Privacy Policy
ESUNG IP&LAW FIRM (the "Firm") operates IP DABOM (the "Service"), a Korean trademark search and monitoring service. This policy is published under Article 30 of the Korean Personal Information Protection Act (PIPA). If this English version differs from the Korean version, the Korean version governs.
Effective October 14, 2026
1. Minimal collection
You sign up with an email address only. We do not use passwords, and we do not collect national ID numbers or sensitive information. Your trademark search keywords and reports are locked with a passphrase that only you know, so the Firm cannot read them.
2. What we collect, why, and for how long
| Category | Items | Purpose | Retention |
|---|---|---|---|
| Sign-up and log-in | Email address (required); name and phone number (only if you enter them); language setting; country code at sign-up | Identity check, log-in links, sending reports and alerts | Until you close your account |
| Staying logged in | Session cookie (random value; the server keeps only its hash) | Keeping you logged in | 30 days or until you log out |
| Log-in links | Hash of a one-time token | Email log-in | Valid for 15 minutes; deleted within 1 day after expiry |
| Abuse prevention | A salted hash of your IP address (the Firm does not store the IP address itself) | Rate limiting; blocking automated bulk requests | Deleted within 2 days |
| Duplicate sign-up prevention | A hash of browser characteristics (browser type, language, screen size, time zone, etc.) and your email address | Preventing repeated use of beta benefits | Email replaced with an irreversible value when you close your account; hash deleted within 1 year after that |
| Usage log | Member number, pages viewed, referrer, time | Troubleshooting; improving the Service | 90 days |
| Email delivery log | Recipient address, subject (encrypted), delivery result | Managing sending limits; troubleshooting | 1 year (the address is replaced with an irreversible value when you close your account) |
| Inquiries and patent attorney review requests | Email address, inquiry type, trademark name and application number (if given), message (encrypted) | Answering you; providing review opinions | Until you close your account |
| Trademark search | Keywords, spellings, related goods/services, reports, tracked trademarks saved from reports (all locked with your passphrase) | Periodic search reports; checking tracked trademarks for changes | Until you close your account |
| Tracked trademarks added directly | Application numbers (encrypted) | Alerts when examination status changes | Until you close your account |
| Payments | Plan, number of tracked trademarks, amount, currency, payment and refund dates, PayPal order, transaction and refund IDs, payment status (we do not receive card numbers) | Processing payments and refunds; receipts; keeping transaction records required by law | 5 years from the transaction (Korean Act on Consumer Protection in Electronic Commerce, Article 6, and its Enforcement Decree, Article 6), also after you close your account |
| Alert history | Summary and date of alerts sent | Avoiding duplicate alerts | 30 days |
Applicant names, application numbers and similar details shown in reports come from trademark gazettes published by the Ministry of Intellectual Property (MOIP). This policy covers the personal information of our members.
3. Legal basis
- Sign-up, log-in, trademark search, tracked trademarks and inquiries: performance of our contract with you (PIPA Article 15(1)(iv)).
- Payment records: performance of our contract with you (PIPA Article 15(1)(iv)) and compliance with the legal obligation to keep transaction records (PIPA Article 15(1)(ii)).
- Abuse prevention hashes, duplicate sign-up hashes, usage log and email delivery log: the Firm's legitimate interest in operating the Service safely (PIPA Article 15(1)(vi)). We convert identifiers into hashes and process only what is necessary.
4. Disclosure to third parties
We do not provide personal information to third parties, except where a law specifically requires it or an investigative authority requests it through lawful procedures.
5. Service providers and transfers outside Korea
We entrust the following tasks to providers outside Korea. Under PIPA Article 28-8(1)(iii)(a), we disclose the details here.
| Recipient (contact) | Country | Items | Purpose and retention |
|---|---|---|---|
| Cloudflare, Inc. privacyquestions@cloudflare.com | United States (servers in Cloudflare data centers worldwide) | All items in Section 2 (encrypted items stay encrypted) | Website operation, database storage, backup email sending, automated-traffic check (Turnstile). Until the contract ends or the Section 2 retention period passes |
| Sendinblue SAS (Brevo) dpo@brevo.com | France | Recipient email address, email subject and body | Sending log-in links, reports and alerts. Per Brevo's retention rules |
| PayPal Pte. Ltd. Domestic agent in Korea: PayPal Korea Services LLC, skrprivacy@paypal.com | Singapore | Plan, number of tracked trademarks, amount, currency and our payment reference (sent by us). PayPal collects your payment details directly from you under its own privacy statement, through the PayPal company that serves your country | Payment processing and refunds. Per PayPal's retention rules |
When and how: each time you use the Service or we send you an email, over encrypted connections (HTTPS).
How to refuse and its effect: if you do not want these transfers, do not sign up, or close your account. You will then be unable to use the Service.
Trademark searches run on a server that the Firm manages directly in Korea and are not outsourced.
6. Deletion
- Information past its retention period is deleted by an automatic daily check.
- When you click "Close account and delete data" in My reports, the information in Section 2 is deleted immediately. Items that Section 2 says are kept after closing have the email address replaced with an irreversible value.
- Electronic files are deleted so they cannot be recovered. Copies in disaster-recovery database backups are deleted within 30 days.
- Payment records are kept for 5 years from the transaction, as required by Korean e-commerce law, even after you close your account. They are kept separately and used only for that purpose.
7. Your rights
- You may request access to, correction of, deletion of, or suspension of processing of your personal information at any time.
- You can check your data and close your account in My reports, or email contact@ipdabom.com. We act on requests within 10 days of receipt and tell you the result.
- A legal representative or an authorized agent may also make requests; please send a power of attorney.
- Children under 14 may not sign up.
8. Security measures
- Encryption: trademark search keywords and reports are locked with your passphrase in your browser. Inquiries, directly added tracked trademarks and email subjects are encrypted on the server (AES-256-GCM).
- Encryption in transit: all connections use HTTPS.
- Pseudonymization: IP addresses and browser characteristics are stored only as salted hashes.
- Access control: only designated administrators can use the admin screen, with two-step verification by an authenticator app.
9. Cookies and automatic collection
- We use one session cookie to keep you logged in. We use no advertising cookies and no third-party analytics.
- If you choose "Remember on this device", the key unlocked by your passphrase stays only in this browser (IndexedDB). It is never sent to the server, and you can remove it with "Forget on this device".
- Our email provider (Brevo) adds an open-tracking element to emails. You can block it by turning off automatic image loading in your email app.
- The provider that runs the website (Cloudflare) may record your IP address and browser information in its server access logs, under its own retention rules.
- When you request a log-in code, or send an inquiry without logging in, Cloudflare (Turnstile) processes your IP address and browser information to check that the request is not automated. We receive only the result (pass or fail).
- You can refuse cookies in your browser settings, but you will not be able to log in.
10. Privacy officer
- Name: Youngbong Yoo (Representative, Korean patent attorney)
- Contact: +82-2-6949-4839, contact@ipdabom.com
Please contact us for any questions, complaints or remedies regarding personal information.
11. Other remedies (Korea)
- Personal Information Infringement Report Center (KISA): 118 (in Korea), privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: 1833-6972 (in Korea), www.kopico.go.kr
12. Changes to this policy
We announce changes on this page and in our notices at least 7 days before they take effect, or at least 30 days before and also by email if the change is unfavorable to you.