Privacy Policy

The Company has established a procedure whereby users may click an "Agree" or "Disagree" button regarding the contents of the Privacy Policy or Terms of Use. If a user indicates consent, the Company treats this as consent to the collection of personal information.

1. For smooth customer service and provision of various services, the Company collects the following personal information.

   [Online inquiry, newsletter collection items]

   • 1) Online inquiry, response, customer service: Name, email
   • 2) Newsletter subscription and delivery: Name, email
   • 3) IP address: Cookies, visit date/time, service usage records
2. Methods of collecting personal information

   The Company collects personal information through the following means.

   • Website inquiry/contact form

The Company uses collected personal information for the following purposes.

• Provision of content and customized services
• Identity verification for membership services, prevention of fraudulent or unauthorized use, confirmation of intent to join, limits on registration and number of registrations, verification of parental consent when collecting personal information of minors under 14, record retention for dispute resolution, handling of complaints and inquiries, and delivery of notices
• Development and customization of new services (products), delivery of promotional information such as events, provision of services and advertising based on demographic characteristics, analysis of access frequency and statistics on member service use

The Company destroys personal information without delay once the purpose of collection and use has been achieved, without exception. However, the following information is retained for the specified periods for the reasons stated below.

a. Information retention under internal policy

• Records of fraudulent use: Reason — prevention of fraudulent use / Retention period — 1 year

b. Information retention under applicable laws

When retention is required under applicable laws such as the Commercial Act and the Act on Consumer Protection in Electronic Commerce, the Company retains member information for the period prescribed by such laws. In such cases, the Company uses the retained information only for the purpose of retention. Retention periods are as follows.

• Records on contracts or withdrawal of offers: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records on payment and supply of goods, etc.: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records on handling of consumer complaints or disputes: 3 years (Act on Consumer Protection in Electronic Commerce)
• Records on identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection)
• Records on visits: 3 months (Protection of Communications Secrets Act)

In principle, the Company destroys personal information without delay once the purpose of collection and use has been achieved. Procedures and methods for destruction are as follows.

a. Destruction procedure

Information entered by users for membership registration, etc., is transferred to a separate DB (or separate filing in the case of paper) after the purpose is achieved, stored for a certain period in accordance with internal policy and other applicable laws (see Retention and Use Period), and then destroyed. Personal information transferred to a separate DB is not used for any purpose other than retention unless required by law.

b. Destruction method

• Personal information stored in electronic form is deleted using technical methods that make the records unrecoverable.
• Personal information printed on paper is destroyed by shredding or incineration.

The Company does not provide users' personal information to third parties in principle. Exceptions are made in the following cases.

• When users have given prior consent
• When required by investigative authorities in accordance with procedures and methods prescribed by law for legal or investigative purposes

The Company entrusts personal information processing to external service providers as follows for the performance of its services.

• Users and legal representatives may at any time access or correct their own or the relevant minor's (under 14) registered personal information, or request withdrawal of membership.
• To access or correct personal information, use "Change personal information" (or "Edit member information," etc.). To withdraw membership (withdraw consent), click "Withdraw membership" and complete the identity verification procedure to access, correct, or withdraw directly.
• Alternatively, you may contact the personal information manager in writing, by phone, or by email, and we will take action without delay.
• If you request correction of an error in your personal information, we will not use or provide that personal information until the correction is complete. If incorrect personal information has already been provided to a third party, we will notify the third party of the correction result without delay so that the correction can be made.
• Personal information that has been deleted or withdrawn at the request of a user or legal representative is processed in accordance with "5. Retention and Use Period of Personal Information" and is not made available for any other purpose.

The Company operates "cookies" and similar technologies that store and retrieve your information. A cookie is a very small text file sent by the server that operates the website to your browser and stored on your computer's hard disk.

a. Purpose of use of cookies, etc.

• Analysis of members' and non-members' access frequency and visit times, understanding of user preferences and interests, tracking of activity, analysis of event participation and visit counts for targeted marketing and personalized services

b. How to refuse cookie settings

You have the right to choose whether to allow cookies. You may set your web browser to allow all cookies, to be prompted each time a cookie is stored, or to refuse all cookies.

Example (Internet Explorer): Tools > Internet Options > Privacy in the browser menu

Please note that refusing cookies may result in difficulties in providing our services.

The Company takes the following technical and administrative measures to ensure the security of users' personal information and to prevent loss, theft, leakage, alteration, or damage.

a. Password encryption

Member passwords are stored and managed in encrypted form and are known only to the member. Access to and changes in personal information are possible only by the member who knows the password.

b. Measures against hacking, etc.

The Company strives to prevent leakage or damage of members' personal information due to hacking, computer viruses, etc. We regularly back up data against damage to personal information, use up-to-date antivirus programs to prevent leakage or damage to users' personal information and data, and use encrypted communication to transmit personal information securely over the network. We also use intrusion prevention systems to control unauthorized access from outside and endeavor to implement all feasible technical measures to ensure system security.

c. Minimization and training of personnel handling personal information

Personnel handling personal information at the Company are limited to designated staff, who are assigned separate passwords that are regularly updated. We emphasize compliance with this Privacy Policy through ongoing training of such staff.

d. Operation of a dedicated personal information protection body

Through an in-house dedicated body for personal information protection, we verify implementation of this Privacy Policy and compliance by responsible staff and endeavor to correct any issues promptly when found. However, the Company assumes no responsibility for problems arising from leakage of personal information such as ID, password, or resident registration number due to user carelessness or issues on the Internet.

You may report any complaints related to personal information protection arising from use of the Company's services to the personal information manager or the responsible department. The Company will respond promptly and fully to user reports.

This "Glen Tec Co., Ltd. Privacy Policy" does not apply to the collection of personal information by websites linked to the Company's website.

When there are additions, deletions, or revisions to this Privacy Policy, we will give notice through the "Notice" section of the website at least 7 days before the amendment takes effect. However, for material changes to users' rights, such as collection and use of personal information or provision to third parties, we will give notice at least 30 days in advance.