1. Purposes of processing
ONIUM processes personal data for the following purposes:
- Receiving study-abroad, admission, and partnership inquiries; identifying and responding to the requester
- Pre-screening applicant eligibility and documents, and supporting university applications and admission procedures
- Preparing and guiding visa, change-of-status, and part-time work-permit procedures
- Operating TOPIK fee support, reimbursements, and other services for ONIUM students
- Communicating with universities, competent authorities, diplomatic missions, and relevant partners
- Handling complaints and disputes and maintaining service quality and security
ONIUM uses personal data only within the stated purposes or a reasonably related scope. If a purpose materially changes, ONIUM will obtain consent or take another measure required by applicable law.
2. Personal data and collection methods
| Activity | Data that may be processed | Collection method |
|---|---|---|
| Consultations and inquiries | Name, organization, email address, telephone or WhatsApp number, inquiry details | Email, telephone, online forms |
| Admission and study-abroad applications | Agency information, intended program and university, passport name, nationality, gender, date of birth, passport number, photograph, address, telephone, email, education, grades, graduation information, experience, statement of purpose, signed documents | Tally forms, email, submitted documents |
| Family and financial review | Family relationship, family members’ names, dates of birth, occupations, contact details and income; family certificates, parents’ ID documents, bank-balance and financial records | Online forms and uploaded documents |
| Visa, stay, and part-time work support | Copies of passport and Alien Registration Card, enrollment, attendance and grade records, language scores, employment contract, workplace business registration, employer verification records, and documents required by authorities | Notion forms, email, submitted documents |
| TOPIK support | Name, university and program, contact details, official score report, bank name, account number and account holder | Notion forms |
| Automatically generated data | IP address, access logs, device and browser information, cookies and similar service-usage data | Generated by web servers and external form services |
Government-issued unique identifiers and sensitive data are processed only when required by law or supported by separate consent. Submit copies of passports, Alien Registration Cards, and other identity documents only when necessary.
Do not submit passwords for HiKorea or any other external service through a web form or email. If authentication is necessary, follow ONIUM’s separate instructions for a safer procedure.
You may refuse to provide personal data. However, if required information is not provided, ONIUM may be unable to deliver the requested consultation, admission or visa support, or reimbursement.
3. Retention periods
ONIUM generally deletes personal data without undue delay when the processing purpose has been fulfilled. The standard operational periods are:
| Record type | Default retention period |
|---|---|
| General inquiries and consultation records | One year after the consultation ends |
| Withdrawn or inactive applications | One year after withdrawal or the last activity |
| Admission, visa, and student-management records | Three years after the relevant application or service ends |
| Reimbursement, payment, and accounting records | Five years after processing |
If applicable law, a university or authority requirement, a dispute, or separate consent requires longer retention, ONIUM will isolate the data, retain it for the required period, and then delete it.
5. External services
ONIUM uses the following external services as work tools for online applications, document management, and email communication.
| Service | Purpose and data processed | Retention basis |
|---|---|---|
| Tally | Admission applications and file uploads; information and files submitted through the form | Until ONIUM deletes the information or closes the service account |
| Notion | Student-support information, applications, and file management; information and files submitted through the form | Until ONIUM deletes the information or closes the service account |
| Email communication and document or file management; email address, inquiry and case content, and attachments | Until deletion after the purpose is fulfilled or the service account is closed |
Each external service’s own privacy policy and terms may apply to processing performed by that service. ONIUM uses these services only to the extent needed for its work and manages access permissions and retained information.
6. Deletion procedures
When a retention period expires or a processing purpose is fulfilled, ONIUM deletes personal data in a way intended to prevent recovery or reproduction.
- Electronic files: permanently deleted using a method designed to prevent recovery
- Paper records: shredded or securely destroyed
- Records that must be retained by law: separated from active records and deleted after the required period
7. Your rights and how to exercise them
You may request access to, correction or deletion of, or restriction of processing of your personal data, or withdraw consent. A legal representative may exercise rights where permitted by law.
Requests may be sent to the privacy contact below by email or telephone. ONIUM will verify the requester and respond under applicable procedures and time limits. A request may be limited where retention is required by law or where it would adversely affect another person’s rights.
8. Security measures
- Restricting access to personnel who require it for their work
- Reviewing accounts and permissions and protecting passwords
- Using technical safeguards, including encryption in transit where available
- Securely storing records and deleting them after the retention period
- Training personnel and maintaining an incident-response process
10. Personal data of children under 14
If ONIUM needs to process personal data of a child under 14, it will verify consent from the child’s legal representative. If that consent cannot be verified, ONIUM will not collect the information or will delete it without undue delay.
11. Privacy contact
For privacy questions, rights requests, or concerns, please contact:
ONIUM Co., Ltd.
Representative: SON JEONGIN
Suite 1903, Building TB, 81 Gongdan-ro,
Gunpo-si, Gyeonggi-do 15848, Republic of Korea
Email requests will be reviewed and handled in order.
12. Changes to this Policy
If this Policy changes, ONIUM will publish notice through its website before the change takes effect. Material changes involving processing purposes, external-service use, or individual rights may be announced separately where required by applicable law.
September 23, 2026