The following is the privacy policy of Biotoxtech.

A. Collection of Personal Information

Biotoxtech collects personal information as described below for membership, consultation, application of services, etc.

■ The company name, individuals’ names, departments, titles, postal codes, addresses, telephone numbers, fax numbers, mobile numbers, and e-mail information may be collected as described below in the process of using services or business.

■ Users’ browsers and operating systems, search keywords, IP addresses, times and dates of site visits, error records, use records, access logs, cookies, IP access information, billing records, and suspension records may also be collected.

B. Collection and Use of Personal Information

Biotoxtech utilizes collected personal information for the following purposes.

■ Implementation agreement and billing relating to service provision

■ Management of members

Membership services and limited identification of the person, personal identification, prevention of unauthorized use of rogue members and unauthorized users, confirmation of sign up, sign up and limited sign up, agreement upon confirmation of a legal representative of children under the age of 14 when collecting personal information, identification of a subsequent legal representative, record retention for dispute resolution, dealing with complaints and customer service, communication of notices

■ Use of personal information in marketing and advertising

Provision of new services (product) development and service, services provided and publication of advertisement in accordance with the statistics, confirmation of service validity, figuring out access frequency, statistics for the service use of members, advertisement information notice including events

C. Retention of Personal Information and Period of Service

In principle, personal information will be erased without delay after the purpose of the collection of personal information has been achieved. However, the following information is retained for a period of time specified for the following reasons.

<Reasons for information retention in accordance with internal policies>

■ Member ID

- Reasons for retention of information : to prevent confusion of service use
- Retention period: 1 year

<Reasons for information retention in accordance with relevant laws and regulations>

Biotoxtech retains membership information for a period of time determined by the relevant laws and regulations when it is necessary to retain in accordance with the provisions of the Act and other related legislation on consumer protection in commercial law and electronic commerce. In this case, Biotoxtech uses the retained information only for the purpose of archiving and the retention periods are as follows:

■ Records regarding a contract of cancellation

- Reasons for information retention: The act on the consumer protection in the electronic commerce transactions
- Retention period: 5 years

■ Records of payments and supply of goods

- Reasons for information retention: The act on the consumer protection in the electronic commerce transactions
- Retention period: 5 years

■ Records of consumer complaints and conflict settlement

- Reasons for information retention: The act on the consumer protection in the electronic commerce transactions
- Retention period: 3 years

■ Records on identification

- Reasons for information retention: The law regarding the promotion of information and communication network use and protection of information
- Retention period: 6 months

■ Records of visits

- Reasons for information retention: Protection of Communications Secrets Act
- Retention period: 3 months