Privacy Policy

01Article 1 (Purposes of Processing Personal Information)

The Company processes personal data for the purposes set out below. The personal data we process is not used for any purpose other than those listed, and should the purpose of use change, we will take the necessary measures, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

• Website membership and management: confirming intent to register, identifying and authenticating members for membership-based services, maintaining and managing membership, preventing fraudulent use of services, confirming the consent of a legal representative when processing the data of children under 14, various notices and notifications, and grievance handling.
• Provision of goods or services: delivery of goods, provision of services, dispatch of contracts and invoices, provision of content, provision of customized services, identity and age verification, payment and settlement of charges, and debt collection.
• Handling inquiries, replies and grievances: verifying the identity of the person making the inquiry, confirming the inquiry or complaint, contacting and notifying for fact-finding, and informing of the outcome.

02Article 2 (Processing and Retention Period of Personal Information)

The Company processes and retains personal data within the retention and use period prescribed by law, or within the retention and use period consented to by the data subject at the time of collection.

The processing and retention periods for each type of personal data are as follows.

• Website membership and management: until withdrawal from the website. However, where an investigation or inquiry for a violation of applicable law is in progress, until that investigation or inquiry ends; and where a claim or debt relationship arising from website use remains, until that claim or debt is settled.
• Provision of goods or services: until the supply of goods or services is complete and payment and settlement of charges are complete.
• Records under the Act on Consumer Protection in Electronic Commerce: records on labeling and advertising for 6 months; records on contracts or withdrawal of subscription, payment, and supply of goods for 5 years; records on consumer complaints or dispute handling for 3 years.
• Communication confirmation data under the Protection of Communications Secrets Act: subscriber telecommunication date/start/end times, the other party's subscriber number, frequency of use, and originating base-station location tracking data for 1 year; computer-communication and internet log records and access-location tracking data for 3 months.

03Article 3 (Provision of Personal Information to Third Parties)

The Company processes the personal data of data subjects only within the scope specified in Article 1, and provides personal data to third parties only in cases that fall under Article 17 of the Personal Information Protection Act, such as with the consent of the data subject or under specific provisions of law.

04Article 4 (Consignment of Personal Information Processing)

For the smooth handling of personal-data tasks, the Company may consign personal-data processing tasks to external parties.

When entering into a consignment contract, in accordance with Article 26 of the Personal Information Protection Act the Company specifies in documents such as the contract the prohibition of processing personal data for purposes other than performing the consigned task, technical and administrative safeguards, restrictions on re-consignment, and supervision of the trustee, and it supervises whether the trustee processes personal data safely.

Should the content of the consigned tasks or the trustee change, we will disclose this without delay through this privacy policy.

05Article 5 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them)

Data subjects may exercise the following personal-data protection rights against the Company at any time. Rights may be exercised in writing, by telephone, email, fax and other means, and the Company will act on them without delay.

Where a data subject requests the correction or deletion of an error in personal data, the Company will not use or provide the relevant personal data until the correction or deletion is complete. Rights may also be exercised through a legal representative or an authorized agent.

• Request to access personal data
• Request to correct any errors
• Request to delete
• Request to suspend processing

06Article 6 (Personal Information Items Processed)

The Company processes the following personal-data items.

07Article 7 (Destruction of Personal Information)

When personal data becomes unnecessary — for instance because the retention period has elapsed or the purpose of processing has been achieved — the Company destroys it without delay. However, where it must continue to be preserved under other laws, it is moved to a separate database or stored in a different location.

• Destruction procedure: the Company selects the personal data for which grounds for destruction have arisen and destroys it with the approval of the data-protection officer.
• Destruction method: personal data recorded and stored in electronic files is deleted by a method that makes recovery impossible (such as low-level format), and personal data recorded on paper is destroyed by shredding or incineration.

08Article 8 (Measures to Ensure the Security of Personal Information)

The Company takes the following measures to ensure the security of personal data.

• Administrative measures: establishing and implementing an internal management plan, and providing regular training to staff
• Technical measures: managing access rights to the personal-data processing system, installing an access-control system, encrypting personal data, and installing and operating security programs
• Physical measures: access control to the server room, document storage room, and similar facilities

09Article 9 (Installation, Operation and Refusal of Automatic Personal-Data Collection Devices)

To provide individually customized services, the Company uses "cookies" that store and frequently retrieve usage information.

A cookie is a small piece of information that the website server sends to the user's browser, and it may be stored on the user's computer hard disk.

• Purpose of use: to provide users with optimized information by understanding their visits and patterns of use, popular search terms and the like.
• Installation, operation and refusal: users may refuse the storage of cookies through the menu Tools > Internet Options > Privacy at the top of their web browser.
• If you refuse the storage of cookies, you may experience difficulty using customized services.

10Article 10 (Data-Protection Officer)

The Company designates a data-protection officer as set out below to take overall responsibility for personal-data processing and to handle data subjects' complaints and provide relief for damage in connection with personal-data processing.

11Article 11 (Requests to Access Personal Information)

Under Article 35 of the Personal Information Protection Act, data subjects may submit requests to access their personal data to the department below. The Company will endeavor to process such access requests promptly.

12Article 12 (Remedies for Infringement of Rights)

To obtain relief for infringement of personal data, data subjects may apply for dispute resolution, counseling and the like to the agencies below.

13Article 13 (Effective Date and Amendment of the Privacy Policy)

This privacy policy takes effect on March 20, 2025.