Legal
Privacy Policy
Onsil ("we") respects your privacy and handles personal information in accordance with the Korean Personal Information Protection Act (PIPA) and, where applicable, the EU General Data Protection Regulation (GDPR). This page explains what we collect, why, how long we keep it, and your rights as a data subject. The Korean version of this policy is available at /ko/privacy.
1. Information we collect
- Site preferences (browser sessionStorage / localStorage): language preference (en/ko), theme, an "AI inbound" flag set when you arrive from ChatGPT, Gemini, Perplexity, or similar engines.
- Analytics cookies (Google Analytics 4): anonymized IP, page views, scroll depth, referrer, device class, language. We use IP anonymization and disable Google Signals.
- Inquiry form data (when you submit a booking request): name, email, optional phone, the message you write, and any reference image you attach.
2. Why we collect it
- To respond to your booking inquiry and design your commission.
- To understand how visitors discover and use the site, so we can improve the bilingual experience and the catalog presentation.
- To detect when visitors arrive via AI assistants — this is aggregate channel measurement only and is not linked to any individual.
3. How long we keep it
- Inquiry messages and attachments: 3 years from your last contact, then deleted.
- GA4 analytics: 14 months (Google's maximum), then automatically purged.
- Browser storage (preferences, AI inbound flag): cleared when you close the browser session, except language preference (up to 1 year).
4. Who we share it with
We do not sell or rent personal information. We share data only with the processors strictly necessary to operate the site:
- Google LLC (United States) — Google Analytics 4 measurement.
- Vercel Inc. (United States) — site hosting and request logs (retained 30 days).
Both processors are bound by their respective data processing agreements and standard contractual clauses where required.
5. Your rights
You have the right to:
- Access the personal information we hold about you
- Correct any inaccurate information
- Request deletion ("right to erasure")
- Restrict or object to certain processing
- Withdraw consent at any time (cookies, analytics, communications)
- Lodge a complaint with the Korean Personal Information Protection Commission (PIPC, pipc.go.kr) or, for EU/UK residents, your local data protection authority.
To exercise any right, email studio@onsil.ink with the subject line "Privacy Request". We respond within 14 days.
6. Children
Onsil's services are restricted to adults (19+) in accordance with Korean law on tattooing. We do not knowingly collect personal information from anyone under 19. If you believe a minor has submitted information, contact us at the email above and we will delete it.
7. Personal Information Protection Officer (PIPA § 31)
- Officer: Haesol Choi (founder, Onsil)
- Contact: studio@onsil.ink
- Available languages: English, Korean
8. Updates to this policy
We may update this policy as our practices change. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be announced via a site banner for at least 14 days before taking effect.
9. Cookie summary
| Cookie / Storage | Purpose | Type | Retention |
|---|---|---|---|
| onsil_lang | Language preference | localStorage | 1 year |
| onsil_ai_inbound | AI referrer flag (channel attribution) | sessionStorage | Session only |
| _ga, _ga_* | Google Analytics — visitor identification | cookie | 2 years |
| _gid | Google Analytics — session identification | cookie | 24 hours |