To protect your personal information, CJ Olive Young Corporation(hereafter, ‘Olive Young’) complies with any applicable law such as 「the Personal Information Protection Act (PIPA)」 and 「the Act on Promotion of Information and communications Network Utilization and Information Protection」, General Data Protection Regulation(GDPR) etc.

Olive Young strives to prevent the leakage and damage of your personal information.

Article 1 (Purpose of Collecting and Processing Personal Information)

1. 1. Olive Young collects only basic personal information necessary to provide its services, and seeks your consent when collecting additional information for services tailored to your tastes and interests.
   If you are a registered user, not providing optional information will not restrict your use of services.
   If you are not a registered user, you may refuse to give your consent, in which case you will not able to purchase items at Olive Young.
2. 2. Olive Young does not collect any sensitive personal information such as your race or ethnicity, religion and philosophical beliefs, country of origin, political opinions, criminal record, medical information, and sexual orientation.

Purpose of collecting and using personal information

Classification	Purposes	Details
Required	Customer management	- To confirm your consent on registration - To fulfill legal obligations, suspend services to those who violate the terms and conditions and applicable laws, and restrict malicious use - To give notifications and to confirm communication channel to deal with customer service - To confirm your request for account registration and withdrawal, and to manage, maintain, fulfill, and settle contracts - To provide services to registered customers
	Contract fulfilment and billing for your use of services	- To acquire accurate transaction information for billing and shipping - To deal with your complaints on services - To operate the customer service center and enable you to redeem and accumulate reward points - To provide refunds and collect payment information for your purchases of goods or services
Optional	Marketing activities and development of new services	- To provide personalized services, convenience, and benefits - To notify you of upcoming events, special offers, etc. - To analyze your use of services and marketing trends (individual and group statistics), and develop new services - To conduct marketing activities for Olive Young and its affiliates - To send periodical newsletters - To promote services and products offered by Olive Young or its affiliates - To provide information on promotions and opportunities for participation of event(via e-mail, social media account, etc,), send URLs for app installation, etc.
	Use of other services	- To participate in events on the Olive Young website and on social media
Other	Information collected/generated during use of services or business processing	- To analyze your interests and patterns of use for marketing campaigns, and conduct statistical analysis and research to develop services - To prepare for intrusion of personal information and preserve records for customer dispute resolution - To proceed with payment for your purchase

Article 2 (Personal Information Olive Young Collects and Methods of Collection)

Olive Young collects the following personal information.

Personal information items and Methods of Collection

Classification	Methods	Collected/Processed Information
Required	When you register (at Olive Young online)	Password, E-mail Address, Age Group, Name
	When you purchase an item at Olive Young online	- Shipping Information: Name, Contact No., Address, E-mail Address - Payment Information 1) When you pay by credit card: IP Address, Payment Information such as Credit Card No. 2) When you pay via a payment gateway: IP Address, Payment Information such as Credit Card No.
	When you purchase as a guest	- Shipping Information: Name, Contact No., Address, E-mail Address, Guest Password - Payment Information 1) When you pay by credit card: IP Address, Payment Information such as Credit Card No. 2) When you pay via a payment gateway: IP Address, Payment Information such as Credit Card No.
Optional	When you agree to the use of your information for marketing activities	Date of Birth, Gender
	Participate in Event(ex, Beauty Tester)	Name, Contact No., Address, E-mail Address
	When you participate in an event on the SNS of Olive Young	SNS ID, SNS nickname, SNS profile image, Address, Contact No.
	[For Olive Young members] When you agree to receive shopping or event information	- When you agree to receive shopping or event information via E-mail Address: E-mail Address - When you agree to receive shopping or event information via APP PUSH: PUSH token
	[For guest] When you agree to receive newsletter	Email address, newsletter reception/opening record
	When you agree to join OLIVE YOUNG Affiliate, Reward(Cash Out), participate Affiliate Exclusive event.	- Join : SNS ID that you selected, Country of your activity, Categories that you are interested in - Reward : PayPal ID - event : Name, Contact No., Address, E-mail Address
Other	Information collected/generated during use of services or business processing	- Service Usage History (Usage Time and Purchase History of Items and Services) - History of Payment/Account Suspension/Visits, IP Address, Cookies - Device Information (Type, OS Version Number, Model No.) (*Device identification information is not collected.)

(* Olive Young seeks your consent for optional information collected when you participate in an event, make an inquiry, and use specific services.)

Article 3 (Outsourcing of Personal Information Handling)

Olive Young outsources certain services to the following companies. In accordance with applicable laws, essential terms and conditions are stipulated in contract with the entrusted companies to safeguard your personal information

Personal Information Processing

Company Name (Service Provider)	Entrusted Services
KCP (Reconsignment : DHL, ePost, QXPRESS INC)	Collecting Shipping Information and Shipping Purchased Products & Giveaways for Events
Transcosmos Korea	Customer Service Operation & Customer Consultation
KR Partners	Payment Processing
KSNET	Payment Processing
CJ OLIVE NETWORKS, 3TOP	Building up and operating IT system

Article 4 (Sharing Personal Information with Third Parties)

1. 1. Olive Young processes your personal information only for the reasons specified on ‘Purpose of Collecting and Processing Personal Information’ and does not use the information or share with third parties for any other purpose.

2. Viewing and Correcting Personal Information

   Company Name (Service Provider)	Purpose	Sharing Information	Sharing Period
   Paypal	Application of Seller Protection Policy by Paypal	- Name(First name, Last name) - Detail Address, City, State/Province, Zip/Postal Code, Country,	Purpose of Collecting and Processing Personal Information is fulfilled

3. 2. However, your personal information can be shared for the following reasons.
   1. 1) When you give your consent.
   2. 2) When it is necessary to proceed with payment for service provision.
   3. 3) When personal information is shared in an unidentifiable form for statistics, academic, and market research.
   4. 4) When it is required by any applicable law.
   5. 5) When it is required by investigating authorities for investigation in compliance with any applicable law.

Article 5 (Retention, Processing Period, and Disposal of Personal Information)

1. 1. Once the purpose of collection is fulfilled, your personal information is immediately disposed of by Olive Young. However, if longer retention is required by any applicable law or you agree to extended retention and processing period of your information, the data is securely stored and used only for the intended purposes.
   1. 1) If longer retention and processing period are required by applicable laws (not limited to followings).
      1. - Record of Contracts and Subscription Withdrawal: 5 Years
      2. - Record of Payment and Provision of Goods: 5 Years
      3. - Record of Customer Complaint and Dispute Resolution: 3 Years
      4. - Date and Time of Visit: 3 Months (Excluding the date and time of your last visit to confirm the period of service)
   2. 2) To minimize any loss or damages from repetitious account withdrawal and re-registration and to enable you to reactivate your account as required, your data will be destroyed immediately after your account is withdrawn.
   3. 3) In compliance with Articles 39-6 of 「the Personal Information Protection Act」, the personal information of an account with no log in activity for more than one year is transferred to a separate database storage.
      1. - Service Usage History: Accumulated and Redeemed Reward Points, Sign-In
      2. - You are notified of the estimated date and the relevant personal information 30 days before data transfer and separate storage.
      3. - The disabled account is reactivated when you resume the use of services, redeem and accumulate reward points, and sign in into Olive Young online.
   4. 4) Valid commercial credit (such as reward points) is retained until it expires.
2. 2. Your information is disposed of or deleted by the following methods depending on its form.
   1. 1) Personal information stored on paper is shredded or incinerated.
   2. 2) Electronically stored personal information is securely disposed of and is not retrievable.

Article 6 (Your Rights as a Registered User)

1. 1. Registered customers can always view, revise, and request their personal information.
   1. 1) Personal Information Inquiry and Revision

      Viewing and Correcting Personal Information

      Team: Digital Global Business Team	Inquiry: Customer Service Center
      Via e-mail	Via Olive Young online
      oycs.global@cj.net	+82)2-6970-8666

      1. - Contact No., E-mail Address, Password: My Account > My Profile > Edit My Profile
      2. - Contact the customer service center or specified team above.
   2. 2) information which you can request Olive Young to provide.
      - your personal information which Olive Young retains.
      - status of your consents for collecting, processing and sharing your personal information.
      - status of sharing your personal information with service provider and third parties
   3. 3) When you make a request to correct erroneous information on your profile, the relevant personal information will not be used or provided until corrections are applied. In case incorrect information is provided to third parties, Olive Young will immediately notify them of the correct information and instruct them to apply to their services.
   4. 4) If you are a registered user, you may request Olive Young to provide or get access to your personal information, in which case Olive Young will reply your request within 10 days.
2. 2. You can always withdraw your consent to the Privacy Policy on collecting, processing, and sharing your personal information.
   When you close your account, Olive Young will immediately take any necessary action such as prompt disposal of personal information.
   1. - To close your account: Account > Edit My profile> Close Account or My Account > Deactivate Account > Close Account
3. 3. Notwithstanding Articles 1 and 2 above, requests to view or correct your personal information cmay be restricted for the following reasons.
   1. 1) In case of threats to the life, rights, interests, or assets of you or a third party
   2. 2) In case of significant disruptions to the service providers
   3. 3) In case of breaches of applicable laws
4. 4. Olive Young restricts membership and its service for children under 16 years of age.
5. 5. Registered user can raise a complaint to the EU supervisory authority about the processing personal information of Olive Young.

Article 7 (Personal Information Manager and Team)

To protect your personal information and deal with any relevant issues, Olive Young has designated an officer in order to protect your personal information. Feel free to contact us with any inquiries regarding personal information. The officer will immediately and sincerely reply to your inquiries. For inquiries other than personal information, please contact oycs.global@cj.net

Viewing and Correcting Personal Information

Position	Name	E-mail Address
CPO	Park JuneSung	dpo.oliveyoung@cj.net
DPO
Representative	Lee sangHoon	privacy.eu@cj.net

Article 8 (Matters on the operation of automatic collection devices and opt-out thereof)

1. 1. Automatic Cookie collection
   Olive Young uses collected ‘cookies’ to provide a more personalized experience on the website.
   Cookies are small text files sent to your browser by the web server you visit and stored in the hard disk of your device (such as your desktop, smartphone, tablet PC, etc.) when you use services on Olive Young’s website or mobile app. Cookies identify the device you are using but not you as an individual. Cookies expire when you close the browser or sign out.
2.    The data collected by cookies can be used for the following purposes:
   1. 1) To analyze the frequency and time of your visits, figure out your interests and patterns of use, and target your visits and events you participate in
   2. 2) To track your most viewed items and provide services tailored to your interests for a more personalized experience on the website
   3. 3) To analyze customer behavior for service improvement initiatives
3.    You have a right to accept or disable cookies. You can accept all cookies, choose to be notified every time a cookie is issued, or disable all cookies.
4.    However, you may not be able to use and receive certain services when you disable cookies.
   1. 1) How to accept or disable cookies (Internet Explorer)
      1. Go to ‘Tools’ and select ‘Internet Options’ > Select the ‘Privacy’ tab > Click ‘Advanced’ > Control cookies
   2. 2) How to view installed cookies (Internet Explorer)
      1. Go to ‘Tools’ and select ‘Internet Options’ > Select the ‘General’ tab and click ‘Settings’ under ‘Browsing History’ > Click ‘View Files’
5. 2. Weblogs analytics using Google Analytics
   CJ Olive Young Corporation uses Google Analytics, a weblog analysis tool provided by Google, Inc. (“Google”). Weblog analysis refers to the analysis of the customer’s use of website services. Google processes the information on behalf of CJ Olive Young Corporation and analyzes your website usage. CJ Olive Young Corporation does not process any personally identifiable information in this process. If you do not want Google to process your data, you can opt out of this by downloading and installing add-ons for your web browser at tools.google.com/dlpage/gaoptout.
6.     [How to opt out]
7.     - For Chrome: Click [Download Browser Add-on to block Google Analytics] > Click [Add to Chrome] > When pop-up window is displayed, click [Add Extension] > Click Done.
8.     - For IE (Internet Explorer): Click [Download Browser Add-on to block Google Analytics] > Click [Agree and Install] > Click [Run] or [Save] on the window displayed at the bottom >
9.      Click [Restart Later] or [Restart Now], as the changed setting will only be applied after restarting the browser > Upon clicking [Restart Now], the pop-up on how to use the add-on will appear. Then, click [Use] > Done.
10.      For more information on Google Analytics’ processing of information, please visit support.google.com/analytics/answer/6004245
11. 3. Collection of advertising identifiers (ADIDs/IDFAs) when using mobile apps
    CJ Olive Young Corporation may collect ADIDs/IDFAs. ADID/IDFAs are the advertisement identification values of any mobile app user that may be collected and measured to provide better personalized services or advertisements for users. [How to opt out] - For iOS: Go to Settings > Privacy > Advertising > Restrict Ads tracking - For Android: Go to Settings > Google (Google Settings) > Ads > Opt out Ads Customization

Article 9 (Measures to Protect Personal Information)

Olive Young establishes the following technical/organizational measures to ensure the security of your personal information and prevent the loss, leakage, theft, and damage of your personal information due to cyberattack.

1. 1. Technical Measures
   1. - Your personal information is protected by your password. Important personal data and your password are encrypted before storage.
   2. - To prevent any damage from computer viruses and intrusion of personal information, vaccine programs are employed and updated on a regular basis.
   3. - Encryption algorithms are used to safely transfer your personal data over networks.
   4. - To prevent the leakage of your personal information due to cyberattack and to detect illegal intrusion, vulnerability assessments are conducted on a regular basis and intrusion detection systems are installed.
2. 2. Organizational Measures
   1. - The number of individuals who deal with personal information is limited to a minimum extent and periodic trainings are provided to the relevant employees.
   2. - The authority to access personal data is provided in accordance to the procedures of the personal information processing system and is periodically examined and withdrawn if needed.
   3. - Internal procedures are established to conduct inspections on compliance with the Privacy Policy.
   4. - Olive Young manages and supervises the entrusted companies that process your personal data.

Article 10 (Report and Consultation of Intrusion of Personal Information)

You may be assisted by the following organizations in case you need to consult or report any violation of use of personal information.

Viewing and Correcting Personal Information

KISA	Personal Information Dispute Mediation Committee	Cyber Crime Investigation, Supreme Prosecutors’ Office	National Police Agency Cyber Bureau
(+82) 118 privacy.kisa.or.kr	1833-6972 www.kopico.go.kr	(+82) 1301 www.spo.go.kr	(+82) 182 ecrm.cyber.go.kr

Article 11 (Notice and Changes to the Privacy Policy)

The privacy policy stated above may be revised in compliance with government policies, applicable laws, and due to the security system update., and we will put out a notification online of all changes such as the addition, removal, or amendment of privacy policy with the reasons

(Privacy Policy v.2.7 Published on Oct 5th, 2022)
Implementation Privacy Policy: Oct 5th, 2022