ALL K-POP PRIVACY POLICY
ALL K-POP CO.,LTD (also referred to as “company”) strictly complies with the laws and regulations regarding personal information protection in accordance with the “Information Communication Network Promotion” and “Information Protection Act” (also referred to as the ""Information and Communication Network Act"") and the “Personal Information Protection Act”.

This Privacy Policy applies to the “ALLKPOP PLATFORM” (www.allk-pop.com) provided by the “company”.
The contents of the Privacy Policy are as follows:

The following policies are representative of the current laws and regulations required for the processing of personal information. The following are also inclusive of additional policies created by the “company”, which are deemed appropriate for the protection of the “user’s” personal information.

1. Principles of Personal Information Processing Policy

2. Purpose of Processing Personal Information

3. Collection of Personal Information

4. Use of Personal Information

5. Retaining Personal Information

6. Provision of Personal Information to Third Parties

7. Legal Rights and Obligations

8. Destruction of Personal Information

9. Protection of Personal Information

10. Methods of Obtaining Consent

11. Personal Information Protection Officer

12. Scope of this Privacy Policy

13. Notification of Amendments to Policy

- Next -

1. Principles of Personal Information Processing Policy
The Principles of the Personal Information Processing Policy are as follows:
- “company” has the right to the collection, use, sharing of information to third parties (also referred to as consignment or the provision) and the destruction of personal information as deemed appropriate by the “company”.
- “Users” have some rights to their respective personal information provided to the “company”. The “user” can determine what information they wish/do not wish to provide. The “company” will make it transparent to the “user” or their legal representative on the individual right’s to protect privacy, especially in regards to personal information of underage “users”.
- In the case of preventable infringement of personal information, the “company” will directly notify and contact the relevant “users” and assess any damages inflicted on the “user”.
- Above all, the principle of this policy is to guarantee the “user’s” rights to self-determination on behalf of their legal rights and obligations of their personal information in regards to the “services” provided by “company”
- “company” will establish and disclose all guidelines regarding the processing of personal information in accordance with Article 30 of the “Personal Information Protection Act”.

2. Purpose of Processing Personal Information
The processing of personal information is required for “users” to access and use “services” provided by “company”.
The “company” does not use personal information for purposes other than:
- For the true and accurate identification of the “users” providing the information to gain access to “services”. Personal information is also for the authentication, maintenance, management and settlement of “user” contracts and transactions with the “company”.

3. Collection of Personal Information
(1)When a data subject receives a consultation inquiry, such as a service inquiry, the company collects the minimum amount of personal information necessary for an answer. The personal information that the company collects from members is as follows. – For membership registration, 'name, gender, profile, nationality, phone number, address, and date of birth' are collected as required items. – For membership purchase and usage inquiries, 'name, gender, profile, nationality, phone number, address, and date of birth' are collected as required items.
(2)“company” collects personal information through the following methods: - When the “users” input personal information directly in a valid form prompted by the “company”.
- Via the Consultation Centre when requesting inquiries or consultations, either through the “company” website, e-mail, fax or telephone.
- Information can be collected in written form from offline events such as seminars etc.
- When a user consents to the sharing of information with a partner or affiliate company of “company”. The “company” has legal access to such information.
- Automatically generated and inputted information through “users” use of PC or Mobile applications or sites.
(3) Information inputted by the “user” during the access and use of related websites and applications such as IP address, cookies, device information, location information may be collected according to the following methods:
1. Through automated input of data while the “user” is accessing “services”.
2. Unique information regarding the “user’s” device may be automatically and securely converted to protect the original, raw data and information.

4. Use of Personal Information
Utilises personal information for the following purposes only: Inquiry, service development, provision and improvement, establishment of safe and convenient “user” experiences of “services”.
- The “company” has the right to access relevant “user’s” personal information in order to provide responses to inquiries and consultations. The information collected in these instances will include: Name and e-mail address.
- Information can also be used for the maintenance, development and establishment of “services” and systems, including advertisements.
- “Service” usage history, frequency of access and other personalised “user” statistics may be collected.
- Information is used to better create a safe “user” environment in accordance with regulations regarding information security, privacy and safety.

5. Period of Retention of Personal Information
“Ccompany” holds personal information within the period of retention of personal information agreed upon when collecting personal information from the data subject or the period of retention of personal information in accordance with laws and regulations. Specific personal information processing and retention periods are as follows:- Membership registration and management: Until the membership usage contract or membership registration is terminated; However, if the bond debt relationship remains, it will remain until the relevant bond debt is settled- Contract subscription withdrawal payment in e-commerce Supply record of goods, etc.: 5-year-Record of consumer complaints or dispute settlement: 3-year

6. Provision of Personal Information to Third Parties
- “company”will not sell, share or distribute personal information to outside affiliates or third parties without the consent of the “user”. Only once the “user” consents to the provision of personal information to third parties will ALLKPOP have the right to do so in accordance to appropriate laws and regulations.
- “company” does not entrust or store personal information of the “user” with third parties.

7. Legal Rights and Obligations
The “user” and/or legal representatives who provides personal information to the “company” has the right to exercise privacy rights to respective information in the following cases:
1. Request of personal information inquiry
2. If there is an error in personal information
3. Request to terminate or withdraw information or “user” contracts
4. Under circumstances during processes of “user” contract termination

8. Destruction of Personal Information
“company” will destroy personal information as soon as it becomes unnecessary to the “company” or the “services” within the limitations of the retention periods.
If the “user” consent’s to the Terms of collection and use of personal information, the “company” may store that information until the end of the retention period.

9. Protection of Personal Information
“company” is committed to safeguarding your personal information and practices safety measures and protocols up to standards outlined by the “Information and Communications Network Act” and the “Personal Information Protection Act”.
- Management Measures: The “company” will establish an internal management plan as well as regular training for employees and affiliate staff who manage such information.
- Technical Measures: Security programs, malware detection and protection systems, file encryption and management of information accessibility via password security etc.
- Physical Measures: The “company” will ensure personal information is saved and stored in secure areas with controlled and limited access.

10. Methods of Obtaining Consent
1. “company” utilises cookies in order to store personalised information of the “user” in order to provide enhanced, personalised “services”.
2. Cookies are basic information sent by the service (http), and may be stored on the hard disk of the “user’s” PC.
(1) Purpose of Cookies: Cookies are used to optimise “services” for “users”.
(2) Installation and Operation of Cookies: “Users” may refuse to store cookies manually, by changing options on their PC or device by going to: Tools>Internet Options> Privacy Menu at the top of the web browser.
(3) If you refuse to store cookies, you are subjected to less personalised and optimised “user” experiences.

11. Guidance for Personal Information Protection Manager and Person in Charge
1.The company designates and operates the person in charge of personal information protection as follows to handle inquiries and complaints related to personal information of users.
Personal Information Protection Officer:
Name: MEEHEE,YU
Location: ALLKPOP
Position: CEO
Phone: +82. (2)512 3168 | Mail: yumirukpop@naver.com

2. Infringements of personal information can be reported to the following organisations:
Privacy Infringement Notification Center (privacy.kisa.or.kr)
Cyber Investigation Division of Supreme Prosecutors' Office (www.spo.go.kr)
Cyber Security Bureau, National Police Agency (cyberbureau.police.go.kr)

12. Scope of this Privacy Policy
This privacy policy applies only to the use of “company” n “services” enquiry, consultation and all other matters relating to the “services” provided by the “company”. This privacy policy does not apply to affiliate or partner companies of “company”.

13. Notifications of Amendments to Policy
“Users” will be notified of any amendments made to this privacy policy (additions, deletions, modifications etc.) at least 7 days prior to the changes via general public announcement via the “company” website. For any changes made to the policies regarding to the type of information collected or purpose of use of information, “users” will be notified at least 30 days in advance. The “company” may or may not require re-consent of the “users” in these instances.

- Official Date of Announcement: August 10,2024
- Effective Date: August 10,2024.

Company name: All K-POP CO., LTD. CEO: Yumihee Business registration number: 703-86-03167 Mail order business report: No. 2024-Seoul Gangnam-04231 Phone number: 82-2-512-3168 Email: yumirukpop@naver.com Address: (06069) 36 Hakdong-ro 31-gil, Gangnam-gu, Seoul
All transactions are handled by All K-POP CO., LTD. including handling shipping, exchanges, refunds, etc. For further inquiries, please contact Email: yumirukpop@naver.com or landline: 82-2-512-3168.
2024 ALL K-POP CO.,LTD. All Rights Reserved