Privacy

TAEIN Co., Ltd. (the "Company") complies with relevant laws and regulations, including the Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc. and the Personal Information Protection Act, and establishes and discloses this Privacy Policy as follows in order to protect users' personal information. 1. Items of Personal Information Collected and Method of Collection a. Items collected - Upon membership registration (required): email address, password, name, mobile phone number - Upon membership registration (optional): date of birth, gender, affiliated dojang/organization name, country - Upon social login: account identifier, email and profile name provided by the relevant service - Upon ordering and payment: recipient's name, delivery address, contact information, payment method information (card issuer name, approval number, etc.), Personal Customs Clearance Code (for international delivery) - Vendors: trade name, business registration number, representative's name, settlement account information, contact information of the person in charge - Automatically collected items: IP address, cookies, service usage records, access logs, device information, browser information b. Method of collection - Direct entry by users during website membership registration and the ordering process - Collection through customer center inquiries and event entries - Automatic generation and collection in the course of using the Services 2. Purposes of Collection and Use of Personal Information a. Provision of services: product delivery, provision of content, purchase and payment, fee settlement b. Member management: identity verification, personal identification, prevention of fraudulent use, confirmation of intention to register, handling of civil complaints such as complaint resolution, delivery of notices c. Marketing and advertising (only where consent has been given): information on new services, provision of event and advertising information, identification of access frequency and service usage statistics 3. Retention and Use Period of Personal Information In principle, the Company destroys personal information without delay once the purpose of its collection and use has been achieved. However, the following information is retained for the periods specified below for the reasons stated. a. Retention under the Company's internal policy - Records of fraudulent use: 1 year (prevention of fraudulent use) b. Retention under relevant laws and regulations - Records on contracts or withdrawal of offers, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce, Etc.) - Records on payment and supply of goods, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce, Etc.) - Records on consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, Etc.) - Records on labeling and advertising: 6 months (Act on the Consumer Protection in Electronic Commerce, Etc.) - Website visit records: 3 months (Protection of Communications Secrets Act) 4. Provision of Personal Information to Third Parties In principle, the Company does not provide users' personal information to outside parties. However, the following cases are exceptions: a. Where the user has given prior consent b. Where required under the provisions of laws and regulations, or where an investigative agency makes a request for investigative purposes in accordance with the procedures and methods prescribed by law c. When ordering a Vendor's product: information is provided to the relevant Vendor only to the extent necessary to fulfill the order (recipient's name, contact information, delivery address, order details), and is destroyed after delivery has been completed and the return period has expired. 5. Entrustment of Personal Information Processing The Company entrusts personal information processing tasks as follows in order to provide the Services: - Payment processing: payment gateway (PG) providers — payment and prevention of payment fraud - Delivery: courier and international express delivery companies — product delivery and delivery tracking - Sending of emails and notifications: email and message delivery agencies — order and notice information When concluding an entrustment agreement, the Company stipulates the matters necessary to ensure that personal information is managed safely, and manages and supervises the entrusted parties. 6. Overseas Transfer of Personal Information In order to provide international delivery and global payment services, recipient information may be transferred to delivery and customs clearance operators in the country of destination, and when overseas payment methods (PayPal, Stripe, etc.) are used, payment information may be transferred to the relevant operator. The items transferred, the purpose and the retention period will be notified at the time of the payment and delivery request. 7. Procedures and Methods for Destruction of Personal Information a. Destruction procedures: after the purpose has been achieved, information entered by users is moved to a separate database, stored for a certain period in accordance with internal policies and relevant laws and regulations, and then destroyed. b. Destruction methods: information in the form of electronic files is deleted using technical methods that make it irrecoverable, and information printed on paper is destroyed by shredding or incineration. 8. Rights of Users and Legal Representatives and Methods of Exercising Them a. Users may at any time view or modify their registered personal information and may request withdrawal from membership. b. Personal information may be viewed and modified on My Page, and withdrawal from membership is available through My Page or the customer center. c. Personal information of children under the age of 14 is collected with the consent of their legal representative, and the legal representative may request access to, correction of, or deletion of the child's personal information. 9. Installation, Operation and Refusal of Devices that Automatically Collect Personal Information a. The Company uses cookies to provide users with personalized services. b. Cookies are used to keep users logged in, retain shopping cart contents, save language settings, and analyze usage patterns. c. Users may refuse the storage of cookies through their web browser settings. However, if users refuse the storage of cookies, they may experience difficulties in using some services that require login. 10. Measures to Ensure the Security of Personal Information a. Passwords are stored and managed using one-way encryption that cannot be decrypted. b. Personal information in transit is encrypted with TLS, and access rights are limited to the minimum number of personnel necessary for business purposes. c. Access records are retained and inspected, and access control and intrusion prevention measures are applied to the personal information processing system. 11. Chief Privacy Officer and Department Receiving Requests for Access The Company designates a Chief Privacy Officer as follows, who has overall responsibility for personal information processing tasks and handles user complaints and remedies for damages related to personal information processing. - Affiliation of the Chief Privacy Officer: Customer Support Team, TAEIN Co., Ltd. - Inquiry email: support@taeinwt.com Users may direct all inquiries, complaints, requests for remedies for damages, etc. relating to personal information protection that arise while using the Services to the above contact, and the Company will respond to and handle them without delay. 12. Remedies for Infringement of Rights If you need to report or seek advice regarding an infringement of personal information, you may contact the following organizations: - Personal Information Infringement Report Center: privacy.kisa.or.kr / 118 (no area code) - Personal Information Dispute Mediation Committee: kopico.go.kr / 1833-6972 - Cyber Investigation Division, Supreme Prosecutors' Office: spo.go.kr / 1301 (no area code) - Cyber Investigation Bureau, Korean National Police Agency: ecrm.police.go.kr / 182 (no area code) 13. Changes to the Privacy Policy This Privacy Policy applies from its effective date, and in the event of any additions, deletions or corrections in accordance with laws, regulations or policies, notice will be given through announcements from 7 days prior to the effective date of the changes. Effective date: June 9, 2026