Privacy Policy

INNOUS Co., Ltd. (hereinafter "the Company") establishes and discloses the following Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of Korea, to protect the personal information of data subjects and to promptly and smoothly handle related grievances.

Article 1. Purpose of Processing Personal Information

The Company processes personal information for the following purposes. Personal information being processed shall not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be implemented, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

1. Website membership registration and management: Processing for purposes of confirming registration intent, identity verification, maintaining membership, preventing unauthorized use, and various notices.
2. Content provision: Processing for the purpose of providing content and customized services.
3. Marketing and advertising: Processing for the purpose of sending newsletters, providing events and promotional information.

Article 2. Processing and Retention Period

The Company processes and retains personal information within the period of retention and use agreed upon when collecting personal information from data subjects, or within the period prescribed by law.

1. Website membership: Until membership withdrawal. However, until the end of the relevant reason in the following cases:
   • Until the end of investigation in case of ongoing investigations due to violations of relevant laws
   • Until settlement of remaining claims/debts from service use
2. Retention under relevant laws:
   • Records on contracts or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce)
   • Records on payment and supply of goods: 5 years
   • Records on consumer complaints or dispute resolution: 3 years
   • Website visit records: 3 months (Protection of Communications Secrets Act)

Article 3. Provision of Personal Information to Third Parties

The Company processes personal information only within the scope specified in Article 1, and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or special provisions of law.

Currently, the Company does not provide users' personal information to third parties.

Article 4. Entrustment of Personal Information Processing

The Company currently does not entrust personal information processing to external parties. Any future entrustment will be disclosed through this policy.

Article 5. Rights of Data Subjects

Data subjects may exercise the following rights regarding personal information at any time:

1. Request to view personal information
2. Request for correction in case of errors
3. Request for deletion
4. Request to suspend processing

These rights may be exercised through written documents, email, etc. in accordance with the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.

Article 6. Destruction of Personal Information

When personal information becomes unnecessary due to expiration of the retention period or achievement of the processing purpose, the Company shall destroy the personal information without delay.

1. Destruction procedure: Information entered by users is transferred to a separate database after achieving its purpose and destroyed after a certain period according to internal policies and related laws.
2. Destruction method: Electronic files are destroyed using technical methods that make records unrecoverable. Printed personal information is destroyed by shredding or incineration.

Article 7. Privacy Officer

The Company designates the following Privacy Officer to oversee personal information processing and handle complaints and remedies:

Data subjects may contact the Privacy Officer regarding any inquiries, complaints, or remedies related to personal information protection arising from the use of the Company's services.

Article 8. Changes to Privacy Policy

This Privacy Policy is effective from January 30, 2026. Any additions, deletions, or corrections will be announced through notices at least 7 days before implementation.