Privacy Policy

WOOAZ Inc. values your personal information and complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws. This Policy explains, in plain terms, what information the Company handles, why, and how it is managed. This English version is provided for convenience; in the event of any conflict, the Korean version prevails.

Article 1 (Information Collected on the Website)

This Website has no membership registration, payment, or inquiry forms, and does not collect personal information entered directly by users. The following information is generated and collected automatically in the course of using the Website.

• IP address, access date and time, service usage records, browser and device information, cookies

This information is not used to identify specific individuals and is used only for statistical analysis and system stability.

Article 2 (Information Processed in KakaoTalk Channel Consultations)

The Company operates a KakaoTalk Channel to receive inquiries. When a user requests a consultation through the channel, the Company, as the channel administrator, reviews and processes the following information.

• Items processed: the name (nickname) shown on the user’s KakaoTalk profile, the consultation conversation, and any contact details or affiliation the user voluntarily provides during the consultation
• Purpose: confirming and responding to inquiries; discussing partnerships, investment, and merchandising
• Retention period: 3 years after the consultation ends (for handling repeat inquiries and disputes). If the user requests deletion, the information is destroyed without delay.

The processing of personal information by the KakaoTalk Channel service itself is governed by Kakao Corp.’s privacy policy. The Company only reviews the above information through the administrator interface provided by Kakao and does not separately download or store user lists.

Article 3 (Purposes and Legal Basis of Processing)

The Company processes personal information only for the purposes below and obtains prior consent if the purposes change. The Company does not use or provide personal information beyond the purposes for which it was collected.

Purpose	Items	Legal basis
Confirming and responding to inquiries; managing consultation history	KakaoTalk nickname, consultation messages, contact details or affiliation provided by the user	Personal Information Protection Act, Article 15(1)(4) (performance of a contract) and (6) (legitimate interest)
Contact and consultation regarding partnerships, investment, and merchandising collaboration	Same as above	Article 15(1)(4)
Analyzing Website usage; preventing misuse and ensuring system stability	IP address, access time, usage records, browser and device information	Article 15(1)(6) (legitimate interest)

Article 4 (Retention and Use Period)

The Company destroys information without delay once the purpose of processing has been achieved. However, where applicable laws require retention, the information is kept for the required period.

• KakaoTalk Channel consultation records: 3 years after the consultation ends
• Web server access logs: kept for up to 1 year, then deleted automatically
• Records on labeling and advertising: 6 months; records on consumer complaints or dispute handling: 3 years — limited to records relating to the Company’s distance sales through external sales channels (Act on Consumer Protection in Electronic Commerce)

Article 5 (Personal Information of Children Under 14)

As a company that makes products for children, the Company pays special attention to protecting children’s personal information.

1. The Company does not collect personal information of children under the age of 14 on this Website.
2. The Company’s services are intended for parents and guardians, and there is no procedure for children to register or enter information themselves.
3. If processing the personal information of a child under 14 becomes unavoidable, the Company obtains the consent of the legal guardian in accordance with Article 22-2 of the Personal Information Protection Act and collects only the minimum information necessary to verify consent (the guardian’s name and contact details).
4. When informing children about the processing of personal information, the Company uses language that is easy to understand.
5. Legal guardians may request access to, correction, deletion, or suspension of processing of a child’s personal information, and the Company will take the necessary measures without delay.
6. If a child under 14 is found to have contacted the Company directly through the KakaoTalk Channel, the Company will ask the child to contact us again through a parent or guardian and will not use the child’s information for any purpose other than the consultation.

Article 6 (Provision to Third Parties)

The Company does not use users’ personal information beyond the scope described in Articles 1 through 3 or provide it to third parties, except in the following cases.

1. Where the user has given prior consent
2. Where required by law, or where an investigative agency requests it for investigative purposes in accordance with the procedures and methods prescribed by law

Article 7 (Outsourcing of Processing)

The Company does not outsource the processing of personal information in connection with the operation of the Website.

However, the Company uses the KakaoTalk Channel service provided by Kakao Corp. for inquiry consultations, in which users contact the Company through Kakao’s service. If outsourcing occurs in the future, the Company will specify the outsourcee and the outsourced tasks in this Policy and disclose them without delay.

Article 8 (Overseas Transfer and External Services)

The Company does not transfer users’ personal information overseas.

However, the Website loads the external services below. In doing so, the user’s browser connects directly to the servers of those providers, and the user’s IP address and browser information may be transmitted to them. The Company does not receive or store this information, and each provider’s own privacy policy applies to its processing.

• Web fonts and icons: jsDelivr (Prospect One Ltd., servers in the United Kingdom and elsewhere)
• Video playback: YouTube (Google LLC, United States) — embedded in a mode that does not set cookies until the user presses play (youtube-nocookie.com)
• Inquiries: KakaoTalk Channel (Kakao Corp., Republic of Korea)
• Visitor statistics: Google Analytics (Google LLC, United States) — records, in anonymous aggregate form, which route brought a visitor to the site and which pages were viewed. Part of the IP address is masked before storage.
• Visitor statistics: NAVER Analytics (NAVER Corp., Republic of Korea)
• On-page behavior analysis: Microsoft Clarity (Microsoft Corporation, United States) — records scroll and click positions anonymously; text typed into input fields is masked automatically.

The Company views the data produced by these statistics and behavior-analysis tools only in anonymous, aggregated form and does not use it to identify any individual. This applies from 24 September 2026.

If an overseas transfer occurs in the future, the Company will specify in this Policy the items transferred, the destination country, the timing and method, the recipient, the purpose of use, and the retention period, and will follow the procedures prescribed by applicable laws.

Article 9 (Destruction Procedures and Methods)

1. Procedure: personal information whose retention period has expired or whose purpose of processing has been achieved is destroyed without delay. Where retention is required by other laws, the information is moved to a separate database or storage location and kept there.
2. Method: electronic files are deleted using technical methods that make recovery impossible, and printed materials are shredded or incinerated.

Article 10 (Rights of Data Subjects and Legal Guardians, and How to Exercise Them)

1. Users may at any time request access to, correction, deletion, or suspension of processing of their personal information.
2. Rights may be exercised in writing, by telephone, or by email using the contact details in Article 13, and the Company will act without delay.
3. If a user requests correction of an error in their personal information, the Company will not use or provide that information until the correction is complete.
4. Where rights are exercised through a representative, the Company verifies the representation by requiring a power of attorney.

Article 11 (Security Measures)

The Company takes the following measures to ensure the security of personal information.

1. Administrative: minimizing the number of staff handling personal information, establishing and implementing an internal management plan, and regular staff training
2. Technical: access control for consultation accounts, retention of access logs, installation and updating of security software, and encryption of transmissions
3. Physical: access control for locations where personal information is stored

Article 12 (Cookies)

1. The Company may use cookies to improve the convenience of using the Website.
2. Users may refuse the storage of cookies through their web browser settings. Refusing cookies may limit the use of some features.
3. How to configure: browser Settings > Privacy and security > Cookies and other site data
4. For visitor statistics the Company uses cookies set by Google Analytics (e.g. _ga), NAVER Analytics and Microsoft Clarity (e.g. _clck, _clsk). These cookies are used only to aggregate, anonymously, how visitors arrive and which pages they use. To opt out of Google Analytics, you may install Google’s opt-out browser add-on (tools.google.com/dlpage/gaoptout).

Article 13 (Privacy Officer and Contact for Access Requests)

The Company has designated the following Privacy Officer to oversee personal information processing and to handle user complaints and remedies.

Users may direct any inquiries, complaints, or requests for remedies regarding personal information arising from the use of the Company’s services to the contact above. The Company will respond and act without delay.

Article 14 (Remedies for Infringement)

If you need to report or seek advice regarding an infringement of personal information, you may contact the following organizations in the Republic of Korea.

• Personal Information Infringement Report Center · 118 (no area code) · privacy.kisa.or.kr
• Personal Information Dispute Mediation Committee · 1833-6972 · kopico.go.kr
• Supreme Prosecutors’ Office Cyber Investigation Division · 1301 (no area code) · spo.go.kr
• National Police Agency Cyber Bureau · 182 (no area code) · ecrm.police.go.kr

Article 15 (Changes to this Policy)

If this Policy is added to, deleted from, or amended, the changes will be announced through the Website notices at least 7 days before they take effect. Changes that significantly affect users’ rights will be announced at least 30 days in advance.