Privacy Policy

1. Scope and Application

Sua Global Partners ("SUA," "we," "us," or "our") respects the privacy of individuals who interact with us and is committed to handling personal information responsibly.

This Privacy Policy (the "Policy") describes how SUA collects, uses, discloses, transfers, retains, and protects personal information obtained through our website, consultation requests, business communications, professional inquiries, and related interactions.

This Policy applies in accordance with applicable data protection and privacy laws, including the Personal Information Protection Act of the Republic of Korea ("PIPA") and other applicable laws in the jurisdictions in which we operate or provide services.

This Policy applies to individuals who visit or interact with our website; submit a consultation request or business inquiry; communicate with us regarding our services; contact us regarding professional engagement opportunities; or otherwise provide personal information to SUA.

By accessing our website, submitting information to us, or otherwise interacting with SUA, you acknowledge that your personal information may be processed as described in this Policy.

2. Responsibility for Personal Information and Privacy Contact

Sua Global Partners, headquartered in Seoul, Republic of Korea, is responsible for the collection and processing of personal information within the scope of this Policy.

SUA maintains appropriate internal responsibility for overseeing personal information processing, handling privacy-related inquiries and data subject requests, and responding to concerns regarding our handling of personal information.

Privacy-related inquiries and data subject requests may be directed to:

Depending on the nature of the processing activity and applicable law, SUA may act as a personal information controller, data controller, processor, or service provider.

3. Personal Information We Collect

We collect personal information that is reasonably necessary for legitimate business, operational, contractual, legal, and administrative purposes, and we limit collection to what is necessary for the purpose concerned.

A. Consultation Requests and Business Inquiries

When you submit a consultation request through our website, we collect the following information, which you provide directly:

• Required: full name; work email address; company name; the primary area of support requested; and the project or operational overview you provide.
• Optional: telephone number and company website.
• Selection information: company size and the number of professionals your organization is looking to engage.

We also collect information contained in any correspondence you send to us directly, including by email.

B. Professional Inquiries

If you contact SUA regarding professional engagement opportunities, we may collect your name and contact information, resume or curriculum vitae, employment and professional history, educational background and qualifications, skills and credentials, and other information you choose to submit.

Please do not submit sensitive personal information, or unique identifying information such as a resident registration number, unless it has been expressly requested by SUA for a specific and legally permitted purpose. Where the processing of such information requires separate consent or another specific legal basis, we will process it only in accordance with applicable law.

C. Information Collected Automatically

When you access our website, certain technical information may be collected automatically, including IP address, approximate location derived from an IP address, browser type and settings, device and operating system information, language preferences, referring pages, pages viewed, and dates and times of access.

4. Purposes and Legal Bases for Processing

We process personal information only where a lawful basis applies. Depending on the circumstances, that basis may be your consent; the performance of a contract or steps taken at your request before entering into a contract; compliance with a legal or regulatory obligation; our legitimate interests, where those interests are not overridden by your rights; or another basis available under applicable law.

Where we rely on your consent, you may withdraw that consent at any time, subject to applicable law. However, where certain information or consent is necessary for us to respond to your inquiry, consider a potential engagement, or provide a requested service, we may be unable to proceed without it.

We process personal information for the following purposes:

• Responding to inquiries and consultation requests — reviewing the information submitted, understanding your organization's requirements, arranging and conducting consultations, and communicating with you regarding your request.
• Business development and service delivery — assessing how SUA may support your requirements, preparing proposals and related communications, and establishing and managing client relationships.
• Professional engagement — reviewing professional inquiries, assessing qualifications and suitability for potential opportunities, and managing engagement processes.
• Website operation, security, and improvement — operating, maintaining, and securing our website and systems, and detecting and preventing unauthorized activity or misuse.
• Legal and regulatory compliance — meeting legal, regulatory, accounting, tax, and recordkeeping obligations, and establishing, exercising, or defending legal claims.

SUA does not sell personal information. We do not sell, rent, or trade personal information to third parties for monetary consideration, nor do we use personal information for third-party behavioral advertising.

5. Retention and Disposal of Personal Information

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected; maintain business or professional relationships; provide services; manage professional engagement processes; comply with applicable legal, regulatory, accounting, tax, or recordkeeping obligations; resolve disputes; and establish, exercise, or defend legal claims.

The period for which information is retained may vary depending on:

• the nature and sensitivity of the information;
• the purpose for which it was collected;
• whether an ongoing business or professional relationship exists;
• whether retention remains necessary to respond to an inquiry or manage a potential engagement;
• applicable legal, regulatory, tax, accounting, or recordkeeping requirements; and
• the need to establish, exercise, or defend legal claims.

Where personal information is no longer reasonably required for any of these purposes, we take appropriate steps to delete, destroy, anonymize, or otherwise dispose of it in accordance with applicable law and our business practices.

6. Disclosure and Entrustment

We disclose personal information only where reasonably necessary for the purposes described in this Policy and in accordance with applicable law. Recipients may include:

• Authorized personnel and representatives — our personnel and other individuals authorized by SUA who require access to personal information strictly on a need-to-know basis in connection with their legitimate responsibilities.
• Entrusted service providers — third parties that process personal information on our behalf in support of our operations, including providers of cloud hosting, website infrastructure, email and communications services, form processing, information technology, analytics, and other operational services. Where appropriate, we take reasonable steps to ensure that such providers are subject to appropriate confidentiality, security, and data protection obligations, and that they process personal information only for authorized purposes or as otherwise permitted by applicable law.
• Professional advisors — legal counsel, accountants, auditors, and other advisors where reasonably necessary for professional, legal, financial, or regulatory purposes.
• Government and regulatory authorities — where disclosure is required or permitted by applicable law, court order, or legal process, or where necessary to protect the rights, property, or safety of SUA or others.

We may also disclose personal information in connection with a corporate transaction or the transfer of all or part of our business, subject to applicable legal requirements.

7. International and Cross-Border Transfers

SUA operates across international markets. Personal information may be transferred to, stored in, or accessed from countries other than the country in which it was originally collected. Depending on the nature of the relevant processing activity, this may include the Republic of Korea, the Republic of the Philippines, and other jurisdictions in which our authorized service providers or technology providers operate.

Such transfers may involve authorized personnel or entrusted service providers, and may include contact information, business information, professional information, inquiry records, communications, and other categories of information described in this Policy.

International transfers may take place for purposes including responding to inquiries and communications; conducting consultations and providing services; managing business and professional relationships; operating and supporting our business systems and technology; and other legitimate activities described in this Policy.

Where required by applicable law, we will implement or rely on an appropriate legal mechanism or safeguard in connection with such transfers, which may include consent, contractual protections, or another legally recognized transfer mechanism.

8. Automated Decision-Making

SUA does not currently use automated systems to make decisions that produce legal effects or similarly significant effects concerning individuals. Consultation requests and professional inquiries are reviewed by appropriate personnel.

If this position changes, we will update this Policy and comply with any applicable requirements relating to automated decision-making, including any obligation to provide notice or to honor rights available to individuals under applicable law.

9. Information Security

We implement reasonable and appropriate administrative, technical, and organizational measures designed to protect personal information against unauthorized or unlawful access, use, disclosure, alteration, loss, or destruction.

Depending on the nature of the information and the systems involved, these measures may include access controls, authentication procedures, encrypted communications, secure hosting environments, system monitoring, and other security practices appropriate to the risks involved.

No method of transmission over the internet or method of electronic storage is entirely secure. While we take reasonable measures to protect personal information, we cannot guarantee absolute security.

10. Your Privacy Rights

Depending on your location and the applicable law, you may have the right to request access to personal information we hold about you; request correction of inaccurate or incomplete information; request deletion of personal information in certain circumstances; request restriction or suspension of processing; object to certain processing; request data portability, where applicable; withdraw consent where processing is based on consent; and lodge a complaint with a relevant authority.

These rights are not absolute and may be subject to conditions, limitations, or exceptions under applicable law.

To exercise a right, please contact us at privacy@suaglobalpartners.com. We may take reasonable steps to verify your identity before responding, and we will respond to valid requests within the timeframe required by applicable law. Requests may also be submitted through a legal representative or authorized agent, subject to appropriate documentation.

11. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support website functionality, security, and administration, and to help us understand how visitors interact with our website.

Where required by applicable law, we will obtain consent before placing or accessing non-essential cookies or similar technologies on your device. You may also manage cookies through your browser settings. Disabling certain technologies may affect the functionality or availability of parts of our website.

12. Third-Party Websites and Services

Our website and communications may contain links to third-party websites, platforms, or services that SUA does not operate or control. This Policy does not apply to the privacy practices of third parties, and we encourage you to review the applicable privacy policies of any third-party service before providing personal information.

13. Children's Privacy

SUA provides business-to-business and professional services, and our website and services are not directed to children.

We do not knowingly collect or process personal information from children in violation of applicable law. Where applicable law requires parental or legal guardian consent before the collection or processing of a child's personal information, we will process such information only where the required consent or other lawful authorization has been obtained.

If we become aware that personal information relating to a child has been collected or processed in a manner inconsistent with applicable law, we will take appropriate steps to delete or otherwise handle that information in accordance with applicable law.

If you believe that a child has provided personal information to SUA inappropriately, please contact us at privacy@suaglobalpartners.com.

14. Changes to This Policy

We may update this Policy from time to time to reflect changes in our business practices, operational requirements, technology, or applicable legal and regulatory obligations.

When we make changes, we will update the Effective Date at the top of this Policy and post the revised version on our website. Where required by applicable law, or where otherwise appropriate in light of the nature of the changes, we may provide additional notice or obtain consent before material changes take effect.

15. Complaints and Redress

If you have a concern regarding our handling of personal information, we encourage you to contact us first so that we may address it directly.

You may also raise a complaint with the relevant Korean authorities, including the Personal Information Protection Commission (PIPC), the Korea Internet & Security Agency (KISA) Privacy Complaint Center, and the Personal Information Dispute Mediation Committee. Contact details and complaint procedures for these organizations may change from time to time, and individuals should refer to the relevant official channels for current information.

If you are located in the European Economic Area, the United Kingdom, or another relevant jurisdiction, you may also lodge a complaint with the supervisory authority applicable to you.

16. Contact Us

For questions regarding this Policy, to exercise a privacy right, or to raise a concern regarding our handling of personal information, please contact us using the details below.