EPLUS Privacy Policy

EPLUS App establishes and publishes this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act in order to protect users’ personal information and to handle related complaints quickly and smoothly.

This Privacy Policy is effective from January 1, 2023.

---

Article 1. Purpose of Processing Personal Information

EPLUS App processes personal information for the following purposes.

The personal information being processed will not be used for any purpose other than the following. If the purpose of use changes, EPLUS App will take necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.

1. Provision of Goods or Services

Personal information is processed for the purpose of providing content.

---

Article 2. Processing and Retention Period of Personal Information

EPLUS App processes and retains personal information within the personal information retention and use period prescribed by law or agreed upon by the data subject when collecting personal information.

Each personal information processing and retention period is as follows.

1. Provision of Goods or Services

Personal information related to the provision of goods or services is retained and used for the above purpose for 5 years from the date of consent for collection and use.

• Retention basis: Records related to contracts or withdrawal of subscription — 5 years
• Related laws: Records related to contracts or withdrawal of subscription — 5 years
• Exceptions: None

---

Article 3. Entrustment of Personal Information Processing

EPLUS App entrusts personal information processing tasks as follows for smooth handling of personal information-related work.

1. EPLUS Co., Ltd.

• Trustee: Login ID
• Entrusted task: Identity verification for use of membership services
• Entrustment period: 5 years

When entering into an entrustment contract, EPLUS App specifies matters such as prohibition of personal information processing for purposes other than the entrusted work, technical and managerial protection measures, restrictions on re-entrustment, management and supervision of the trustee, and liability for damages in documents such as contracts, in accordance with Article 26 of the Personal Information Protection Act.

EPLUS App also supervises whether the trustee safely processes personal information.

If the details of the entrusted work or the trustee change, EPLUS App will disclose such changes through this Privacy Policy without delay.

---

Article 4. Rights and Obligations of Data Subjects and Legal Representatives

Users may exercise rights such as requesting access, correction, deletion, or suspension of processing of personal information at any time.

Such rights may be exercised in writing, by email, or by fax in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and EPLUS App will take action without delay.

Users may also exercise these rights through a legal representative or authorized agent. In this case, a power of attorney must be submitted in accordance with the applicable public notice on personal information processing methods.

Requests for access to or suspension of personal information processing may be restricted under Article 35, Paragraph 4 and Article 37, Paragraph 2 of the Personal Information Protection Act.

If other laws specify that certain personal information must be collected, users may not request deletion of that personal information.

EPLUS App verifies whether the person making a request for access, correction, deletion, or suspension of processing is the data subject or a legitimate representative.

---

Article 5. Personal Information Items Processed

EPLUS App processes the following personal information items.

1. Provision of Goods or Services

• Required item: Login ID
• Optional items: None

---

Article 6. Destruction of Personal Information

When personal information becomes unnecessary due to expiration of the retention period, achievement of the processing purpose, or other reasons, EPLUS App destroys the personal information without delay.

If personal information must continue to be retained under other laws even after the agreed retention period has expired or the processing purpose has been achieved, the personal information will be moved to a separate database or stored in a different location.

• Legal basis: None specified
• Personal information retained: Account information, transaction date

Destruction Procedure

EPLUS App selects personal information for which a reason for destruction has occurred and destroys it with the approval of the personal information protection officer.

Destruction Method

Information in electronic file format is destroyed using a technical method that prevents the records from being restored or reproduced.

---

Article 7. Measures to Ensure Safety of Personal Information

EPLUS App takes the following measures to ensure the safety of personal information.

1. Encryption of Personal Information

Users’ passwords are encrypted and stored and managed so that only the user can know them.

Important data is protected through separate security functions such as encryption of files and transmitted data or file locking.

2. Restriction of Access to Personal Information

EPLUS App takes necessary measures to control access to personal information by granting, changing, and deleting access rights to the database system that processes personal information.

EPLUS App also controls unauthorized external access by using intrusion prevention systems.

---

Article 8. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

EPLUS App does not use cookies that store and retrieve user information.

---

Article 9. Personal Information Protection Officer

EPLUS App designates the following personal information protection officer to take overall responsibility for personal information processing and to handle complaints and damage relief related to personal information processing.

Personal Information Protection Officer

• Name: SEO GILSUNG
• Position: Representative
• Rank: None
• Contact: 070-4240-2529 / posbar@kakao.com

Department in Charge of Personal Information Protection

• Department: Development Team
• Person in charge: SEO GILSUNG
• Contact: 070-4240-2529 / posbar@kakao.com

Users may contact the personal information protection officer or the department in charge regarding any personal information protection inquiries, complaints, or damage relief that arise while using EPLUS App services.

EPLUS App will respond to and process such inquiries without delay.

---

Article 10. Request for Access to Personal Information

Users may request access to personal information under Article 35 of the Personal Information Protection Act through the following department.

EPLUS App will make efforts to promptly process users’ requests for access to personal information.

Department for Receiving and Processing Personal Information Access Requests

• Department: Development Team
• Person in charge: SEO GILSUNG
• Contact: 070-4240-2529 / posbar@kakao.com

---

Article 11. Remedies for Infringement of Rights

Users may request dispute resolution or consultation from the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency Personal Information Infringement Report Center, or other relevant organizations to seek remedies for personal information infringement.

For reports or consultations related to personal information infringement, contact the following organizations.

1. Personal Information Dispute Mediation Committee
   • Phone: 1833-6972
   • Website: www.kopico.go.kr
2. Personal Information Infringement Report Center
   • Phone: 118
   • Website: privacy.kisa.or.kr
3. Supreme Prosecutors’ Office
   • Phone: 1301
   • Website: www.spo.go.kr
4. National Police Agency
   • Phone: 182
   • Website: ecrm.cyber.go.kr

A person whose rights or interests have been infringed due to a disposition or omission by the head of a public institution regarding requests under Articles 35, 36, and 37 of the Personal Information Protection Act may file an administrative appeal in accordance with the Administrative Appeals Act.

For more information about administrative appeals, please refer to the website of the Central Administrative Appeals Commission.

---

Article 12. Changes to This Privacy Policy

This Privacy Policy is effective from January 1, 2023.