HyunWon ENG (hereinafter referred to as "the Company") establishes and discloses the following Personal Information Processing Policy in order to protect the personal information of data subjects and to handle related grievances swiftly and smoothly, in accordance with Article 30 of the Personal Information Protection Act.

Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes. Personal information being processed will not be used for any purpose other than the following, and if the purpose of use changes, necessary measures such as obtaining separate consent will be taken in accordance with Article 18 of the Personal Information Protection Act.

1. Grievance Handling
Personal information is processed for the purpose of verifying the identity of complainants, confirming the details of complaints, contacting and notifying for fact-finding investigations, and notifying of processing results.

Article 2 (Period of Processing and Retention of Personal Information)
① The Company processes and retains personal information within the period of retention and use stipulated by law, or within the period agreed upon when collecting personal information from the data subject.
② The processing and retention period for each category of personal information is as follows:

1. Grievance Handling: 3 years after the completion of grievance handling
However, in the following cases, until the end of the relevant reason:
1) If an investigation or inquiry is in progress due to a violation of relevant laws and regulations, until the end of such investigation or inquiry
2) If a creditor-debtor relationship remains, until the settlement of such relationship

Article 3 (Rights of Data Subjects and Legal Representatives and How to Exercise Them)

① Data subjects may exercise the following personal information protection-related rights against the Company at any time:
1. Request to access personal information
2. Request for correction if there are errors
3. Request for deletion
4. Request to suspend processing

② The exercise of rights under Paragraph 1 may be made to the Company in writing, by phone, email, or fax, and the Company will take action without delay.
③ If a data subject requests correction or deletion of errors in personal information, the Company will not use or provide the relevant personal information until the correction or deletion is completed.
④ The exercise of rights under Paragraph 1 may be done through a legal representative or an authorized agent. In this case, a power of attorney in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
⑤ Data subjects must not infringe upon the personal information or privacy of themselves or others being processed by the Company in violation of the Personal Information Protection Act or other relevant laws.

Article 4 (Items of Personal Information Processed)
The Company processes the following personal information items:

1. Inquiry Reception and Grievance Handling
Required items: Name (Company name), Contact number, Inquiry details
Optional items: Email, Related attachments

Article 5 (Destruction of Personal Information)
① When personal information becomes unnecessary due to the expiration of the retention period or achievement of the processing purpose, the Company will destroy such personal information without delay.
② If personal information must continue to be retained under other laws despite the expiration of the agreed retention period or the achievement of the processing purpose, the personal information will be transferred to a separate database (DB) or stored in a different location.
③ The procedure and method of destroying personal information are as follows:
1. Destruction Procedure: The Company selects personal information subject to destruction and destroys it with the approval of the Company's Personal Information Protection Officer.
2. Destruction Method: Personal information recorded and stored in electronic file format will be destroyed so that the records cannot be reproduced. Personal information recorded and stored in paper documents will be destroyed by shredding or incineration.

Article 6 (Measures to Ensure the Safety of Personal Information)
The Company takes the following measures to ensure the safety of personal information:
1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
3. Physical measures: Access control to computer rooms, data storage rooms, etc.

Article 7 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)
① The Company uses 'cookies' that store and retrieve user information in order to provide personalized services to users.
② Cookies are small pieces of information sent by the server (http) operating the website to the user's computer browser and are stored on the user's PC or mobile device.
③ Data subjects can set cookie permissions through their web browser options. However, if cookie storage is refused, difficulties may arise in using customized services.

▶ Allowing/Blocking Cookies in Web Browsers
- Chrome: Web browser settings > Privacy and security > Clear browsing data
- Edge: Web browser settings > Cookies and site permissions > Manage and delete cookies and site data

▶ Allowing/Blocking Cookies in Mobile Browsers
- Chrome: Mobile browser settings > Privacy and security > Clear browsing data
- Safari: Mobile device settings > Safari > Advanced > Block All Cookies
- Samsung Internet: Mobile browser settings > Browsing data > Delete browsing data

④ The Company collects and uses information on visit and usage patterns, popular search terms, and whether secure connections are used, in order to provide users with optimized information.

Article 8 (Personal Information Protection Officer)
① The Company designates a Personal Information Protection Officer as follows to take overall responsibility for personal information processing and to handle complaints and remedy damages related to personal information processing.

▶ Personal Information Protection Officer
Name: Kang Hyun-won
Position: CEO
Contact: 031-222-1085, hyunwonk@naver.com, 031-222-1086 (FAX)

② Data subjects may contact the Personal Information Protection Officer regarding all personal information protection-related inquiries, complaint handling, and damage relief. The Company will respond and process inquiries without delay.

Article 9 (Request to Access Personal Information)
Data subjects may request access to personal information pursuant to Article 35 of the Personal Information Protection Act at the department below. The Company will endeavor to process such requests promptly.

▶ Personal Information Access Request Reception and Processing
Name: Kang Hyun-won
Contact: 031-222-1085, hyunwonk@naver.com, 031-222-1086 (FAX)

Article 10 (Methods of Remedying Rights Infringement)
Data subjects may inquire about damage relief and consultation regarding personal information infringement at the following organizations:
1. Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center: (without area code) 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: (without area code) 1301 (www.spo.go.kr)
4. National Police Agency: (without area code) 182 (ecrm.police.go.kr/minwon/main)

Article 11 (Enforcement and Amendment of Personal Information Processing Policy)
This Personal Information Processing Policy shall take effect from June 15, 2026.