Chebigen Co., Ltd. (hereinafter referred to as the “Company”) values your personal information and complies with the “Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.” The Company informs you through this Privacy Policy of the purposes and methods for which the personal information you provide is used and what measures are being taken to protect your personal information. If the Company revises the Privacy Policy, it will notify you through website announcements (or individual notices).

■ Items of Personal Information Collected

The Company collects the following personal information for membership registration, consultation, service application, etc.

ο Collected items: Name, Email, Phone number, Service usage records, Access logs, IP Address

ο Method of personal information collection: Website inquiries

■ Purpose of Collection and Use of Personal Information

The Company utilizes the collected personal information for the following purposes.

ο Member Management

Identity verification for the use of member-based services, personal identification, verification of legal representative's consent when collecting personal information for children under 14, and delivery of notices.

ο Marketing and Advertising Identifying access frequency or analyzing statistics on members' service usage.

■ Retention and Usage Period of Personal Information

The Company destroys the relevant information without delay and without exception after the purposes of collection and use of personal information are achieved.

■ Destruction Procedure and Method for Personal Information

In principle, the Company destroys personal information without delay after the purposes of collection and use are achieved. The destruction procedure and method are as follows.

ο Destruction Procedure

Information entered by users for membership registration, etc., will be transferred to a separate DB (or a separate filing cabinet for paper documents) after the purpose is achieved. It will be stored for a specific period according to internal policies and other relevant laws regarding information protection (refer to the retention and usage period) and then destroyed. Personal information transferred to a separate DB will not be used for any purpose other than retention unless required by law.

ο Destruction Method

- Personal information stored in electronic file format is deleted using technical methods that make the records unrecoverable.

■ Provision of Personal Information

In principle, the Company does not provide users’ personal information to external parties. However, exceptions are made in the following cases:

- When users have given prior consent

- When there is a request from an investigative agency for investigative purposes in accordance with the procedures and methods prescribed by law, or as otherwise required by law

■ Outsourcing of Personal Information Processing

The Company does not entrust your personal information to external companies without your consent. If such a need arises in the future, we will notify you of the entrusted party and the scope of the entrusted work, and obtain prior consent if necessary.

■ Rights of Users and Legal Representatives and How to Exercise Them

Users and their legal representatives may access or modify their own registered personal information or that of children under the age of 14 at any time, and may also request cancellation of membership.

To view or modify personal information for yourself or children under 14, click “Change Personal Information” (or “Edit Member Information,” etc.). To cancel membership (withdraw consent), click “Withdraw Membership.” You may view, correct, or withdraw directly after completing the identity verification process. Alternatively, if you contact the person in charge of personal information management (Chief Privacy Officer (CPO)) in writing, by phone, or by email, we will take action without delay.

If you request correction of errors in personal information, the relevant personal information will not be used or provided until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, we will notify the third party of the correction results without delay to ensure the correction is made.

Chebigen Co., Ltd. processes personal information that has been terminated or deleted at the request of a user or legal representative in accordance with the provisions of the “Retention and Usage Period of Personal Information Collected by Chebigen Co., Ltd.,” ensuring that it cannot be accessed or used for any other purpose.

■ Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

The Company uses “cookies” and similar technologies that store and retrieve your information periodically. A cookie is a very small text file sent to your browser by the server used to operate Chebigen’s website and is stored on your computer’s hard disk. The Company uses cookies for the following purposes:

Purpose of Using Cookies

- Targeted marketing and provision of personalized services by analyzing the access frequency and visit times of members and non-members, identifying user preferences and interests, tracking user activity, and determining the level of participation in various events and the number of visits. You have the right to choose whether to install cookies. Therefore, you can configure your web browser options to allow all cookies, prompt for verification each time a cookie is saved, or refuse to save all cookies.

How to Refuse Cookie Installation

Example: To refuse cookie installation, you can select the options in your web browser to allow all cookies, prompt for verification each time a cookie is saved, or refuse to save all cookies.

Example of Setting Method (for Internet Explorer):

Tools at the top of the web browser > Internet Options > Privacy

Note: If you refuse to install cookies, you may experience difficulties in using some services.

■ Privacy Inquiries and Complaints

To protect customers' personal information and handle related complaints, the Company has designated the following department and Chief Privacy Officer (CPO).

Chief Privacy Officer (CPO) Name:

Phone Number:

Email:

You may report any complaints related to personal information protection arising from your use of the Company's services to the CPO or the relevant department. The Company will provide prompt and sufficient responses to users' reports.

If you need to report or consult on other personal information infringements, please contact the institutions below:

1. Supreme Prosecutors' Office, Cyber Crime Investigation Division (cybercid.spo.go.kr)

2. Korean National Police Agency, Cyber Terror Response Center (www.ctrc.go.kr/02-392-0330)