1. Personal Information Collected

The Company collects the following personal information to receive and handle inquiries.

• Required items: inquiry type, name, company, email, phone, and inquiry details
• Optional items: attachments

2. Purpose of Collection and Use

The Company uses collected personal information for the following purposes.

• Checking and responding to inquiries
• Handling product, technical, sales, recruitment, and other inquiries
• Responding to customer requests and follow-up communication

3. Retention and Use Period

The Company destroys personal information without delay once the purpose of collection and use has been fulfilled. If retention is required by law, the information is retained for the period specified by such laws.

• Inquiry records: retained for one year after completion, then destroyed
• If retention is required by applicable laws, information is retained for the period specified by those laws

4. Destruction Procedure and Method

In principle, the Company destroys personal information without delay after its purpose has been fulfilled. The procedure and method are as follows.

5. Provision to Third Parties

The Company does not provide user personal information to third parties in principle, except in the following cases.

• When the user has given prior consent
• When required by law or requested by investigative agencies under legally prescribed procedures for investigation purposes

6. Outsourcing of Personal Information Processing

The Company may outsource certain work to external specialists for smooth service provision and system operation.

• Consignee: Nineone Labs
• Outsourced work: website and system operation and maintenance

7. Rights and Duties of Data Subjects and How to Exercise Them

Data subjects may exercise the following privacy rights against the Company at any time.

1. Request access to personal information
2. Request correction of errors
3. Request deletion
4. Request suspension of processing

• The rights above may be exercised in writing, by phone, or by email, and the Company will take action without delay.
• If a data subject requests correction or deletion of personal information errors, the Company will not use or provide such information until correction or deletion is completed.
• The rights above may be exercised through a legal representative or authorized delegate.
• Data subjects must not infringe upon their own or others’ personal information or privacy processed by the Company in violation of privacy laws or related regulations.

8. Privacy Officer

The Company designates a privacy officer responsible for personal information processing and handling complaints and remedies related to personal information.

Data subjects may contact the above address for privacy inquiries, complaints, or remedies arising from use of the Company’s services. The Company will respond and process inquiries without delay.

9. Request to Access Personal Information

Data subjects may request access to personal information under privacy laws, and the Company will make efforts to process such requests promptly.

10. Remedies for Rights Infringement

Data subjects may contact the following institutions for dispute resolution or consultation regarding damage caused by personal information infringement.

• Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
• Supreme Prosecutors’ Office Cyber Investigation Division (www.spo.go.kr / 1301)
• National Police Agency Cyber Bureau (ecrm.police.go.kr / 182)

11. Changes to This Privacy Policy

This Privacy Policy may be revised due to changes in applicable laws, company policy, or service details, and revisions will be announced on the website without delay.