Privacy

Article 1 General Provisions

Visitors (hereinafter referred to as "company") have established the following personal information processing policies
to protect the personal information of service users (hereinafter referred to as "users") in accordance with relevant
laws and administrative guidelines.
Personal information processing policies are disclosed through the service's initial screen so that users can easily
access them at all times, and may vary depending on changes in laws, guidelines, notices, or policies related to
personal information protection.

Article 2 Consent to Collection of Personal Information

Since the company's service can be used only when the user agrees to the personal information processing policy or terms
and conditions of use of this service, the person who uses the service is deemed to have agreed to collect personal
information.

Article 3 Purpose of Collection and Utilization of Personal Information

This service collects personal information for the following purposes:

1. Establishment of a contract to provide services: Identification of the person and confirmation of the person's
intention, etc.
2. Service implementation: Content provision and payment
3. Member management: handling complaints such as identification, personal identification, handling of complaints, etc.
according to the use of the service.
4. Provide advertising services: Provide advertising appropriate for users
5.Event Management: Notice of the event/prize winning result, delivery of the product, and guidance of the company.
6. Developing other new services and verifying the effectiveness of the services

Article 4 Items of personal information to be collected and methods of collection

This service collects the following personal information for membership registration and service use.

item segmentation

collection item

collection method

general membership

Required: Email (ID), Name, Gender, Date of Birth, Mobile Number, Kakao Identification Information

cash zone membership

Mobile phone identification.

business member

Required: Email (ID), Name, Gender, Date of Birth, Mobile Number, Kakao Identification Information

Business information: Business name, representative name, business registration number, business location, business
type, e-mail (for receiving tax invoices), phone number

cash zone add

join membership

Common

Service Payment: Payment information, name of the payer

collection at the time of service payment

access logs, access IP information, service usage records, fraudulent usage records, date and time of visit, terminal
information

automatic collection when using a service

Article 5 Matters concerning the installation, operation, and refusal of an automatic personal information collection
device

This service uses cookies to store information about users and find them from time to time. Cookies are a small amount
of information that a website sends to a user's computer browser (Chrome, Internet Explorer, etc.).
When a user accesses the website, the shopping mall's computer can read the contents of the cookies in the user's
browser, find additional information on the user's computer, and provide the service without additional input of the
user's name.
Cookies identify users' computers, but do not identify users personally. Users also have the option of cookies.
By adjusting your web browser options, you have the option of accepting all cookies, sending notifications when cookies
are installed, or rejecting all cookies.
However, if the user refuses to install cookies, it may be difficult to provide the service.

1. Purpose of using cookies, etc.: To analyze the frequency of users' access and visit time, identify and track the
user's tastes and interests, participate in various events, and provide personalized services.
2. How to reject cookie settings: As a way to reject cookie settings, you can allow all cookies, go through confirmation
every time you save cookies, or refuse to save all cookies by selecting the options in your web browser.
3. Example of how to set up: → Select tool menu for Internet Explorer > Select internet options > Click on the Privacy
tab > Set personal information handling level for Chrome → Select menu for advanced settings > Select content settings
for personal information > Cookie level settings

Article 6 Non-purpose Use and Provision to Third Parties

This service uses the user's personal information within the scope notified by the "Purpose of Collection and Use of
Personal Information" and does not use it beyond the same range or provide it to others or other companies or
institutions.
However, in order to provide better service, users' personal information can be provided to their affiliates or shared
with them.
In addition, the user's personal information is not provided to the outside in principle, but exceptions are made in the
following cases.

1. If users agree in advance
2. Where there is a request from the investigative agency in accordance with the provisions of the statutes or in
accordance with the procedures and methods prescribed in the statutes for the purpose of investigation.

Article 7 Consignment Processing of Personal Information

The company entrusts personal information as follows for smooth service support and service quality improvement, and the
company manages, supervises, and controls the entrusted company in accordance with the company's policies and related
laws to protect user information.

The contents of the company's personal information consignment processing institution and consignment work are as
follows.

consignment company

contents of consignment business

consignment information

consignment period

settle bank

- Payment processing by credit card, real-time account transfer, and other payment methods

- personal (payment) information

upon withdrawal of membership or termination of the consignment agreement

The people who let us know.

- Mobile phone text message (SMS, LMS, App Push, Kakao Notification Talk) related service

- personal information

Danal Co., Ltd.

- cell-phone identification service

- personal information

Article 8 Access and Correction of Personal Information

Users can view or correct registered users' personal information at any time.
If you want to view and correct your personal information, please contact the customer center email (help@cashzone.co.kr)
of the people you are looking for.
If the user requests correction for errors in personal information, the personal information will not be used until the
correction is completed.

Article 9 Withdrawal of consent for the collection, use and provision of personal information

Users can withdraw their consent to collect, use, and provide personal information through membership registration at
any time.
For withdrawal of consent, click "Modify Member Information" or contact the person in charge of personal information
management by e-mail, etc., and we will immediately take necessary measures such as deleting personal information.
This service will take necessary measures to ensure that membership withdrawal (withdrawal of consent) for the
collection of personal information can be exercised in the same manner and procedure as when collecting personal
information.

Article 10 Period of retention and use of personal information

If consent to the collection and use of personal information is withdrawn, the personal information will be destroyed
without delay if the purpose of collection and use is achieved or the period of use has ended.
However, the following cases shall be preserved for each of the specified reasons and periods:

1. Reasons for holding information according to the company's internal policy
1) retention and duration of personal information items
- Preservation items: Email (ID), mobile phone number, membership category
- Preservation grounds: Prevention of re-registration of defective users, prevention of duplicate receipt and fraud when
receiving rewards due to events
- Preservation period: 3 months after withdrawal from membership
2) Retention and duration of consultation services
- Preservation item: Information listed in the consultation service
- Preservation grounds: Member's consent from members
- Preservation period: Within the period of use of the license acquired by the company for the post.
2. If it is necessary to preserve in accordance with the provisions of relevant laws and regulations such as the
Commercial Act, the transaction details and minimum basic information shall be retained during the preservation period
prescribed by the law. In this case, the company will only use the information it keeps for its purposes.
1) Records of withdrawal of contracts or subscriptions: 5 years (Act on Consumer Protection in Electronic Commerce,
etc.)
2) Records of payment and supply of goods, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
3) Records of consumer complaints or disputes: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
4) Records of Display and Advertising: 6 months (Act on Consumer Protection in Electronic Commerce, etc.)
5) Records of the collection/processing and use of credit information: 3 years (Act on the Use and Protection of Credit
Information)
6) Access records, destination information, etc.: 3 months (Communication Secret Protection Act)
If it is necessary to continue holding despite the above retention period, we will obtain the user's consent.
3. If the retention period is announced in advance and the retention period has not elapsed, and if individual consent
is obtained, the retention period shall be held for the agreed period.
4. If a user does not use a "service" for a year to protect personal information, it is separated into a "dormant
account" and separately stores and manages the member's personal information.

Article 11 Procedures and Methods for Destruction of Personal Information

In principle, this service destroys personal information without delay after the purpose of collecting and using it is
achieved. The procedure and method of destruction are as follows.

1. Destruction procedure: Information entered by the user for membership registration is transferred to a separate DB
(in the case of paper) and stored for a certain period of time according to internal policies and other relevant laws.
Personal information transferred to a separate DB will not be used for any purpose other than being held unless it is
legal.
2. Destruction Method: Personal information stored in electronic file format is deleted using a technical method that
cannot be played back.

Article 12 Protection of Children's Personal Information

This service does not collect personal information for children under the age of 14.
However, if it is necessary to collect personal information of children under the age of 14, the legal representative
guarantees the legal right to process personal information of children under the age of 14.
The legal representative of a child under the age of 14 may request the access, correction, and withdrawal of the
child's personal information, and if such a request is made, the service will take necessary measures without delay.

Article 13 Technical Measures for Personal Information Protection

This service takes the following technical measures to ensure safety so that personal information is not lost, stolen,
leaked, altered or damaged in handling users' personal information:

The number of people in charge of processing personal information is minimized by controlling the access authority to
personal information.
Files and transmission data are encrypted so that personal information can be safely transmitted and stored, protected
through security functions, and personal information can be safely transmitted on the network through encrypted
communication (SSL).
In order to prevent forgery and storage of access logs to cope with personal information infringement accidents, if a
personal information handler accesses the personal information system and processes personal information, the date and
processing details are stored and stored separately.
This service uses a vaccine program to prevent computer virus damage. Vaccine programs are updated periodically, and in
the event of a sudden virus, they provide it as soon as the vaccine is released to prevent personal information from
being violated.
In order to prevent user personal information from being leaked due to hacking, we use a device that blocks intrusion
from outside.

Article 14 Consignment Processing of Personal Information

This service may entrust the user's personal information to the outside to improve the service.
In the case of entrusting the processing of personal information, we will notify the user in advance.
In the case of entrusting the processing of personal information, the service provider's personal information and
related instructions, confidentiality of personal information, prohibition of providing third parties, and liability in
the event of an accident will be clearly defined and stored in writing or electronically.

Article 15 Collecting opinions and handling complaints

This service provides a window for users to express their opinions and complaints regarding personal information
protection.
If you have any complaints about personal information, please give your opinion to the person in charge of personal
information protection, and we will take action immediately upon receipt and notify you of the results of the process.

Name of person in charge: Kim Sun-hwang
Affiliated / Position: Person in charge of personal information management
Email: help@cashzone.co.kr

If you need to report or consult about other personal information infringement, please contact the following
institution.

Personal Information Infringement Reporting Center (privacy.kisa.or.kr/ 118)
Personal Information Dispute Mediation Committee (www.kopico.or.kr/ 1833-6972)
Information Protection Mark Certification Committee (www.eprivacy.or.kr/ 02-550-9500)
Cyber Investigation Division of the Supreme Prosecutors' Office (www.spo.go.kr/ 1301)
National Police Agency Cybersecurity Bureau (cyberbureau.police.go.kr/ 182)

This policy will take effect on June 09, 2022.