Privacy Policy

1. Purpose of Collection and Use of Personal Information

NKS Co., Ltd. (hereinafter the "Company") processes personal information for the purposes listed below. Personal information will not be used for any purpose other than those stated, and if the purpose of use changes, the Company will take necessary measures, including obtaining separate consent.

• Responding to customer inquiries and consultation requests
• Providing information on products and services
• Contract execution and payment settlement for services rendered
• Identity verification and prevention of fraudulent use

2. Categories of Personal Information Collected

The Company collects the following personal information to provide services smoothly:

3. Retention and Use Period

The Company destroys personal information without delay once the purpose of collection and use has been fulfilled. However, when retention is required by applicable laws, the Company retains personal information for the period specified:

• Records of contracts or subscription withdrawals: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records of payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records of consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
• Website visit logs: 3 months (Protection of Communications Secrets Act)

4. Provision of Personal Information to Third Parties

As a general rule, the Company processes personal information only within the scope specified in Section 1 and does not process information beyond that scope or provide it to third parties without the data subject's prior consent. However, personal information may be provided to third parties in the following cases:

• When the data subject has given separate consent
• When required by law or when disclosure is unavoidable to comply with legal obligations
• When the data subject or their legal representative is unable to express intent, or when prior consent cannot be obtained due to unknown address, and disclosure is clearly necessary to protect the urgent life, safety, or property interests of the data subject or a third party

5. Outsourcing of Personal Information Processing

The Company may outsource personal information processing tasks to enable smooth operations. When entering such outsourcing contracts, the Company specifies the necessary requirements to ensure personal information is managed securely. If the scope of outsourced tasks or the contractor changes, the Company will disclose the changes through this Privacy Policy without delay.

6. Rights and Obligations of Data Subjects

Data subjects may exercise the following rights related to personal information protection with the Company at any time:

• Request to access personal information
• Request to correct information when errors are identified
• Request to delete personal information
• Request to suspend processing

These rights may be exercised via written request, phone, or email, and the Company will take action without delay.

7. Destruction of Personal Information

The Company destroys personal information without delay when the retention period has elapsed or the purpose of processing has been fulfilled.

• Electronic files are deleted using technical methods that prevent record recovery.
• Printed personal information is destroyed by shredder or incineration.

8. Security Measures

The Company implements the following measures to ensure the security of personal information:

• Administrative: Establishing and implementing internal management plans; minimizing and training personnel handling personal information
• Technical: Managing access permissions to personal information systems; installing access control systems; encrypting personal information; deploying security software
• Physical: Controlling access to server rooms and document storage facilities

9. Personal Information Protection Officer

The Company has designated the following Personal Information Protection Officer to oversee personal information processing and to handle complaints and remedies related to personal information processing:

10. Amendments to the Privacy Policy

This Privacy Policy takes effect on the effective date. Any additions, deletions, or amendments required by law or Company policy will be announced through notices at least 7 days before the changes take effect.