Article 1 Method and Extent of Collecting Personal Information

1. The personal information collected and processed by the Company will not be used for purposes other than the specified purpose and if the purpose is changed, the necessary measures will be implemented, such as obtaining separate consent in accordance with the Personal Information Protection Act.
2. The information collected by the company includes: name, social number, business license number, gender, address, contact number, email address as well as occupation, hobbies, salaries

Article 2 Processing and Retention Period of Personal Information

1. The purpose of collecting personal information is to provide services tailored to each customer according to their needs and interests.
2. When the purpose of the collected personal information is achieved, such information will be destroyed without delay and the personal information will be processed and retained to the extent of the possession and use period of the personal information agreed upon collection of such personal information under the Company's internal policy or from the information entity as well as within the permitted scope under the applicable laws and regulations.

Article 3 Third Party Provision of Personal Information

1. The Company uses the personal information within the scope of notice and does not use such information beyond the scope without prior consent of the information subject or disclose the personal information of the information subject to the outside, except as required by other laws and regulations.

Article 4 Consignment of Personal Information Processing

1. In principle, the Company does not consign processing of personal information to any third party without the consent from the information subject. However, when it is necessary, the Company entrusts personal information to a designated third party indicated below, in order to provide a better service, in compliance with laws and regulations relating to protection of personal information, the prohibition of providing personal information to any third party and responsibilities, etc.
2. • Entity: OO Credit Evaluation
   • Server management: Simplex Internet Inc.
   • Credit Card Payment: OOOO

Article 5 Rights, Duties and Exercising Methods of Information Subjects

1. The information subject may exercise any of the following rights relating to privacy to the Company at any time
   1. Request for personal information per use;
   2. Request for correction if there exists any error;
   3. Request for deletion; or
   4. Request for suspension of processing
2. In the event that the information subject has requested correction or deletion of the personal information, the Company will not use or provide such personal information until the correction or deletion is completed.

Article 6 Personal Information Processing Items

1. The personal information processed by the Company only deals with the items provided by the information subject (name, phone number, e-mail, etc.).

Article 7 Destruction of Personal Information

1. In case that the personal information becomes unnecessary such as the lapse of the personal information retention period or achievement of the processing purpose, the Company will immediately destroy such personal information. If the personal information should be kept in accordance with other laws and regulations despite the expiration of the retention period of personal information agreed by the information subject or the purpose of processing has been accomplished, such personal information will be kept for an indicated period below:
2. in accordance with the Company policy
   • Name, Social Security Number, Email address, Phone number: One year
   • Record of Illegal or Misappropriate Use (including personal information of those persons): One year
3. in accordance with the Relevant laws and Regulations
   • Record of contract or withdrawal from contract: Five years
   • Record of Payment or Supply of Goods: Five years
   • Record of Dissatisfaction and Dispute by Consumers: Three Years
   • Record of Log-in: Three Months
4. The Company selects the personal information that caused the reason for destruction and then destroys the personal information upon the approval of the Company's Chief Privacy Officer.

Article 8 Measures to Ensure the Safety of Personal Information

1. The Company takes technical, administrative and physical measures necessary to ensure the safety of collected personal information.

Article 9 Chief Privacy Officer for Personal Information Protection

1. The Company has designated a Chief Privacy Officer as follows in order to protect the personal information and to deal with complaints and provide reliefs related to the personal information
2. Name: OOO
   Phone Number: OOOO-OOOO
   Email:

Article 10. Remedies for Infringement of Rights and Interests

1. The information subject can inquire about dispute settlement or consultation on personal information infringement to the Personal Information Dispute Mediation Committee, Personal Information Infringement Reporting Center of the Korea Internet & Security Agency and so on in order to receive damage relief and consultation in relation to personal information infringement
2. Personal Information Dispute Mediation Committee (call 118) KISA Private Information Infringement Reporting Center (http://privacy.kisa.or.kr/kor/main.jsp) Information Protection Marks Certification Committee (www.eprivacy.or.kr/ 82.2.580.0533-4) The High-Tech Crime Investigation Division of Supreme Prosecutor’s Office (www.spo.go.kr/82.2.3480.2000) Cyber Terror Response Center of National Policy Agency (www.ctrc.go.kr/82.2.392.0330)
3. This privacy policy takes effect on the month of OO, OOth day, 2022.