Personal Information Collection and Use Agreement

---

This agreement aims to obtain your consent for **Wieolre Co., Ltd. / UNIMATE** (hereinafter referred to as 'the Company' or 'the Service') to collect and use your personal information in connection with the services provided (hereinafter referred to as 'the Service'). You have the right to refuse this agreement, but if you refuse, your use of some or all services may be restricted.

---

1. Purpose of Personal Information Collection and Use

The Company collects and uses personal information for the following purposes. The collected personal information will not be used for purposes other than those stated below, and if the purpose of use changes, we will seek your prior consent.

• Service Provision and Management: Member registration and management, identity verification, service use and inquiry processing, delivery of notices, complaint handling, and smooth service provision and operation.
• Service Improvement and Development: Development of new services and provision of customized services, provision of services based on statistical characteristics and advertisement placement, verification of service effectiveness, analysis of access frequency, or statistics on members' service usage.
• Marketing and Advertising Utilization (with optional consent): Providing information on new services and events, offering customized advertisements, market research and analysis.
• Compliance with Laws and Regulations: Compliance with relevant laws and company terms, fulfillment of legal obligations, and protection of rights.

2. Items of Personal Information Collected

The Company collects the minimum necessary personal information for service provision in the following ways:

• Mandatory Collection Items:
  • Upon Member Registration: ID, password, name, email address, mobile phone number, date of birth.
  • Items automatically generated/collected during service use: IP address, cookies, visit date and time, service usage records, abnormal usage records, device information (model name, operating system, etc.).
• Optional Collection Items:
  • Upon Identity Verification: [Information collected according to the policy of the identity verification service provider, e.g., gender, telecommunication carrier information].
  • Upon Use of Additional Services: [e.g., address (for product delivery), bank account information (for payment/refund), profile picture, etc.].
  • Upon Consent to Receive Marketing Information: Email address, mobile phone number.

3. Retention and Use Period of Personal Information

In principle, the Company destroys personal information without delay once the purpose of personal information collection and use has been achieved. However, the following information is retained for a certain period for the reasons specified below:

• Information Retention by Relevant Laws:
  • Records on contracts or withdrawal of subscription, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)
  • Records on payment and supply of goods, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)
  • Records on consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)
  • Records according to tax-related laws: [Period specified in laws, e.g., 5 years]
  • Communication confirmation data according to the Telecommunications Secret Protection Act: [Period specified in laws, e.g., 3 months or 12 months]
• Information Retention by Company Internal Policy:
  • Records for preventing fraudulent use and smooth service operation: [Specify retention period, e.g., 1 year]

4. Provision of Personal Information to Third Parties

The Company uses your personal information only within the scope specified in 'Purpose of Personal Information Collection and Use' and will not, in principle, provide it to external parties without your prior consent beyond this scope. However, exceptions are made in the following cases:

• When you have given prior consent.
• When required by law, or when there is a request from an investigative agency for investigative purposes through procedures and methods stipulated by law.

5. Entrustment of Personal Information Processing

The Company may entrust personal information processing tasks to external professional companies as follows to improve service quality.

When concluding a consignment contract, we clearly stipulate compliance with personal information protection laws, confidentiality of personal information, prohibition of third-party provision, and liability in case of incidents, and we retain the contract details in writing or electronically.

6. Destruction of Personal Information

In principle, personal information is destroyed without delay once the purpose of personal information collection and use has been achieved. The procedures and methods for destruction are as follows:

• Destruction Procedure: Personal information whose purpose has been achieved is moved to a separate database (DB) (or separate paper documents in the case of paper records), stored for a certain period according to relevant laws, and then destroyed. This personal information will not be used for any other purpose unless required by law.
• Destruction Method: Personal information stored in electronic file format is deleted using technical methods that make records irreproducible. Personal information printed on paper is shredded or incinerated.

7. Rights of Information Subjects and Legal Representatives

You (or your legal representative if you are under 14 years old) can inquire about or modify your registered personal information at any time, and request withdrawal of consent or deletion.

• Personal Information Inquiry and Modification: You can directly check and modify your information through the 'My Information' or 'Member Information Modification' menu within the service.
• Withdrawal of Consent and Deletion: If you contact the 'Customer Center' or the Personal Information Protection Officer by mail, phone, or email, we will take action without delay.
• Request for Access, Correction/Deletion, Suspension of Processing: Your exercise of rights may be restricted in accordance with the Personal Information Protection Act and other relevant laws.

8. Measures for Ensuring the Security of Personal Information

To prevent the loss, theft, leakage, alteration, or damage of your personal information, the Company takes the following technical, managerial, and physical measures when processing your personal information:

• Personal information encryption
• Establishment of security systems against hacking, etc.
• Restriction of access to personal information processing systems
• Minimization and education of personal information handling staff
• Use of locking devices for document security, etc.

9. Personal Information Protection Officer and Department Information

To protect your personal information and handle complaints related to personal information, the Company designates a Personal Information Protection Officer and a responsible department.

10. Obligation to Notify

Any additions, deletions, or modifications to the content of the current Personal Information Processing Policy will be notified through the 'Notices' section of the website at least 7 days prior to the revision. However, in the event of significant changes such as the collection and use of personal information or third-party provision, notification will be made at least 30 days in advance.

Addendum

This Personal Information Processing Policy shall be effective as of **June 7, 2025**.