[ Handling of Personal Information ]

Privacy Policy

Last updated: Jan 14, 2025

AYROM Inc. recognizes that our customers' personal information is a valuable asset. In collecting and using such information to provide better products and services, we are committed to protecting personal information in accordance with the common privacy policy set forth below and to earning our customers' trust.

Article 1 (Definition of Personal Information)

In this policy, "personal information" means information about an individual that can identify a specific person by name, date of birth, or other descriptions contained in the information, or that includes a personal identification code (*note). Information collected about customers may, by itself, not identify a specific individual; however, when combined with other information, if a specific individual can be identified, all such information within the scope of the combination shall be treated as "personal information."

*Note: Personal identification codes follow the ordinances of the Personal Information Protection Commission. As of the date of this policy revision, the definition includes: (1) (i) base sequences constituting DNA, (ii) appearance determined by facial skeletal structure, skin color, and the position and shape of the eyes, nose, mouth, and other facial features, (iii) line patterns formed by irregularities on the surface of the iris, (ii) vocal cord vibrations during speech, glottal opening and closing, and the shape of the vocal tract and its changes, (ho) posture and movement of both arms, stride, and other aspects of gait while walking, (he) vein patterns on the palm, back of the hand, or fingers determined by branching and endpoints of subcutaneous veins, (to) fingerprints or palm prints, (2) passport numbers, basic pension numbers, driver's license numbers, resident record codes, and individual numbers, and (3) characters, numbers, symbols, and other codes recorded on National Health Insurance, Late-stage Elderly Healthcare, and Long-term Care Insurance insured person certificates in a manner that differs for each person to whom they are issued.

Article 2 (Compliance with Laws and Regulations)

When handling personal information, we comply with the Act on the Protection of Personal Information and other relevant laws and regulations concerning personal information protection, as well as the obligations set forth in guidelines published by the Personal Information Protection Commission and relevant regulatory authorities, together with this policy.

Article 3 (Use Within the Scope of Purposes of Use)

Except where the consent of the individual has been obtained in advance or where permitted by law, we handle personal information only to the extent necessary to achieve the specified purposes of use and take measures accordingly.

Article 4 (Personal Information of Customers Under 15 Years of Age)

We strive to comply with all laws applicable to the collection, storage, and use of personal information relating to customers under 15 years of age. If you become aware that a child has provided personal information to us without the consent of a parent or guardian, please contact the inquiry desk specified in this policy.

Article 5 (Security Control Measures)

We strive to keep personal information accurate, complete, and up to date within the scope of the purposes of use, and implement necessary and appropriate security control measures in line with current technological standards to prevent unauthorized access, leakage, falsification, loss, damage, and the like, and will correct them as needed.

Article 6 (Supervision of Contractors)

We may entrust the handling of personal information to other group companies or third parties to the extent necessary to achieve the purposes of use. In such cases, we implement appropriate security control measures under a common information security policy. For outsourcing to third parties, we ensure appropriate security management through contracts and other means regarding the handling of personal information. Where outsourcing is performed to a third party located abroad and a record-keeping obligation arises under law, we comply with such obligation.

Article 7 (Provision to Third Parties)

Except where permitted by law, we do not provide personal information to third parties without obtaining the consent of the individual. Where personal information is provided to a third party and a record-keeping obligation arises under law in connection with such provision, we comply with such obligation.

Article 8 (Response to Inquiries)

We respond appropriately to requests for disclosure, correction, suspension of use (including product and service introductions), deletion, and other inquiries regarding the handling of personal information in accordance with legal requirements. Please contact the inquiry desk designated by the company to which you provided your personal information.

Article 9 (Strengthening Systems, Training, etc.)

To handle personal information appropriately, we continuously strengthen and improve our internal systems, including appointing managers responsible for personal information management, establishing internal rules, providing education to officers and employees, and conducting proper internal audits, including review of this policy.

*AYROM Inc. complies with the above privacy policy as its policy regarding the protection of personal information.