Privacy Policy

The Company processes personal data for the purposes set out below. Personal data processed is not used for any purpose other than these, and where the purpose changes the Company takes the necessary steps, such as obtaining separate consent.

1. Registration and account management — confirming the intention to register, identifying and authenticating users, maintaining and managing membership, verifying the consent of the legal guardian of children under 14, and issuing notices and communications.
2. Delivery of the class service — matching with Teachers, booking, delivering and recording attendance for classes, providing class feedback comments, level assessment and learning management, and providing learning materials and curriculum.
3. Review and quality control — providing playback and transcripts of class recordings (for classes delivered with the Company’s own video class tool only) and reviewing class quality.
4. Provision of AI practice features — conversation practice and review with an AI tutor and analysis of learning data.
5. Payment and settlement — payment for lesson packages and Tickets, refund processing.
6. Customer support — handling enquiries and complaints and retaining records for dispute resolution.
7. Service improvement and statistics — analysing access logs and compiling Service usage statistics (pseudonymised or anonymised where possible).
8. Marketing and advertising (with optional consent) — information about events and benefits and delivery of promotional messages.

a. Data collected

b. How data is collected

Entered directly by the user during registration, profile setup, payment and support; generated and collected automatically while classes and AI learning are used; and collected through automatic collection tools such as cookies.

1. The Company processes and retains personal data within the period prescribed by applicable law or the period consented to by the user.
2. Member information is retained until the Member withdraws and is destroyed without delay on withdrawal. The following are exceptions:

To prevent misuse, the Company may retain, in accordance with its internal policy, the minimum identifying information of a withdrawn Member (the identifier of the closed account, the date and time of withdrawal and the reason).

The Company processes users’ personal data only within the scope of the purposes set out in section 1 and discloses it to third parties only with the user’s consent or where there is a legal basis for doing so.

In order to provide the Service, the Company transfers personal data overseas (by disclosure, outsourcing and storage) as set out below. Users may refuse the overseas transfer by contacting the data protection officer (section 12); in that case, use of all or part of the Service (classes with overseas Teachers, AI features and the like) may be restricted.

In order to deliver the Service smoothly, the Company outsources the processing of personal data as set out below. Outsourcing agreements provide for compliance with data protection law, restrictions on sub-processing and supervision, among other matters; where a processor changes, this will be disclosed through this Policy.

1. Where personal data becomes unnecessary — because the retention period has elapsed, the purpose of processing has been achieved or for similar reasons — the Company destroys it without delay.
2. Information that must be retained under applicable law is moved to a separate database or stored in a different location.
3. Method of destruction — electronic files are deleted using technical methods that prevent recovery, and printed documents are shredded or incinerated.

1. Users may at any time request the Company to give access to, correct, delete or suspend the processing of their personal data.
2. These rights may be exercised through the account settings in the student portal, by email (team@plazmaenglish.com) or through customer support, and the Company acts on the request without delay.
3. For children under 14 years of age, these rights may be exercised by the legal guardian.
4. These rights may also be exercised through an agent (on submission of a letter of authority).
5. Requests for access and similar requests may be restricted where another law contains special provisions to that effect.

1. Where the learner is a child under 14 years of age, registration as a Member and entry of the student’s information are carried out directly by the legal guardian.
2. Where the date of birth entered in the profile indicates a child under 14 years of age, the Company at that point verifies that the person registering is the legal guardian of that student and obtains consent to the processing of the child’s personal data.
3. At the stage described in paragraph 2, the Company also explains which services are not available to Members under 14 years of age (features involving open posting between users, such as the community, and Group Classes intended for adults).
4. Information collected in order to verify the legal guardian is not used for any purpose other than that verification.
5. Where children are informed about the processing of their personal data, easily understandable language is used.

1. The Company uses cookies in order to provide users with a tailored service. A cookie is a small piece of information that the server operating the website sends to the user’s browser and that is stored on the user’s device.
2. Purpose of use — keeping users signed in (automatic login) and improving the Service through analysis of usage patterns.
3. Users may refuse the storage of cookies or delete them through their browser settings. However, if the storage of cookies is refused, some services that require a login may be difficult to use.

The Company takes the following measures to secure personal data.

1. Administrative measures — establishing and implementing an internal management plan, minimising the number of staff who handle personal data and training them.
2. Technical measures — managing access rights to personal data processing systems, storing passwords with one-way encryption, encrypting data in transit (HTTPS) and retaining access logs.
3. Physical measures — access control for the data storage facilities (cloud).

Users may direct all enquiries, complaints and requests for redress relating to data protection that arise while using the Service to the data protection officer, and the Company responds to and deals with them without delay.

Reports and enquiries concerning infringement of personal data may be made to the following bodies in the Republic of Korea.

1. This Privacy Policy applies from 1 September 2026.
2. Where content is added, removed or amended, this will be announced through the Service at least 7 days before it takes effect (at least 30 days before, where the change materially affects users’ rights).
3. Earlier versions of this Privacy Policy can be found below. (No revision history — first issue.)