Last updated 2026-01-09

Privacy Notice

Your Rights and Controls

Depending on your relationship with us and applicable law, you may request access, correction, deletion, restriction, or portability regarding personal data we control. Requests should include reasonable identity verification. We respond within timelines required by Korean privacy regulation where applicable, and communicate any lawful reasons for partial denial. Where processing is based on consent, you may withdraw consent without affecting prior processing that was lawful at the time. You may lodge a complaint with competent supervisory authorities subject to local procedures.

Data Controller Contact

Northstar Fractional CIO coordinates privacy inquiries at welcome@brilliant-grid.one. Postal correspondence may be directed to 12 Teheran-ro 26-gil, Gangnam-gu, Seoul, Republic of Korea. For security-sensitive matters, please use encrypted channels if your organization provides them; otherwise mark messages clearly and avoid including credentials. We maintain internal escalation paths for potential incidents and cooperate with regulators as required.

Purposes and Legal Bases of Processing

We process contact details, professional identifiers, and meeting notes to deliver advisory services, manage contracts, and maintain client communications. Analytics cookies, if allowed, help us understand aggregate navigation patterns. Legal bases include contract performance, legitimate interests in securing our platform, and consent where required for non-essential cookies or marketing communications you explicitly opt into.

Categories of Data Collected

Typical categories include business email addresses, names, titles, company identifiers, call recordings only where mutually agreed, uploaded documents you provide, and technical logs such as IP address, user agent, and approximate location derived at city level for security monitoring. We avoid collecting government identifiers unless a specific engagement requires them and safeguards are confirmed.

Retention and Minimization

Engagement artifacts are retained for the duration of the contract plus a statutory records period aligned to Korean commercial and tax practice unless a different period is agreed. Marketing contacts are refreshed periodically; inactive records are deleted or anonymized. Security logs roll off on a schedule designed to balance investigation needs with minimization. Backup systems may retain residual copies for a limited technical window consistent with restoration policies.

Questions: welcome@brilliant-grid.one