Privacy Policy

1. Personal information collected and retention periods

A. When using the Customer Center 1:1 Inquiry

• 1) Required items — name, email address, phone number, address, gender, age
• 2) Optional items — address, and any information other than the required items that the user enters directly
• 3) Retention period — retained for 3–5 years under the relevant laws for handling consumer complaints and similar matters, then destroyed
  • Records on contracts or withdrawal of offers (order cancellations): 5 years
  • Records on payment and supply of goods: 5 years
  • Records on consumer complaints or dispute resolution: 3 years
  • Information such as access IP addresses and access logs may be generated and collected in the course of using the service or processing requests.

2. Purposes of collection and use of personal information

• A. Receiving and responding to customer feedback via 1:1 Inquiry, and conducting service satisfaction surveys
• B. Receiving and responding to reports of misconduct and suggestions, and fair trade consultations

3. Methods of collecting personal information

The Univera website collects personal information by the following methods.

• 1) Use of the website
• 2) Provision by affiliated partners
• 3) Collection of generated information through log analysis programs
• 4) Collection of information through cookies
• 5) Collection of information through applications

4. Outsourcing of personal information processing

To process personal information smoothly, the Univera website outsources personal information processing tasks as follows.

5. Procedures and methods for destroying personal information

In principle, the Company destroys personal information without delay once the purpose of processing it has been achieved. However, this does not apply where the information must be preserved under other laws. The procedures, deadlines and methods of destruction are as follows.

A. Destruction procedures

• 1) Information that users enter for membership registration or other purposes is transferred to a separate database after the purpose has been achieved (or to a separate filing cabinet in the case of paper documents), stored for a certain period in accordance with internal policies and information protection grounds under other relevant laws (see retention and use periods), and then destroyed. Personal information registered in the computer system may not be printed out by anyone other than the Chief Privacy Officer, privacy staff, or persons authorized by them.
• 2) Such personal information is not used for any other purpose except as required by law.

B. Destruction deadlines

Where the retention period of personal information has expired, users' personal information is destroyed within 5 days of the end of the retention period. Where personal information becomes unnecessary, such as when the purpose of processing has been achieved, it is destroyed within 5 days of the date on which its processing is deemed unnecessary.

C. Destruction methods

• 1) Personal information printed on paper is destroyed by shredding or incineration.
• 2) Personal information stored as electronic files is deleted using a method that makes the records irrecoverable.

6. Children's personal information (protection of personal information of children under the age of 14)

To give special protection to children's personal information, the Company collects personal information of children under the age of 14 only with the consent of their legal representative (parent).

7. Rights and obligations of users and legal representatives, and how to exercise them

As data subjects, users of the Univera website may exercise the following rights.

• 1) Request to view, correct or delete their own personal information
• 2) Request to correct or delete errors in personal information
• 3) Where a user requests termination or deletion, the Company handles the personal information concerned in accordance with [5. Procedures and methods for destroying personal information].
• 4) A request for access to, correction, deletion or suspension of processing of personal information may be refused where it is unavoidable in order to comply with obligations under other laws; where it is likely to harm the life or body of another person or to unfairly infringe on another person's property or other interests; or where performing a contract would be difficult, such as when the service agreed upon with the data subject cannot be provided without processing the personal information.

8. Installation, operation and refusal of devices that automatically collect personal information

A.To provide better services, the Univera website uses cookies, which store usage information and retrieve it from time to time.

B.A cookie is a small amount of information that the server (http) used to operate a website sends to the user's browser, and it may be stored on the hard disk of the user's computer.

• 1) Purpose of cookies — Cookies are used to identify users' visits to and patterns of use of each service and website, popular search terms, whether a secure connection is used and so on, so that the Univera website can provide users with optimized information.
• 2) Installation, operation and refusal of cookies — Users can refuse to store cookies through the option settings under Tools > Internet Options > Privacy at the top of the web browser.

C.If users refuse to store cookies, they may have difficulty using the Univera website.

D.To improve the user experience and help visitors find the information they need more easily, the Univera website collects and uses the website usage records (behavioral information) of visitors who are not logged in, as described below. This information alone cannot identify a specific individual, and it is not combined with other personal information such as names or contact details.

• 1) Items collected — pages visited and time of visit, time spent on each page and how far the page was scrolled, referral source (search engines, links, etc.), device type, operating system, browser, screen size and language, access location (at country, province and city level; IP addresses are not stored), and a random visitor identifier stored in the browser
• 2) Collection method — collected automatically through browser storage and cookies when the website is viewed
• 3) Purposes of use — analysis of visit statistics, improving the website's ease of use, and content planning
• 4) Retention period — records collected directly by the Company are retained for 1 year from the date of collection and then destroyed automatically. Information collected by the analytics tools below is subject to each tool's data retention settings (up to 14 months).
• 5) Analytics tools used — Google Analytics (Google LLC; analysis of visit statistics) and Microsoft Clarity (Microsoft Corporation; analysis of on-screen behavior such as clicks and scrolling — text entered by users is masked so that it is not collected). Information collected by these tools may be stored on the servers of the respective companies (outside Korea, including the United States).
• 6) How to refuse — If you press the button below, none of the above collection will take place in this browser. No information is collected either if your browser's tracking refusal setting (Do Not Track or Global Privacy Control) is turned on, and you can also delete or block cookies and site data in your browser settings. You can also opt out of Google Analytics with its opt-out browser add-on. Refusing does not restrict your use of the website.

Turn off visitor analytics in this browser

9. Technical and administrative safeguards for personal information

A. The Univera website has the following technical safeguards in place.

• 1) In handling users' personal information, the Univera website takes technical measures to ensure its security so that it is not lost, stolen, leaked, altered or damaged.
• 2) Customers' personal information is managed on an internal network that cannot be accessed or intruded upon from external networks, and important data is thoroughly protected by separate security functions, such as encryption of files and transmitted data or the use of file locks.
• 3) To guard against hacking and other external intrusions, the Company uses firewalls and an intrusion detection system on each server to ensure the security of its internal network, and has installed an access control system to strengthen security.
• 4) The Company has installed antivirus programs on its personal information processing systems and on the information devices that personal information handlers use to process personal information, so that they can be constantly checked and treated for infiltration by malicious programs such as computer viruses and spyware, thereby preventing infringement of personal information.

B. The Company has the following administrative safeguards in place.

• 1) The Company limits access rights to users' personal information to the minimum number of personnel and, to ensure the security of personal information, has established internal procedures necessary for accessing and managing personal information, which its employees are required to understand and follow.
• 2) Handovers of duties by personnel handling personal information are carried out thoroughly while maintaining security, and responsibility for personal information incidents after joining and leaving the Company is clearly defined.
• 3) Users are required to keep their information accurate by checking and managing the personal information they have provided to the Company. A user who uses another person's personal information without authorization or infringes on another person's rights while using this website may be subject not only to sanctions by the Company but also to civil and criminal liability.
• 4) The Company accepts no responsibility whatsoever for problems on the Univera website arising from leakage of personal information due to users' own carelessness or problems on the internet. Each user must therefore manage their own personal information appropriately to protect it and is responsible for doing so.
• 5) If users' personal information is lost, leaked, altered or damaged due to a mistake by the Company's internal administrators or a technical management incident, the Company will immediately notify the users of the facts and seek appropriate measures and compensation.

10. Contact details of the Chief Privacy Officer and privacy staff

A.To protect personal information and handle complaints related to personal information, the Company has designated a Chief Privacy Officer as follows. (Chief Privacy Officer under Article 31(1) of the Personal Information Protection Act)

B.Users of the Univera website may contact the Company regarding any inquiries, complaints, requests for damage relief and other matters related to personal information protection that arise while using the website's services. (Inquiries: 080-022-7575) Univera will respond to and handle inquiries without delay.

11. Duty of notification

This Privacy Policy may be amended due to changes in laws and regulations, policies, the Company's internal operating policies or security technology. In such cases, the reasons for and details of the changes will be announced in the Notices section of the Univera website at least 7 days before the amended Privacy Policy takes effect (or 30 days before, if the changes are unfavorable to users).

12. Remedies for infringement of rights

To obtain remedies for infringement of personal information, users of the Univera website may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency (KISA), and other bodies. For other reports of or consultations on personal information infringement, please contact the organizations below.

• 1) Personal Information Dispute Mediation Committee, Korea Information Security Agency (privacy.kisa.or.kr)
• 2) Information Security Mark Certification Committee (www.eprivacy.or.kr)
• 3) Internet Crime Investigation Center, Supreme Prosecutors' Office (www.spo.go.kr)
• 4) Cyber Terror Response Center, Korean National Police Agency (cyberbureau.police.go.kr)