CareNCo, Inc. (hereinafter referred to as “the Company”) places a high importance on the protection of users’ personal information and complies with relevant regulations related to personal information protection, such as the “Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.” and the “Personal Information Protection Act.” Through this Privacy Policy, the Company informs users of the measures taken in handling the personal information provided by users.

The Company’s Privacy Policy includes the following:

1. Purpose of Collection and Use of Personal Information The Company collects and uses personal information for the following purposes:

   • Securing basic materials for project consulting, communication for notification of matters, responding to inquiries, etc., for smooth communication.

2. Items of Personal Information Collected and Method of Collection The Company collects and processes the following information:

   • Required items: Name, email address
   • Optional items: Company name, contact information

3. Provision of Personal Information to Third Parties The Company does not provide personal information to third parties without the user’s consent, except in cases required by law.

4. Retention and Use Period of Personal Information In principle, the Company destroys personal information without delay once the purpose of its collection and use has been achieved, except when retention is required by laws and regulations.

   • Visit records: 3 months (Protection of Communications Secrets Act)
   • Inquiries: 1 year (Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.)

5. Procedures and Methods of Destruction of Personal Information The Company’s procedures and methods for destroying personal information are as follows:

   • Destruction procedure: Information entered by users for quotation inquiries, etc., is stored for a certain period according to internal policies and related legal reasons (refer to retention and use period) and then destroyed.
   • Destruction method: Personal information stored in electronic file format is deleted using technical methods that make records unrecoverable. Printed personal information is shredded or incinerated.

6. Rights, Obligations, and Methods of Exercise of Users

   • Users can withdraw their consent to the collection of personal information by contacting the personal information management officer in writing, by phone, or email, and the Company will take necessary measures such as destruction of personal information after verifying the identity of the person unless otherwise stipulated by law.
   • If users wish to delete their personal information, they can request deletion by contacting the personal information manager in writing, by phone, or email.
   • The Company checks whether a user’s representative who requests access or correction of information is a legitimate representative and may require proof of the representative relationship.
   • If there is a valid reason to refuse a request for access to or correction of personal information, the Company will notify the user without delay and explain the reason.
   • The Company may request separate procedures from users for changes to mandatory input items such as name and email for smooth and stable service provision.
   • Users must not infringe on their own or others’ personal information and privacy by violating relevant laws such as the Personal Information Protection Act.

7. Technical/Administrative Measures for Personal Information Protection The Company uses a device that automatically collects personal information, called a ‘cookie,’ which is a very small text file sent by the server used to operate the Company’s website to the user’s browser and stored on the user’s computer hard disk. Cookies identify the user’s computer but do not personally identify individual users. Users have the option to install cookies and can allow, verify each time, or reject the storage of all cookies by setting options in the web browser being used.

8. Personal Information Protection Officer Users can request access to, correction, deletion, or suspension of processing of personal information at any time by contacting the personal information protection officer in writing, by phone, or email.

Personal Information Officer

Personal Information Management Officer

For consultation regarding personal information infringement, you can contact the following institutions:

• Korea Internet & Security Agency Personal Information Infringement Report Center (privacy.kisa.or.kr / Dial 118 without area code)
• Supreme Prosecutors’ Office Cyber Investigation Department (http://www.spo.go.kr / Dial 1301 without area code)
• Korean National Police Agency Cyber Safety Bureau (http://www.ctrc.go.kr / Dial 182 without area code)

9. Additional Policies The Company will notify changes to the contents of this Privacy Policy, including additions or deletions, on the website at least seven days prior to the amendments.

Effective date: January 1, 2024