response to court orders or legal processes
• To comply with government or regulatory requests
• To cooperate with law enforcement investigations
• To protect our rights, property, or safety

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

• Account Information: Retained for the duration of your account plus 5 years after termination
• Financial Records: Retained for 7 years as required by Korean tax law
• Technical Logs: Retained for 1 year unless required for security investigations
• Support Communications: Retained for 3 years
• Facility Access Logs: Retained for 3 years

After the retention period expires, we will securely delete or anonymize your personal information unless longer retention is required by law.

7. Data Security

We implement comprehensive security measures to protect your personal information:

7.1 Technical Safeguards

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Secure authentication and access controls
• Regular security audits and vulnerability assessments
• Intrusion detection and prevention systems

7.2 Physical Safeguards

• 24/7 surveillance and monitoring of data center facilities
• Biometric and card-based access controls
• Secure server rooms with environmental controls
• Background-checked personnel with security clearances

7.3 Organizational Safeguards

• Employee confidentiality agreements
• Privacy and security training programs
• Data breach response and notification procedures
• Regular policy reviews and updates

7.4 Breach Notification

In the event of a data breach that may affect your personal information, we will notify you and relevant authorities within 72 hours as required by Korean PIPA, providing details about the breach and steps we are taking to address it.

8. Your Rights

Under Korean PIPA, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request access to your personal information and obtain a copy of the data we hold about you.

8.2 Right to Rectification

You may request correction of inaccurate or incomplete personal information. You can update most information directly through your customer portal.

8.3 Right to Erasure

You may request deletion of your personal information, subject to our legal obligations to retain certain data for tax, accounting, or legal purposes.

8.4 Right to Restrict Processing

You may request that we limit the processing of your personal information in certain circumstances, such as while we verify the accuracy of disputed data.

8.5 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before withdrawal.

8.6 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at privacy@epiture.net. We will respond to your request within 10 business days as required by Korean PIPA.

9. International Data Transfers

Your personal information may be processed in the following locations:

• Republic of Korea (primary data center location)
• Japan (Tokyo data center for service delivery)
• Estonia (subsidiary operations)

We ensure that appropriate safeguards are in place for international data transfers, including standard contractual clauses and adequate security measures as required by Korean PIPA.

10. Cookies and Tracking Technologies

10.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality, authentication, and security
• Analytics Cookies: Help us understand how visitors use our website to improve user experience
• Preference Cookies: Remember your settings and preferences

10.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality and your ability to access some features.

11. Children's Privacy

Our services are not intended for individuals under the age of 14. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 14 without parental consent, we will take steps to delete such information promptly.

If you believe we have collected information from a child, please contact us at privacy@epiture.net.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be communicated to you via email or through a prominent notice on our website at least 7 days before the changes take effect.

The current version of this policy is always available at https://epiture.net/legal/privacy

13. Contact Information

Data Protection Officer

Company Information

Supervisory Authority