mPLUS CORP. (hereinafter referred to as the "Company") complies with the Telecommunications Secrets Protection Act, the Telecommunications Business Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and other laws and regulations that information and communications service providers must observe. By establishing a personal information processing policy based on relevant laws and regulations, the Company strives to protect the rights and interests of users.
This personal information processing policy may be revised in accordance with changes in laws or guidelines related to personal information protection or changes in company policies, so users are requested to check it frequently when visiting the site.

The Company's personal information processing policy is as follows:

1. Definition of Terms in the Personal Information Processing Policy

1. "Personal Information" refers to information about an individual, such as a name, resident registration number, symbols, characters, voices, sounds, and images that can identify a specific individual. This includes information that cannot identify a specific individual by itself but can be easily combined with other information to identify the individual.
2. "User" refers to a person who accesses Company's website (www.mplusi.co.kr) and receives services provided by the Company in accordance with these terms and conditions.

2. Consent to the Collection of Personal Information

1. The Company provides a process allowing users to click the "Agree" or "Disagree" button regarding the Company's personal information processing policy or terms and conditions.
   If the user expresses consent, it is considered that they have agreed to the collection of personal information.

3. Items of Personal Information Collected and Collection Methods

1. The following personal information is collected for smooth customer consultation and the provision of various services:
   1. Online inquiry, response, customer consultation: Name, email, mobile phone number
   2. Newsletter application and delivery: Name, email
   3. Other information: IP address, cookies, visit date and time, service use history
2. The Company collects personal information through the following methods:
   1. Website inquiry forms, phone, email

4. Protection of Children's Personal Information

1. When collecting personal information from children under the age of 14, the Company obtains the consent of their legal representative.
2. Legal representatives of children under the age of 14 may request to view, correct, or withdraw consent for their child's personal information. If such a request is made, the Company will promptly take the necessary actions.

5. Purpose of Collection and Use of Personal Information

1. Service Provision
   1. To provide various contents and respond to inquiries
   2. To handle complaints and deliver notices
2. Development of New Services and Use in Marketing/Advertising
   1. Delivery of promotional information such as event details and shipping prizes to event winners
   2. Development and specialization of new services, and provision of services and advertisements tailored to demographic characteristics
   3. Analysis of access frequency and service usage statistics

6. Retention and Use Period of Personal Information

The Company retains and uses personal information only during the period when the user receives services. Personal information will be promptly destroyed if:

• The user withdraws consent for the collection and use of personal information
• The purpose of collection/use is achieved or the retention/use period ends
• A reason such as business closure occurs

However, the following information will be retained for the specified periods for the reasons stated below:

1. Consumer Protection Act in E-Commerce, etc.
   1. Personal information and consultation details submitted at the time of inquiry: Retained for 3 years
   2. Records of consumer complaints or dispute resolution: Retained for 3 years

7. Procedures and Methods for Destroying Personal Information

The Company promptly destroys personal information once its purpose has been achieved in accordance with retention and use periods.

1. Destruction Procedures
   1. Information entered for site usage will be stored for a certain period based on internal policies and relevant laws for information protection (see retention and use periods) before being deleted or destroyed.
2. Destruction Methods
   1. Personal information stored in electronic file formats is deleted using technical methods that prevent record recovery. Personal information printed on paper is shredded or incinerated.

8. Provision and Sharing of Personal Information with Third Parties

The Company uses the user's personal information within the scope notified in Article 4 and, in principle, does not use it beyond the scope or provide the user's personal information to external parties without the user's prior consent.

[Provision to Third Parties]

To provide better services, the user's personal information may be provided or shared with third parties. When providing or sharing personal information, the user's personal information may be individually notified in advance via e-mail or in writing of who the recipient is, what personal information items are provided or shared, why such information must be provided or shared, and how long it will be protected and managed. Consent may also be obtained through the terms and conditions at the time of inquiry. If the user does not consent, the information will not be provided or shared with third parties. When there is a change in the relationship of provision and sharing with third parties or the relationship is terminated, the same procedure will be followed to notify or obtain consent.

However, the following cases are exceptions:

1. When the user has agreed to the disclosure of personal information in advance.
2. When there is a request from an investigative agency in accordance with the provisions of the law or for investigative purposes in accordance with the procedures and methods stipulated by the law.

9. Entrustment of Personal Information Processing

The Company entrusts personal information processing as follows to improve services and ensures safe management through contractual agreements:

Entrusted Company	Description of Entrusted Work
Website Management Expert	Website management and operation

Contracts specify compliance with the Personal Information Protection Act, including measures for preventing re-entrustment, supervision, technical/administrative protection measures, and compensation for damages. Changes in entrusted work or contractors will be disclosed without delay through this policy.

10. User Rights and How to Exercise Them

1. Users may view, modify, or request the deletion of their personal information at any time.
2. To view or modify personal information, users can use the "Modify Information" option. To cancel membership (withdraw consent), users can contact the Personal Information Manager in writing, by phone, or via email.
3. If corrections are requested, they will be made promptly. If incorrect information has been shared with third parties, they will also be notified to make corrections.
4. Personal information canceled or deleted upon the user’s request will be processed as per Article 6 and will not be accessed or used for other purposes.

11. Installation, Operation, and Refusal of Cookies

1. Purpose of Cookies
   Cookies store user preferences and information to:
   1. Provide tailored information
   2. Analyze usage patterns for targeted marketing
   3. Track content viewed to enhance personalization
2. Managing Cookies
   Users can allow, block, or prompt for cookie storage by adjusting their browser settings. Note that blocking cookies may hinder the use of some services.
   1. Firefox: https://support.mozilla.com/ko/kb/disable-third-party-cookies
   2. Chrome: https://support.google.com/chrome/answer/95647?hl=ko&topic=14666&ctx=topic
   3. Internet Explorer: https://support.microsoft.com/ko-kr/help/17442
   4. Safari: https://support.apple.com/ko-kr/guide/safari/sfri11471/mac

12. Technical and Administrative Protection Measures

The Company implements the following measures to prevent loss, theft, leakage, alteration, or damage to personal information:

1. Technical Measures
   1. The personal information of users is thoroughly protected. Users should not disclose their personal information to anyone.
      To this end, the Company recommends that users close their web browser after finishing use on a PC. This is particularly important when sharing a PC with others or using it in public places (e.g., workplaces, schools, libraries, or internet cafes) to prevent personal information from being disclosed to others.
   2. The Company takes measures to prevent users’ personal information from being leaked or damaged due to hacking or computer viruses by using antivirus programs.
      To safeguard against the loss or damage of personal information, the Company regularly backs up data, employs the latest antivirus programs to prevent the leakage or damage of users’ personal information and data, and uses encrypted communication to ensure the secure transmission of personal information over networks. Additionally, the Company utilizes intrusion prevention systems to control unauthorized access from external sources and strives to implement all possible technical devices to enhance security systematically.
2. Administrative Measures
   1. To ensure the safe protection of users' personal information, the Company limits access to personal information to designated personnel only, assigns separate passwords for handling personal information, and updates them regularly. Furthermore, the Company provides regular training to the designated personnel on new security technologies and personal information protection obligations, thereby consistently emphasizing compliance with the Company’s personal information processing policy.
   2. However, the Company assumes no responsibility for problems arising from the leakage of personal information due to the user’s negligence or issues on the internet.

13. Contact Information for Personal Information Manager

• Name: Choi Hyeong-seop
• Department: Management Support Office
• Position: Director
• Contact:
  • TEL: 043-272-7079
  • Email: hyeongseop.choi@mplusi.co.kr
  • Fax: 043-272-7078

14. Remedies for Infringement of Information Subject’s Rights

If you need to report or consult regarding personal information infringement, please contact the Personal Information Infringement Report Center of the Korea Internet & Security Agency (KISA). Additionally, if you have suffered financial or mental damage due to personal information infringement, you may apply for relief through the Personal Information Dispute Mediation Committee of KISA.

• Personal Information Infringement Report Center (http://www.cyberprivacy.or.kr, Phone: 1336)
• Personal Information Dispute Mediation Committee (http://www.kopico.or.kr, Phone: 1336)
• Information Protection Mark Certification Committee(http://www.privacymark.or.kr, Phone: 02-580-0533)
• Supreme Prosecutors' Office Internet Crime Investigation Center(http://www.spo.go.kr, Phone: 02-3480-3600)
• National Police Agency Cyber Terror Response Center(http://www.ctrc.go.kr, Phone: 02-392-0330)
• National Police Agency(http://www.police.go.kr)

15. Notification of Changes

In the event of any additions, deletions, or revisions to the contents of this Privacy Policy, the Company will notify users at least 7 days in advance through the "Notices" section. However, for significant changes affecting the rights of information subjects, such as changes to the items of personal information collected or the purposes of use, the Company will provide notification at least 30 days in advance and may obtain renewed consent from the information subjects if necessary..

Announcement Date: September 1, 2024
Effective Date: September 1, 2024