Bodamsoft, Inc. ("Company") values your personal information and complies with the "Information and Communication Network Utilization Promotion and Information Protection Act."

The company will inform you of the uses and methods of personal information provided by customers through the personal information processing policy, and what measures are being taken to protect personal information.

■ Personal information items to be collected and how to collect them

A. Items of personal information to be collected

o The company collects the following personal information for membership registration, consultation, and service application.

- When signing up for membership: Name, date of birth, gender, login ID, password, home phone number, mobile phone number, e-mail, information of legal representative for subscribers under 14 years of age

- When applying for service: Address, payment informatio

o Service usage records, access logs, cookies, access IPs, payment records, and poor usage records may be generated and collected during the service use process or business process.

B. Collection method

- Collect through homepage, written form, bulletin board, email, event entry, delivery request, phone, fax, generation information collection tool

■ Purpose of collection and use of personal information

The company utilizes the collected personal information for the following purposes:

o Fulfillment of contracts for service provision and settlement of charges for service provision

Provision of content, purchase and payment of charges, delivery of goods or sending of bills, etc., authentication of financial transactions, and financial services

o Managing members

Personal identification, personal identification, prevention of illegal use and non-authorization of rogue members, confirmation of intention to sign up, age verification, confirmation of consent of legal representatives when collecting personal information of children under 14 years of age, handling complaints, etc

o Use for marketing and advertising

Statistics on the delivery of advertising information, such as events, identification of access frequency, or the use of services by members;

■ Period of retention and use of personal information

In principle, after the purpose of collecting and using personal information is achieved, the information is destroyed without delay. However, the following information shall be retained for the period specified for the following reasons:

A. Reasons for holding information according to the company's internal policy

Even if a member withdraws, the member's information may be held for oo years from the date of termination of the use contract to prevent recurrence of illegal use of the defective member, settle disputes, and cooperate at the request of the investigative agency.

B. Reasons for holding information under relevant laws and regulations

If it is necessary to preserve it in accordance with the provisions of related laws, such as the Consumer Protection Act in e-commerce, etc., the company keeps member information for a certain period prescribed by the relevant laws as follows.

o Records of contract or subscription withdrawal, etc

- Reasons for preservation: Consumer Protection in e-commerce, etc. Act

-Storage period: 5 years

o Records of payment and supply of goods, etc

- Reasons for preservation: Consumer Protection in e-commerce, etc. Act

-Storage period: 5 years

o Records of consumer complaints or dispute settlement

- Reasons for preservation: Consumer Protection in e-commerce, etc. Act

-Storage period: 3 years

o Logging

-Reason for Preservation: Communications Secrets Protection Act

-Storage period: 3 months

■ Procedures and methods for destroying personal information

In principle, the company destroys the information without delay after the purpose of collecting and using personal information is achieved. The procedure and method of destruction are as follows.

o Revocation procedure

The information you entered for membership registration will be transferred to a separate DB after the purpose is achieved (in the case of paper), stored for a certain period of time according to internal policies and other reasons for information protection (see retention and usage period).

Personal information transferred to a separate DB is not used for any purpose other than being held except by law.

o Destruction method

Personal information stored in electronic file format is deleted using technical methods that cannot be played back.

■ Provision of personal information

In principle, the company does not provide users' personal information to the outside world. However, exceptions are made in the following cases.

o If users have agreed in advance

o Where there is a request from the investigating agency in accordance with the provisions of the statutes or in accordance with the procedures and methods prescribed in the statutes for investigation purposes;

■ Entrustment of collected personal information

In order to implement the service, the company entrusts the operation to an external specialized company as follows.

o Subject to entrustment: [Lotte courier, CJ Logistics, Hanjin courier, Rosen courier, Post office courier]

o Consignment business details: [Product delivery-related business]

o Subject: [KSNET, SK Planet, SK M&N, Aron Group]

o Details of entrusted business: [Business required for product payment]

■ Rights of users and legal representatives and methods of exercising them

o Users can view or modify their registered personal information at any time, and can also request cancellation.

o To inquire or modify users' personal information, to cancel their subscription to "change personal information" (or "modify member information", etc.), click "withdraw member" to go through the identity verification process and view, correct, or withdraw.

o If you contact the person in charge of personal information protection in writing, by phone, or by e-mail, we will take action without delay.

o If you request correction of errors in your personal information, you will not use or provide such personal information until you complete the correction. In addition, if the wrong personal information has already been provided to a third party, we will notify the third party of the results of the correction process without delay so that the correction can be made.

o The company processes personal information that has been canceled or deleted at the request of the user as specified in the "Holding and Use Period of Personal Information Collected by the company" and cannot be viewed or used for other purposes.

■ Matters concerning the installation, operation, and rejection of automatic personal information collection devices;

The company operates a "cookie" that stores and finds your information from time to time. A cookie is a very small text file that the server used to run a website sends to your browser and is stored on your computer's hard disk.

The company uses cookies for the following purposes:

o Purpose of using cookies, etc

1. Target marketing and personalized services are provided by analyzing the frequency and time of access of members and non-members, identifying user preferences and interests, tracking various events, and identifying the number of visits

2. You have the option to install cookies. Therefore, you can allow all cookies by setting options in your web browser, go through a confirmation every time they are saved, or refuse to save all cookies.

o How to reject cookie settings

1. To reject cookie settings, you can choose the option in your web browser to allow all cookies, go through confirmation every time you save them, or refuse to save all cookies.

2. Example of how to set up (for Internet Explorer): Tools > Internet Options > Personal Information at the top of a Web browser

3. However, if you refuse to install cookies, there may be difficulties in providing the service.

■ Civil service regarding personal information

In order to protect the personal information of customers and handle complaints related to personal information, the company designates the relevant department and the person in charge of personal information protection as follows.

o Person in charge of personal information protection

Phone number: 070-8865-2084

Email: companydeskng@gmail.com

o Person in charge of personal information protection

Name: KIM TAEYOON

Phone number: 070-8865-2084

Email: companydeskng@gmail.com

o You may report any personal information protection-related complaints arising from using the company's services to the person in charge of personal information protection or the department in charge.

o The company will quickly and fully respond to users' reports.

o If you need to report or consult other personal information violations, please contact the following institution.

Personal Information Infringement Reporting Center (privacy.kisa.or.kr / 118)

Supreme Prosecutors' Office Cybercrime Unit (www.spo.go.kr / 02-3480-2000)

Cybersecurity Bureau of the National Police Agency (www.ctrc.go.kr/ 182)