BONINFO Co., Ltd. (hereinafter referred to as the "Company") places great importance on the protection of our customers' personal information and adheres to the "Act on Promotion of Information and Communications Network Utilization and Information Protection." In case of any amendments to our privacy policy, the Company shall inform you via website announcements or, if necessary, through individual notices.

ο This policy has been implemented since 2018.

Collection of Personal Information Items

The Company gathers the following personal information for purposes such as membership registration, consultations, and service applications:

• ο Items collected: Name, Login ID, Password, Home phone number, Home address, Mobile phone number, Access log
• ο Methods of collecting personal information: Website (membership registration), Delivery requests

Purpose of Collection and Use of Personal Information

The Company utilizes the collected personal information for the following objectives.

• ο Fulfillment of contracts related to service provision and fee settlements, including purchases and payments
• ο Member management - Identity verification for using membership-based services

Retention and Usage Period of Personal Information

As a general rule, the Company promptly destroys the information once the purpose of collecting and using personal information is achieved. However, the following information is retained for the specified periods due to the reasons provided.

A. Retention of information by the Company's internal policy

- Records of fraudulent use

Reason for retention : Prevention of fraudulent use

Retention period : 1 year

B. Retention of information by relevant laws

retains member information for a certain period as prescribed by the relevant legislation. In such cases, the Company only uses the retained information for the purpose of retention, and the retention period is as follows.

- Records pertaining to contracts or withdrawal of offers

Reason for retention: Act on Consumer Protection in Electronic Commerce, etc.

Retention period : 5 years

- Records concerning payment and provision of goods, etc.

Reason for retention : Act on Consumer Protection in Electronic Commerce, etc.

Retention period : 5 years

- Records related to electronic financial transactions

Reason for retention : Electronic Financial Transactions Act

Retention period : 5 years

- Records involving consumer complaints or dispute resolution

Reason for retention : Act on Consumer Protection in Electronic Commerce, etc.

Retention period : 3 years

Procedure and Method for Disposal of Personal Information

As a general principle, the Company promptly disposes of personal information once the purpose of collecting and using the information is fulfilled. The disposal procedure and method are as follows.

• ο Disposal procedure

  The information you have provided for purposes such as membership registration is transferred to a separate database (or a distinct file folder for paper documents) after the purpose has been achieved. It is then stored for a specified period (refer to retention and usage period) by internal policies and other relevant legal information protection reasons before being disposed of.
  Personal information transferred to a separate database is not used for any other purpose than retention unless required by law.

• ο Disposal method

  - Personal information stored in electronic file format is deleted using technical methods that render the records irretrievable.

  - Personal information printed on paper is disposed of through shredding or incineration.

Disclosure of Personal Information

As a general principle, the Company does not disclose users' personal information to external parties. However, exceptions are made in the following cases.

• - When required for product delivery, installation, or after-sales service (name, mobile phone number, installation area address)
• - When users have provided their prior consent
• - When necessary for product delivery, installation, or after-sales service (name, mobile phone number, installation area address)

Delegation of Collected Personal Information

The Company does not delegate your information to external organizations other than those contracted with the Company for delivery, installation, and after-sales service without your consent. If such a need arises in the future, the Company will inform you about the delegated party and the scope of delegated tasks, and, if necessary, obtain your prior consent.

Rights of Users, Legal Representatives, and Methods of Exercising Them

Users and legal representatives have the right to access or modify their own or the related child's personal information (for children under 14 years of age) at any time, as well as request membership termination.
To access or modify the personal information of a user or a child under 14, click on "Change Personal Information" (or "Modify Member Information," etc.). For membership termination (withdrawal of consent), click on "Withdraw Membership," and proceed with the identity verification process to directly view, amend, or withdraw.
Alternatively, you may contact the personal information manager in writing, by phone, or by email, and prompt action will be taken.
If you request the correction of errors in your personal information, the Company will not use or provide the relevant information until the correction has been completed. Moreover, if incorrect personal information has already been provided to a third party, the Company will promptly notify the third party of the correction results to ensure proper amendment.
The Company processes personal information that has been terminated or deleted upon request by the user or legal representative according to the retention and usage period stated in "Retention and Usage Period of Collected Personal Information" and is handled to prevent viewing or use for any other purpose.

Installation, Operation, and Opting Out of Automatic Personal Information Collection Devices

The Company utilizes “cookies” that store and retrieve your information periodically. A cookie is a small text file sent to your browser by the server operating the Company's website and is saved on your computer's hard drive. The Company employs cookies for the following objectives:

• ▶ Purpose of Using Cookies

  We utilize cookies to analyze visit frequency and duration for members and non-members, comprehend users' preferences and areas of interest, track user behavior, and assess participation and visit frequency for various events. This enables us to engage in targeted marketing and provide personalized services.
  You have the option to accept or decline the installation of cookies. As such, you may configure your web browser settings to allow all cookies, request confirmation each time a cookie is stored, or reject the storage of all cookies.

• ▶ How to Refuse Cookie Settings

  For example, you can choose to allow all cookies, confirm each time a cookie is stored, or reject the storage of all cookies by adjusting the options in your web browser.
  Settings example: (for Internet Explorer): Tools at the top of the web browser > Internet Options > Privacy
  Please note that if you choose to refuse the installation of cookies, you may experience difficulties in accessing our services.

Personal Information Complaint Services

The Company is committed to protecting customers' personal information and addressing any related concerns. To achieve this, we have appointed a Personal Information Management Officer and designated a specific department as detailed below.

Personal Information Management Officer

Name : Kim Myung-ho

Email : bonjungbo5@boninfo.co.kr

Phone number : 02-584-7744

While utilizing our services, you may direct any personal information protection-related complaints to the Personal Information Management Officer or the assigned department. The Company will ensure a prompt and comprehensive response to user concerns.

For reporting or consulting about personal information violations, you may contact the following organizations.

• 1.Personal Dispute Mediation Committee (https://www.kopico.go.kr / 1833-6972)
• 2.Information Protection Mark Certification Committee (https://privacy.kisa.or.kr / 118)
• 3.Supreme Prosecutors' Office Internet Crime Investigation Center (https://www.spo.go.kr / 1301)
• 4.National Police Agency Cyber Terror Response Center (https://ecrm.police.go.kr / 182)