We are committed to handling customers’ personal information and specific personal information appropriately in accordance with the following policy.

1. Compliance with Laws and Regulations

We comply with the My Number Act, the Act on the Protection of Personal Information, other applicable laws and regulations, the Guidelines for the Proper Handling of Specific Personal Information (Business Operators Edition), and our internal policies to ensure the proper handling of personal information and specific personal information.

2. Collection and Use of Personal Information

When collecting personal information directly from customers, business partners, employees, or other individuals through written documents or other means, we clearly specify the purpose of use. In other cases, we will notify or publicly disclose the purpose of use. Unless prior consent has been obtained or otherwise permitted by law, we will not use personal information beyond the scope necessary to achieve the stated purpose.

3. Management of Personal Information

We implement appropriate measures to prevent the leakage, loss, or damage of personal information and manage such information properly. We also provide appropriate supervision to employees handling personal information. When outsourcing the handling of personal information, we ensure that contractors are properly supervised and maintain appropriate management standards.

4. Disclosure of Personal Information to Third Parties

We will not provide personal information to third parties except where prior consent has been obtained (including outsourcing within the scope necessary to achieve the intended purpose) or where otherwise permitted by law.

5. Disclosure, Correction, Suspension of Use, and Other Requests

If customers, business partners, employees, or other individuals request notification of the purpose of use, disclosure, correction, suspension of use, or other actions regarding their personal information, we will verify the identity of the requester and respond in accordance with applicable laws and regulations.

6. Provision of Specific Personal Information

We will not provide specific personal information of business partners, employees, or other individuals to third parties except where permitted by law.

7. Security Control Measures

We take necessary and appropriate security measures to prevent the leakage, loss, or damage of personal information and specific personal information. We also provide appropriate supervision to employees and contractors (including subcontractors) who handle such information. In addition, we have established separate internal regulations regarding the secure management of personal information and specific personal information.

8. Internal Management System

We appoint a person responsible for the handling of personal information and specific personal information and continuously work to improve and maintain an effective information security management system.