Privacy Policy

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes. The processed personal information will not be used for purposes other than the following, and if the purpose of use changes, necessary measures such as obtaining separate consent will be taken.

1. Website membership registration and management: Confirmation of membership intention, identification and authentication for membership service provision, maintenance and management of membership, prevention of fraudulent use of services
2. Provision of goods or services: Delivery of goods, provision of services, sending contracts and invoices, provision of content, provision of customized services, identity verification, payment and settlement
3. Complaint handling: Identification of complainant, confirmation of complaint matters, contact and notification for fact-finding, notification of processing results
4. Marketing and advertising: Development of new services (products) and provision of customized services, provision of event and advertising information, and provision of participation opportunities

Article 2 (Processing and Retention Period of Personal Information)

The Company processes and retains personal information within the period of retention and use of personal information according to laws and regulations or within the period agreed upon when collecting personal information from the data subject.

1. Membership registration and management: Until membership withdrawal (however, until the end of the relevant reason in the following cases)
   • When investigation is in progress due to violation of relevant laws: Until the end of the investigation
   • When credit/debt relationship remains due to website use: Until settlement of the credit/debt relationship
2. Provision of goods or services: Until completion of supply of goods/services and payment/settlement
   • Records on display/advertisement, contract contents and performance in electronic commerce: 5 years
   • Records on payment and supply of goods: 5 years
   • Records on consumer complaints or dispute resolution: 3 years

Article 3 (Provision of Personal Information to Third Parties)

The Company processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information), and provides personal information to third parties only when it falls under Articles 17 and 18 of the Personal Information Protection Act, such as consent from the data subject or special provisions of the law.

Article 4 (Outsourcing of Personal Information Processing)

The Company outsources personal information processing tasks as follows for smooth personal information processing.

Article 5 (Rights and Obligations of Data Subjects and Legal Representatives)

Data subjects may exercise the following rights related to personal information protection against the Company at any time:

1. Request to access personal information
2. Request for correction in case of errors
3. Request for deletion
4. Request to suspend processing

Article 6 (Items of Personal Information Processed)

The Company processes the following personal information items:

• Required items: Email, name, company name, department/position, phone number
• Optional items: Inquiry details
• Automatically collected items: IP address, cookies, access logs, service use records

Article 7 (Destruction of Personal Information)

The Company destroys personal information without delay when personal information becomes unnecessary, such as when the retention period has elapsed or the processing purpose has been achieved.

1. Destruction procedure: Personal information is destroyed according to internal policies and relevant laws after a certain period has elapsed after the purpose is achieved.
2. Destruction method: Personal information in electronic file format is destroyed using technical methods that make the records unrecoverable.

Article 8 (Measures to Ensure the Safety of Personal Information)

The Company takes the following technical/administrative and physical measures necessary to ensure safety in accordance with Article 29 of the Personal Information Protection Act:

1. Establishment and implementation of internal management plan: Establishment and implementation of internal management plan for safe processing of personal information
2. Encryption of personal information: Important personal information such as user passwords is encrypted for storage and management
3. Technical measures against hacking: Installation of security programs, periodic updates and inspections
4. Restriction of access to personal information: Measures to control access to personal information through granting, changing, and canceling access rights
5. Storage of access records: Storage and management of records accessing the personal information processing system

Article 9 (Personal Information Protection Officer)

The Company has designated the following personal information protection officer who is responsible for overall tasks related to personal information processing and handling complaints and damage relief of data subjects:

Article 10 (Changes to Privacy Policy)

This privacy policy is effective from the date of enforcement, and if there are additions, deletions, or corrections of changes according to laws and policies, we will notify you through announcements 7 days before the implementation of the changes.