PRIONE (the “Company”) establishes and discloses the following Privacy Policy in accordance with the Personal Information Protection Act of the Republic of Korea, in order to protect the personal information of data subjects and to handle related grievances promptly.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes. Personal information is not used for any purpose other than those stated below. Where the purpose of use changes, the Company will take the necessary measures, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

1. 1Receipt and handling of inquiriesPersonal information is processed for the purposes of reviewing the content of an inquiry, verifying the person who submitted it, replying to the inquiry, and managing consultation records.

Article 2 (Items of Personal Information Processed)

The Company collects and uses the following personal information through its inquiry board. The Company does not operate a separate membership registration process.

1. 1Required itemsName, e-mail address, phone number, content of the inquiry
2. 2Optional itemsAttachments (only where attached by the user)
3. 3Automatically generated itemsIP address, date and time of access, and browser information may be generated and stored automatically in the course of using the service.

Article 3 (Processing and Retention Period)

1. 1The Company processes and retains personal information within the retention and use period prescribed by law, or within the period consented to by the data subject at the time of collection.
2. 2Personal information collected through inquiries is retained for three (3) years after the inquiry has been resolved and is then destroyed.
3. 3Where retention is required under applicable laws, the information is retained for the period prescribed by those laws.

Article 4 (Provision of Personal Information to Third Parties)

The Company processes personal information only within the scope specified in Article 1, and provides personal information to third parties only where this falls under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or under special provisions of law. The Company currently does not provide personal information to any third party.

Article 5 (Outsourcing of Personal Information Processing)

The Company outsources personal information processing tasks as follows in order to provide its services smoothly.

1. 1Website hosting and server operationContractor: Cafe24 Corp. / Scope: server operation and data storage for the website
2. 2When entering into an outsourcing agreement, the Company specifies in the contract the prohibition of processing personal information for purposes other than performing the outsourced task, technical and managerial safeguards, restrictions on sub-contracting, and liability for damages, in accordance with Article 26 of the Personal Information Protection Act, and supervises whether the contractor processes personal information securely.
3. 3If the content of the outsourced task or the contractor changes, the Company will disclose the change without delay through this Privacy Policy.

Article 6 (Destruction of Personal Information)

1. 1The Company destroys personal information without delay once it is no longer required, such as when the retention period has expired or the purpose of processing has been achieved.
2. 2ProcedurePersonal information for which grounds for destruction have arisen is selected and destroyed with the approval of the Chief Privacy Officer.
3. 3MethodInformation in electronic file form is deleted using technical methods that make recovery impossible; information recorded on paper is shredded or incinerated.

Article 7 (Rights of Data Subjects and How to Exercise Them)

1. 1Data subjects may at any time request access to, correction of, deletion of, or suspension of the processing of their personal information.
2. 2Such requests may be made in writing, by e-mail or by facsimile, and the Company will act on them without delay.
3. 3Where a data subject requests correction or deletion of an error in personal information, the Company will not use or provide that personal information until the correction or deletion is complete.
4. 4Rights may be exercised through an agent, such as a legal representative or a duly authorised person. In such case a power of attorney in the form prescribed by the Notice on Methods of Processing Personal Information must be submitted.

Article 8 (Measures to Ensure the Security of Personal Information)

The Company takes the following measures to ensure the security of personal information.

1. 1Managerial measuresMinimising the number of staff handling personal information and providing training
2. 2Technical measuresManaging access rights to the personal information processing system, retaining access logs, and installing and updating security programs
3. 3Physical measuresAccess control for systems in which personal information is stored

Article 9 (Installation and Operation of Automatic Collection Devices, and Refusal Thereof)

1. 1The Company uses cookies to maintain session state so that services can be provided smoothly.
2. 2A cookie is a small piece of information stored in the user’s browser. The Company does not identify individual users through cookies.
3. 3Users may refuse the storage of cookies through their browser settings. However, refusing cookies may make it difficult to use some services.

Article 10 (Chief Privacy Officer)

The Company designates a Chief Privacy Officer as set out below, who takes overall responsibility for personal information processing and handles complaints and remedies for damage in relation to personal information processing.

1. 1Chief Privacy OfficerName: Representative
   Title: Chief Executive Officer
   Contact: +82-51-405-8602 / smpark@jeilens.co.kr
2. 2Data subjects may direct any inquiries, complaints or requests for remedy relating to personal information protection arising from use of the services to the Chief Privacy Officer, and the Company will respond without delay.

Article 11 (Requests for Access to Personal Information)

Data subjects may submit requests for access to personal information under Article 35 of the Personal Information Protection Act to the contact below. The Company endeavours to process such requests promptly.

1. 1Address: Rm. 610 & 621, Industry-University Hub Bldg., 727 Taejong-ro, Yeongdo-gu, Busan, Republic of Korea
2. 2Phone: +82-51-405-8602
3. 3E-mail: smpark@jeilens.co.kr

Article 12 (Remedies for Infringement of Rights)

Data subjects may apply to the following organisations for dispute resolution or consultation in order to obtain relief from infringement of their personal information rights.

1. 1Personal Information Dispute Mediation Committee : 1833-6972 / www.kopico.go.kr
2. 2Korea Internet & Security Agency, Privacy Infringement Report Centre : 118 / privacy.kisa.or.kr
3. 3Supreme Prosecutors’ Office : 1301 / www.spo.go.kr
4. 4National Police Agency : 182 / ecrm.cyber.go.kr

Article 13 (Changes to this Privacy Policy)

This Privacy Policy takes effect on 19 August 2026. Where content is added, deleted or amended due to changes in laws, policies or security technology, the Company will give notice on the Site at least seven (7) days before the change takes effect.

This English text is provided for convenience only. In the event of any discrepancy between the Korean and English versions, the Korean version shall prevail.