Last updated 2026-01-08

Privacy Statement

This Privacy Statement explains how SummitForge Academy processes personal data when you use bond-nodesk.one or participate in programs. Contact team@bond-nodesk.one for requests.

Use of data

SummitForge Academy uses personal data to respond to inquiries, deliver training services, maintain client records, and improve website reliability. Processing is based on contract necessity where you purchase services, legitimate interests for secure operations and limited analytics, and consent where required for non-essential cookies or marketing communications. We do not sell personal data. Where Korean Personal Information Protection Act (PIPA) applies, we honor applicable rights and provide transparent notice about purposes and retention. Cross-border transfers occur only with appropriate safeguards and documented instructions when clients request offshore processing.

Scope of this statement

This statement covers data collected through bond-nodesk.one, workshop registration forms, email correspondence, and related client portals hosted by our processors. It does not govern third-party sites linked for convenience; their policies control when you leave our domain. Enterprise clients may receive supplemental data processing agreements that prevail over website summaries where conflicts arise. If you interact on behalf of a company, both you and the organization may be subject to professional contact obligations described in your master agreement.

Retention schedules

Contact form submissions are retained for up to twenty-four months to support follow-up conversations unless you request earlier deletion and no legal hold applies. Contract records, billing references, and workshop attendance notes are retained for the period required by Korean tax and commercial record rules, typically five to ten years depending on document type. Marketing consents and unsubscribe logs are stored to demonstrate compliance with opt-out requests. When retention periods expire, we delete or irreversibly anonymize data where feasible.

Third-party processors

We rely on infrastructure providers for email delivery, scheduling, and secure file exchange. Processors are bound by written agreements requiring confidentiality, security controls, and assistance with data subject requests. We do not authorize processors to use your personal data for their own marketing. If we change subprocessors in a way that materially affects risk, enterprise clients will be notified according to their agreements. Government access requests are reviewed for validity and narrowed where permitted by law before disclosure.

Your rights

Depending on your residency, you may request access, correction, deletion, restriction, or portability of certain personal data, and you may object to processing based on legitimate interests where grounds exist. Korean residents may contact us to exercise PIPA rights, including potential complaints to the Personal Information Protection Commission. We verify requests to prevent unauthorized changes and may retain minimal records of fulfilled requests. If you believe data is inaccurate, provide evidence so we can reconcile internal activity logs with your account history.

Data categories collected

We collect identifiers such as name, email address, company, phone number, and project descriptions you submit voluntarily. Technical logs may include IP address, device type, and approximate location derived for security monitoring. Workshop evaluations may contain free-text feedback. Payment references, if collected through a processor, are limited to what is needed for reconciliation; we do not store full payment credentials on our servers. Audio or video recordings occur only with explicit consent captured per session.