Privacy Policy
Morgan provides the highest standard of legal service in the field of international law.
Morgan Law Office (hereinafter the "Firm") values your personal information and complies with the personal information protection provisions of the applicable laws that information and communications service providers must observe, including the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Personal Information Protection Act, the Protection of Communications Secrets Act, and the Telecommunications Business Act. Through this Privacy Policy, the Firm informs you of the purposes and manner in which the personal information you provide is used, and of the measures taken to protect it.
This Privacy Policy may be amended from time to time due to revisions of applicable laws and guidelines or changes to the Firm's internal policies, and the Firm maintains the procedures necessary for its continuous improvement. When this Privacy Policy is amended, the Firm posts the changes on its website so that you can readily identify what has been revised. Please check the policy from time to time when you visit the site.
1. Personal Information Collected and Methods of Collection
(1) Items Collected, Purpose of Use and Retention Period
a. When you submit an online inquiry
Items collected: (Required) Name, email address, subject, inquiry details (Optional) Mobile phone number, practice area ※ If you use the "Quick Inquiry" form on the website, only your name, contact details (email address or mobile phone number) and inquiry details are collected.
Purpose of use: Receiving and responding to your inquiry, and reviewing inquiry history
Retention period: One year from the date of submission Once this period has passed, your name, contact details, subject and inquiry details are destroyed beyond recovery.
*Where an inquiry leads to an engagement, materials relating to the case are stored and managed separately from the inquiry records above. Where records must otherwise be preserved under applicable laws, they are stored separately for the period prescribed by those laws (see Section 3 below).
b. Items generated and collected automatically in the course of using the service
Items collected: Cookies, and an irreversibly transformed value derived from your IP address (an identifier used for rate limiting) ※ The IP address itself is not stored.
Purpose of use: Reviewing service usage statistics, and blocking unauthorized bulk submissions through the inquiry form
Retention period: The rate-limiting identifier is destroyed automatically within two days of its creation You may delete cookies or refuse their storage at any time in your browser settings (see Section 7 below).
c. Access logs of the personal information processing system
Items collected: Staff account, date and time of access, access location information, the data subject records handled, and the task performed
Purpose of use: Checking for misuse or abuse of personal information and for any loss, theft, leakage, forgery, alteration or damage
Retention period: Two years (Article 8 of the Standards for Measures to Secure the Safety of Personal Information)
(2) Methods of Collection
The Firm collects personal information through the online inquiry form on its website and through telephone consultations. It does not collect personal information through any other channel, and the website has no membership registration process.
2. Sharing and Provision of Collected Personal Information
Except where this Privacy Policy expressly provides otherwise, the Firm uses your personal information only within the scope set out in the purposes of collection and use stated in this Privacy Policy, and does not use it for any other purpose or provide it to third parties without your prior consent. This does not apply where there is a legal basis for doing so, such as where you have given prior consent, or where a government agency or investigative authority with lawful authority makes a request in accordance with the procedures and methods prescribed by law.
3. Retention and Use Period of Personal Information
The Firm uses your personal information only within the scope notified to you at the time of collection, and does not use it beyond that scope without your prior consent. As the website has no membership registration process, retention periods are determined not by any membership status but by the per-item periods set out in Section 1(1). If you request deletion, the information is destroyed in a manner that makes recovery or reproduction impossible, and destroyed information cannot thereafter be accessed or used.
Once the purpose of collection and use has been achieved, or the retention period notified in Section 1(1) has elapsed, the Firm destroys the personal information within five days of the date on which that ground arose. Where records must be preserved under applicable laws, however, they are stored separately for the periods prescribed by those laws as set out below, and in such cases the Firm uses the stored information solely for the purpose of that preservation.
Access logs of the personal information processing system: two years (Article 8 of the Standards for Measures to Secure the Safety of Personal Information)
Materials relating to a case where an inquiry led to an engagement: retained after the case closes in accordance with the Firm's internal rules, and managed separately from online inquiry records.
Other records subject to a statutory preservation obligation: the period prescribed by the applicable law
4. Procedures and Methods for Destroying Personal Information
The Firm automatically checks once a day for inquiry records that have passed the retention period notified in Section 1(1) and destroys them. Because no member of staff makes a separate decision about destruction, no personal information remains past its period. To prevent leakage of personal information, the Firm destroys personal information by the following methods.
Personal information stored as electronic files is deleted in a manner that makes recovery or reproduction impossible.
Personal information printed on paper is destroyed by shredding or incineration.
Inquiry records are destroyed by overwriting the name, contact details, subject and inquiry details beyond recovery. Only information that does not identify an individual (practice area, time of receipt, processing status) is retained, for the purpose of reviewing inquiry statistics and checking for conflicts of interest. The retained information alone cannot identify any particular individual.
5. Outsourcing of Personal Information Processing
Website developer: Kim Jae-hwan
Scope of outsourced work: website development and maintenance
To protect your personal information, the Firm handles and manages it directly. However, where the Firm determines that it is necessary to entrust your information to a specialist third party in order to provide professional services, it may outsource the processing of personal information as set out below, subject to your prior consent. In accordance with applicable laws, the Firm stipulates in such outsourcing agreements the matters necessary to ensure that personal information is managed safely. The Firm's outsourcing service providers and the scope of the outsourced work are as follows.
The outsourcing service provider above may access personal information to the extent necessary to perform the outsourced work. Even where such access is permitted, technical safeguards are applied so that personal information may be used only within the minimum scope of work required.
6. Rights and Obligations of Clients and Legal Representatives, and How to Exercise Them
You may at any time request access to, correction of, deletion of, or suspension of the processing of your personal information held by the Firm. As the website has no member accounts, please contact the personal information manager identified in Section 9 by telephone or email; your request will be handled without delay following identity verification. If you request correction of an error in your personal information, the Firm will not use or provide that information until the correction is complete. Where the Firm has already provided incorrect personal information to a third party, it will notify the third party of the outcome of the correction without delay so that the correction is made.
Where your representative exercises your rights on your behalf, such as by attending in person to request access or correction, the Firm verifies whether that person is genuinely your representative, and may require the production of documentation evidencing the representative relationship. Personal information terminated or deleted at the request of you or your legal representative is handled as set out in
7. Installation and Operation of Automatic Cookie Collection Devices, and How to Refuse Them
The Firm operates "cookies" and similar technologies that store and retrieve your information from time to time. A cookie is a very small text file sent to your browser by the server used to operate the website at http://www.morganlaw.co.kr, and is stored on your computer's hard disk. The Firm uses cookies for the following purposes.
Purpose of using cookies
The Firm uses Google Analytics and Google Tag Manager to review how the service is used, and cookies may be collected automatically in the process. Cookies collected are stored in your browser for a certain period, and you may delete them or refuse their storage at any time in your browser settings. You have the right to choose whether cookies are installed. Accordingly, by configuring the options in your web browser you may allow all cookies, be prompted each time a cookie is stored, or refuse the storage of all cookies. Please note that if you refuse the installation of cookies, you may experience difficulty using some services.
How to refuse cookie settings
For example, to refuse cookie settings you may select the options in the web browser you use so as to allow all cookies, be prompted each time a cookie is stored, or refuse the storage of all cookies. - Example (Internet Explorer): Tools at the top of the web browser > Internet Options > Privacy tab > Privacy level
8. Technical Measures
In handling your personal information, the Firm takes the following technical and administrative measures to ensure its safety and prevent loss, theft, leakage, alteration or damage.
Encryption of personal information: The contact details and inquiry content you enter when submitting an inquiry are stored in encrypted form. The stored values cannot be read without the encryption key, and decryption takes place only on the server, at the moment a member of staff views the inquiry. In addition, all communications between the website and the server are transmitted using encryption (HTTPS).
Measures against hacking: The Firm makes every effort to prevent your personal information from being leaked or damaged by hacking, computer viruses and the like. Data is backed up regularly in case of damage to personal information; up-to-date anti-virus software is used to prevent clients' personal information and data from being leaked or corrupted; and encryption and similar measures are used so that personal information can be transmitted safely over the network. The Firm also controls unauthorized external access using an intrusion prevention system, and endeavours to put in place every technical measure available to secure the system.
Minimizing and training staff who handle personal information: Staff who handle personal information are limited to those whose duties require it. They are issued separate passwords for this purpose, which are updated regularly, and ongoing training emphasizes compliance with this Privacy Policy at all times.
Retention and review of access logs: A record is kept automatically whenever a member of staff views or modifies an inquiry, and the Firm reviews these records regularly to check for misuse or abuse of personal information. These records are stored separately so that they cannot be forged or altered.
9. Complaint Services Concerning Personal Information
To protect your personal information and handle complaints relating to it, the Firm has designated the following department and personal information manager.
Personal information manager
Manager: Lee Da-ye
Telephone: 02-735-3300
E-MAIL : contact@morganlaw.co.kr
You may report any personal information protection complaint arising from your use of the Firm's services to the personal information officer or the responsible department. The Firm will respond promptly and fully to matters reported by users. If you need to report or seek advice on other infringements of personal information, please contact the organizations below.
Personal Information Dispute Mediation Committee (www.1336.or.kr/1336)
Supreme Prosecutors' Office Internet Crime Investigation Center (http://icic.sppo.go.kr/02-3480-3600)
National Police Agency Cyber Terror Response Center (www.ctrc.go.kr/02-392-0330)
The Firm operates a client service desk to handle client complaints. Its hours and contact details are as follows.
Hours: 9:00 a.m. to 6:00 p.m. (excluding weekends and public holidays)
Telephone: 02-735-3300
Registered mail: Room 406, Jinhak Hall, 38 Jongno 3-gil, Jongno-gu, Seoul, Republic of Korea
Other inquiries: You may submit inquiries through the client support (or client service) page of each website.
If you require further advice concerning personal information, you may contact the Privacy Infringement Report Center (telephone: 118 or 1336) operated by the Korea Internet & Security Agency (KISA).
Notice Regarding Links to Other Sites
The Firm may provide you with links to the websites or materials of other companies. In such cases the Firm has no control over those external sites and materials, and therefore cannot be held responsible for, or guarantee, the usefulness, accuracy or lawfulness of any service or material obtained from them. If you visit a page on another site through a link included by the Firm, that site's privacy policy is unrelated to the Firm, so please review the policy of the site you have newly visited.
In addition, where content is added to, deleted from or amended in this Privacy Policy, notice will be given through the website within seven days.
Privacy Policy revised and effective as of: October 1, 2026