Privacy Policy

Article 1 (Purposes of Processing Personal Information)

The Company processes personal information for the following purposes. Personal information is not used for any purpose other than those below; if a purpose changes, the Company will take the necessary measures, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

1. Consultations and inquiries — reviewing inquiries, conducting consultations, replying with results, and follow-up contact
2. Member registration and management — confirming intent to register, identifying the member, service guidance, and notices
3. Service operation and security — preventing misuse, keeping access logs, and ensuring service stability

Article 2 (Personal Information Processed)

The Company collects only the minimum personal information necessary, as follows.

Leaving optional items blank does not restrict use of the service. The Company does not collect sensitive information under Article 23 of the Personal Information Protection Act, such as ideology, beliefs, health, or criminal records, nor unique identification information such as resident registration numbers. The Company does not collect personal information of children under the age of 14.

Article 3 (Processing and Retention Periods)

The Company processes and retains personal information within the retention and use period prescribed by law or consented to by the data subject at the time of collection.

When the retention period expires or the purpose of processing is achieved, the Company destroys the personal information without delay. Where relevant laws require preservation, the information is stored separately for the required period.

Article 4 (Provision to Third Parties)

The Company processes personal information only within the scope stated in Article 1 and does not provide it to third parties, except in the following cases.

• Where separate consent has been obtained from the data subject
• Where special provisions exist in law, or where an investigative agency requests it in accordance with the procedures and methods prescribed by law

Article 5 (Outsourcing of Processing)

For smooth service delivery and security, the Company outsources the processing of personal information as follows, and in this process personal information is transferred overseas.

When concluding outsourcing contracts, the Company specifies the matters necessary for the safe management of personal information, and will disclose any change of processor through this Policy. Data subjects may refuse the overseas transfer; if they do, use of the website may be restricted.

Article 6 (Rights and Obligations of Data Subjects and How to Exercise Them)

Data subjects may exercise the following rights against the Company at any time.

1. Request access to personal information
2. Request correction of errors
3. Request deletion
4. Request suspension of processing
5. Withdraw consent

Rights may be exercised in writing, by phone, or by email to the Chief Privacy Officer named in Article 10, and the Company will act on the request without delay. If a data subject requests correction of an error, the Company will not use or provide that personal information until the correction is complete. Rights may also be exercised through a representative, such as a legal representative or a person delegated by the data subject; in that case, a power of attorney in the form of Annex Form No. 11 of the Notice on Personal Information Processing Methods must be submitted.

Article 7 (Destruction Procedure and Method)

When personal information is no longer needed, such as when the retention period has expired or the purpose of processing has been achieved, the Company destroys it without delay (within 5 days unless there is a justifiable reason).

• Procedure — Personal information for which a reason for destruction has arisen is selected and destroyed with the approval of the Chief Privacy Officer.
• Method — Information in electronic files is deleted using technical methods that prevent recovery or reproduction; paper documents are shredded or incinerated.

Article 8 (Measures to Ensure Security)

The Company takes the following measures to ensure the security of personal information.

• Administrative measures — Minimizing the number of personnel handling personal information and training them regularly
• Technical measures — Managing access rights to processing systems, retaining access logs, and encrypting data in transit (HTTPS/TLS)
• Physical measures — Controlling access to systems where personal information is stored

Article 9 (Cookies and Other Automatic Collection)

The Company does not use cookies to track user activity or for advertising. However, the processors listed in Article 5 may set cookies for service security and bot blocking. Users can refuse cookies through their web browser settings (e.g., Tools > Internet Options > Privacy); in that case, some features may be restricted.

Article 10 (Chief Privacy Officer)

The Company designates the Chief Privacy Officer below to take overall responsibility for personal information processing and to handle data subjects' complaints and remedies related to it. Data subjects may direct any privacy-related inquiry arising from use of the service to the Chief Privacy Officer, and the Company will respond and act without delay.

Role

Chief Privacy Officer

Title

CEO

Email

[email protected]

Phone

+82-10-5139-1337

Address

401-7, 14 Seongjeonggongwon 2-gil, Seobuk-gu, Cheonan-si, Chungcheongnam-do, Republic of Korea

Article 11 (Remedies for Infringement of Rights)

To seek remedies for infringement of personal information, data subjects may apply for dispute resolution or consultation to the organizations below. These organizations are independent of the Company; please contact them if you are not satisfied with the Company's own handling of complaints and remedies, or need further help.

• Personal Information Dispute Mediation Committee (개인정보 분쟁조정위원회) — 1833-6972 / www.kopico.go.kr
• Personal Information Infringement Report Center, KISA (개인정보 침해신고센터) — 118 (no area code) / privacy.kisa.or.kr
• Supreme Prosecutors' Office, Cyber Investigation Division (대검찰청 사이버수사과) — 1301 (no area code) / www.spo.go.kr
• Korean National Police Agency, Cyber Investigation Bureau (경찰청 사이버수사국) — 182 (no area code) / ecrm.police.go.kr

In addition, a person whose rights or interests have been infringed by a disposition or omission of the head of a public institution in response to a request under Article 35 (Access to Personal Information), Article 36 (Correction or Deletion of Personal Information), or Article 37 (Suspension of Processing of Personal Information, etc.) of the Personal Information Protection Act may file an administrative appeal as prescribed by the Administrative Appeals Act.

Article 12 (Changes to This Policy)

This Privacy Policy applies from August 10, 2026. If content is added, deleted, or modified due to changes in laws, policies, or security technology, the changes will be announced on the website at least 7 days before they take effect. However, changes that materially affect the rights of data subjects will be announced at least 30 days in advance.