Privacy Policy

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes. Personal information being processed will not be used for any purpose other than those below, and if the purpose of use changes, the Company will take the necessary measures, such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act.

1. Website Membership Registration and Management

Personal information is processed to confirm the intent to register, to identify and authenticate members in providing membership services, to maintain and manage membership status, to verify identity under the limited identity verification system, to prevent unauthorized use of the service, to confirm the consent of a legal representative when processing the personal information of children under age 14, to deliver various notices, and to handle complaints.

2. Provision of Goods or Services

Personal information is processed for delivering goods, providing services, sending contracts and invoices, providing content, providing customized services, identity and age verification, payment and settlement, debt collection, and similar purposes.

3. Complaint Handling

Personal information is processed to verify the identity of complainants, confirm the details of a complaint, contact and notify them for fact-finding, and report the results of handling.

Article 2 (Processing and Retention Periods of Personal Information)

① The Company processes and retains personal information within the retention and use period required by law or the period to which the data subject consented when the information was collected.

② The processing and retention period for each category of personal information is as follows.

1. Website Membership Registration and Management : Until the business/organization member withdraws from the website

However, if any of the following applies, until the applicable reason ends

1) If an investigation or inquiry into a violation of relevant laws is in progress, until that investigation or inquiry ends

2) If receivables or payables remain from use of the website, until those receivables and payables are settled

2. Provision of Goods or Services : Until supply of goods or services and payment and settlement are complete

However, if any of the following applies, until the applicable period ends

1) Records on labeling and advertising, contract details and performance, and other transactions under the Act on the Consumer Protection in Electronic Commerce, etc.

- Records on labeling and advertising : 6 months

- Records on contracts or withdrawal of offers, payment, and supply of goods, etc. : 5 years

- Records on consumer complaints or dispute handling : 3 years

2) Retention of communications confirmation data under Article 41 of the Protection of Communications Secrets Act

- Subscriber's date and time of telecommunication, start and end times, counterpart subscriber number, frequency of use, and location-tracking data of the originating base station : 1 year

- Computer communication and internet log records, and access-point tracking data : 3 months

Article 3 (Rights of Users and Legal Representatives and How to Exercise Them)

① A data subject may exercise the following rights regarding personal information protection against the Company at any time.

• 1. Request access to personal information
• 2. Request correction if there are errors, etc.
• 3. Request deletion
• 4. Request suspension of processing

② Rights under Paragraph 1 may be exercised against the Company in writing, by phone, by email, or by fax, and the Company will take action without delay.

③ If a data subject requests correction or deletion of an error, etc. in personal information, the Company will not use or provide that personal information until the correction or deletion is complete.

④ Rights under Paragraph 1 may be exercised through an agent, such as the data subject's legal representative or an authorized person. In this case, a power of attorney in the form of Annex Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.

⑤ A data subject must not infringe on the personal information or privacy of the data subject or any other person that the Company is processing, in violation of the Personal Information Protection Act or other relevant laws.

Article 4 (Personal Information Items Processed)

The Company processes the following personal information items.

Required items : Name, email address, phone number, inquiry details

3. The following personal information items may be generated and collected automatically while you use internet services.

IP address, cookies, MAC address, service usage records, visit records, records of improper use, etc.

Article 5 (Destruction of Personal Information)

① The Company destroys personal information without delay once it is no longer needed, such as when the retention period has expired or the purpose of processing has been achieved.

② If personal information must continue to be retained under other laws even though the retention period consented to by the data subject has expired or the purpose of processing has been achieved, the Company moves that information to a separate database (DB) or stores it in a different location.

③ The procedure and method for destroying personal information are as follows.

1. Destruction Procedure

The Company selects the personal information for which grounds for destruction have arisen and destroys it with the approval of the Company's Data Protection Officer.

2. Destruction Method

Personal information recorded and stored as electronic files is destroyed using methods such as low-level formatting so that the records cannot be recovered. Personal information recorded and stored on paper is destroyed by shredding or incineration.

Article 6 (Security Measures for Personal Information)

The Company takes the following measures to ensure the security of personal information.

• 1. Administrative measures : Establishing and implementing an internal management plan, regular employee training, etc.
• 2. Technical measures : Managing access permissions to personal information processing systems, installing access control systems, encrypting unique identifiers and similar data, installing security programs
• 3. Physical measures : Access control for computer rooms, record storage rooms, etc.

Article 7 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)

① To provide individually customized services to users, the Company uses “cookies,” which store usage information and retrieve it as needed.

② Cookies are small amounts of information that the server (http) used to operate a website sends to the user's computer browser, and they may be stored on the hard disk of the user's computer.

a. Purpose of using cookies : To understand visit and usage patterns, popular search terms, whether a secure connection is used, and similar information for each service and website the user visits, in order to provide the user with optimized information.

b. Installation, operation, and refusal of cookies : You can refuse cookie storage by changing the option settings under Tools > Internet Options > Privacy at the top of your web browser.

c. If you refuse to store cookies, you may have difficulty using customized services.

Article 8 (Data Protection Officer)

① The Company is responsible for overseeing the handling of personal information and has designated a Data Protection Officer, as below, to handle data subjects' complaints and provide remedies related to the processing of personal information.

② Data subjects may direct all inquiries, complaints, and requests for remedies related to personal information protection that arise while using the Company's services (or business) to the Data Protection Officer or the responsible department. The Company will respond to and handle data subjects' inquiries without delay.

Article 9 (Requests to Access Personal Information)

A data subject may submit a request to access personal information under Article 35 of the Personal Information Protection Act to the department below. The Company will work to process data subjects' access requests promptly.

Article 10 (Remedies for Infringement of Rights)

A data subject may contact the following organizations about remedies, consultation, and other matters related to personal information infringement.

• ▶ Supreme Prosecutors' Office, Cybercrime Investigation Division : 02-3480-3573 (www.spo.go.kr)
• ▶ National Police Agency, Cyber Bureau : 182 (http://cyberbureau.police.go.kr)

Article 11 (Enforcement and Amendment of the Privacy Policy)

This Privacy Policy applies from November 1, 2026.