Current Lab Corporation (hereinafter referred to as the "Company") establishes this Privacy Policy (hereinafter referred to as "this Policy") to protect the personal information (hereinafter referred to as "Personal Information") of individuals (hereinafter referred to as "Users" or "Individuals") who use the services provided by the Company (hereinafter referred to as "Company Services"), in compliance with the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc. (hereinafter referred to as "Information Communications Network Act"), and other related legislation, and to handle any grievances related to personal information protection of service users promptly and smoothly.

Article 1: Purpose of Processing Personal Information

The Company processes personal information for the following purposes. The personal information is not used for any purpose other than those listed below, and if the purpose of use changes, necessary measures such as obtaining additional consent in accordance with the Personal Information Protection Act will be implemented.

1. Website membership registration and management
   • Personal information is processed to confirm membership intentions, maintain and manage membership qualifications, prevent fraudulent use of services, provide usage-related guidance, various notices and communications, and contact regarding website use.
2. Provision of goods or services
   • Personal information is processed for service provision, invoicing, content provision, providing customized services, payment and settlement, and debt collection.
3. Marketing and advertisement utilization
   • Personal information is processed for providing customized advertising, providing event and promotional information and opportunities, providing services and advertisements based on demographic characteristics, identifying access frequency, or statistics on members' service usage. In this case, the Company complies with relevant laws by obtaining necessary additional consent.
4. Grievance handling
   • Personal information is processed to verify the identity of users, understand grievance issues, contact for fact-finding, and notify the results.
5. Service improvement and development
   • Improvement of existing services (products), development of new services (products), and development of customized services.
6. Utilization of pseudonymous information
   • Utilization of pseudonymized information for statistics creation, scientific research, and public interest record preservation.

Article 2: Personal Information Processing and Retention Period

1. The Company processes and retains personal information within the personal information retention and usage period agreed upon by the user at the time of collection or as stipulated by laws.

2. The Company will delete and destroy the collected user information without delay upon the user's service withdrawal or loss of eligibility, unless a separate request is made. However, despite membership withdrawal or loss of eligibility, the following information will be preserved for the reasons listed below:

   ① If an investigation or inquiry due to a violation of related laws is ongoing, until the end of such investigation.

   ② If there remains a credit-debt relationship due to service use, until the settlement of the credit-debt relationship.

   ③ Provision of goods or services: until the completion of goods or services delivery and payment settlement.

   ④ Other reasons such as preventing re-registration using the same email address or preventing the re-registration of fraudulent users, for the purpose of the Company's internal policies, such as the user's name, social security number, ID, email address, and telephone number, for one year after membership withdrawal.

3. Notwithstanding the previous paragraph, the following information will be preserved for the reasons listed below:

   ① Records related to display/advertising, contract content, and performance, etc., under the "Act on Consumer Protection in Electronic Commerce, etc."

   • Records on display/advertising: 6 months
   • Records on contract or subscription withdrawal, payment, supply of goods, etc.: 5 years
   • Records on consumer complaints or dispute handling: 3 years

   ② Preservation of communication fact confirmation data under Article 41 of the "Protection of Communications Secrets Act"

   • Computer communication, internet log data, access tracking data: 3 months

   ③ Value-Added Tax Act

   • Information related to transaction details such as tax invoices, receipts: 5 years

Article 3: Items of Personal Information Processed

The Company collects and processes the following personal information items:

1. During membership registration, free trial service use, and paid service conversion
   • (Required) Email address, password
2. During inquiry application reception
   • (Required) Name, affiliated company name, telephone number
3. During paid service use
   • Credit card payment: Email address, country name, card number, cardholder name, expiration date, security code
4. During customer consultation and inquiry reception
   • (Required) Name, email address