DONGYOUNG M&P Co., Ltd. (hereinafter “the Company”) values your personal information and complies with applicable laws including the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.

Through this Privacy Policy, we inform you of how the personal information you provide is used, and what measures are taken to protect personal information.

If this Privacy Policy is revised, we will announce the changes on the website notice board (or by individual notice).

This policy is effective as of March 18, 2026.

1. Personal information items collected

The Company collects the following personal information for consultation and related purposes.

Online inquiries
- Items collected: name, contact information, email, inquiry details, etc.

2. Purpose of collection and use of personal information

The Company uses collected personal information for the following purposes:
Performance of contracts related to service provision and responses to inquiries in connection with services

3. Retention and use period of personal information

In principle, after the purpose of collection and use of personal information is achieved, the information is destroyed without delay. However, if retention is required under applicable laws, the Company may retain member information for the periods specified by law as follows.

Retention items and basis for retention of transaction records

• - Records on contracts or subscription withdrawal, etc.: 3 years
• - Records on contracts or subscription withdrawal, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
• - Records on payment and supply of goods, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
• - Records on consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)

4. Procedure and method of destruction of personal information

In principle, the Company destroys personal information without delay after the purpose of collection and use is achieved. The procedure and methods are as follows.

Destruction procedure
Information entered for membership registration, etc., is transferred to a separate database after the purpose is achieved (or stored in separate document files in the case of paper) and retained for a certain period according to internal policies and other legal grounds for information protection (see retention and use period), then destroyed.
Personal information transferred to a separate database is not used for any purpose other than retention unless required by law.

Destruction method
Personal information stored in electronic file format is deleted using technical methods that make records irreproducible.

5. Provision of personal information

In principle, the Company does not provide users’ personal information to external parties. Exceptions apply in the following cases:
When users have given prior consent, when required by law, or when investigative agencies request information in accordance with procedures and methods prescribed by law for investigative purposes.

6. Hosting and maintenance

For service operation, the Company entrusts the following tasks to external specialists.

• - Entrusted party: Three Any I&C Co., Ltd.
• - Scope of entrusted work: website and system management (hosting / maintenance)

7. Rights of data subjects and legal representatives and how to exercise them

Users may at any time view or correct their registered personal information, or request withdrawal of membership.
To view or correct personal information, use “Privacy settings” (or “Edit profile,” etc.); to withdraw consent (membership), click “Withdraw membership” and complete identity verification to access, correct, or delete information directly.
You may also contact the personal information protection officer in writing, by phone, or by email, and we will take action without delay.
If you request correction of errors in personal information, we will not use or provide the relevant personal information until correction is completed.
If incorrect personal information has already been provided to a third party, we will notify the third party of the correction result without delay so that correction can be made.
Personal information terminated or deleted at the user’s request is handled in accordance with the “Retention and use period of personal information collected by the Company” and is not viewed or used for any other purpose.
For children under 14, the legal representative has the right to view or correct the child’s personal information and to withdraw consent to collection and use.

8. Installation, operation, and refusal of automatic personal information collection devices

The Company uses “cookies” that store and retrieve your information from time to time. Cookies are very small text files sent by the server operating the website to your browser and stored on your computer’s hard disk.

The Company uses cookies for the following purposes.

Purpose of using cookies, etc.
To analyze access frequency and visit time of members and non-members, understand user preferences and interests, track visits, and determine participation in events and visit counts for targeted marketing and personalized services. You may choose whether to allow cookie installation.
Therefore, you may allow all cookies, confirm each time a cookie is saved, or refuse all cookie storage by setting options in your web browser.

How to refuse cookie settings
You may allow all cookies, confirm each time a cookie is saved, or refuse all cookie storage by selecting options in your web browser.

Example of settings
(Example for Internet Explorer): Tools at the top of the browser > Internet Options > Privacy
Note: If you refuse cookie installation, you may experience difficulty using some services.

9. Personal information grievance services

The Company designates the following departments and personal information protection officer to protect customers’ personal information and handle complaints related to personal information.

If you need to report personal information infringement or seek consultation, you may contact the following institutions.

• - Personal Information Infringement Report Center (privacy.kisa.or.kr / dial 118 without area code)
• - Supreme Prosecutors’ Office Cyber Investigation Department (www.spo.go.kr / dial 1301 without area code)
• - National Police Agency Cyber Bureau (police.go.kr / dial 182 without area code)