Privacy Policy

The data controller responsible for your personal information is Studio Kim Hanyoung, based in Seoul, Republic of Korea. You may contact us at any time regarding this policy or your personal information at privacy@kimhanyoung.com.

We collect the following categories of personal information:

• Information you provide. Name, email address, postal address, telephone number, and the contents of any message you submit through our contact form or correspondence.
• Transactional information. Records of acquisitions, commissions, or studio visits, where applicable.
• Technical information. IP address, browser type and version, operating system, device identifiers, referring URL, pages viewed, and timestamps, collected automatically through cookies and similar technologies.
• Analytics information. Aggregated statistics about how visitors interact with the Site, including session duration and navigation paths.

We do not knowingly collect special categories of personal data (such as data revealing racial or ethnic origin, political opinions, or health data) unless you voluntarily provide it to us.

Where the GDPR or UK GDPR applies, we process your personal information on the following legal bases:

• Consent (Art. 6(1)(a)). For non-essential cookies, newsletters, and other optional communications. You may withdraw consent at any time.
• Contract (Art. 6(1)(b)). To respond to inquiries, fulfill acquisitions, and manage studio visits.
• Legal obligation (Art. 6(1)(c)). To comply with tax, accounting, and other legal requirements.
• Legitimate interests (Art. 6(1)(f)). To operate and secure the Site, prevent fraud, and analyze usage patterns, provided such interests are not overridden by your rights and freedoms.

• To respond to inquiries and provide the services you request.
• To operate, maintain, secure, and improve the Site and its functionality.
• To communicate with you about exhibitions, press matters, acquisitions, or studio activity where relevant.
• To comply with legal obligations and enforce our terms.
• To analyze aggregated usage trends and improve the visitor experience.

We do not sell your personal information. We share it only with:

• Service providers. Trusted processors who host the Site, deliver email, provide analytics, or otherwise support our operations, bound by contractual confidentiality and data protection obligations.
• Galleries and partners. Where necessary to arrange exhibitions, fairs, or acquisitions you have inquired about.
• Legal and regulatory authorities. When required by law, court order, or to protect our rights, property, or safety, or that of others.
• Successors. In connection with a merger, acquisition, reorganization, or sale of assets, subject to equivalent protection.

Your personal information may be transferred to, stored, or processed in countries other than your own, including the Republic of Korea and jurisdictions where our service providers operate. Where such transfers involve data subjects in the European Economic Area, the United Kingdom, or other regions with cross- border transfer restrictions, we implement appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or equivalent mechanisms.

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Inquiry records are typically retained for up to three (3) years after the last contact; transactional records are retained for the period required by tax and accounting law (generally five to ten years). When personal information is no longer required, it is securely deleted or irreversibly anonymized.

Subject to applicable law, you have the following rights regarding your personal information:

• Access. Request confirmation of whether we process your data and a copy of the data we hold.
• Rectification. Request correction of inaccurate or incomplete data.
• Erasure. Request deletion of your data where no overriding legal ground applies (“right to be forgotten”).
• Restriction. Request that we limit processing under certain conditions.
• Portability. Receive your data in a structured, commonly used, machine- readable format, or have it transmitted to another controller.
• Objection. Object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw consent. Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
• Lodge a complaint. File a complaint with a competent supervisory authority, such as the Personal Information Protection Commission (Korea), an EU data protection authority, or the UK Information Commissioner's Office.

California residents have additional rights under the CCPA/CPRA, including the right to know the categories of personal information collected, the right to delete, the right to correct, the right to opt out of sale or sharing, and the right to non-discrimination for exercising these rights.

To exercise any of these rights, please contact us at privacy@kimhanyoung.com. We will respond within the timeframes required by applicable law.

We use cookies and similar technologies to operate the Site, remember your preferences, and analyze traffic. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

The Site is not directed to children under the age of 16 (or the minimum age applicable in your jurisdiction), and we do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. However, no method of transmission over the Internet or electronic storage is entirely secure, and we cannot guarantee absolute security.

The Site may contain links to third-party websites or services. This policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will revise the “Last updated” date above. Material changes will be communicated through a prominent notice on the Site or by other appropriate means.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us at: