Privacy Policy

Namuga Co., Ltd. (hereinafter referred to as "the company") establishes and discloses the following privacy policy to protect the personal information of data subjects and to handle related grievances swiftly and smoothly in accordance with Article 30 of the Personal Information Protection Act. The company will notify users of any amendments to the privacy policy through its website (http://namuga.com).

Article 1 (Purpose of Processing Personal Information)

The company processes personal information for the following purposes. The processed personal information will not be used for purposes other than the following, and if the purpose of use changes, necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act will be implemented.

Contact Information

Name, email address, phone number

Ethical Management Reporting/Consultation (real name, anonymous)

Name, email address, phone number

Website Usage

User access logs (IP address, access time)

• 1. The company processes personal information for the purpose of responding to inquiries regarding "company-related inquiries (Contact)."
• 2. Personal information is processed to handle grievances related to "reporting/consultation."
• 3. The company will not process personal information that may significantly infringe on the privacy of users without legal provisions or user consent.

Article 2 (Processing and Retention Period of Personal Information)

1. The company processes and retains personal information within the period agreed upon by the user or within the personal information retention and usage period stipulated by law.

2. The specific processing and retention periods for personal information are as follows:

• ① The company retains and uses personal information until the purpose of use, such as providing a final response to an inquiry, is achieved.
• ② If the user requests the deletion of their personal information, the company will promptly delete the relevant information.

Article 3 (Provision of Personal Information to Third Parties)

The company, as a general rule, processes personal information within the scope specified for the collection and use of personal information. Personal information will not be processed beyond the original purpose or provided to third parties without prior consent, except in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as legal obligations or user consent.

Article 4 (Rights of Data Subjects and How to Exercise Them)

1. Users may request to view or correct their personal information, or withdraw their consent for collection at any time. To view/correct personal information or withdraw consent, please contact the company’s Personal Information Protection Officer in writing, by phone, or via email, and we will promptly respond.

2. If a user requests a correction, the company will not use or provide the personal information until the correction is complete. If the incorrect personal information has already been provided to a third party, the company will notify the third party without delay and ensure that the correction is made.

3. The company confirms whether the person making a request to view, correct, delete, or suspend the processing of personal information is the data subject or a legitimate representative. In the case of a representative, a power of attorney in accordance with the format stipulated in the Enforcement Rules of the Personal Information Protection Act must be submitted.

4. Requests for viewing and suspension of personal information processing may be restricted under Articles 35(5) and 37(2) of the Personal Information Protection Act.

5. Requests for correction or deletion of personal information may not be made if the information is subject to collection under other laws.

Article 5 (Personal Information Items Processed)

The company processes the following personal information items:

• 1. Collected items: Name, email address, phone number
• 2. Legal grounds: Personal Information Protection Act and related laws
• 3. Information generated during service usage, such as access records (login time) and IP information, may also be collected automatically.

Article 6 (Destruction of Personal Information)

1. When the retention period of personal information has expired or the purpose of processing has been achieved, the company will destroy the personal information without delay.

2. If personal information must be retained due to legal obligations despite the expiration of the retention period or the completion of the purpose of use, the company will store the information separately in a different database or a different storage location.

3. The procedure and method for destroying personal information are as follows:

• ① Destruction procedure: The company selects personal information that requires destruction and obtains approval from the Personal Information Protection Officer before destroying it.
• ② Destruction method: The company permanently deletes electronic files in a way that they cannot be recovered (such as low-level formatting) and shreds or incinerates paper documents.

Article 7 (Measures for Ensuring the Security of Personal Information)

To ensure the security of personal information, the company takes the following measures:

• 1. Managerial measures: Establishment and implementation of internal management plans, regular staff training, etc.
• 2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs, etc.
• 3. Physical measures: Access control to computer rooms and document storage rooms.

Article 8 (Personal Information Protection Officer)

1. The company has appointed the following person to be in charge of the overall management of personal information processing and related inquiries, complaints, and damage relief:

2. Users may contact the Personal Information Protection Officer or the relevant department with any inquiries, complaints, or requests for damage relief related to personal information protection. The company will respond and handle inquiries without delay.

Article 9 (Remedies for Rights Infringement)

Users may contact the following institutions for assistance with personal information-related grievances or remedies:

Article 10 (Changes to the Privacy Policy)

The company will notify users of any amendments (additions, deletions, or changes) to the Privacy Policy through the website's notice section. The company will also make it easy for users to compare the previous and updated versions.

Privacy Policy Version: 2024.10.01

Privacy Policy Effective Date: 2024.10.01