Onboarding Asia (hereinafter referred to as the "Company") has established the following privacy policy in accordance with the Personal Information Protection Act to protect users' personal information and rights, and to handle user complaints related to personal information smoothly. If the Company revises its privacy policy, it will notify users through website announcements (or individual notices). This policy takes effect from [date]. 1. Purpose of Collection and Use of Personal Information ① The Company processes personal information for the following purposes. The processed personal information will not be used for purposes other than the following, and if the purpose of use changes, the Company will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act. A. Customer Consultation: Personal information is processed for the purpose of contact notification and result notification for confirming and responding to inquiries related to membership. B. Information Provision: Personal information is processed for the purpose of providing information about programs hosted by the Company. ② The Company collects personal information through the following methods: - Website 2. Personal Information Items Processed ① The Company processes the following personal information items. A. Customer Consultation - Required items: Name, contact information (access IP, cookies, service usage records, access logs) - Optional items: None B. Information Provision - Required items: Name, contact information (access IP, cookies, service usage records, access logs) - Optional items: None 3. Retention and Use Period of Personal Information ① The Company processes and retains personal information within the retention and use period stipulated by law or agreed upon when collecting personal information from the data subject. ② The specific retention and use periods are as follows: A. Customer Consultation: Personal information is processed for the purpose of contact notification and result notification for confirming and responding to user inquiries. B. Information Provision: Personal information is processed for the purpose of providing information about programs hosted by the Company. C. Retention period: 5 years 4. Destruction of Personal Information ① In principle, the Company destroys personal information without delay after the retention period has elapsed once the purpose of processing has been fulfilled. The procedures, deadlines, and methods of destruction are as follows: - Destruction Procedure: Information entered by users is transferred to a separate DB (or separate documents for paper) after the purpose is achieved and stored for a certain period according to internal policies and other relevant laws before being destroyed. Personal information transferred to the DB will not be used for other purposes unless required by law. - Destruction Deadline: Users' personal information is destroyed within 5 days from the end of the retention period when the retention period has expired, or within 5 days from the date the personal information is deemed unnecessary due to achievement of the processing purpose, discontinuation of the service, or termination of the business. - Destruction Method: Information in electronic file format is destroyed using technical methods that prevent the records from being reproduced. Personal information printed on paper is destroyed by shredding or incineration. 5. Provision of Personal Information to Third Parties ① In principle, the Company processes users' personal information within the scope specified in Section 1 (Purpose of Collection and Use of Personal Information) and does not process it beyond the original scope or provide it to third parties without the user's prior consent. 6. Entrustment of Personal Information Processing ① The Company does not entrust personal information, and if it does, it will notify users through announcements at least 15 days in advance and revise the privacy policy accordingly. 7. Rights and Obligations of Data Subjects and How to Exercise Them ① Data subjects may exercise the right to request access, correction of errors, deletion, or suspension of processing of their personal information at any time. 8. Personal Information Protection Officer ▶ Personal Information Protection Officer - Department: - Name: - Contact: