Data Protection

We share personal data with subprocessors that provide infrastructure, email delivery, and classroom tooling under written agreements. Each subprocessor is instructed to use data solely for delivering the services you requested and to apply technical and organizational safeguards consistent with Korean Personal Information Protection Act (PIPA) expectations. We do not sell personal information. If we introduce a new subprocessor that handles sensitive categories, we will notify active cohort participants before transferring new classes of data, unless a compatible legal basis already covers the transfer.

Enrollment records, billing references, and attendance logs are retained for seven years where required for tax and consumer dispute evidence, then deleted or anonymized. Marketing preferences and cookie logs follow shorter cycles described in the Cookie Preferences page. You may request deletion earlier when law allows. Some residual copies may persist in encrypted backups until the backup cycle expires, after which they are purged automatically.

The data controller is SprintCanvas Academy, reachable at team@mesh-hubcenter.one or the postal address listed on the Contact page. For privacy requests, include your name, relationship to an enrollment, and a concise description of the help you need. We respond within thirty days unless complexity requires an extension, in which case we notify you with reasons.

Depending on your situation, you may have rights to access, rectify, delete, restrict processing, or port your data under PIPA and related regulations. You may also lodge a complaint with the Korea Personal Information Protection Commission. We verify requests to prevent unauthorized changes. In some cases we may deny deletion where a legal obligation requires retention, but we will explain the basis.

We use personal data to operate classes, send schedules, improve facilitation quality through surveys, and comply with law. Analytics cookies run only after you opt in through the cookie banner. We do not use enrollment data to train generalized public models. Internal summaries may be produced in aggregate form that cannot identify individuals.

We collect identifiers (name, email, employer), billing references for corporate enrollments, technical logs (IP address, browser type), and content you submit through forms or classroom chats when saved for support. Optional profile fields, such as dietary needs for in-person studios, are collected only when you choose to supply them.

This Data Protection statement applies to mesh-hubcenter.one and the learning services described here. Linked third-party sites follow their own policies. Where a customer agreement exists, it may define additional roles such as joint controllership for enterprise rollouts.