Privacy Policy

K Real Estate (the "Operator") runs the K Real Estate website and app (the "Service"). We comply with Korea's Personal Information Protection Act (개인정보 보호법) and related laws, and we publish this Privacy Policy to explain how we handle personal data. This policy takes effect on 2026-10-13.

1. Why we process personal data

We process personal data only for the purposes below and do not use it for anything else. If a purpose changes, we take the steps required by law, such as obtaining separate consent.

• Publishing and matching Connect registrations: to display the request or service you register and recommend suitable counterparts
• Handling connection proposals: to deliver proposal messages between users and, once a proposal is accepted, to show each party the other's contact details
• Managing registrations: to let the holder of the management link view, edit and close a registration
• Preventing abuse: to stop excessive requests, spam, false registrations and fraud, and keep the Service stable
• Answering inquiries: to review and handle questions, reports and requests to exercise your rights

2. What we process

A. Information you enter when registering on Connect

Because registration content is public, do not put information you do not want published — such as resident registration numbers, bank account numbers or your full address — or anyone else's personal data in the description or other fields.

B. Information generated automatically when you use the Service

• IP address: used briefly to rate-limit requests and prevent abuse. It is processed only in server memory and is not stored in our database.
• Access logs: the cloud provider that hosts the Service may keep standard server access logs (request time, IP address, requested URL, browser information, etc.) under its own policies.
• Cookies: we use a language cookie and advertising-related cookies. See sections 7 and 8.

C. Management link (token)

When you register on Connect, you receive a management link containing a secret token. Our server stores only a one-way hash of the token, never the token itself, so even we cannot recover or reissue your link. Keep it safe and do not share it.

3. Information stored only on your device

The following is stored only in your browser's localStorage or the app's local storage. It is not sent to or stored on our server.

• Saved favorites, such as listings you are interested in
• The "my home" values you enter on the MY page
• The list of Connect registrations you created on that device, with their management tokens
• Your chosen language

You can remove this data at any time by clearing site data in your browser or deleting the app. If you delete a management token, however, you will no longer be able to manage that registration from the device — save the management link somewhere else first.

4. How long we keep personal data

Where another law requires us to keep certain information for a set period, we store it separately from other data for that period and then delete it.

5. How we delete personal data

• Procedure: personal data whose retention period has ended, whose purpose has been fulfilled, or whose deletion you have requested is deleted without delay. Data that must be kept by law is stored separately and deleted when that period ends.
• Method: electronic data is deleted from the database in a way that cannot be restored. Any printed material is shredded or incinerated.

6. Sharing with third parties and outsourcing

A. Sharing with third parties

We do not sell personal data and do not provide it to third parties beyond the purposes in section 1, except:

• Contact reveal after an accepted proposal: on Connect, when one side sends a connection proposal and the other side accepts it, the contact details each party entered (name, phone, email) are shown to the other. This happens only as a result of you sending or accepting a proposal; nothing is revealed while a proposal is pending or if it is declined.
• When required by law: where a law specifically requires it or it is unavoidable to meet a legal obligation, or where an investigative authority requests it following legally prescribed procedures.

B. Outsourcing

We outsource the following processing to provide the Service, and our arrangements require the personal data to be managed securely. If the provider or the outsourced work changes, we will update this policy without delay.

C. Information sent to external services

Some features load resources from outside providers. As with any web request, your IP address and request details are sent to those providers, and their own privacy policies apply.

7. Cookies

A cookie is a small text file that a website stores in your browser. We use:

• NEXT_LOCALE: remembers the language you chose. It lasts 1 year and contains nothing that identifies you.
• Advertising cookies: set by third-party ad vendors such as Google to serve ads and measure their performance (see section 8).

You can block or delete cookies in your browser settings. The main features will still work, but your language choice may not be remembered.

8. Advertising and behavioral information

The Service may display ads through Google AdSense.

• Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to users based on their visits to this site and/or other sites on the Internet (personalized advertising).
• You can opt out of personalized advertising in Google Ads Settings.
• Learn more about how Google uses cookies in advertising at Google's advertising technologies page.

We do not ourselves collect or store the behavioral information gathered by advertising vendors.

9. Your rights and how to exercise them

You may at any time ask us to:

1. Give you access to your personal data
2. Correct it if it is inaccurate
3. Delete it
4. Stop processing it

Send your request to (contact email coming soon) and we will act on it without delay. Because there are no accounts, please include your management link or the registration title, or other details that identify the registration, so we can verify the request. You may also exercise these rights through a legal representative or an authorized agent. In some cases set out in the Personal Information Protection Act — for example, when another law requires us to keep the data, or when a request would infringe someone else's rights — a request may be limited.

You can also edit or close your registration yourself using your management link.

10. Children

The Service is not directed at children under 14. If you are under 14, please do not register on Connect. If we learn that personal data of a child under 14 has been registered, we will delete it without delay.

11. How we keep personal data secure

• Encryption in transit: all traffic is encrypted with HTTPS.
• Token hashing: we never store management tokens themselves, only one-way hashes.
• Access limitation: private information such as contact details is shown only to the holder of the management link and to an accepted counterpart, and database access is limited to the minimum number of people needed.
• Rate limiting: request rates are limited to block automated mass requests and abuse.

12. Privacy officer

We have designated the following privacy officer to oversee personal data processing and handle related complaints and remedies.

Please send any privacy questions, complaints or requests for remedy to the contact above. We will reply and act without delay.

13. Where to get help

If you believe your personal data rights have been infringed, you can also seek advice or dispute resolution from the following Korean authorities.

14. Changes to this policy

This policy applies from 2026-10-13. If we change it because of new laws or changes to the Service, we will announce the changes on the Service at least 7 days before they take effect, or at least 30 days before for changes that significantly affect your rights.

This English version is provided for convenience. If it differs from the Korean version, the Korean version prevails. See our Terms of Service for the conditions of use and Contact for how to reach us.