Privacy policy
SOTO LAB SL. (Nara Education · NARADocs) (“Nara Education”) processes the personal data of users of naraeducation.com in accordance with the Personal Information Protection Act of the Republic of Korea.
Effective date: 2026-10-10
1. Personal data processed and purposes
Nara Education processes the personal data below only to answer consultation requests and to provide saving features to logged-in members.
Category Data Purpose Required Name, email (optional: KakaoTalk ID or phone number) Receiving and answering consultation requests Optional Areas of interest, planned departure date, content of the enquiry Preparing a suitable consultation Members (optional) Email, login method (email, Kakao, Google), the account name (nickname) if logging in with Kakao or Google, saved schools, family criteria (values chosen by the user in the school comparison, such as children’s ages) Login, continuing on other devices, showing the status of submitted enquiries School admission (optional, with parental consent) Child’s name, name in Latin letters, date of birth, nationality, current school, grade, English level and desired start date; parent’s name and contact details; documents uploaded by the user to the document box (ID photo, school reports, vaccination records, etc., and a passport copy only if the user wishes) Admission enquiries and applications to the chosen schools (only the documents selected at the time of applying are sent to the school) Launch notifications (optional) Email, record of consent to receive marketing communications NARADocs launch announcement email (only if separately consented to via ‘Get launch notification’ at the top of the home page) Consultation assistant (optional) Questions typed into the assistant window Answering questions immediately (used only to generate the answer and not stored — please do not enter personal data) Collected automatically Access logs (IP address, time of access, browser information) Security and prevention of fraudulent use You can receive a consultation without filling in the optional fields and without signing up. Please do not include sensitive information such as passport numbers in your enquiry. Member accounts are the same accounts as on NARADocs (naradocs.com).
2. Retention periods and deletion
- Consultation requests: kept for 6 months from the date the consultation ends, then deleted automatically.
- Consultation assistant questions: not stored. To count the number of questions per day, only a fingerprint of the access address transformed with a value valid for that day only (from which the original address cannot be recovered) and the count are kept for two days.
- Launch notification emails: deleted 30 days after the launch announcement email is sent. Even before launch, they are deleted one year after the date of the request, and immediately if you ask to unsubscribe.
- Member information (email, saved schools, family criteria): deleted without delay when you request account deletion. Accounts that have not logged in for one year are deleted after notice by email 30 days before deletion.
- School admission information and documents (including passport copies): deleted together when the retention period chosen by the parent (immediately after the admission process ends · 7 days · 6 months) expires, and can be deleted at any time. If an admission process is in progress, deletion takes place once it has ended.
- Access logs: kept for up to 90 days for security and error checking, then deleted.
Deletion takes place automatically every day, using methods that make recovery impossible. Records of deletion keep only the date and the number of items, not names, contact details or content.
3. Disclosure to third parties
Nara Education does not provide personal data to other companies or individuals. The only exception is where this is required by law.
4. Processors and international transfers
To operate the Website, Nara Education entrusts the processing of personal data to the companies below. Data is stored in Seoul, Republic of Korea, but the server functions that receive and store enquiries and requests run in Japan (Tokyo). Processing is entrusted to each company under the standard data processing agreement (DPA) provided by that company.
Recipient (country) Task entrusted Data Retention period Supabase Inc. (USA; data stored in Seoul, Republic of Korea) Storage of consultation requests, member information and launch notifications; login Required, optional, member and launch notification data listed in section 1 Same as section 2 Netlify Inc. (USA; server functions run in Tokyo, Japan) Website hosting; transmission of enquiries and launch notification requests All data listed in section 1 (in transit), access logs Not kept after transmission; access logs per the provider’s retention period Anthropic PBC (USA) Generating answers for the consultation assistant (AI) Questions typed into the assistant window (in transit) Not stored by Nara Education after the answer is generated; provider’s retention period Resend Inc. (USA) Sending emails to members, about enquiries and admission progress; application emails to schools and referees (including attachments chosen by the customer); login emails, staff notifications and launch announcements Recipient’s email and name, content of enquiries and admission progress, application forms and attachments chosen by the customer, launch notification emails Provider’s retention period after sending Google LLC (USA) · Kakao Corp. (Republic of Korea) — only if that login method is chosen Login verification Email, name (nickname) Each company’s privacy policy International transfers take place at the time an enquiry is sent, over encrypted connections (HTTPS). If you do not wish your data to be transferred abroad, you can contact us directly by email (info@naraeducation.com) instead of sending an enquiry.
5. Rights of data subjects
You may at any time request access to, rectification or erasure of your personal data, or that its processing be stopped. If you send a request by email to the data controller below, it will be handled without delay (within 10 days) and you will be informed of the outcome.
For children under 14, consultation requests must be made directly by their legal representative.
6. Security measures
- All communications are encrypted (HTTPS).
- Consultation requests can be viewed only by the staff in charge through personal accounts, and access to the database is restricted at row level.
- A record is kept of staff handling of enquiries.
- Data is deleted automatically once the necessary period has passed.
7. Cookies
The Website does not use cookies for advertising or visitor analytics. For details, see the Cookie policy.
8. Data controller
- Legal name: SOTO LAB SL. (Nara Education · NARADocs)
- Address: Calle Sierra de Ancares 8, 28760 Tres Cantos, Madrid, Spain
- Email: info@naraeducation.com
9. Help with infringements of your rights
- Personal Information Infringement Report Center (privacy.kisa.or.kr, call 118 from Korea, no area code)
- Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972)
- Supreme Prosecutors’ Office, Cyber Investigation Division (www.spo.go.kr, call 1301 from Korea, no area code)
- Korean National Police Agency, Cyber Investigation Bureau (ecrm.police.go.kr, call 182 from Korea, no area code)
10. Changes to this policy
If this policy changes, the change will be announced on the Website at least 7 days before it takes effect. Significant changes, such as to the data collected or the purposes of use, will be announced 30 days in advance.
