WISESTONE Co., Ltd. (hereinafter referred to as the “Company”) makes every effort to safely protect and lawfully process user's personal information in accordance with the Personal Information Protection Act and related laws and regulations.
This Personal Information Processing Policy has been prepared to inform users of matters related to the collection, use, provision, and management of personal information processed by the Company.

01. Items of Personal Information Collected and Methods of Collection

1-1. Items Collected
The Company collects the following personal information:
- Collected information : Name, company name, email address, contact number, position/job title, inquiry details, and how the user became aware of the website

1-2. Methods of Collection
- Personal information is collected when users directly enter information while using the website inquiry service.

02. Purpose of Use of Personal Information

The Company uses collected personal information for the following purposes:
- Provision and operation of services
- Handling inquiries and complaints
- Provision of marketing and event information (with user consent)

03. Retention and Use Period of Personal Information

The Company destroys personal information without delay once the purpose of collection and use has been achieved.
However, if retention is required by relevant laws and regulations, the information will be retained for the period specified by such laws. 3-1. Retention Period
- Use for marketing and advertising : Relevant personal information is retained for the above purposes from the date of consent to collection and use until semi-permanent retention, unless otherwise required by law.

04. Provision of Personal Information to Third Parties

4-1. Provision to Third Parties
In principle, the Company does not provide personal information to third parties without the user's consent.
Exceptions apply in the following cases:
- When required to fulfill obligations under applicable laws
- When the user has given prior consent

05. Procedures and Methods for Destruction of Personal Information

The Company destroys personal information without delay when it becomes unnecessary, such as upon expiration of the retention period or achievement of the processing purpose.

5-1. Destruction Procedure
- Personal information whose retention period has expired or whose processing purpose has been achieved is stored for a certain period and then destroyed.

5-2. Destruction Deadline
- When the retention period has expired, personal information shall be destroyed within five (5) days from the end date of the retention period.
- When personal information becomes unnecessary due to achievement of the processing purpose, termination of the relevant service, or closure of the business, it shall be destroyed within five (5) days from the date it is deemed unnecessary.

5-3. Methods of Destruction
- Electronic files : Deleted using methods that make recovery impossible
- Paper documents : Shredded or incinerated

06. Rights of Users and How to Exercise Them

Users may exercise the following rights regarding their personal information at any time:
- Request access to, correction of, or deletion of personal information
- Request suspension of processing of personal information
- Requests may be submitted to the Company's Personal Information Protection Officer via email or telephone

07. Personal Information Protection Officer and Responsible Department

- Personal Information Protection Officer : Bitna Kim
- Position : Head of Management Support Division
- Email : bnkim@wisestone.kr
- Tel : 02-6257-5958

If you need to report or consult regarding personal information infringement, please contact the following organizations:
Personal Information Dispute Mediation Committee : 1833-6972 (www.kopico.go.kr)
Personal Information Infringement Report Center : 118 (privacy.kisa.or.kr)
Supreme Prosecutors' Office - Cyber Crime Investigation Division : 1301 (www.spo.go.kr)
National Police Agency - Cyber Safety Bureau : 182 (ecrm.police.go.kr)

08. Changes to the Personal Information Processing Policy

This Personal Information Processing Policy shall take effect from the enforcement date and may be revised in accordance with changes to laws or internal policies. Any changes will be announced at least seven (7) days in advance.
- Effective Date: 2025-01-01