Sad Gas Co., Ltd. (hereinafter referred to as the Company) values users' personal information and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc. and the Personal Information Protection Act. Through this Privacy Policy, the Company informs you of the purpose and method of using the personal information provided by users and the measures taken to protect personal information.

Article 1 (Items of Personal Information Collected and Methods of Collection)

The Company collects the following personal information for membership registration, consultation, product purchase, and delivery.

1. Collected Items

- Upon registration: Email, password, name, nickname (For social login, identification value and email provided by the social platform)

- Upon product purchase and delivery: Recipient's name, mobile phone number, shipping address, payment information (virtual account information such as credit card type, bank name, etc. - However, complete payment information is processed by the payment gateway company)

- Automatically collected during service use: IP Address, cookies, date and time of visit, service usage records, improper usage records

2. Collection Method: Website (Membership registration, purchase payment, consultation board, etc.)

Article 2 (Purpose of Collection and Use of Personal Information)

The Company utilizes the collected personal information for the following purposes:

1. Provision of services and fulfillment of contracts: Provision of content, delivery of goods or sending of invoices, identity verification, purchase, and payment of prices.

2. Member management: Identity verification according to the use of membership services, personal identification, prevention of fraudulent use by delinquent members and unauthorized use, confirmation of intent to join, age verification, handling of complaints and grievances, and delivery of notices.

3. Marketing and advertising: Development and specialization of new services (products), delivery of advertising information such as events (only when there is separate consent from the user).

Article 3 (Period of Retention and Use of Personal Information)

In principle, personal information is destroyed without delay after the purpose of collection and use has been achieved. However, the following information is retained for the period specified below for the following reasons:

1. Reasons for retaining information according to relevant laws

- Records on contracts or cancellation of subscriptions: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)

- Records on payment and supply of goods, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)

- Records on consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)

- Website visit records: 3 months (Protection of Communications Secrets Act)

Article 4 (Delegation of Personal Information Processing)

The Company delegates personal information processing tasks as follows for smooth processing of personal information.

1. Payment processing (PG)

- Delegated company: KG Inicis Co., Ltd.

- Delegated tasks: Payment proxy services such as credit cards and account transfers required for product purchases.

2. Product delivery

- Delegated company: CJ Logistics, etc.

- Delegated tasks: Delivery of purchased goods.

Article 5 (Procedure and Method of Destroying Personal Information)

In principle, the Company destroys the personal information without delay after the purpose of collection and use has been achieved.

1. Destruction procedure: The information entered by the user is transferred to a separate DB (or separate filing cabinet for paper) after the purpose is achieved, stored for a certain period according to internal policies and other relevant laws, and then destroyed.

2. Destruction method: Personal information saved in electronic file formats is deleted using a technical method that cannot reproduce the records. Personal information printed on paper is destroyed by shredding or incineration.

Article 6 (Rights of Users and Legal Representatives and Methods of Exercising Them)

1. Users may view or modify their registered personal information at any time and may request cancellation of their membership.

2. To view/modify personal information, users can click 'My Page' (Edit Member Information). To cancel membership (withdraw consent), users can click 'Withdraw Membership' on the site, go through the identity verification process, and directly view, correct, or withdraw.

3. Alternatively, if you contact the Privacy Officer in writing, by phone, or by email, we will take action without delay.

Article 7 (Matters Concerning the Installation, Operation, and Rejection of Automatic Personal Information Collection Devices)

The Company uses 'cookies' that frequently save and retrieve user information. Users have the option to install cookies. Therefore, by setting options in the web browser, users can allow all cookies, go through a confirmation process every time a cookie is saved, or refuse to save all cookies. However, if you refuse to save cookies, there may be difficulties in using some services that require logging in.

Article 8 (Privacy Officer)

The Company is responsible for overall tasks related to personal information processing and has designated a Privacy Officer as follows to handle user complaints and damage relief related to personal information processing.

- Name: Yoon-baek Myung

- Title: CEO

- Contact: +82-2-6245-0123

Addendum

This policy will be effective from May 1, 2026.