EN / RU / AR

ST AUTO — Privacy Policy

Publication edition | 14 October 2026
Effective date: upon publication on the ST AUTO website

1. Controller and Contact

ST AUTO is a trading brand operated by Hyun Trade (현무역), a sole proprietorship registered in the Republic of Korea, represented by SO IGOR. Business Registration No.: 527-18-01945. Registered address: 7F, Unit 715-Z4, 190, Gimpo Hangang 9-ro 75beon-gil, Gimpo-si, Gyeonggi-do, Republic of Korea. Contact: stauto.korea@gmail.com. The representative SO IGOR is the privacy contact for this business.

2. Personal Information Collected

Find Car: full name, country, preferred destination port, preferred contact channel and contact details, optional secondary contact, requested vehicle brand/model, year range, mileage, budget/currency and additional requirements. Vehicle Inspection: name, contact channel and contact details, vehicle listing URL and comments/instructions. Operational records may include a request ID, submission date, status and communications about the inquiry. Information voluntarily written in free-text fields may also be received. Technical information needed to operate the site may be processed by hosting providers.

3. Purposes and Legal Grounds

Information is used to respond to customer inquiries, locate vehicles, prepare estimates, arrange agreed inspections, coordinate subsequent purchases and export services, administer records, prevent abuse and comply with law. ST AUTO relies on an applicable legal basis under the Korean Personal Information Protection Act (PIPA), including steps requested before a contract, performance of a contract, legal obligations or consent where required. Form submission does not enroll the customer in marketing.

4. Operational Systems and Access

The ST AUTO website is built on Framer. Form submissions are transmitted to a Make EU1 webhook, which routes operational information to Gmail, Google Sheets CRM and a private Telegram staff group. The Google account is a consumer account, not Google Workspace. The CRM has restricted sharing access. Telegram staff notifications may currently include names and contact details. Access is intended to be limited to personnel involved in responding to inquiries.

5. Overseas Processing and Transfer

The website and request-handling systems use services operated internationally. Framer is based in the Netherlands; Make is configured to the EU1 region. Google consumer services and Telegram may process or store information across multiple jurisdictions, and their precise data-center countries for each request are not verified. These facts do not establish a complete overseas-transfer notice under Korean PIPA Article 28-8. Before processing live requests, ST AUTO must publish or provide, as legally required for each relevant transfer, the overseas recipient and contact, country, items transferred, time and method, purpose, retention period, applicable transfer basis, and any refusal mechanism and consequences; obtain separate consent where required. Until those requirements are met, the site should not accept real customer personal information.

6. Third Parties

Where needed to deliver a separately agreed service, relevant information may be shared with inspection providers, logistics partners, shipping agents, customs-related providers and other authorized service partners on a valid legal basis and with any required notice or consent. ST AUTO does not sell customer personal information.

7. Retention

Routine inquiries are reviewed for deletion no later than 12 months after the last substantive activity, unless they must be retained for an ongoing request, legal obligation or dispute. Where the purpose of processing ends earlier and no exception applies, data should be deleted without undue delay. Transaction, accounting and tax records may be subject to separate statutory retention requirements. Provider-side backup and log retention may differ.

8. Deletion and Internal Controls

ST AUTO has adopted an internal procedure requiring periodic review of records and deletion of eligible data from its CRM, Gmail, Telegram notifications and Make logs insofar as technically possible, with separate treatment of legally retained records. The procedure requires implementation and ongoing documentation; it should not be interpreted as a claim that all systems automatically delete records after 12 months.

9. Security

ST AUTO restricts CRM sharing and uses a private staff group for operational notifications. Its internal rules require appropriate access control, credential security, periodic review of access and handling of incidents. No internet service is completely secure.

10. Your Rights

Depending on applicable law, individuals may request access, correction, deletion, suspension of processing or withdrawal of consent. Requests can be sent to stauto.korea@gmail.com. Reasonable identity verification may be required, and statutory exceptions may apply.

11. Cookies and Embedded Media

The website may use technical functions necessary to operate and may display embedded YouTube videos. Such third-party embeds may collect technical data or use cookies. Any nonessential cookies or tracking must be assessed on the deployed website and appropriate notice or consent implemented where required. ST AUTO does not currently plan advertising mailings based on inquiry forms.

12. Children

The website is intended for adults seeking vehicle-related services. ST AUTO does not intentionally solicit children’s personal information through general inquiry forms.

13. Policy Updates

This policy may be updated to reflect legal, operational or provider changes. Material changes will be announced as required by applicable law.

14. Contact

Privacy questions or rights requests: stauto.korea@gmail.com.