KLEANNARA (hereinafter referred to as the "Company") regards protection of users personal information as very important, and we are doing our best to ensure that the personal information that users provide to the Company online is protected when they use the Company’s services (membership-based services currently provided or scheduled to be provided by each brand site, e.g. Bosomi, Pure cotton, Dear Skin, etc.).

The Company will inform users through the privacy policy for what purposes and how the personal information they provide is used, and what measures are taken to protect personal information.

Previous revision date: May 31st, 2021
Current enforcement date: October 00, 2022

KLEANNARA’s personal information protection policy contains the following contents

• A. Consent to collection of personal information
• B. Personal information items collected and purpose of collecting and using personal information
• C. Personal information retention and use period
• D. Consignment of personal information handling
• E. Consignment of personal information handling
• F. Procedure and method of destroying personal information
• G. The rights of users and their legal representatives and how to exercise them
• H. Matters concerning installation and operation of devices automatically collecting personal information, and the refusal thereof
• I. Chief Privacy Office
• J. Method of Remedy for Infringement of Rights and Interests of Information Subjects
• K. Obligation to notify before modification of Privacy Protection Policy

A. Consent to collection of personal information

The company will provide for members to choose either 「Agree」 or 「Cancel」 with regard to the Company’s personal information protection policy or user agreement. If you click 「Agree」, you will be deemed to have consented to the collection of personal information.

B. Purpose of collecting and using personal information

The Company will collect personal information to provide customized services to its members through membership service and to provide better service. The personal information items that will be collected when you become a member of the Company, and the main purposes of collecting and using personal information are as follows:

Classification	Collected personal information items	.Purpose of collecting and using personal information	Personal information use and retention period
Mandatory items	Name, ID, password, user name, E-mail address, postal address, contact information, cell phone number, receive newsletter Y/N, receive SMS Y/N	Authentication for handling complaints about service use, real name confirmation through credit rating agencies, prevention of illegal use, efficient communication for handling complaints securing paths, providing information on new services or new products and events, securing correct addresses for shipping goods (gifts) (During real name confirmation, real name confirmation information is sent to credit rating agencies, and this information will be protected and managed according to relevant laws.)	Until unsubscription
	IP Address, dates of visit, service use records	Prevention of illegal use by disruptive members, prevention of unauthorized use, statistical analysis
	.Name (Korean, Chinese and English), photograph, nationality, gender, birthdate, age, address, cell phone number, home phone number, e-mail address, hobby, special skills, religious preference (if any), veteran Y/N, national basic livelihood security beneficiary Y/N, disability information, military service, family relations	Online job application form, workforce DB registration
Optional items	Marital status, subscription route, products of interest	Demographic analysis, provision of personalized services, measurement of advertising effects
	Number of children, names of children, birthdates and gender of babies. photographs of babies	Providing customized services and event gifts within the brand site (Bosomi) service
	Optional educational background information (last school attended, high school information, junior college information, college attended, graduate school attended), working experience (name of employer, last position held, duties, reason for changing jobs), foreign language test information, certificate information, computer skills, family relations, letter of self-introduction, professional experience (name of employer, service period, last position held, final salary, location, reason for changing jobs and detailed description of experience)	Online job application form, workforce DB registration

C. Personal information retention period

The company uses members' personal information only when the purpose of collection and use is achieved or when a separate consent is obtained, and if the member requests withdrawal from membership or withdraws consent, it is destroyed without delay. However, information that must be kept in accordance with the relevant laws (not limited to the ones exemplified below) is kept for the period set by the laws.

• Records on the contract or withdrawal of subscription: 5 years (Storage Basis: Act on Consumer Protection in Electronic Commerce)
• Records on payment and supply of goods, etc.: 5 years (Storage Basis: Act on Consumer Protection in Electronic Commerce)
• Records on handling consumer complaints or resolution of disputes: 3 years (Storage Basis: Act on Consumer Protection in Electronic Commerce)
• Records on service usage: 3 months (Storage basis: Protection of Communications Secrets Act)
• Record on sign/advertisement: 6 months(The Act on Consumer Protection in Electronic Commerce)

D. Consignment of personal information handling

In principle, the company does not provide personal information of members to third parties without prior consent, and provides personal information to third parties only with the consent of the information subject and special provisions of the law

E. Consignment of personal information handling

The Company may consign the handling of users’ personal information to an outside specialist to improve services. The company stipulates, manages, and supervises the matters necessary for the cosignee to safely process personal information in accordance with the Personal Information Protection Act.
The companies to which the handling of personal information is consigned to, the personal information consigned, and its duration are as follows:

• Consignee: Wylie Co., Ltd.
• Purpose of consignment: KLEANNARA, Bosomi, Pure cotton, Dear Skin, WEB service operation, event gift shipping, fast customer counseling service provision and customer complaint handling and prevention of illegal use
• Consignment period: Until withdrawal from membership or until the consignment contract ends

• Consignee: Shinsung inet Co., Ltd.
• Purpose of consignment: Gift shipping/agency, fast customer counseling service provision and customer complaint handing and prevention of illegal use
• Consignment period: Until withdrawal from membership or until the consignment contract ends

• Consignee: Midas HRi
• Purpose of consignment: Operation and maintenance of the recruitment website and recruitment management computer system
• Consignment period: Until withdrawal from membership or until the consignment contract ends

F. Procedure and method of destroying personal information

The Company will process the precious personal information of members safely, and destroy the personal information as follows to prevent its leakage.

• Personal information printed on paper will be shredded by a paper shredder or incinerated.
• Personal information saved in the form of an electronic file will be deleted in such a way that records cannot be reproduced.

G. The rights of users and their legal representatives and how to exercise them

You may view or modify your personal information and request withdrawal of membership at any time. You can view and modify your personal information by using the ‘membership information change’ function. You can modify everything except the ID and name for authentication. Alternatively, if you contact the Chief Privacy Officer in writing, by phone or e-mail, actions will be taken immediately.
Also, if you forget your password, click ‘Find password’ below the member login menu and enter information necessary for authentication according to the instructions of the Customer Center. Then, after authentication, you will receive the partially encrypted password by email.
To withdraw from membership, you can use the ‘Membership withdrawal’ menu in ‘Membership information change.’ When you select items and answer questions according to instructions, and select ‘Request withdrawal,’ your request will be processed immediately based on the information you entered.
The Company will process terminated or deleted information at the request of users as specified in “F. The period of retaining and using the personal information collected by the Company,” and ensures that the personal information cannot be viewed or used for other purposes.

H. Matters concerning installation and operation of devices automatically collecting personal information, and the refusal thereof

The Company will use ‘cookies,’ which save and find your information frequently to provide customized services to users. A cookie is a small piece of information used to operate the website that the server (HTTP) sends to the browser on your computer, and it is saved in the hard disk of your PC. For users to access the Company service and log in to use membership services, you must allow cookies. To provide services fit for and useful to users, the Company uses cookies to find information on the ID. Cookies identify users’ computers, but do not identify individual users. The information stored in cookies include ID and secure connection Y/N, and the Company can use cookies to know the services and websites that users visited, how they used services, and the number of users so that more convenient services can be provided, and information optimized to users can be provided. Users can choose or refuse to use cookies. Users can allow all cookies by setting an option in the web browser, or go through confirmation whenever a cookie is saved, or refuse to have all cookies saved. If you refuse to have cookies saved, however, you may not be able to use some services of the Company that requires login.

• How to refuse the cookie setting
  You can manage the cookie setting by choosing the option in your web browser to allow all cookies, or go through the confirmation process every time a cookie is saved, or refuse to have all cookies saved.
• Example of how to set cookies (in case of Internet Explorer) Tools at the top of the web browser > Internet Options > Personal Information

I. Personal Information Protection Officer

The Company is doing its best to ensure that you can use good information safely. If accidents occur in violation of the matters we have notified to you with regard to personal information protection, the Chief Privacy Officer will take responsibility.
Users are responsible for maintaining the security of the password of the ID related to their personal information. Since the Company never directly asks questions to you about passwords in any way, use extra care not to leak your passwords to others. In particular, if you are connected to the Internet in public places, you should use extra care.

• Personal Information Manager
• Name: Jang, Hong Joon
• Affiliation: IT Planning
• Email : hjjang@kleannara.com

• Personal Information Manager
• Name: Kim, sun kyung
• Affiliation: IT Planning
• Email: sunkyung@kleannara.com

J. Remedies of infringement

Members may contact the following organizations if they are not satisfied with the company's handling of personal information complaint and damage relief results, or if more detailed help is needed.

• KISA Personal Information Infringement Report Center : (without area code) 118 (privacy.kisa.or.kr)
• Cybercrime Investigation Division: (without area code) 1301 (spo.go.kr)
• Police Agency Cyber Bureau (without area code) 182 (police.go.kr)

K. Obligation to notify before effective and revision of personal information processing policy

This Privacy Policy is effective from the effective date. If there is any addition, deletion, or modification of the contents of the Privacy Policy, we will notify you through “Notice” at least 7 days before the revision. However, when a material change occurs in the user's rights, such as a change in the items of personal information to be collected or the purpose of use, it is notified at least 14 days in advance, and user consent may be obtained again if necessary.

• ※ Date of Notification of of Current Privacy Policy: October 00, 2022
• ※ Effective Date of Current Privacy Policy: October 00, 2022