GDPR Notice

Effective Date: 2026-08-01

1. Scope

This notice applies to members located in the European Economic Area (EEA) or the United Kingdom and supplements our Privacy Policy in accordance with the General Data Protection Regulation (GDPR).

2. Legal Basis for Processing

Hi!Penpal! processes personal data on the basis of member consent, the necessity of performing the service agreement, and, where applicable, our legitimate interest in operating and securing the Service.

3. Your Rights

Subject to applicable law, you have the right to access, rectify, erase (right to be forgotten), restrict, or object to the processing of your personal data, as well as the right to data portability.

4. Data Retention

Personal data is retained only as long as necessary for the purposes described in our Privacy Policy; report records are retained for 1 year(s) and profile-view records for 2 years before deletion.

5. International Transfers

Where personal data is transferred outside the EEA, Hi!Penpal! takes reasonable measures to ensure an equivalent level of protection.

6. Exercising Your Rights

To exercise any of your rights under the GDPR, please contact sythchoi@naver.com. We will respond within the timeframe required by applicable law.

7. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the data protection supervisory authority in your country of residence.

8. Contact

For any GDPR-related questions, please contact sythchoi@naver.com.