("Company") is committed to protecting the privacy and rights of users in accordance with the Personal Information Protection Act, and to efficiently handle any grievances related to personal information. This privacy policy outlines how personal data is handled and will be updated if any changes occur. The policy is effective from January 1, 2021. 1. Purpose of Processing Personal Data The Company processes personal data for the following purposes. The personal data collected will not be used for any purposes other than those listed below. If the purpose of use changes, prior consent will be obtained from the user. a. Website Registration and Management Personal data is processed for user identification, verification, and to prevent misuse of services. b. Handling of Complaints Personal data is processed for verifying the identity of the complainant, confirming complaints, contacting for investigation, and notifying of results. c. Provision of Goods or Services Personal data is processed to provide services. d. Marketing and Advertising Personal data is processed to verify the effectiveness of services, track access frequency, and generate usage statistics. 2. Personal Data File Overview File Name: Personal Data Collected Items: Email, mobile phone number, company phone number, job title, department, company name, access logs, IP address, legal representative’s name. Collection Method: Website Retention Basis: Consent to collect personal information Retention Period: 3 years Relevant Laws: Consumer complaints or disputes: 3 years; Records of contracts or withdrawal of applications: 5 years. 3. Personal Data Processing and Retention Period Personal data is retained and used within the period of consent or according to legal requirements. 4. Third-Party Provision of Personal Data Personal data may be provided to third parties under certain conditions, such as user consent or legal requirements. 5. User Rights Users have the right to request access, correction, deletion, or suspension of processing of their personal data at any time. 6. Personal Data Items Personal data is processed for various purposes including complaint handling, with required and optional fields. 7. Data Destruction Policy The company ensures that personal data is destroyed once the purpose is fulfilled, following legal and policy requirements. 8. Use of Cookies The company does not use cookies to collect user data. 9. Privacy Officer The company has designated a privacy officer to handle any inquiries or complaints related to personal data. 10. Policy Changes The privacy policy will be updated if necessary, with changes being communicated via notices on the website. 11. Security Measures The company has implemented technical, administrative, and physical measures to protect personal data from unauthorized access or breaches.

The email addresses posted on this website are not to be collected without authorization by any electronic mail collection programs or other technical devices. Please be aware that violations of this rule will result in criminal penalties under the Information and Communication Network Act.

Information and Communication Network Act

Article 50-2 (Prohibition of Unauthorized Collection of Email Addresses) 1. No one shall collect email addresses from internet websites using automatic programs or any other technical device without prior consent from the website operator or administrator. 2. No one shall sell or distribute email addresses collected in violation of the first paragraph. 3. No one shall use email addresses collected, sold, or distributed in violation of paragraphs 1 and 2 for transmitting information.

Article 74 (Penalties) A person who violates any of the following shall be fined up to 10 million KRW: 1. A person who displays or sells, or displays for sale, in violation of Article 8, Paragraph 4. 2. A person who distributes, sells, rents, or publicly displays obscene symbols, words, sounds, images, or videos in violation of Article 44-7, Paragraph 1, Item 1. 3. A person who repeatedly causes symbols, words, sounds, images, or videos that induce fear or anxiety to be transmitted to the other party in violation of Article 44-7, Paragraph 1, Item 3. 4. A person who violates Article 50, Paragraph 6, by taking technical measures. 5. A person who violates Article 50-8 by transmitting advertising information. 6. A person who violates Article 50-2 by collecting, selling, distributing email addresses or using them for information transmission. 7. A person who violates Article 53, Paragraph 4, by failing to register changes, transfer of business, merger, or inheritance.