Collectible Con (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website or attend our events. The Seoul edition is co-hosted by The Concept Labs, ShardLab, and Hashed, which jointly process your registration data for the operation of the event. Personal data of users in Korea is processed in accordance with the Personal Information Protection Act of Korea (PIPA).

1. Information We Collect

We may collect the following information:

Personal Information: Name, email address, phone number
Transaction Information: Booth fee payments by vendors and payment confirmations (processed via third-party providers; general admission is free)
Technical Data: IP address, browser type, cookies, and analytics data
Event Participation Data: Attendance records, registration details

2. How We Use Your Information

We use your data to:

Process event registrations and vendor booth fee payments
Send confirmations, updates, and event-related communications
Provide customer support
Improve our website and event experience
Send marketing communications only where you have given prior opt-in consent (collected separately from required items; you may withdraw consent at any time)
Prevent fraud or abuse

3. Third-Party Services

We may share your data with:

Payment processors (e.g. Stripe or equivalent)
Email marketing platforms
Event check-in or ticketing systems
Analytics providers

These providers process data on our behalf and are required to protect your information.

4. International Data Transfers (Cross-Border Transfer of Personal Data)

Your personal data will be transferred to and processed outside of Korea. We obtain your separate, explicit consent for this transfer at the time of registration, with the following details disclosed:

Recipient: The Concept Labs (Thailand)
Country of transfer: Thailand
Items transferred: Name, email address, phone number, registration and payment records
Purpose: Event operation, registration management, and customer support
Retention period: As set out in Section 5 below

You may refuse consent to the cross-border transfer; however, in that case event registration may not be possible.

5. Data Retention

We retain personal data until the purpose of collection is achieved, and destroy it without delay thereafter, except where retention is required by Korean law, including:

Records on contracts and payments: 5 years (Act on Consumer Protection in Electronic Commerce)
Records on consumer complaints and dispute resolution: 3 years

6. Your Rights

You may:

Request access to your data
Request correction or deletion
Request suspension of processing
Withdraw consent for marketing

7. Cookies

We may use cookies to enhance your browsing experience and analyze website traffic.

8. Updates

We may update this policy from time to time. Material changes affecting your rights will be notified, and where required by law, your renewed consent will be obtained.