Kids Tokei (hereinafter referred to as "the Company") establishes and publicly discloses the following personal information processing guidelines in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to promptly and smoothly handle related complaints.

Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those specified below, and if the purpose of use changes, necessary measures will be taken, including obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Membership registration and management on the website
The Company processes personal information for purposes such as confirming the intention to register for membership, identifying and authenticating members for membership services, maintaining and managing member qualifications, verifying identity under the limited identification system, preventing fraudulent use of services, confirming the consent of legal representatives when processing the personal information of children under 14 years of age, and various notifications and complaint handling.

2. Provision of goods or services
The Company processes personal information for purposes such as product delivery, service provision, sending contracts and invoices, providing content, offering customized services, verifying identity and age, processing payments and settlements, and debt collection.

3. Handling complaints
The Company processes personal information for purposes such as verifying the identity of complainants, confirming complaints, contacting and notifying for fact-finding investigations, and notifying the results of processing.

Article 2 (Processing and Retention Period of Personal Information)
① The Company processes and retains personal information within the retention and usage period approved by the data subject or as required by law.
② The processing and retention periods for each type of personal information are as follows:

1. Membership registration and management: until the withdrawal of the business/organization's website membership. However, in cases where the following reasons apply, retention will continue until the reason is resolved:
1) When an investigation or inquiry is underway due to a violation of relevant laws, it will be retained until the end of that investigation or inquiry.
2) When there are outstanding debts or claims related to the use of the website, it will be retained until the debt or claim is settled.

2. Provision of goods or services: until the completion of goods/services supply and payment/settlement. However, in certain cases, the retention period will be extended until the end of the relevant period:
1) Records related to transactions under the "Act on Consumer Protection in Electronic Commerce":
- Records of advertising: 6 months
- Records of contracts, order cancellations, payments, and supply of goods: 5 years
- Records related to consumer complaints or disputes: 3 years
2) Retention of communication verification data under Article 41 of the "Protection of Communications Secrets Act":
- Subscriber telecommunications dates, start and end times, counterpart subscriber numbers, usage frequency, and call location tracking data: 1 year
- Computer communication, internet log records, and access tracking data: 3 months

Article 3 (Provision of Personal Information to Third Parties)
① The Company processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information) and provides personal information to third parties only in cases of data subject consent or as required by special legal provisions under Article 17 of the Personal Information Protection Act.
② The Company provides personal information to third parties as follows:
- Entity receiving personal information:
- Purpose of use of personal information by the recipient:
- Items of personal information provided:
- Retention and use period of the recipient:

Article 4 (Outsourcing of Personal Information Processing)
① To facilitate the smooth processing of personal information, the Company outsources personal information processing tasks as follows:
- Entity receiving the outsourcing (service provider): (주)아임웹
- Nature of outsourced work: Providing system services for shopping mall hosting, mobile app services, marketing services, additional and affiliated services, and sending notification messages, friend messages, and text messages.

- Entity receiving the outsourcing (service provider): OOO PG
- Nature of outsourced work: Payment and escrow services.

- Entity receiving the outsourcing (service provider): OOO Delivery
- Nature of outsourced work: Product delivery services.

- Entity receiving the outsourcing (service provider): OOO Customer Center
- Nature of outsourced work: Customer consultation services.

- Entity receiving the outsourcing (service provider): OOO
- Nature of outsourced work: Identity verification services.

② The Company specifies in contracts for outsourcing the prohibition of processing personal information beyond the purpose of the outsourced work, technical and managerial protection measures, restrictions on re-outsourcing, management and supervision of the service provider, and liability for damages, and supervises whether the service provider processes personal information securely.
③ If the content of the outsourced work or the service provider changes, the Company will promptly disclose this through the privacy policy.

Article 5 (Rights of Users and Legal Representatives and How to Exercise Them)
① Data subjects can exercise the following rights related to personal information protection at any time:
1. Request for access to personal information
2. Request for correction if there are errors
3. Request for deletion
4. Request for cessation of processing
② Rights under paragraph 1 can be exercised toward the Company in writing, by phone, via email, or by fax, and the Company will respond promptly.
③ If a data subject requests correction or deletion of personal information due to errors, the Company will not use or provide the relevant personal information until the correction or deletion is completed.
④ Rights under paragraph 1 can be exercised through a legal representative or an agent authorized by the data subject. In this case, a power of attorney in accordance with the Personal Information Protection Act must be submitted.
⑤ Data subjects must not infringe upon the personal information and privacy of themselves or others while violating relevant laws related to the processing of personal information by the Company.

Article 6 (Items of Personal Information Processed)
The Company processes the following personal information items:

1. Membership registration and management
Required items:
Optional items:

2. Provision of goods or services
Required items:
Optional items:

3. During the use of internet services, the following personal information items may be automatically generated and collected:
IP address, cookies, MAC address, service usage records, visit history, and records of misuse.

Article 7 (Destruction of Personal Information)
① The Company will promptly destroy personal information when the retention period has expired, the purpose of processing has been achieved, or when the personal information is no longer needed.
② If the retention period for personal information consented to by the data subject has expired or the purpose of processing has been achieved, but the Company is required to continue retaining it under other laws, the personal information will be moved to a separate database (DB) or retained in a different location.
③ The procedures and methods for destroying personal information are as follows:
1. Destruction procedure
The Company selects personal information that needs to be destroyed and obtains approval from the personal information protection officer to proceed with the destruction.
2. Destruction method
The Company destroys personal information recorded and stored in electronic files using methods such as low-level formatting to ensure that the records cannot be restored, and personal information recorded on paper documents is shredded or incinerated.

Article 8 (Measures to Ensure the Safety of Personal Information)
The Company implements the following measures to ensure the safety of personal information:
1. Administrative measures: Establishing and implementing an internal management plan, regular employee training, etc.
2. Technical measures: Managing access rights to personal information processing systems, installing access control systems, encrypting unique identification information, and installing security programs.
3. Physical measures: Controlling access to computer rooms and data storage rooms.

Article 9 (Installation and Operation of Automatic Personal Information Collection Devices and Refusal)
① The Company uses cookies to store and retrieve user information to provide personalized services.
② Cookies are small amounts of information sent by the server (http) operating the website to the user's computer browser and may be stored on the user's hard disk.
a. Purpose of using cookies: To understand the visit and usage patterns of each service and website visited by users, popular search terms, and security access status, in order to provide optimized information to users.
b. Installation, operation, and refusal of cookies: Users can refuse to store cookies by adjusting the settings in the privacy menu of the Internet Options in the tools section of their web browser.
c. Refusing to store cookies may result in difficulties in using personalized services.

Article 10 (Personal Information Protection Officer)
① The Company designates a personal information protection officer to be responsible for overall personal information processing tasks and to handle complaints and remedies related to personal information processing as follows:

▶ Personal Information Protection Officer