Nopy Company Co., Ltd. (hereinafter referred to as "Company") values your personal information and complies with related laws such as the Personal Information Protection Act.

Through the personal information processing policy, the company informs you of the use and method of personal information provided by you, and what measures are being taken to protect personal information.

■ Collection of personal information items and methods

A. Items of personal information to be collected

o The company collects the following personal information for membership, consultation, and service application.

- Membership registration: name, date of birth, gender, login ID, password, home phone number, mobile phone number, e-mail, information of legal representative for subscribers under the age of 14

- When applying for service: address and payment information

o Service usage records, access logs, cookies, access IPs, payment records, and defective usage records may be generated and collected during service usage or business processing.

B. Collection method

- Collect via homepage, written form, bulletin board, e-mail, event entry, delivery request, phone, fax, generation information collection tool

■ Purpose of collecting and using personal information

The company utilizes the collected personal information for the following purposes.

o Fulfillment of the service provision contract and settlement of charges according to the service provision

Providing content, purchasing and paying bills, shipping goods or billing, financial transaction identity authentication and financial services

o Managing members

Identification, personal identification, prevention of illegal use and non-authorized use of defective members, confirmation of subscription intention, age confirmation, confirmation of consent of legal representatives when collecting personal information for children under 14 years of age, handling complaints, etc

o Use for marketing and advertising

Statistics on the delivery of advertising information, such as events, the frequency of access, or the use of services by members;

■ Period of retention and use of personal information

In principle, after the purpose of collecting and using personal information is achieved, the information is destroyed without delay. However, the following information shall be preserved for the period specified for the following reasons:

A. Reasons for holding information based on the company's internal policy

Even if a member withdraws, the information of the member may be retained for five years from the date of termination of the use contract to prevent the recurrence of illegal use of the defective member, resolve the dispute, and cooperate at the request of the investigative agency.

B. Reasons for holding information under relevant laws and regulations

If it is necessary to preserve it under the provisions of related statutes, such as the Consumer Protection Act on Electronic Commerce, etc., the company shall keep member information for a certain period prescribed by the relevant statutes as follows.

o Records concerning contract or withdrawal of subscription, etc

-Reasons for Conservation: Consumer Protection in Electronic Commerce, etc. Act

- Preservation period: 5 years

o Records concerning payment and supply of goods, etc

-Reasons for Conservation: Consumer Protection in Electronic Commerce, etc. Act

- Preservation period: 5 years

o Records on handling consumer complaints or disputes

-Reasons for Conservation: Consumer Protection in Electronic Commerce, etc. Act

- Preservation period: 3 years

o Log History

- Reasons for preservation: Communication Secrets Protection Act

- Preservation period: 3 months

■ Procedure and method of destroying personal information

In principle, the company destroys the personal information without delay after the purpose of collecting and using personal information is achieved. Destruction procedures and methods are as follows.

o Destruction procedure

The information you enter for membership registration, etc. is transferred to a separate DB after the purpose is achieved (a separate document box in the case of paper) and stored for a certain period of time according to internal policies and other related laws.

Personal information transferred to a separate DB is not used for any purpose other than being retained unless it is under the law.

o Destruction method

Personal information stored in the form of an electronic file is deleted using a technical method that cannot play the record.

■ Provision of personal information

In principle, the company does not provide users' personal information to the outside world. However, exceptions are made in the following cases.

o Users agree in advance

o Where there is a request from the investigative agency in accordance with the provisions of the Act or in accordance with the procedures and methods prescribed in the Act for the purpose of investigation;

■ Consignment of collected personal information

The company entrusts and operates the service to an external specialized company as follows.

o Subject to consignment: Logen delivery

o Consignment business details: product delivery and delivery location, arrival information / order-related information, delivery information

o Subject to consignment: KG Inicis and Axim Bay

o Contents of consignment work: Card information required for payment

■ Rights of users and legal representatives and methods of exercising them

o Users can view or modify their registered personal information at any time and request cancellation of their subscription.

o To inquire and modify users' personal information, "change personal information" (or "modify member information") is canceled (withdrawal of consent), you can click "withdrawal" to go through the identity verification process and read, correct, or withdraw.

o Or if you contact the person in charge of personal information protection in writing, by phone, or e-mail, we will take action without delay.

o If you request correction of a personal information error, you will not use or provide the personal information until the correction is completed. Also, if the wrong personal information has already been provided to a third party, we will notify the third party of the result of the correction without delay so that the correction can be made.

o The company processes personal information canceled or deleted at the request of the user in accordance with the "Personal Information Collection and Usage Period" and cannot be viewed or used for other purposes.

■ Matters concerning the installation, operation, and refusal of the automatic personal information collection device;

The company operates "cookie" and so on to store and locate your information from time to time. A cookie is a very small text file sent to your browser by the server used to run the website, which is stored on your computer's hard disk.

The company uses cookies for the following purposes:

o Purpose of use of cookies, etc

1. Target marketing and personalized services are provided by analyzing the frequency of access and time of visit between members and non-members, identifying user preferences and areas of interest, tracking the degree of participation in various events, and the number of visits

2. You have the option to install cookies. As a result, you can also allow all cookies by setting options in your web browser, check whenever cookies are saved, or refuse to save all cookies.

o How to deny cookie settings

1. To reject cookie settings, you can select the option in your web browser to allow all cookies, confirm each time you save them, or refuse to save all cookies.

2. Example of how to set up (in the case of Internet Explorer): Tools at the top of the web browser > Internet Options > Personal Information

3. However, if you refuse to install cookies, there may be difficulties in providing the service.

■ Civil service regarding personal information

In order to protect customers' personal information and deal with complaints related to personal information, the company designates relevant departments and personal information protection managers as follows.

o Person in charge of personal information protection

Name: Han Jin Joo

Belonged to: Vittorsweet Jewels

Phone number: 070-7786-7063

Email: contact@bittersweet-jewels.com

o Person in charge of personal information protection

Name: Han Jin Joo

Belonged to: Bitter Sweet Jewels

Phone number: 070-7786-7063

Email: contact@bittersweet-jewels.com

o You can report any complaints related to personal information protection to the person in charge of personal information protection or the department in charge of it using the company's services.

o The company will promptly and fully respond to users' reports.

o If you need to report or consult about other personal information infringement, please contact the institution below.

Personal Information Infringement Reporting Center (privacy.kisa.or.kr / No. 118)

Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)

Supreme Prosecutors' Office Cyber Investigation Division (spo.go.kr / Area Code+1301)

National Police Agency Cyber Security Agency (cyberbureau.police.go.kr / No. 182)