Privacy Policy

Article 1. Consent to Collection and Use of Personal Information

HYPEWEDDING and HYPESNAP are brand names operated by HYPEPIG ("we," "our," or "us"), which collects and uses your personal information only after you have agreed to this Privacy Policy. By clicking "Agree," submitting an inquiry, or booking our services, you are considered to have consented to the collection and use of your personal information as described below.

Article 2. Personal Information Items Collected and Purpose of Use

"Personal information" means information relating to a living individual that identifies that individual, whether directly or in combination with other information. We collect and use the following personal information for the following purposes:

(1) Inquiry and Consultation

Items collected: name, email address, phone number, or your Instagram handle and message content if you contact us via Instagram Direct Message
Collection channels: our website contact form, email, or Instagram Direct Message
Purpose: responding to inquiries and providing consultation on our photography services
Retention: 3 years after last contact, then destroyed

(2) Booking and Service Provision

Items collected: name, email address, phone number, mailing address, wedding date, venue, preferred photography style, guest count, special requests
Purpose: scheduling and providing photography services, delivering photo galleries, customer support
Retention: 3 years after service completion for booking records; wedding photo files are retained 7 years after service completion for backup and legal purposes, unless you request earlier deletion

(3) Payment

Items collected: payment confirmation details from bank transfer, PayPal, or (only where you specifically request it) Wise, including transaction reference and billing address
Purpose: processing payment and issuing invoices/receipts
Retention: 5 years, as required under the Korean Commercial Act and tax law
Note: we do not directly collect or store your card number — card payments are handled directly on PayPal's own secure systems

(4) Identity Verification (only where required)

Items collected: scanned ID card, driver's license, or passport
Purpose: verifying identity where legally or contractually necessary
Retention: destroyed immediately once verification is complete, unless longer retention is required by law

Article 3. Cookies

Our website uses only essential cookies required for basic functionality, such as contact and booking forms. We do not currently use analytics, advertising, or tracking cookies. You may block cookies through your browser settings, though this may affect certain website functions.

Article 4. Retention Period and Destruction of Personal Information

1) We destroy your personal information without delay once the purpose of collection has been achieved, except where longer retention is required under the following statutes:

Records on contracts / withdrawal of offers: 5 years (Act on Consumer Protection in Electronic Commerce)
Records on payment and supply of services: 5 years (same Act)
Records on complaint or dispute resolution: 3 years (same Act)
Website access logs: 3 months (Protection of Communications Secrets Act)

2) Destruction procedure and method:

Procedure: information is moved to a separate, access-restricted location, retained only for the required period, and then destroyed. It is not used for any other purpose during this period.
Method: paper records are shredded or incinerated. Electronic files are deleted using methods that prevent recovery.

Article 5. Provision of Personal Information to Third Parties

We do not provide your personal information to third parties, except:

With your prior consent
When required by law or requested by a competent authority through lawful procedures
Where information is anonymized or aggregated such that no individual can be identified

Article 6. Outsourcing of Personal Information Processing

We outsource part of our personal information processing to the following providers, limited to what is necessary for the stated purpose:

Google LLC (Google Drive / Google Workspace) — cloud storage of photo files and email communication
PayPal, Inc. — payment processing
Wise — payment processing, only where you specifically request a Wise transaction

The list of outsourced providers may change; we will notify you of material changes in advance.

Instagram (operated by Meta Platforms, Inc.) is not engaged by us as a data processor under this Article. Where you contact us via Instagram Direct Message, see Article 7 for how that information is handled.

Article 7. Overseas Transfer of Personal Information

Because the providers listed in Article 6 operate outside Korea, some of your personal information may be transferred to and processed in:

United States (Google LLC; PayPal, Inc.)
United Kingdom / European Union (Wise, only where used)
United States / Ireland (Meta Platforms, Inc., only where you contact us via Instagram Direct Message)

Method of transfer: electronic transmission via each provider's platform.

Items transferred: as listed in Article 6 for each provider, limited to what that provider needs to perform its function.

We transfer this information because it is necessary to perform services you requested (storing and delivering your photos, and processing your payment), or because you have chosen to contact us through a particular channel (for example, Instagram Direct Message). We rely on each provider's own compliance with applicable data protection safeguards, including Standard Contractual Clauses. The European Commission's adequacy decision for South Korea (effective December 2021) also facilitates the transfer of personal data from the EEA to us.

You may request further details of a specific transfer, or object to it, by contacting us using the details in Article 12; note that some services cannot be provided without limited use of these providers.

Article 8. Access, Correction, Deletion, and Withdrawal of Consent

You may access, correct, or request deletion of your personal information, and withdraw your consent to its collection and use, at any time by contacting us at privacy@hypewedding.com. We will take the requested action without undue delay, and will notify any third party who received incorrect information of the correction.

Article 9. Security Measures

We take the following measures to protect your personal information:

Passwords are stored using one-way hashing (bcrypt) and are never stored or transmitted in plain text
Sensitive personal information (such as phone number and date of birth) is encrypted at rest using AES-256-GCM
All communication between your browser and our servers is encrypted via HTTPS/SSL/TLS
Rate limiting is applied to login and account-creation endpoints to prevent brute-force and automated abuse attempts
Access to personal information is limited to staff who need it to perform their duties
Regular monitoring of our systems to help prevent unauthorized access

Article 10. Use of Wedding Photographs

Where you give explicit consent, we may use your wedding photographs in our portfolio, on our website, and on social media (such as Instagram and Facebook), and in wedding industry publications, for the purpose of promoting our services. You may withdraw this consent, or request that specific photographs not be used publicly, at any time by contacting us at privacy@hypewedding.com.

Article 11. Children's Privacy

Our services are not directed at individuals under 14 years of age, and we do not knowingly collect personal information from children under 14 without the consent of a parent or legal guardian.

Article 12. Data Protection Officer

We have designated the following person as our Data Protection Officer, responsible for handling your personal information and any related complaints:

Company: HYPEPIG (operating HYPEWEDDING / HYPESNAP)
Name: LEE MIN JU and LEE SAE YOUNG
Title: Representative
Email: hypepig227@gmail.com

Article 13. Changes to this Privacy Policy

This Privacy Policy may be amended to reflect changes in our practices or applicable law. We will announce any material changes at least 7 days before they take effect via notice on our website.

This Privacy Policy is effective as of August 20th, 2026.