Policies · FleetLattice One
Data Protection
1. Third-party processors and sub-processors
FleetLattice One engages a limited number of third-party service providers to deliver the device subscription services. These include mobile network operators for SIM and eSIM provisioning, mobile device management platform vendors, certified information-technology asset disposition (ITAD) facilities for end-of-life device handling, and freight providers for device delivery and return logistics. A current list of sub-processors is maintained and made available to the customer upon written request. FleetLattice One ensures that each sub-processor is bound by contractual obligations equivalent in substance to those set out in this Data Protection notice with respect to the protection of personal information.
2. Retention periods
Personal information collected in connection with the services is retained only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to support the customer's audit and evidence-of-handling requirements. Asset-handling records, including secure-wipe evidence, are retained for a period of seven (7) years from the date of offboarding. Account-administration records are retained for the duration of the contractual relationship and for a further three (3) years following termination. Where FleetLattice One acts as a data processor on behalf of the customer, retention periods shall align to the customer's instructions as recorded in the master agreement.
3. Rights of data subjects
Data subjects whose personal information is processed in connection with the services have the rights afforded under the Republic of Korea's Personal Information Protection Act (PIPA), including the right to access, rectify, and delete personal information, the right to restrict processing, and the right to lodge a complaint with the Personal Information Protection Commission (PIPC). Where applicable, data subjects also have rights under sector-specific Korean regulations and, in respect of cross-border transfers, under the laws of the receiving jurisdiction. Requests by individual data subjects employed by the customer shall ordinarily be routed through the customer's designated administrative contact.
4. Contact and complaints
Questions regarding this Data Protection notice, requests to exercise data-subject rights, or complaints regarding FleetLattice One's handling of personal information may be addressed in writing to contact@peakprimepro.one. FleetLattice One shall respond to substantive requests within thirty (30) calendar days of receipt, in accordance with PIPA timelines. Where a data subject is dissatisfied with the response, the data subject may lodge a complaint with the Personal Information Protection Commission of the Republic of Korea or with any other regulator of competent jurisdiction.
5. Purposes and legal bases of processing
FleetLattice One processes personal information solely for purposes directly connected to the delivery of the contracted services. These purposes include device provisioning and configuration, MDM enrolment, asset tracking, lifecycle support, secure offboarding, billing and account administration, contract management, and statutory record-keeping. The legal bases for processing comprise the performance of a contract to which the data subject's employer is a party, the legitimate interests of FleetLattice One and the customer in operating an auditable corporate device fleet, and, where applicable, compliance with a legal obligation under Korean law.
Contact for this document: contact@peakprimepro.one
Postal contact: 14F, Bukchang-ro, Jung-gu, Seoul 04522, Republic of Korea