Privacy policy
Glolink Education (the “Company”) complies with the Personal Information Protection Act (PIPA) and related laws, and processes personal data as set out below in connection with the Cambridge English and Linguaskill exam registration and operation services provided through Korea Cambridge Assessment Centre (cambridgeassessment.co.kr).
Article 1 (Purposes of processing)
The Company processes personal data for the following purposes and does not use it for any other purpose.
- Membership registration and management: identity verification, maintaining membership, preventing fraudulent use, and notices
- Exam registration and operation: candidate registration and identity verification, schedule notices, and exam supervision
- Score processing: calculating, issuing, and looking up scores and sending score reports
- Payment: processing and refunding exam fees and managing transaction records
- Customer support: receiving and handling enquiries and complaints and delivering announcements
Article 2 (Personal data items processed)
| Category | Items processed |
|---|---|
| Sign-up (required) | Name, email address, password |
| Exam registration (required) | Candidate name (Korean/English), date of birth, gender, mobile number, email, ID information, candidate photo, exam type and schedule |
| Minor candidates (required) | Legal guardian's name and contact |
| Payment (required) | Payment and refund information |
| Automatically collected | Access IP, cookies, access logs, device and browser information |
ID information and other unique-identifier or sensitive data are processed with the data subject's separate consent as required under PIPA.
Article 3 (Retention period and destruction)
The Company destroys personal data without delay once the processing purpose is achieved or the retention period lapses, and retains it for the required period where the law so requires.
- Member information: until account withdrawal
- Candidate sensitive / unique-identifier data (ID information, candidate photo, etc.): automatically destroyed after the exam (at midnight the day after the exam)
- Exam and score records: the period set by relevant laws and Cambridge retention policy
- Statutory retention: contract and payment records 5 years, consumer complaint and dispute records 3 years (E-Commerce Act), access logs 3 months (Protection of Communications Secrets Act)
- Method of destruction: electronic files are deleted so recovery is impossible; paper documents are shredded or incinerated
Article 4 (Provision to third parties and overseas transfer)
The Company does not provide personal data to third parties without the data subject's consent. However, for exam operation it provides personal data to Cambridge as follows, which constitutes an overseas transfer.
| Recipient | Country | Items | Purpose | Retention period |
|---|---|---|---|---|
| Cambridge University Press & Assessment | United Kingdom | Candidate English name, date of birth, gender, exam type and schedule, exam results | Candidate registration, marking, and score processing | The period under Cambridge retention policy |
Data subjects may refuse the above provision and overseas transfer; if they do so, use of services such as exam registration may be restricted.
Article 5 (Rights of data subjects and legal representatives)
Data subjects may at any time request to view, correct, delete, or halt the processing of their personal data and may withdraw consent.
- Rights may be exercised directly via My Page or by writing or email to the data protection officer, and the Company acts without delay.
- Rights may also be exercised through a legal representative or an authorised agent.
- For children under 14, personal data is processed with the legal representative's consent, and the legal representative may exercise these rights.
- Viewing, deletion, and other rights may be restricted under relevant laws.
Article 6 (Security measures)
- Administrative: establishing and implementing an internal management plan, staff training, and minimising access rights
- Technical: access control, encryption of personal data such as passwords, operation of security programs, and storage of access logs
- Physical: controlling access to areas where personal data is stored
Article 7 (Operation of cookies and how to refuse)
The Company may use cookies to keep login sessions and improve its services. Users may refuse cookie storage in their web browser settings; in that case, use of some services that require login may be restricted.
The Company uses Google Analytics to analyse site usage; information collected via cookies may be transferred to and processed by Google (in the United States). Users may refuse this via their browser's cookie settings or Google's opt-out tools.
Article 8 (Data protection officer)
For enquiries, complaints, or remedies regarding personal data processing, please contact the data protection officer below; the Company will respond and act without delay.
| Organisation | Glolink Education (Korea Cambridge Assessment Centre) |
| Phone | +82-2-6958-8991 |
| cambridge@glolinkeducation.com |
Article 9 (Remedies for infringement of rights)
Data subjects may apply to the following bodies for consultation or dispute mediation regarding infringement of their personal data.
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Privacy Complaint Centre (KISA): 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office Cybercrime Investigation Division: 1301 (www.spo.go.kr)
- National Police Agency Cyber Investigation Bureau: 182 (ecrm.police.go.kr)
Article 10 (Changes to this privacy policy)
This policy applies from its effective date; any change will be announced on this page at least 7 days before it takes effect.
- Notice date: 8 July 2026
- Effective date: 8 July 2026
* This policy may be revised in line with changes to relevant laws or Company policy. Any change will be announced on this page together with its effective date.