To protect your personal information, CJ OliveYoung Co., Ltd. Olive Young (hereafter, ‘Olive Young’) complies with any applicable law such as 「the Personal Information Protection Act (PIPA)」 and 「the Act on Promotion of Information and communications Network Utilization and Information Protection, etc. 」.

Olive Young strives to prevent the leakage and damage of your personal information.

Article 1 (Purpose of Collecting and Processing Personal Information)

1. 1. Olive Young collects only basic personal information necessary to provide its services, and seeks your consent when collecting additional information for services tailored to your tastes and interests.
   If you are a registered user, not providing optional information will not restrict your use of services.
   If you are not a registered user, you may refuse to give your consent, in which case you will not able to purchase items at Olive Young.
2. 2. Olive Young does not collect any sensitive personal information such as your race or ethnicity, religion and philosophical beliefs, country of origin, political opinions, criminal record, medical information, and sexual orientation.

Purpose of collecting and using personal information

Classification	Purposes	Details
Required	Customer management	- To verify your identity for registration, confirm your consent on registration, and prevent dual registration - To fulfill legal obligations, suspend services to those who violate the terms and conditions and applicable laws, and restrict malicious use - To give notifications and to confirm communication channel to deal with customer service - To confirm your request for account registration and withdrawal, and to manage, maintain, fulfill, and settle contracts - To provide services to VIP customers
	Contract fulfilment and billing for your use of services	- To acquire accurate transaction information for billing and shipping - To deal with your complaints on services - To operate the customer service center and enable you to redeem and accumulate reward points - To provide refunds and collect payment information for your purchases of goods or services
	Marketing activities and development of new services	- To provide personalized services, convenience, and benefits - To notify you of upcoming events, special offers, etc. - To analyze your use of services and marketing trends (individual and group statistics), and develop new services - To conduct marketing activities for Olive Young and its affiliates - To send periodical newsletters - To promote services and products offered by Olive Young or its affiliates - To provide information on promotions and opportunities for participation (via text message, e-mail, direct message, social media account, etc.), send URLs for app installation, etc.
Optional	Use of other services	- To host events on the Olive Young website and on social media - Report to Cyber Audit Office: to report to the cyber audit office, confirm reports, and receive results after resolution
	Information collected/generated during use of services or business processing	- To analyze your interests and patterns of use for marketing campaigns, and conduct statistical analysis and research to develop services - To prepare for intrusion of personal information and preserve records for customer dispute resolution - To proceed with payment for your purchase

Article 2 (Personal Information Olive Young Collects and Methods of Collection)

Olive Young collects the following personal information.

Personal information items and Methods of Collection

Classification	Methods	Collected/Processed Information
Required	When you register (at Olive Young online)	Password, E-mail Address
	When you purchase an item at Olive Young online	- Shipping Information: Name, Contact No., Address - Payment Information 1) When you pay by credit card: IP Address, Payment Information such as Credit Card No. 2) When you pay via a payment gateway: IP Address, Payment Information such as Credit Card No.
	When you purchase as a guest	- Shipping Information: Name, Contact No., Address, E-mail Address, Guest Password - Payment Information 1) When you pay by credit card: IP Address, Payment Information such as Credit Card No. 2) When you pay via a payment gateway: IP Address, Payment Information such as Credit Card No.
Optional	When you agree to the use of your information for marketing activities	Name, Mobile No., Address, E-mail Address, Age Group, Date of Birth, Gender, Your Purchase/Service/Channel Usage History
	When you participate in an event	Name, Mobile No., Address, E-mail Address
	When you report to the cyber audit office	Name, E-mail Address, Contact No.
Other	Information collected/generated during use of services or business processing	- Service Usage History (Usage Time and Purchase History of Items and Services) - History of Payment/Account Suspension/Visits, IP Address, Cookies, Event Participant URL - Device Information (Type, OS Version Number, Model No.) (*Device identification information is not collected.)

(* Olive Young seeks your consent for optional information collected when you participate in an event, make an inquiry, and use specific services.)

Article 3 (Outsourcing of Personal Information Handling)

Olive Young outsources certain services to the following companies. In accordance with applicable laws, essential terms and conditions are stipulated in contract with the entrusted companies to safeguard your personal information

Personal Information Processing

Company Name (Service Provider)	Entrusted Services
CJ Logistics Corporation	Collecting Shipping Information and Shipping Purchased Products & Giveaways for Events
ePost (EMS)	Collecting Shipping Information and Shipping Purchased Products & Giveaways for Events
K-Packet	Collecting Shipping Information and Shipping Purchased Products & Giveaways for Events
Cafe24	Customer Service Operation & Customer Consultation, Market Research
KR Partners	Payment Processing

Article 4 (Sharing Personal Information with Third Parties)

1. 1. Olive Young processes your personal information only for the reasons specified on ‘Purpose of Collecting and Processing Personal Information’ and does not use the information or share with third parties for any other purpose.
2. 2. However, your personal information can be shared for the following reasons.
   1. 1) When you give your consent.
   2. 2) When it is necessary to proceed with payment for service provision.
   3. 3) When personal information is shared in an unidentifiable form for statistics, academic, and market research.
   4. 4) When it is required by any applicable law.
   5. 5) When it is required by investigating authorities for investigation in compliance with any applicable law.

Article 5 (Retention, Processing Period, and Disposal of Personal Information)

1. 1. Once the purpose of collection is fulfilled, your personal information is immediately disposed of by Olive Young. However, if longer retention is required by any applicable law or you agree to extended retention and processing period of your information, the data is securely stored and used only for the intended purposes.
   1. 1) If longer retention and processing period are required by applicable laws (not limited to followings).
      1. - Record of Contracts and Subscription Withdrawal: 5 Years
      2. - Record of Payment and Provision of Goods: 5 Years
      3. - Record of Customer Complaint and Dispute Resolution: 3 Years
      4. - Date and Time of Visit: 3 Months (Excluding the date and time of your last visit to confirm the period of service)
   2. 2) To minimize any loss or damages from repetitious account withdrawal and re-registration and to enable you to reactivate your account as required, your data is retained for 30 days after your account is withdrawn.
   3. 3) In compliance with Articles 29 and 16 of ‘the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.’, the personal information of an account with no log in activity for more than one year is transferred to a separate database storage.
      1. - Service Usage History: Accumulated and Redeemed Reward Points, Sign-In
      2. - You are notified of the estimated date and the relevant personal information 30 days before data transfer and separate storage.
      3. - The disabled account is reactivated when you resume the use of services, redeem and accumulate reward points, and sign in into Olive Young online.
   4. 4) Valid commercial credit (such as reward points) is retained until it expires.
2. 2. Your information is disposed of or deleted by the following methods depending on its form.
   1. 1) Personal information stored on paper is shredded or incinerated.
   2. 2) Electronically stored personal information is securely disposed of and is not retrievable.

Article 6 (Your Rights as a Registered User)

1. 1. Registered customers can always view, revise, and request their personal information.
   1. 1) Personal Information Inquiry and Revision

      Viewing and Correcting Personal Information

      Team: Digital Global Business Team	Inquiry: Customer Service Center
      Via e-mail	Via Olive Young online
      oycs@oliveyoung.com	+1-800-523-6115

      1. - Contact No., E-mail Address, Password: My Account > My Profile > Edit My Profile
      2. - Contact the customer service center or specified team above.
   2. 2) When you make a request to correct erroneous information on your profile, the relevant personal information will not be used or provided until corrections are applied. In case incorrect information is provided to third parties, Olive Young will immediately notify them of the correct information and instruct them to apply to their services.
2. 2. You can always withdraw your consent to the Privacy Policy on collecting, processing, and sharing your personal information.
   When you close your account, Olive Young will immediately take any necessary action such as prompt disposal of personal information.
   1. - To close your account: My Account > My Profile > Close Account
3. 3. Notwithstanding Articles 1 and 2 above, requests to view or correct your personal information cmay be restricted for the following reasons.
   1. 1) In case of threats to the life, rights, interests, or assets of you or a third party
   2. 2) In case of significant disruptions to the service providers
   3. 3) In case of breaches of applicable laws

Article 7 (Personal Information Manager and Team)

To protect your personal information and deal with any relevant issues, Olive Young has designated an officer in order to protect your personal information. Feel free to contact us with any inquiries regarding personal information. The officer will immediately and sincerely reply to your inquiries.

Viewing and Correcting Personal Information

Personal Information Protection Officer		Team: Information Security Team
Position	Name	Contact Number	E-mail Address
Business Strategy Support	BAE Eun	+1-800-523-6115	oycs@oliveyoung.com

Article 8 (Refusal and Operation of Cookies)

1. 1. Olive Young uses collected ‘cookies’ to provide a more personalized experience on the website.
   Cookies are small text files sent to your browser by the web server you visit and stored in the hard disk of your device (such as your desktop, smartphone, tablet PC, etc.) when you use services on Olive Young’s website or mobile app. Cookies identify the device you are using but not you as an individual.
2. 2. The data collected by cookies can be used for the following purposes:
   1. 1) To analyze the frequency and time of your visits, figure out your interests and patterns of use, and target your visits and events you participate in
   2. 2) To track your most viewed items and provide services tailored to your interests for a more personalized experience on the website
   3. 3) To analyze customer behavior for service improvement initiatives
3. 3. You have a right to accept or disable cookies. You can accept all cookies, choose to be notified every time a cookie is issued, or disable all cookies. However, you may not be able to use and receive certain services when you disable cookies.
   1. 1) How to accept or disable cookies (Internet Explorer)
      1. ① Go to ‘Tools’ and select ‘Internet Options’
      2. ② Select the ‘Privacy’ tab
      3. ③ Click ‘Advanced’
      4. ④ Control cookies
   2. 2) How to view installed cookies (Internet Explorer)
      1. ① Go to ‘Tools’ and select ‘Internet Options’
      2. ② Select the ‘General’ tab and click ‘Settings’ under ‘Browsing History’
      3. ③ Click ‘View Files’
4. 4. Cookies expire when you close the browser or sign out.

Article 9 (Measures to Protect Personal Information)

Olive Young establishes the following technical/organizational measures to ensure the security of your personal information and prevent the loss, leakage, theft, and damage of your personal information due to cyberattack.

1. 1. Technical Measures
   1. - Your personal information is protected by your password. Important personal data and your password are encrypted before storage.
   2. - To prevent any damage from computer viruses and intrusion of personal information, vaccine programs are employed and updated on a regular basis.
   3. - Encryption algorithms are used to safely transfer your personal data over networks.
   4. - To prevent the leakage of your personal information due to cyberattack and to detect illegal intrusion, vulnerability assessments are conducted on a regular basis and intrusion detection systems are installed.
2. 2. Organizational Measures
   1. - The number of individuals who deal with personal information is limited to a minimum extent and periodic trainings are provided to the relevant employees.
   2. - The authority to access personal data is provided in accordance to the procedures of the personal information processing system and is periodically examined and withdrawn if needed.
   3. - Internal procedures are established to conduct inspections on compliance with the Privacy Policy.
   4. - Olive Young manages and supervises the entrusted companies that process your personal data.

Article 10 (Report and Consultation of Intrusion of Personal Information)

You may be assisted by the following organizations in case you need to consult or report any violation of use of personal information.

Viewing and Correcting Personal Information

KISA	Personal Information Dispute Mediation Committee	Cyber Crime Investigation, Supreme Prosecutors’ Office	National Police Agency Cyber Bureau
(+82) 118 privacy.kisa.or.kr	1833-6972 www.kopico.go.kr	(+82) 1301 www.spo.go.kr	(+82) 182 cyberbureau.police.go.kr

Article 11 (Notice and Changes to the Privacy Policy)

The privacy policy stated above may be revised in compliance with government policies, applicable laws, and due to the security system update., and we will put out a notification online of all changes such as the addition, removal, or amendment of privacy policy with the reasons

(Privacy Policy v.1.0 (Published on June 10th, 2019)