Vittgreen Co., Ltd. (hereinafter referred to as the "Company") values your personal information and complies with applicable laws and regulations on the promotion of information and communications network utilization and information protection.

Through this Privacy Policy, the Company informs you of how your personal information is used and what measures are taken to protect it.

When this Privacy Policy is revised, the Company will announce the changes through website notices (or individual notices).

This policy is effective as of April 1, 2026.

1. Personal Information Collected

The Company collects the following personal information for consultation and related purposes.

Online Inquiry
- Items collected: Name, contact number, email, inquiry details, etc.

2. Purpose of Collection and Use of Personal Information

The Company uses collected personal information for the following purposes.
Fulfillment of contracts related to service provision and handling inquiries/responses related to services

3. Retention and Use Period of Personal Information

In principle, once the purpose of collecting and using personal information has been achieved, the Company destroys the information without delay. However, if retention is required under applicable laws, the Company retains member information for the periods specified below.

Items Retained and Legal Basis for Retention of Payment Records

• - Records on contracts or withdrawal of subscription: 3 years
• - Records on contracts or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
• - Records on payment and supply of goods, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
• - Records on consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)

4. Procedures and Methods for Destruction of Personal Information

In principle, the Company destroys personal information without delay once the purpose of collection and use has been achieved. The procedures and methods are as follows.

Destruction Procedure
Information entered by members for registration, etc. is transferred to a separate database (or filing cabinet for paper documents) after the purpose is achieved and stored for a certain period in accordance with internal policies and applicable laws (see Retention and Use Period) before being destroyed.
Personal information transferred to a separate database is not used for purposes other than retention unless required by law.

Destruction Method
Personal information stored in electronic file format is deleted using technical methods that prevent recovery of records.

5. Provision of Personal Information

In principle, the Company does not provide users' personal information to external parties. Exceptions apply in the following cases.
When users have given prior consent, when required by law, or when investigative agencies request information in accordance with procedures and methods prescribed by law for investigative purposes

6. Hosting and Maintenance

For service performance, the Company entrusts operations to external specialists as follows.

• - Entrusted party: Three Ani I&C Co., Ltd.
• - Entrusted work: Website and system management (hosting / maintenance)

7. Rights of Users and Legal Representatives and How to Exercise Them

Users may view or modify their registered personal information at any time and may request cancellation of membership.
To view or modify personal information, use "Change Personal Information" (or "Edit Member Information," etc.). To cancel membership (withdraw consent), click "Withdraw Membership," complete identity verification, and then access, correct, or withdraw directly.
You may also contact the Personal Information Protection Officer in writing, by phone, or by email, and the Company will take action without delay.
If you request correction of errors in your personal information, the Company will not use or provide that information until correction is completed.
If incorrect personal information has already been provided to a third party, the Company will notify the third party of the correction results without delay so that correction can be made.
Personal information deleted or destroyed at the user's request is processed in accordance with "Retention and Use Period of Personal Information Collected by the Company" and is not accessed or used for other purposes.
For children under 14 years of age, legal representatives have the right to view or modify the child's personal information and to withdraw consent for collection.

8. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

The Company uses cookies and similar technologies that store and retrieve your information from time to time. A cookie is a very small text file sent by the server operating the website to your browser and stored on your computer's hard disk.

The Company uses cookies for the following purposes.

Purpose of Using Cookies
To analyze access frequency and visit times of members and non-members, understand user preferences and interests, track behavior, measure event participation and visit counts, and provide targeted marketing and personalized services. You have the choice to accept or refuse cookie installation.
Therefore, you may allow all cookies, confirm each time a cookie is saved, or refuse all cookies through your web browser settings.

How to Refuse Cookie Settings
You may allow all cookies, confirm each time a cookie is saved, or refuse all cookies through your web browser options.

How to Configure
Example (Internet Explorer): Tools at the top of the web browser > Internet Options > Privacy
However, if you refuse cookie installation, some services may be difficult to use.

9. Privacy Complaint Services

To protect customers' personal information and handle complaints related to personal information, the Company has designated the following department and Personal Information Protection Officer.

For other reports or consultation regarding personal information infringement, you may contact the following organizations.

• - Personal Information Infringement Report Center (privacy.kisa.or.kr / 118 without area code)
• - Supreme Prosecutors' Office Cyber Investigation Division (www.spo.go.kr / 1301 without area code)
• - National Police Agency Cyber Bureau (police.go.kr / 182 without area code)