Privacy Policy

1. Purpose of Processing Personal Information

The Company processes personal information for the following purposes. Personal information being processed shall not be used for purposes other than those specified below. If the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Membership Registration and Management
   Confirmation of membership intention, identification and authentication for providing membership services, maintenance and management of membership status, identification duplication check, prevention of fraudulent use, various notices and notifications, etc.
2. Buyer-Supplier Matching Service
   Matching between seafood import/export companies, business consultation support, transaction connection services
3. Quotation Inquiry and Consultation Processing
   Product inquiry reception and processing, quotation provision, consultation history management
4. MOU Conclusion Support
   Support for MOU (Memorandum of Understanding) conclusion, contract-related business processing
5. Event Participant Management
   Registration and management of Busan International Seafood Expo participants, event guidance
6. Notice Delivery and Service Usage Information
   Delivery of service usage notices, sending announcements
7. Statistical Analysis and Service Improvement
   Service usage statistics analysis, development of new services and improvement of existing services
8. Marketing and Advertising (with optional consent)
   Provision of event and promotion information, distribution of marketing materials

2. Processing and Retention Period of Personal Information

The Company processes and retains personal information within the period of retention and use of personal information in accordance with laws and regulations or within the period of retention and use of personal information consented to when collecting personal information from data subjects.

Retention and Use Period

• Principle: Retained for 5 years after service termination, then destroyed
• Exception: Retained for the applicable period if there are grounds for information retention under relevant laws

Retention in Accordance with Related Laws

When necessary to retain information for a certain period to confirm the rights and obligations related to transactions in accordance with the provisions of related laws such as the Act on Consumer Protection in Electronic Commerce, the Framework Act on National Taxes, and the Corporate Tax Act, the information shall be retained for the following periods:

• Records on contracts or withdrawal of offers: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records on consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
• Records on labeling and advertising: 6 months (Act on Consumer Protection in Electronic Commerce)

3. Items of Personal Information Collected

The Company collects the following personal information to provide services.

A. Buyer Members

• Required Items: Login ID, Name, Company Name, Position, Job Function, Date of Birth, Gender, Country, Mobile Phone Number (including country code), Password, Email

B. Supplier Members

• Required Items: Login ID, Country, Date of Birth, Representative Phone Number, Email, Password, Business Registration Information

C. Information Automatically Generated and Collected During Service Use

• Access IP information, Cookies, Service usage records, Access logs

4. Provision of Personal Information to Third Parties

In principle, the Company processes personal information within the scope specified for collection and use purposes, and does not process it beyond the original scope or provide it to third parties without the prior consent of the data subject, except in the following cases:

1. When separate consent has been obtained from the data subject
2. When there are special provisions in laws
3. When the data subject or legal representative is unable to express their intention or prior consent cannot be obtained due to unknown address, and it is clearly recognized as necessary for the urgent benefit of life, body, or property of the data subject or a third party
4. When providing personal information in a form that cannot identify a specific individual for purposes such as statistical compilation and academic research

5. Consignment of Personal Information Processing

The Company consigns personal information processing tasks as follows for smooth personal information processing.

Consignee	Consigned Tasks
OGYA Factory Corporation	Customer inquiry processing, supplier information management, buyer information management

When concluding a consignment contract, the Company clearly specifies matters concerning the prohibition of processing personal information other than for the purpose of performing consigned tasks, technical and managerial protection measures, restrictions on re-consignment, management and supervision of the consignee, and liability for damages in documents such as contracts in accordance with Article 26 of the Personal Information Protection Act, and supervises whether the consignee processes personal information safely.

If the content of consigned tasks or the consignee changes, it will be disclosed without delay through this Privacy Policy.

6. Procedure and Method for Destroying Personal Information

The Company destroys personal information without delay when the retention period of personal information has elapsed or the purpose of processing has been achieved and personal information becomes unnecessary.

Destruction Procedure

Information entered by users is transferred to a separate database (separate documents in the case of paper) after the purpose is achieved and stored for a certain period or destroyed immediately according to internal policies and other relevant laws. Personal information transferred to the database shall not be used for other purposes unless required by law.

Destruction Method

• Electronic File Format: Permanently deleted by methods that make restoration impossible
• Records, Printed Materials, Documents, etc.: Shredded or incinerated

7. Rights and Obligations of Data Subjects and Methods of Exercise

Data subjects may exercise the following personal information protection-related rights against the Company at any time:

1. Request to view personal information
2. Request for correction in case of errors
3. Request for deletion
4. Request for suspension of processing

Rights may be exercised against the Company through written documents, telephone, email, facsimile transmission (FAX), etc., and the Company will take action without delay.

When a data subject requests correction or deletion of errors in personal information, the Company shall not use or provide the personal information until the correction or deletion is completed.

Rights may be exercised through a legal representative of the data subject or an agent who has been delegated authority. In this case, a power of attorney according to Form No. 11 of the attached "Notice on Personal Information Processing Methods (No. 2020-7)" must be submitted.

8. Measures to Ensure Safety of Personal Information

The Company takes the following measures to ensure the safety of personal information:

1. Administrative Measures: Establishment and implementation of internal management plans, regular employee training, etc.
2. Technical Measures: Access authority management for personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
3. Physical Measures: Access control to computer rooms, data storage rooms, etc.

9. Installation, Operation, and Rejection of Automatic Personal Information Collection Devices

The Company uses 'cookies' that store and retrieve usage information from time to time to provide individual customized services to users.

Purpose of Using Cookies

• Analysis of users' access frequency and visit time
• Identification of users' preferences and areas of interest and tracking of their traces
• Target marketing and provision of personalized services through identification of degree of participation in various events and number of visits

Installation, Operation, and Rejection of Cookies

• You can refuse to store cookies through the option settings in Tools > Internet Options > Privacy menu at the top of your web browser.
• If you refuse to store cookies, you may experience difficulties in using customized services.

10. Personal Information Protection Officer

The Company designates a Personal Information Protection Officer as follows to take overall responsibility for personal information processing and to handle complaints and remedy damages related to personal information processing by data subjects.

Data subjects may inquire about all personal information protection-related inquiries, complaint handling, damage relief, etc. that occur while using the Company's services (or business) to the Personal Information Protection Officer. The Company will respond to and process inquiries from data subjects without delay.

11. Methods for Remedy of Rights Violations

Data subjects may inquire about the following institutions regarding relief for damage caused by personal information infringement and consultation.

The institutions below are separate from the Company. If you are not satisfied with the Company's own personal information complaint handling or damage relief results, or if you need more detailed assistance, please inquire.

• Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
  • Jurisdiction: Report of personal information infringement facts, consultation requests
  • Website: privacy.kisa.or.kr
  • Phone: 118 (without area code)
  • Address: 3rd Floor, Personal Information Infringement Report Center, 9 Jinheung-gil, Naju-si, Jeollanam-do, 58324, Republic of Korea
• Personal Information Dispute Mediation Committee
  • Jurisdiction: Application for personal information dispute mediation, collective dispute mediation (civil resolution)
  • Website: www.kopico.go.kr
  • Phone: 1833-6972 (without area code)
  • Address: 4th Floor, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul, 03171, Republic of Korea
• Supreme Prosecutors' Office Cyber Crime Investigation Division: 02-3480-3573 (www.spo.go.kr)
• Korean National Police Agency Cyber Safety Bureau: 182 (cyberbureau.police.go.kr)

12. Changes to the Privacy Policy

This Privacy Policy is effective from October 13, 2025.