The Company retains personal information only for as long as necessary to achieve the purposes in Article 1 and deletes it without undue delay once the purpose is achieved, unless retention is required by applicable law.

Retention required by applicable laws The Company retains certain records for the statutory periods below where applicable.

1. Under the Act on Consumer Protection in Electronic Commerce

   • Records concerning display and advertisement: 6 months

   • Records concerning contracts or withdrawal of offers: 5 years

   • Records concerning payment settlement and supply of goods or services: 5 years

   • Records concerning consumer complaints or dispute resolution: 3 years

2. Under the Communications Secrets Protection Act

   • Service usage records such as access logs and IP related records: 3 months

3. Under the Electronic Financial Transactions Act

   • Records concerning electronic financial transactions: 5 years

Retention based on internal necessity The Company may retain limited logs and support records for a reasonable period to prevent abuse, ensure security, and resolve disputes, consistent with applicable law.

Destruction Procedures and Methods

1. Destruction Procedure: Once the purpose is achieved or the retention period expires, the information is selected for destruction and deleted under the supervision of the Personal Information Protection Officer.

2. Destruction Method: Personal information stored in electronic file format is permanently deleted using technical methods that prevent recovery.