THENODE Co., Ltd. (hereinafter referred to as “the Company”) values customers' personal information and strives to manage it actively and effectively. This Privacy Policy may be revised in accordance with changes in laws, guidelines, or internal policies. Please check the UsSpot website regularly for updates.

Article 1. General Provisions

1. “Personal information” refers to information about a living individual that allows identification of the individual by name or other details included in the data (even if not identifiable by the information alone, it includes cases where identification is possible by combining it with other information).
2. The Company places great importance on personal information and complies with relevant laws such as the “Act on Promotion of Information and Communications Network Utilization and Information Protection” and the “Personal Information Protection Act.”
3. This policy explains how the Company collects and uses your personal information, and what measures are taken to protect it.
4. The Company makes this Privacy Policy easily accessible by posting it on the homepage.

Article 2. Items and Methods of Personal Information Collection

1. The Company collects personal information through the following methods to provide identity verification, payment services, and other convenient services.
   1. ① Items collected:

      Items of personal information collected	Name, date of birth, gender, login ID, password, home phone number, mobile number, email, etc.
      Personal information that may be collected during service use or processing	Service usage and suspension records, access logs, cookies, access IP information

   2. ② Collection method: Website
2. Input of false information: Customers must ensure the accuracy and legality of their information. If false information is entered, such as using someone else’s data, the Company may report the individual in accordance with relevant laws or forcibly terminate the account.
3. The Company is not responsible for any issues arising from personal information that the customer voluntarily discloses. Please be aware that any personal information posted in public areas can be collected and misused by others, and this may lead to unwanted consequences.

Article 3. Purpose of Personal Information Collection and Use

The Company collects personal information within the minimum necessary scope to provide services, for the following purposes:

1. Customer consultation: Providing convenient services
2. Development of new services and marketing purposes
   • Development of new services and provision of customized services
   • Providing information and opportunities to participate in products, services, and events offered by the Company or its affiliates (via SMS, email, DM, etc.)
   • Compiling usage statistics for services
   • Marketing for promotional events and services, analyzing customer data for marketing and service development

Article 4. Provision and Sharing of Personal Information

1. The Company does not provide customers’ personal information to third parties without prior consent.
2. If personal information is to be provided or shared, the Company will inform the customer individually via the website, email, written documents, or application forms of the recipient, the items being provided/shared, the purpose, and the retention and usage period, and obtain separate consent. However, exceptions may be made if otherwise required by law.

Article 5. Outsourcing of Collected Personal Information

1. The Company does not outsource customers’ personal information to external parties without prior consent.
2. Except where prior consent is obtained or as permitted by law, the Company does not use personal information beyond the scope stated in this policy or provide it to third parties or institutions. However, if a customer inquiry or complaint is related to a partner company located within the Company’s premises, the relevant information may be shared with that partner to ensure prompt service.
3. In outsourcing agreements, the Company clearly stipulates compliance with privacy instructions, prohibition of information leakage, and liability for accidents, and retains these contracts in written and electronic form. If the outsourcing partner changes, the Company will notify users via the privacy policy page.

Article 6. Retention, Use Period, and Destruction of Personal Information

1. The Company will immediately destroy personal information once the purpose of collection or provision has been achieved.

   However, in accordance with the Commercial Act and other applicable laws, certain information may be retained for a specified period for the purposes of verifying transaction-related rights and obligations:

   1. Records related to contracts or withdrawal of subscriptions: 5 years
   2. Records related to payments and supply of goods: 5 years
   3. Records related to consumer complaints or dispute resolution: 3 years
   4. Website visit history: 3 months
2. The methods of destroying personal information are as follows:
   1. Printed documents: Shredded or incinerated
   2. Electronic files: Deleted using technical methods that make recovery impossible

Article 7. Access, Correction, Withdrawal, and Consent Revocation

1. Customers can access, correct, or withdraw their personal information and may request the following actions from the Company:
   1. Access to personal information held by the Company
   2. Status of use or provision of personal information to third parties
   3. Status of consent to collection, use, and provision of personal information
   1. Website: After logging in, go to My Page > Manage Account Info to view, correct, or delete your personal information.
   2. Contacting the Privacy Officer or Customer Service: 5F, 167, Beomeocheon-ro, Suseong-gu, Daegu, Republic of Korea, Phone (), or Email (). We will respond without delay.

Article 8. Use and Management of Cookies

1. The Company may use cookies to provide personalized services. A cookie is a small packet of data sent from an HTTP server to the user's browser and stored on the user's computer hard drive. Cookies identify the user’s computer but do not personally identify the user.
2. The Company uses cookies for the following purposes:
   1. To analyze user visit frequency and duration, and understand user preferences and interests for targeted marketing and service improvements.
   2. To track user participation and visit count in events hosted by the Company, and use the data to provide differentiated participation opportunities and personalized content based on user interests.
   3. To trace shopping items and previously viewed products for providing customized services on future visits. Cookies expire when the browser is closed or the user logs out. They also expire after one day or can be deleted manually through browser settings.

※ Cookie Installation and Rejection

• Users can choose whether to allow cookie installation. Web browsers can be configured to accept all cookies, prompt confirmation for each cookie, or reject all cookies.
• Please note that rejecting cookies may cause issues when using services that require login.
• How to set cookie preferences (Internet Explorer):
  1. Select [Tools] > [Internet Options]
  2. Click [Privacy]
  3. Click [Advanced]
  4. Choose whether to allow cookies
• How to set cookie preferences (Safari):
  1. From the top left menu bar on MacOS, select [Safari] > [Preferences]
  2. Go to the [Security] tab in the Preferences window and choose cookie settings

Article 9. Personal Information Protection Officer

1. The Company designates the following department and officer to protect customers' personal information and handle any related complaints or inquiries.
   The Personal Information Protection Officer (CPO) is Myungsoo Kang (, ).
2. If you need to report or consult about personal information breaches, please contact the following organizations:
   • Personal Information Infringement Report Center (http://privacy.kisa.or.kr / 118)
   • Personal Information Dispute Mediation Committee (http://www.kopico.go.kr / 1833-6972)
   • Supreme Prosecutors’ Office Cybercrime Division (http://www.spo.go.kr / 02-3480-3570)
   • Korean National Police Agency Cyber Security Bureau (http://cyberbureau.police.go.kr / Call center: 182)

Article 10. Technical and Institutional Measures for Personal Information Protection

1. Technical Measures

   We implement the following technical measures to ensure the security of customers' personal information against loss, theft, leakage, alteration, or damage during processing.

   1. Customer personal information is protected by passwords, and important data is secured with encryption or file locking features.
   2. We use antivirus programs to prevent damage from computer viruses. These programs are regularly updated, and emergency updates are provided as soon as new viruses are detected.
   3. We use security devices such as SSL or SET encryption algorithms to securely transmit personal information over the network.
   4. Each server is equipped with intrusion prevention systems and vulnerability analysis tools to guard against external hacking.
2. Administrative Measures

   We limit access to customers' personal information to the minimum number of staff necessary. Authorized personnel include:

   • Staff involved in direct marketing to users
   • Personal information protection officers and managers
   • Others who inevitably process personal data due to job responsibilities
   • We provide regular internal and external training to employees on new security technologies and personal information protection obligations.
   • Security pledge agreements are signed at the time of hiring to prevent information leaks by individuals, and internal procedures are established to monitor policy compliance.
   • Handover of responsibilities related to personal data is conducted securely. Responsibilities are clarified before and after employment.
   • Personal data is stored separately from general data to prevent unauthorized access or leakage.

Article 11 (Protection of Children's Personal Information)

We do not accept membership applications from children under the age of 14 who require the consent of their legal guardian.

Article 12 (Transmission of Advertising Information)

We do not send advertising information for commercial purposes without the prior consent of the customer.

When sending advertising information such as product announcements for online marketing purposes via email, we ensure that customers can easily recognize the information by specifying the following in the subject and body of the email.

1. Email subject line: The word "(Advertisement)" is indicated in the subject, along with a summary of the email's main content.
2. Email body: The sender's name, email address, phone number, and address are provided, along with a method for the user to refuse further emails in both Korean and English.

Article 13 (Duty of Notification)

This privacy policy was revised on September 13, 2023, and if there are any additions, deletions, or changes due to government policy or security technology updates, they will be announced on the homepage at least 7 days in advance.