Privacy Policy

1. Introduction

H&S Partners ("we", "us", or "our") operates KFR Gateway at kfrgateway.com. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or request one of our publications.

We are committed to protecting your privacy and handling your data in accordance with applicable privacy laws, including the EU General Data Protection Regulation (GDPR) and the Personal Information Protection Act of Korea (PIPA).

2. Information We Collect

2.1 Information you provide when you request a document

Our publications are provided free of charge. To download the full PDF of a publication you complete a short request form on the relevant document page. That form collects:

• Email address (required) — so that we can identify who has requested the publication and, where you have consented, send you related updates
• Organisation (required) — the firm, bank, or company you are requesting the document on behalf of
• Role (optional) — your position or function, which helps us understand who our readers are
• Country (optional) — the country from which you are requesting the document

The form is submitted to Netlify Forms, the form-handling service of our website host, and the submissions are accessible only to H&S Partners. We do not require payment details of any kind, and we do not ask for information beyond the fields listed above. Completing the form is entirely voluntary; if you would prefer not to provide these details, you may instead request a publication by email at christie.park@hyunseul.com.

2.2 Information you provide when you contact us

If you send an advisory enquiry through the form at kfrgateway.com/contact.html, that form collects:

• Name and company (both required) — so that we can identify who is asking and check for conflicts of interest
• Email address (required) — so that we can reply to you
• Phone number (optional)
• Your message — the substance of your enquiry
• Referring document — where you reached the form from one of our publication pages, the title of that publication, so that we can see what your question concerns

This form is likewise submitted through Netlify Forms and is accessible only to H&S Partners. Please do not send confidential or privileged information through it; sending an enquiry does not create a lawyer–client relationship. If you write to us by email instead, we hold your email address and the content of your message.

2.3 Information collected automatically

• Usage data — pages visited, time spent, browser type, and general location (country level) via standard web analytics
• Cookies — we use essential cookies to operate the website and analytics cookies to understand how visitors use our site

2.4 Payment information

We do not collect, process, or store payment information of any kind. Our publications are free of charge and no payment is taken through this website.

3. How We Use Your Information

• To make the requested publication available to you and, where necessary, to re-send it
• To understand who uses our publications, so that we can decide which documents to translate next
• To respond to your enquiries
• To send occasional updates about new publications and material changes in Korean financial regulation — only where you have ticked the consent box, and you may withdraw consent at any time
• To comply with legal obligations
• To improve our website and publications

4. Legal Basis for Processing (GDPR / PIPA)

• Consent — for the collection of your details through the document request form, and for any subsequent marketing communications. Under the Korean Personal Information Protection Act (개인정보 보호법) we likewise rely on your express consent, given by ticking the consent box on the form.
• Contract — processing necessary to provide the publication you have requested
• Legitimate interests — understanding our readership, improving our publications, and preventing abuse of the download form
• Legal obligation — compliance with applicable record-keeping requirements

5. Data Sharing

We do not sell your personal data. We may share your data with:

• Netlify — our website host, which also processes and stores the document request form submissions on our behalf
• Google Analytics — website analytics, in aggregated and pseudonymised form
• Legal authorities — where required by law

6. Data Retention

We retain the details submitted through the document request form for as long as necessary to fulfil the purposes set out in this policy, and in any event for no longer than 3 years from the date of your last interaction with us, after which they are deleted. Where you withdraw consent, or ask us to delete your details, we will do so promptly and in any event within 30 days, subject only to any records we are required by law to retain.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing of your data
• Data portability
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, or to ask us to delete the details you submitted through a document request form, please contact us at christie.park@hyunseul.com.

8. Cookies

We use the following types of cookies:

• Essential cookies — necessary for the website to function
• Analytics cookies — to understand how visitors use our site (anonymised)

You can control cookies through your browser settings. Disabling cookies may affect certain website functionality.

9. International Transfers

Your data may be processed in countries outside your own, including the United States and the Republic of Korea. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above.