Sejong Medix Co., Ltd. (the "Company") values your personal information and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection.

Through this Privacy Policy, the Company explains how the personal information you provide is used and what measures are taken to protect it.

If this Privacy Policy is amended, the Company will announce the change through a notice on the website or by individual notice.

This policy takes effect on June 30, 2026.

1. Personal Information Collected

The Company collects the following personal information for consultations and related inquiries.

Quotation and inquiry

Items collected: name, phone number, email address, message, and related details.

2. Purpose of Collection and Use

The Company uses collected personal information for the following purposes: performance of contracts related to service provision, and handling of inquiries and responses arising from those services.

3. Retention and Use Period

In principle, personal information is destroyed without delay once the purpose of collection and use has been achieved. Where retention is required by applicable law, the Company retains the information for the statutory period set out below.

Retention items and legal basis

• Records on contracts or withdrawal of offers: 3 years
• Records on contracts or withdrawal of offers: 5 years (Act on the Consumer Protection in Electronic Commerce)
• Records on payment and supply of goods: 5 years (Act on the Consumer Protection in Electronic Commerce)
• Records on consumer complaints and dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce)

4. Destruction Procedure and Method

In principle, the Company destroys personal information without delay once the purpose of collection and use has been achieved. The procedure and method are as follows.

Procedure

Information entered for membership or similar purposes is transferred to a separate database (or a separate document file, in the case of paper) after the purpose has been achieved. It is stored for a defined period in accordance with internal policy and applicable law, as described under Retention and Use Period, and is then destroyed. Personal information transferred to a separate database is not used for any purpose other than retention required by law.

Method

Personal information stored in electronic files is deleted by a technical method that prevents the records from being restored.

5. Provision of Personal Information

The Company does not provide users' personal information to third parties in principle, except where users have given prior consent, or where disclosure is required by statute, including a lawful request for investigative purposes made in accordance with the procedures and methods prescribed by law.

6. Hosting and Maintenance

To perform its services, the Company entrusts operations to the following professional service provider.

• Service provider: ThreeAny Inc.
• Entrusted work: website and system management (hosting and maintenance)

7. Rights of Users and Legal Representatives

Users may access or correct their registered personal information at any time and may request cancellation of membership. To access or correct personal information, use the personal-information or member-information update function. To withdraw consent or cancel membership, complete identity verification and then view, correct, or withdraw directly. You may also contact the privacy officer in writing, by phone, or by email, and the Company will act without delay.

If you request correction of an error, the Company will not use or provide the information until the correction is complete. If the incorrect information has already been provided to a third party, the Company will notify that party of the correction without delay.

Personal information terminated or deleted at a user's request is handled in accordance with the retention period stated in this policy and is not accessed or used for any other purpose.

For a child under the age of 14, the legal representative has the right to access or correct the child's personal information and to withdraw consent to its collection.

8. Automatic Collection Devices

The Company uses cookies, which are small text files that the server operating the website sends to your browser and stores on your computer, in order to save and retrieve information from time to time.

Cookies are used to analyze visit frequency and duration for members and non-members, to understand user interests, to measure participation in events and the number of visits, and to provide targeted marketing and personalized services. You may choose whether to accept cookies. You can allow all cookies, require confirmation each time a cookie is stored, or refuse all cookies through your browser settings.

How to refuse cookies

Select the options in the web browser you use to allow all cookies, confirm each cookie, or refuse storage of all cookies.

Example

In Internet Explorer: Tools at the top of the browser, Internet Options, Privacy. If you refuse cookies, some services may be difficult to provide.

9. Privacy Complaints

To protect customers' personal information and handle privacy-related complaints, the Company designates the following department and privacy officer.

For reports or consultation regarding other privacy infringements, you may contact the following organizations.

• Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
• Supreme Prosecutors' Office, Cyber Investigation Division (www.spo.go.kr / 1301)
• Korean National Police Agency, Cyber Investigation Bureau (police.go.kr / 182)