Legal
Privacy notice
This notice explains how Online Reason handles personal data in connection with this website and our audit engagements.
Data controller
Online Reason, 13 Teheran-ro 5-gil, Gangnam-gu, Seoul 06134, Republic of Korea, is the controller for personal data collected through onlinereason.digital and related inquiry channels. Contact: hello@onlinereason.digital · +82 2-2051-3300.
Data we collect
- Inquiry form: name, email, selected audit interest, optional application/module note, and message content
- Communications: emails or calls you initiate
- Technical data: limited server logs and cookie-related identifiers as described in our cookies page
We do not ask for payment card numbers through this website.
Purposes and legal bases
- Responding to inquiries and preparing proposals (legitimate interest / steps prior to contract)
- Performing contracted application audits (contract performance)
- Improving site reliability and understanding aggregate visits when analytics cookies are accepted (consent where required)
- Meeting accounting and legal obligations (legal obligation)
Retention
Inquiry records are kept up to 24 months after the last correspondence unless a longer period is required for an active engagement or legal claim. Engagement working papers follow the retention period stated in the engagement letter, typically five to seven years for professional records. Server logs are rotated on a shorter cycle.
Your rights
Subject to Korean personal information protection law, you may request access, correction, deletion, or suspension of processing of your personal data, and you may withdraw cookie consent at any time by clearing stored preferences and contacting us. To exercise rights, email hello@onlinereason.digital. You may also lodge a complaint with the Personal Information Protection Commission (PIPC) or other competent authority.
International transfers
Our primary operations and hosting intended for this site are managed for audiences in South Korea. If a processor outside Korea is used (for example, email infrastructure), we apply contractual and organizational safeguards appropriate to the transfer.
Sharing
We share personal data with service providers who host email or the website under instructions, and with professional advisors when required. We do not sell personal data.
Updates
We may revise this notice; the version on this page is current as of publication. Material changes will be reflected here.