Privacy Policy of Yeowubi Interaction Co., Ltd. (the “Company”)

Yeowubi Interaction Co., Ltd. (“the Company”) complies with the Personal Information Protection Act and related laws to protect the freedom and rights of data subjects. We handle personal information lawfully and manage it securely. Pursuant to Article 30 of the Personal Information Protection Act, this Privacy Policy outlines procedures and standards for handling and protecting personal information and aims to process related concerns promptly and effectively. The Privacy Policy is established and disclosed as follows:

Article 1 (Purpose)

1. Definition of Personal Information:
   “Personal Information” refers to information about a living individual that can identify the individual (including information that can identify an individual when combined with other data).

2. The Company prioritizes the protection of your personal information and complies with the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and related guidelines.

3. The Company makes the Privacy Policy available on the homepage for easy access.

4. The Company ensures continuous improvement by establishing procedures for revising the Privacy Policy. When revisions are made, they will be easily identifiable with version numbers or other means.

Article 2 (Collected Personal Information and Purposes)

1. Vendor Members (Paid Service Users of the Winnie Platform):
   We collect the minimum necessary personal information for the following purposes:

   Purpose	Details
   Service Provision	Identifying users, notifying and informing them, providing vendor services
   Service Development	Analyzing usage records, improving services

   Collected Information:

   • Individuals: ID, password, name, gender, date of birth, nationality, phone number, email, address
   • Organizations: Name, business registration number, phone number, email, address, account and payment details

   Refusal to provide consent may restrict membership or service use.

2. General Members (Free Service Users of the Winnie Platform):
   Personal information is collected for the following purposes:

   Purpose	Details
   Service Provision	Identifying users, recommending services, providing vendor benefits
   Service Development	Analyzing usage records, improving services

   Collected Information:

   • General Information: ID, password, name, gender, date of birth, nationality, phone number, email, address, location
   • Other: Service usage records, IP address, device information (OS, identifiers)

   Refusal to provide consent may restrict membership or service use.

Article 3 (Protection of Minors’ Information)

The Company does not collect personal information from individuals under the age of 14 and restricts their membership.

Article 4 (Retention and Use Period of Personal Information)

1. The Company will destroy personal information once its purpose is fulfilled unless preservation is required by law.

   Records	Legal Basis	Retention Period
   Contracts or cancellations	Consumer Protection Act in E-commerce	5 years
   Payment and supply records	Consumer Protection Act in E-commerce	5 years
   Complaints or disputes	Consumer Protection Act in E-commerce	3 years
   Log records	Communications Secret Protection Act	3 months

Article 5 (Procedures and Methods for Destroying Personal Information)

1. Personal information that is no longer necessary is destroyed without delay.

2. Destruction Procedures and Methods:

   • Data is moved to a separate database or stored in a different location and then destroyed.
   • Electronic files are irreversibly deleted using technical or physical methods, while paper records are shredded or incinerated.

Article 6 (Provision to Third Parties)

1. The Company does not provide personal information to third parties beyond the disclosed purposes, except in the following cases:

   • When required for investigations under the law
   • For statistics or research in non-identifiable forms
   • Other lawful requests

2. Details of Third-Party Provision:

   Recipient	Purpose	Information Provided	Retention Period
   Winnie Platform Vendors	Service provision, event benefits	Name, ID, gender, etc.	Until withdrawal or consent revocation

Article 7 (Measures for Security)

1. Administrative: Internal management plans, staff training
2. Technical: Access control systems, encryption, security programs
3. Physical: Restricted access to server rooms and archives

Article 8 (User Rights and Exercise Methods)

1. Users or legal representatives may exercise the following rights:

   • Accessing, correcting, deleting personal information
   • Stopping processing or withdrawing consent

2. Requests may be denied if prohibited by law or if they harm others.

Article 9 (Responsibilities of Users)

1. Users must provide accurate information to avoid issues. Users are responsible for issues caused by incorrect information.
2. Users must protect their own and others’ information. Violations may result in penalties.

Article 10 (Personal Information Officer)

Article 11 (Remedies)

For remedies, contact:

• Personal Information Dispute Mediation Committee: 1833-6972
• Personal Information Infringement Center: 118
• Supreme Prosecutors’ Office: 1301
• National Police Agency: 182

Article 12 (Amendments)

This policy is effective from November 1, 2024.