A Piece of Map

Privacy Policy

Effective Date: 2026-11-11
Last Updated: 2026-11-11
Version: 1.4

A Piece of Map Inc. (어피스오브맵(주), "APiM", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you visit apieceofmap.com (the "Website").

This Policy is governed by the Personal Information Protection Act of the Republic of Korea (PIPA), including the amendments effective 11 September 2026, and satisfies the Article 30 disclosure requirements.

Important: A Piece of Map Inc. is a Korean company. We do not sell products or accept payments through this Website. APiM Galaxy (galaxy.apieceofmap.com) is a separate service with its own privacy notice for its users.

1. Who We Are (Data Controller)

Item Detail
Legal entity A Piece of Map Inc. (어피스오브맵(주))
Country of incorporation Republic of Korea
Registered office 4,5F Greits Pangyo, 117 Bundangnaegok-ro, Bundang-gu, Seongnam-si, Gyeonggi-do 13529, Republic of Korea
Website https://apieceofmap.com
General contact navigate@apieceofmap.com
Privacy contact (CPO) Bo Kyung Choi, CEO — navigate@apieceofmap.com

Chief Privacy Officer (CPO): Under PIPA Article 31 and the 2026 amendments, the CEO of A Piece of Map Inc. is the ultimate person responsible for the processing and protection of personal information. You may contact the CPO using the email address above.

2. Scope

This Policy applies to personal data we process through:

  • The apieceofmap.com website, in English and in Korean (pages under /ko/);
  • The Contact form (/contact, /ko/contact);
  • The Sourcing Desk request form (/sourcing, /ko/sourcing);
  • The Newsletter subscription form ("APiM Insights");
  • Cookies and similar technologies on the Website;
  • Direct correspondence with us by email or postal mail.

This Policy does not cover:

  • Third-party websites linked from ours (LinkedIn, partner solution sites, referenced sources);
  • Separate services with their own notices, including APiM Galaxy (galaxy.apieceofmap.com);
  • Personal data we process as a service provider on behalf of business clients (governed by separate Data Processing Agreements).

3. What Personal Data We Collect

3.1 Data you provide

Source Data fields Required / Optional
Contact form (/contact) Name, work email, organization, role, inquiry type, message, optional consent to receive news and insights Name, email, organization and message required; role and the news-and-insights consent optional
Sourcing Desk form (/sourcing) What you need, area or coverage, intended use, timing, name, organization, work email, optional consent to receive news and insights What you need, name, organization and email required; area, use, timing and the news-and-insights consent optional
Newsletter subscription Email address, locale preference (EN or KR) Email required
Direct email to navigate@apieceofmap.com Whatever you choose to include —

3.2 Data collected automatically

Source Data fields Purpose
Server access logs IP address, user agent, requested URL, timestamp, referrer, HTTP status Hosting operations, security, abuse prevention
Anti-spam service (reCAPTCHA) Browser and device signals, mouse and keyboard interaction signals, IP address (sent to the provider) Spam and bot prevention on the Contact, Sourcing Desk and newsletter forms
Analytics service (only with consent) Anonymized pageview events, route changes, locale; no IP storage and no session recording Aggregate site usage analytics
Embedded map (only with consent) IP address and browser info (sent to the map provider when the Contact page office map loads) Display office location

We do not knowingly collect special categories of personal data (race, religion, political opinion, health, sexual orientation, etc.). We do not knowingly collect data from children — see §10.

3.3 Data we do not collect

  • Payment card information (we do not process payments on this Website).
  • Government-issued identifiers (resident registration number, passport number, driver license, etc.).
  • Biometric data.
  • Precise geolocation data.

We process personal data on the following lawful grounds under PIPA Article 15.

Purpose Data used PIPA legal basis
Respond to your inquiry or sourcing request Contact form and Sourcing Desk form data Article 15 §1.4 — necessary to fulfill a contract, supplemented by consent at submission
Send the APiM Insights newsletter Email address, locale, and your name if you opt in on the Contact or Sourcing Desk form Article 15 §1.1 — consent of the data subject
Operate and secure the Website Server access logs, security cookies, anti-spam signals Article 15 §1.6 — legitimate interests of the controller (security, fraud prevention)
Measure aggregate Website usage Analytics events (post-consent) Article 15 §1.1 — consent
Show office location map Embedded map (post-consent) Article 15 §1.1 — consent
Comply with legal obligations Records as required by law Article 15 §1.2 — required by law

Consent withdrawal: You may withdraw consent at any time by emailing navigate@apieceofmap.com or by clicking "Unsubscribe" in any newsletter. Withdrawal does not affect the lawfulness of processing before the withdrawal.

PIPA separate consent: Where Korean law requires separate consent for distinct processing categories (e.g., marketing, overseas transfers), we present those choices individually rather than as a single blanket consent.

5. Retention Periods

Data Retention
Contact inquiries and sourcing requests — unconverted leads Up to 3 years from last contact, then deleted
Contact inquiries and sourcing requests — active client relationship During the contract and for 5 years after it ends, for dispute handling and to confirm the history of dealings
Newsletter subscribers — active Until unsubscribe
Newsletter subscribers — after unsubscribe 12 months for suppression and re-consent records, then permanent deletion
Cookie consent records (browser storage) 12 months, after which renewed consent is requested
Server access logs Short rolling retention by our hosting provider (typically 30 days), then deleted
Analytics events (anonymized) 12 months rolling, then deleted
Anti-spam verification logs Processed transiently by the provider; we retain only a pass/fail outcome

Documents we must keep by law, such as contracts and tax records, are kept separately for the periods set by the applicable statutes.

After the applicable period, data is irreversibly deleted or fully anonymized.

6. Who We Share Data With (Sub-processors)

We entrust the processing of personal data only to service providers that act on our behalf under written data processing agreements. All of them process the data outside the Republic of Korea, so each provider, the task entrusted to it and the items required by PIPA Article 28-8 are set out in one table in §7.

The analytics service and the embedded map described in §3.2 are not listed there: analytics events are anonymous, and the map provider collects data under its own privacy notice.

We do not sell personal data, and we do not use your data for advertising retargeting or to train AI or machine-learning models.

7. Overseas Transfers (PIPA Article 28-8)

We entrust the processing and storage of personal data to the recipients below, which process it outside the Republic of Korea. These transfers are an entrustment of processing and storage (PIPA Article 26) based on PIPA Article 28-8 §1.3: they are needed to perform the contract with you (to show you the Website, receive your inquiry or sourcing request, or send the newsletter you asked for) and are disclosed in this Policy. The table gives the items required by PIPA Article 28-8 §2.

Recipient and contact Items transferred Countries Timing and method Purpose Retention How to refuse, and the effect
Vercel Inc. · privacy@vercel.com · 440 N Barranca Avenue #4133, Covina, CA 91723, United States Server access logs (IP address, user agent, requested URL, timestamp, referrer, HTTP status); the content of forms you submit, processed only to pass it on to Ghost and Resend United States Each time you open a page or submit a form, over the internet, encrypted in transit (TLS 1.2 or higher) Website hosting and form handling Server access logs: as in §5 Only by not using the Website; the Website cannot be shown without this transfer
Ghost Foundation Ltd · hello@ghost.org Contact and Sourcing Desk forms, only if you tick the news-and-insights box: name, email address, inquiry type, page language. Newsletter: email address, language preference Netherlands When you submit the Contact or Sourcing Desk form with the news-and-insights box ticked, or subscribe, over the internet, encrypted in transit (TLS 1.2 or higher) Newsletter delivery As in §5 for newsletter subscribers Leave the news-and-insights box unticked, or do not subscribe; we then cannot send you the newsletter. Your inquiry or request is answered either way
Plus Five Five, Inc. (Resend) · support@resend.com Contact form: name, email address, organization, role, inquiry type, message, news-and-insights consent choice. Sourcing Desk form: name, email address, organization, what you need, area or coverage, intended use, timing, news-and-insights consent choice. Newsletter: email address, language preference United States (storage); Japan (sending) When you submit a form, over the internet, encrypted in transit (TLS 1.2 or higher) Sending the form notification to us and a confirmation email to you While our contract with Resend is in force; deleted within 90 days after it ends Do not submit the form; we then cannot receive your inquiry or confirm your subscription. You can write to us by post instead
Google Asia Pacific Pte. Ltd. (Google Workspace) · 70 Pasir Panjang Road, #03-71, Mapletree Business City II, Singapore 117371 Emails received at navigate@apieceofmap.com: Contact and Sourcing Desk form notifications (items as in the Resend row) and emails you send us Countries where Google operates data centers: United States, Belgium, Chile, Denmark, Finland, Germany, Ireland, Japan, Netherlands, Singapore, Taiwan, United Kingdom, Uruguay When the email reaches our mailbox, by email over the internet Hosting our company email As in §5 for contact inquiries Write to us by post instead of using the form or email; our reply may then take longer
Google Cloud Korea LLC (reCAPTCHA) · https://support.google.com/cloud/contact/dpo · Gangnam Finance Center 20fl., 152 Teheran-ro, Gangnam-gu, Seoul, Republic of Korea IP address, browser and device signals, mouse and keyboard interaction signals Countries where Google operates data centers, as in the row above While a page with one of our forms is open in your browser and when you submit a form, sent directly from your browser to Google, encrypted in transit (TLS) Spam and bot prevention on our forms As in §5 for anti-spam verification logs Block the anti-spam script in your browser; our forms then cannot be submitted, and you can write to us by post instead

Refusal after submission: email navigate@apieceofmap.com with the subject "Privacy Request — …" and we will delete the data held by the recipients within the timeline in §8.1.

Inquiries sent before 2026-11-11: until that date, every Contact form submission was also recorded in Ghost (name, email address, inquiry type). We delete those records within 3 years of the last contact, as in §5.

Re-entrusted processing: each recipient may entrust part of the processing to its own sub-processors. Their lists are published here:

8. Your Rights

Under PIPA you have the following rights regarding your personal data:

Right What it means PIPA basis
Access Receive a copy of the personal data we hold about you Article 35
Rectification Correct inaccurate or incomplete data Article 36
Suspension of processing Ask us to cease processing your personal data Article 37
Deletion Request deletion of personal data we hold about you Article 36
Withdrawal of consent Revoke previously granted consent at any time Article 37 §1
Non-automated decisions We do not subject you to automated decisions producing legal or similarly significant effects Article 37-2

8.1 How to exercise your rights

Email navigate@apieceofmap.com with subject line "Privacy Request — [Access / Delete / Correct / Suspend / …]".

We respond within 10 days under PIPA Enforcement Decree Article 41, extendable once with notice if more time is required to address your request.

We may ask for reasonable verification of identity to prevent unauthorized requests, in line with PIPA Enforcement Decree Article 46.

8.2 Right to lodge a complaint

You may also contact the Korean supervisory authorities:

9. Security

We apply organizational, technical, and physical measures appropriate to the risk of processing.

  • Encryption in transit: TLS 1.2 or higher for all Website traffic;
  • Encryption at rest: applied at the sub-processor layer;
  • Access control: least-privilege role assignments; multi-factor authentication for administrator accounts;
  • Vulnerability management: regular dependency updates and patching cycles;
  • Anti-spam: industry-standard anti-spam service plus honeypot field on public forms;
  • Logging and monitoring: server access logs reviewed for anomalous activity;
  • Retention discipline: automated and manual deletion routines aligned with §5.

No system is completely secure. If we become aware of a personal data breach affecting your data, we will notify the affected data subjects within 72 hours of becoming aware of it and, where the law requires a report, report it to the Personal Information Protection Commission or the Korea Internet & Security Agency (KISA) within 72 hours (PIPA Article 34; PIPA Enforcement Decree Articles 39 and 40).

10. Children

The Website is a B2B platform and is not directed to children. We do not knowingly collect personal data from children under 14 years of age in line with PIPA Article 22-2. If you believe we have inadvertently collected such data, please contact navigate@apieceofmap.com for prompt deletion.

11. Cookies

Our use of cookies and similar technologies is described in the Cookie Policy. The cookie banner appears on first visit and lets you accept or reject non-essential cookies (analytics, embedded map). You can change your choice at any time via the "Cookie preferences" link in the Website footer.

12. Automated Decisions and Profiling

We do not use the Website's personal data to make automated decisions producing legal or similarly significant effects. Analytics events are aggregated and not used to make individual decisions.

13. AI and Machine Learning

We do not use personal data submitted through this Website to train artificial-intelligence or machine-learning models. This applies to the content of our forms, newsletter subscriber lists, and analytics events alike.

The public pages of this Website (such as Insights articles and company pages) may be read by automated agents, including AI search, AI answer, and AI model-training crawlers, to the extent set out in our robots.txt file. That file lists the agents we currently permit and those we do not, and we may change it at any time. This section concerns the Website's public content; it does not change how we handle the personal data described in this Policy. What anyone may do with Website content is governed by our Terms of Service §3.

14. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices, services, or legal requirements. When we do, we will:

  • Update the "Last Updated" and, where applicable, "Effective Date" at the top of this page;
  • For material changes that affect your rights or our processing, publish a banner notice on apieceofmap.com and, where appropriate, notify active newsletter subscribers by email.

This Policy applies from 2026-11-11. Earlier versions and the periods in which they applied:

15. Governing Law and Jurisdiction

This Policy is governed by the laws of the Republic of Korea. Any dispute arising out of or relating to this Policy is brought before the court that has jurisdiction under the Civil Procedure Act of the Republic of Korea.

16. Contact

For any privacy question or to exercise your rights, please contact us:

  • Email: navigate@apieceofmap.com
  • Subject prefix: "Privacy Request — …"
  • Post: A Piece of Map Inc., 4,5F Greits Pangyo, 117 Bundangnaegok-ro, Bundang-gu, Seongnam-si, Gyeonggi-do 13529, Republic of Korea

This Policy is published in English and Korean. If the two versions differ, the Korean version prevails.