Medyssey (hereinafter referred to as the "Company") values your personal information and complies with applicable laws and regulations regarding the promotion of information and communications network utilization and information protection.

Through this Privacy Policy, the Company informs you of how the personal information you provide is used, for what purposes, and what measures are taken to protect your personal information.

If the Company revises this Privacy Policy, it will be announced through a notice on the website (or through individual notification).

This policy is effective as of June 22, 2026.

1. Personal Information Collected

The Company collects the following personal information for inquiries and consultations.

Online Inquiry
- Items collected: Name, contact number, email address, message content, etc.

2. Purpose of Collection and Use of Personal Information

The Company uses the collected personal information for the following purposes.
Performance of contracts related to service provision and handling of inquiries/responses related to services provided

3. Retention and Use Period of Personal Information

In principle, once the purpose of collecting and using personal information has been achieved, the Company will destroy the information without delay. However, if retention is required under applicable laws and regulations, the Company will retain member information for the period specified by relevant laws as follows.

Items Retained and Legal Basis for Retention

• - Records related to contracts or withdrawal of subscription: 3 years
• - Records related to contracts or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
• - Records on payment and supply of goods, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
• - Records on consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)

4. Procedure and Method of Destruction of Personal Information

In principle, the Company destroys personal information without delay once the purpose of collection and use has been achieved. The procedure and method of destruction are as follows.

Destruction Procedure
Information entered by users for membership registration, etc., is transferred to a separate database (or stored in separate filing cabinets in the case of paper documents) after the purpose has been achieved, and is destroyed after being stored for a certain period in accordance with internal policies and other relevant laws (see Retention and Use Period). Personal information transferred to a separate database is not used for any purpose other than retention unless required by law.

Destruction Method
Personal information stored in electronic file format is deleted using technical methods that prevent the records from being restored.

5. Provision of Personal Information

In principle, the Company does not provide users' personal information to external parties. However, exceptions are made in the following cases.
When users have given prior consent, or when required by law, or when requested by investigative authorities in accordance with procedures and methods prescribed by law for investigative purposes.

6. Hosting and Maintenance

For the performance of services, the Company entrusts operations to the following external specialist as follows.

• - Entrusted party: 3Aniai&C Co., Ltd.
• - Entrusted tasks: Website and system management (hosting / maintenance)

7. Rights of Users and Legal Representatives and How to Exercise Them

Users may view or modify their registered personal information at any time and may request cancellation of membership.
To view or modify personal information, users may use the "Change Personal Information" (or "Edit Member Information," etc.) function. To cancel membership (withdraw consent), users may click "Withdraw Membership," complete identity verification, and then directly access, correct, or withdraw their information.
Alternatively, users may contact the Personal Information Protection Officer in writing, by phone, or by email, and the Company will take action without delay.
If a user requests correction of inaccurate personal information, the Company will not use or provide the relevant personal information until the correction is completed.
If inaccurate personal information has already been provided to a third party, the Company will notify the third party of the correction result without delay so that the correction can be made.
Personal information that is deleted or destroyed at the user's request is processed in accordance with the "Retention and Use Period of Personal Information Collected by the Company" and is handled so that it cannot be accessed or used for any other purpose.
For children under the age of 14, the legal representative has the right to view or modify the child's personal information and to withdraw consent for collection.

8. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

The Company uses "cookies" and similar technologies that store and retrieve your information from time to time. A cookie is a very small text file sent by the server operating the website to your browser and stored on your computer's hard disk.

The Company uses cookies for the following purposes.

Purpose of Using Cookies
To analyze the frequency of visits and visit duration of members and non-members, identify user preferences and interests, track user activity, measure participation in events and number of visits, and provide targeted marketing and personalized services. You have the option to choose whether to allow cookie installation.
Therefore, you may set your web browser options to allow all cookies, to confirm each time a cookie is stored, or to refuse storage of all cookies.

How to Refuse Cookie Settings
To refuse cookie settings, you may select options in your web browser to allow all cookies, confirm each time a cookie is stored, or refuse storage of all cookies.

How to Configure Settings
Example (Internet Explorer): Tools at the top of the web browser > Internet Options > Privacy
Please note that if you refuse cookie installation, you may experience difficulties in using certain services.

9. Privacy Complaint Services

To protect customers' personal information and handle complaints related to personal information, the Company designates the relevant department and Personal Information Protection Officer as follows.

For reports or consultations regarding other personal information infringements, you may contact the following organizations.

• - Personal Information Infringement Report Center (privacy.kisa.or.kr / 118 without area code)
• - Cyber Investigation Department, Supreme Prosecutors' Office (www.spo.go.kr / 1301 without area code)
• - Cyber Investigation Bureau, National Police Agency (police.go.kr / 182 without area code)