POC Inc. (hereinafter referred to as the “Company”) establishes and discloses the following Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to ensure prompt and smooth handling of related complaints.

Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes.
The personal information being processed will not be used for purposes other than those stated below.
If the purpose of use changes, the Company will take necessary measures, including obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.

1. Membership Registration and Management
Personal information is processed for the purposes of:
• Confirming intent to register
• Identifying and authenticating users for membership services
• Maintaining and Managing membership status
• Verifying identity under limited identity verification systems
• Preventing unauthorized use of services
• Confirming consent of legal guardians when processing personal information of children under the age of 14
• Delivering notices and announcements
• Handling complaints

2. Provision of Goods or Services
Personal information is processed for purposes such as:
• Delivery of goods
• Provision of services
• Issuance of contracts and invoices
• Content delivery
• Personalized services
• Identity verification and age verification
• Payment processing and settlement
• Debt collection

3. Complaint Handling
Personal information is processed for:
• Verifying the identity of complainants
• Confirming complaint details
• Contacting and notifying for fact-finding
• Communicating processing results

Article 2 (Retention and Processing Period of Personal Information)
① The Company processes and retains personal information within:
• The period required by law, or
• The retention period agreed upon by the data subject at the time of collection
② The retention periods are as follows:
1. Membership Registration and Management
Until withdrawal from the website
However, in the following cases:
• If investigations or inquiries are ongoing due to legal violations → until completion
• If financial claims or liabilities remain → until settlement is completed

Article 3 (Outsourcing of Personal Information Processing)
① The Company entrusts personal information processing tasks as follows:
Delegated Processors
• Service Provider: Imweb, Inc.
Scope of Work:
o Shopping mall hosting system provision
o Mobile app services
o Marketing services and affiliated services
o Notification services
• Service Provider: PayVerse PG
Scope of Work:
o Payment processing and escrow services

Sub-processors
• Imweb → Infobip LLC
SMS and KakaoTalk notification message delivery
• Imweb → LUNASOFT Co., Ltd.
SMS, KakaoTalk notification messages, and other message delivery

② When entering outsourcing agreements, the Company specifies:
• Prohibition of processing beyond the entrusted purpose
• Technical and administrative safeguards
• Restrictions on re-outsourcing
• Supervision and management of processors
• Liability and compensation
③ Any changes to outsourcing details will be disclosed promptly through this Privacy Policy.

Article 4 (Rights of Data Subjects and Legal Representatives)
① Data subjects may exercise the following rights at any time:
1. Request access to personal information
2. Request correction of errors
3. Request deletion
4. Request suspension of processing

② Requests may be made via:
• Written request
• Telephone
• Email
• Fax
The Company will respond without delay.

③ Until correction or deletion is completed,
the Company will not use or provide the relevant personal information.

④ Rights may be exercised through:
• Legal representatives
• Authorized agents
(Submission of the power of attorney is required)

⑤ Data subjects must not infringe upon the privacy or personal information of themselves or others in violation of applicable laws.

Article 5 (Items of Personal Information Processed)
1. Membership Registration
Required:
• Name, Date of Birth, ID, Password
• Address, Phone Number, Gender, Email
• i-PIN
Optional:
• Marital status, Interests

2. Provision of Goods/Services
Required:
• Name, Date of Birth, ID, Password
• Address, Phone Number, Email
• Payment information (credit card, bank account, etc.)
Optional:
• Interests, Purchase history

Article 6 (Destruction of Personal Information)
① Personal information is destroyed without delay when:
• Retention period expires
• Processing purpose is fulfilled

② If retention is required by law:
• Data will be stored separately or in a different database

③ Destruction methods:
1. Procedure
• Selection of data subject to destruction
• Approval by the Data Protection Officer
2. Method
• Electronic data: permanently deleted
• Paper documents: shredded or incinerated

Article 7 (Measures to Ensure Security)
The Company implements the following measures:
1. Administrative
• Internal policies and employee training
2. Technical
• Access control systems
• Encryption
• Security programs
3. Physical
• Restricted access to data storage facilities

Article 8 (Use of Cookies)
① The Company uses cookies to provide personalized services.
② Cookies are small data files stored on users’ devices.

③ Users may manage cookie settings via browser options.
※ Refusing cookies may limit service functionality.

Browser Settings
Desktop
• Chrome: Settings → Privacy → Clear browsing data
• Edge: Settings → Cookies & Site Permissions
Mobile
• Chrome: Settings → Privacy → Clear browsing data
• Safari: Settings → Advanced → Block all cookies
• Samsung Internet: Settings → Delete browsing data

④ The Company collects usage data such as:
• Visit history
• Usage patterns
• Popular searches
• Secure connection status
for optimized service delivery.

Article 9 (Data Protection Officer)
The Company designates the following:
Department: HR & General Affairs Team
Contact: +82-10-8197-1288

Users may contact the above for:
• Privacy inquiries
• Complaints
• Damage relief
The Company will respond promptly.

Article 10 (Request for Access to Personal Information)
Requests may be made to:
Company: POC Inc.
Phone: +82-10-8197-1288
Email: mujutrail@poc-inc.io
The Company will respond promptly.

Article 11 (Remedies for Infringement)
Users may contact:
1. Personal Information Dispute Mediation Committee (1833-6972) (www.kopico.go.kr)
2. Personal Information Infringement Report Center (118) (privacy.kisa.or.kr)
3. Supreme Prosecutors’ Office (1301) (www.spo.go.kr)
4. National Police Agency (182) (ecrm.police.go.kr/minwon/main)

Article 12 (Policy Effective Date)
This Privacy Policy shall take effect on:
April 1, 2026