The company is collecting personal information such as below for membership registration, counseling, service application, etc.

① Collection items: name, date of birth, gender, login ID, password, password and answer, home phone number, mobile phone number, email, job, company name, department, position, company phone number, hobby, marital status, anniversary, legal representative information, resident registration number, service log, connection IP, payment record

② Personal information collection method: homepage (membership entry), written form

The company uses the personal information it collects for the following purposes:

① Providing content for settlement of charges according to the implementation of contracts for the provision of services, purchasing and payment of charges, shipping goods, or billing, etc.

② Member management: identification of personal identification, age verification, collection of personal information of children under 14 years of age, confirmation of consent of legal representatives, and delivery of notices

③ Identifying the frequency of access to marketing and advertisements or statistics on the member’s use of services

After the purpose of collecting and using personal information is achieved, the company destroys the information without delay.

In principle, the company destroys the information without delay after the purpose of collecting and using personal information is achieved. The destruction procedures and methods are as follows.

① Destruction procedure

The information you entered for membership registration is transferred to a separate DB after the purpose is achieved (in case of paper, separate document box) and stored for a certain period of time (refer to retention and usage period) according to internal policies and other related laws.

Personal information transferred to a separate DB shall not be used for any purpose other than that held by law.

② Destruction method

Personal information stored in the form of an electronic file is deleted using technical methods that cannot be played back.

In principle, the company does not provide users’ personal information to the outside world. However, exceptions are made in the case below.

– Users have agreed in advance

– Where there is a request from the investigative agency in accordance with the provisions of the statutes or the procedures and methods prescribed in the statutes for investigation purposes

The company does not entrust your information to an outside company without your consent. If such needs arise in the future, we will notify you of the consignee and the details of the entrustment work and obtain prior consent if necessary.

Users and legal representatives may inquire or modify the personal information of themselves or children under the age of 14 at any time and may request the cancellation of their registration. To modify the personal information inquiry of a child under the age of 14, you can sign up for “personal information change” (or “membership information correction”) and click “membership withdrawal” to read, correct, or withdraw.

If you contact the person in charge of personal information management in writing, by phone, or by e-mail, we will take action without delay.

If you request correction of personal information errors, we will not use or provide such personal information until the correction is completed.

Also, if you have already provided wrong personal information to a third party, we will notify the third party of the result of the correction without delay so that the correction can be made. o shall process personal information revoked or deleted at the request of the user or legal representative as specified in “the retention and use period of personal information collected by o”, and shall not be read or used for any other purpose.

The company operates ‘cookies’ that store and retrieve your information from time to time. A cookie is a very small text file sent to your browser by a server that runs oo’s website and is stored on your computer’s hard disk. Your company uses cookies for the following purposes:

① Purpose of using cookies, etc.

Target marketing and personalized services are provided by analyzing the frequency of access and visiting hours of members and non-members, identifying users’ tastes and interests, tracking their own traces, and identifying the degree of participation in various events and visits.

You have the option of installing cookies. Therefore, you may accept all cookies by setting options in your web browser, confirm each time the cookies are saved, or refuse to save all cookies.

② How to reject cookie settings

For example, you can choose an option in your web browser to allow all cookies, confirm each time you save them, or refuse to save all cookies.

Example of how to set up (for Internet Explorer): Tools at the top of your web browser > Internet Options > Privacy

However, if you refuse to install cookies, there may be difficulties in providing services.

The company designates related departments and person in charge of personal information management to protect customers’ personal information and handle complaints related to personal information as follows:

Customer Service Department: Internet Business Department

Phone number: 070-4222-1273

Email: jaeyong@lightskin.co.kr

Name of person in charge of personal information management: Lee Jae-yong;

Phone number: 070-4222-1273

Email: jaeyong@lightskin.co.kr

You can report any personal information protection complaints that arise from using the company’s services to the person in charge of personal information management or the department in charge. The company will quickly give you sufficient answers to users’ reports.

If you need any other reports or consultations on personal information infringement, please contact the agency below.

1. Personal Dispute Mediation Committee (www.1336.or.kr/1336)

2. Information Protection Mark Certification Committee (www.eprivacy.or.kr/02-580-0533-4)

3. Internet Crime Investigation Center at the Supreme Prosecutors’ Office (http://icic.sppo.go.kr/02-3480-3600)

4. The Cyber Terror Response Center of the National Police Agency