GOINMUL / GLORYSTONE
Privacy Notice
Effective and last updated: 28 September 2026
During preparation of the service, GOINMUL handles accounts, instructor applications, course drafts and enquiries. This notice explains current processing and how to exercise your rights.
Your language choice does not determine your residence or applicable law. The regional rights below apply according to your location and the actual service relationship.
- Operator
- GLORYSTONE
- Business representative
- JEONGWU SEOK
- Business address
- 514-2102, 345 Songpa-daero, Songpa-gu, Seoul, Republic of Korea
- Business registration number
- 215-26-31274
- Customer support and privacy email
- mail@goinmul.co
1. Operator and scope
GOINMUL is operated by GLORYSTONE. Personal data for the current service is processed on our operating servers in the Republic of Korea. Use the operations contact below for privacy requests. This notice covers students, instructors and visitors to goinmul.co.
2. Information and purposes
Do not submit identity documents, national identification numbers, card or bank details, PayPal passwords, sensitive information or unnecessary information about others through the current forms.
- Accounts: name, email, a one-way password hash, account role and creation/change timestamps for identification, sign-in and account administration.
- Instructor applications: country, expertise, portfolio URL, experience, rights confirmation and consent timestamps, review status and notes to assess eligibility and rights to materials.
- Course drafts: instructor-linked titles, descriptions, languages, prices and preparation status for course preparation and management. Drafts are not currently available for sale or enrollment.
- Enquiries: name, email, message, submission time and handling status to respond and manage requests.
- Technical and security data: IP address, browser information, session identifiers, request paths/times, error and security records may be used to maintain sign-in, prevent abuse and resolve faults. Data comes from your submissions and use of the service.
3. Legal grounds and choices
Data necessary for accounts, applications and enquiries is processed to enter into or perform the service you request, including preparatory steps. Security and abuse prevention rely on legitimate interests where applicable law permits, and on duties to safeguard data, with effects on your rights kept to a minimum. Processing required by law relies on that legal obligation.
Where consent is required for a separate purpose, we first explain the purpose, data and retention and obtain consent. Refusing optional processing does not disadvantage access to essential services. Without necessary account or application information, we may be unable to provide that function. Acknowledging this notice is not blanket consent to advertising or future AI processing.
5. Retention and deletion
Deletion requests are currently handled by an operator after checking identity and retention grounds. Self-service account closure and a fixed automated purge cycle for accounts, logs and backups are not yet available. Electronic records are deleted or made difficult to recover. Backups have restricted access; the scope and schedule, including backups, are explained when handling a deletion request. Completed deletion requests must also be reapplied after restoration.
- Account data is retained while needed to maintain and administer the account. Following closure, data without a legal retention ground becomes subject to deletion without undue delay.
- Application data is retained for review and related challenges; approved instructor data and drafts for the instructor relationship and course administration.
- Enquiry data is retained while needed to answer and handle follow-up requests. The need to retain security records is assessed against incident investigation and abuse prevention.
- Information needed for a legal obligation or an actual dispute is limited to the necessary categories and scope; the relevant basis and period are identified separately.
7. Rights and security
Subject to applicable law, you may request access or a copy, correction, deletion, restriction or suspension, consent withdrawal, objection and portability. Withdrawal does not affect lawful processing before withdrawal. We may minimally verify identity or authority. We respond within applicable legal deadlines and explain any refusal or extension and available challenge routes.
Operators review instructor applications. We do not currently make decisions based solely on automated processing that have legal or similarly significant effects. Safeguards include HTTPS, password hashing, restricted access, sign-in protection and separate backups. Incidents are handled and notified or reported as required by applicable law.
8. Additional regional rights
- Republic of Korea: the Personal Information Protection Act provides rights including access, correction, deletion, suspension and consent withdrawal. You can seek advice, report concerns or request mediation through the PIPC, the Personal Information Infringement Report Center or the Personal Information Dispute Mediation Committee.
- EU/EEA and United Kingdom: where GDPR or UK GDPR applies, rights include access, rectification, erasure, restriction, portability, objection and complaints to a supervisory authority. The normal response period is one month; legally permitted extensions are notified within that period. Relevant authorities include Spain’s AEPD, Italy’s Garante and the UK’s ICO.
- Japan: where APPI applies, you may request notification of purposes, disclosure of retained personal data and third-party provision records, correction, and statutory cessation of use, deletion or cessation of provision. Required information and consent rules apply to provision to overseas third parties. Japan’s PPC provides a consultation channel.
- Mainland China: where PIPL applies, rights include being informed, deciding, restricting or refusing, access and copies, correction, supplementation, deletion, consent withdrawal and explanation of processing rules. General acceptance of terms does not replace required separate consent. Required notices, consents, impact assessments, overseas provision procedures and designation/reporting of a mainland institution or representative must be addressed separately. This notice does not certify completion of those steps.
- United States and other regions: we respect rights under local laws where they apply to this service. Where California’s CCPA applies, these include knowing, deletion, correction, opting out of sale/sharing, limits on sensitive-data use and non-discrimination for exercising rights. We currently do not sell data or share it for behavioral advertising. Choosing English or Spanish does not by itself make one country’s law applicable.
9. Children and changes
This service is designed for people preparing for professional design education, not for children. Where parental consent is legally required, those requirements must be met. If we learn that a child’s information was collected without required consent, we take appropriate steps such as deletion. A separate parental consent and verification process is not currently available.
Material processing changes will be announced on this page and through appropriate in-service notices before taking effect. Fresh consent will be requested when required. Please check the effective and updated date above.
Contact and rights requests
Contact our operations team for access, correction, deletion or restriction of personal data, account closure, terms or copyright matters. The contact form requires no login. A member of the operations team reviews and handles each request.
Contact the operations team