CIT (referred to as the "Company") values your personal information and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection. If the Company revises its privacy policy, it will notify you through a pop-up notice on the website.

ο This policy will be effective in 2023.

Collected personal information

The Company collects the following personal information through online inquiries to collect and utilize information from users.

• ο Collected articles: subject, email, content, attachments, access logs
• ο Method of collecting personal information: Online inquiry

Purpose of collecting and utilizing personal information

The Company utilizes the collected personal information for the following purposes.

• ο For the purpose of utilizing the user's information, such as online inquiries and service measures.

Retention and use period of personal information

In principle, the Company destroys the information without delay after the purpose of collecting and using personal information is achieved. However, the following information shall be retained for the period specified below.

A. Reasons for retaining information based on internal company policy

- Records of unauthorized use

Reason for retention: Prevention of unauthorized use

Retention period: 1 year

B. Reasons for retention of information under relevant laws and regulations

If it is necessary to preserve the information in accordance with the provisions of the relevant laws, such as the Commercial Act, the Act on Consumer Protection in Electronic Commerce, etc. In this case, the Company shall only use the information for the purpose of storage and the retention period is as follows.

- Records of contract or subscription withdrawal, etc

Reason for retention: Act on Consumer Protection in Electronic Commerce, etc.

Retention period: 5 years

- Records on payment and supply of goods, etc

Reason for retention: Act on Consumer Protection in Electronic Commerce, etc.

Retention period: 5 years

- Records on electronic financial transactions

Reason for retention: Electronic Financial Transactions Act

Retention period: 5 years

- Records on consumer complaints or dispute handling

Reason for retention: Act on Consumer Protection in Electronic Commerce, etc.

Retention period: 3 years

Procedures and methods for destroying personal information:

In principle, the Company destroys personal information without delay after the purpose of collecting and using it has been fulfilled. The procedure and method of destruction are as follows

• ο Destruction procedure

  The information entered by the member for membership registration, etc. is transferred to a separate DB (separate filing cabinet for paper) after the purpose is achieved, and is stored for a certain period of time (see Retention and Use Period) in accordance with the internal policy and other relevant laws and regulations, and then destroyed.
  Personal information transferred to a separate DB will not be used for any purpose other than that for which it is retained, unless otherwise required by law.

• ο Destruction method

  - Personal information stored in the form of electronic files will be deleted using technical methods that make it impossible to reproduce the records.

  - Personal information printed on paper is destroyed by shredding or incineration.

Provision of Personal Information

In principle, the Company does not provide your personal information to outside parties, except in the following cases.

• - When necessary for product delivery or installation and after-sales service (name, mobile phone number, address of installation area)
• - When users have agreed in advance
• - When necessary for product delivery, installation, and after-sales service (name, mobile phone number, state of installation area)

Consignment of collected personal information

The Company does not entrust your information to any outside company other than the delivery, installation, and after-sales service contracted with the Company without your consent. If such a need arises in the future, the Company will notify you of the entrusted person and the contents of the entrusted business and obtain your prior consent if necessary.

Rights of users and legal representatives and how to exercise them

Users and their legal representatives may view or modify their personal information or that of their children under the age of 14 at any time, and may request to cancel their membership.
To view or modify personal information of users or children under the age of 14, click "Change Personal Information" (or "Modify Member Information"), and to cancel membership (withdraw consent), click "Cancel Membership" after going through the identity verification process.
Alternatively, you can contact the person in charge of personal information management in writing, by phone, or by e-mail, and we will take action without delay.
If you request correction of errors in your personal information, we will not use or provide such personal information until the correction is completed.

In addition, if we have already provided incorrect personal information to a third party, we will notify the third party of the result of the correction process without delay so that the correction can be made.
The Company handles personal information that has been terminated or deleted at the request of the user or legal representative as specified in the "Retention and Use Period of Personal Information Collected by the Company" and does not allow the personal information to be viewed or used for any other purpose.

Installation, Operation, and Rejection of Automatic Collection of Personal Information

The Company operates "cookies" that store and retrieve your information from time to time. A cookie is a very small text file sent to your browser by the server used to operate the Company's website and stored on your computer's hard disk. The Company uses cookies for the following purposes.

• ▶ Purpose of using cookies, etc

  To provide targeted marketing and personalized services by analyzing the access frequency and visiting time of members and non-members, identifying users' tastes and interests and tracking their traces, and identifying the degree of participation in various events and the number of visits. You have a choice about the installation of cookies. Therefore, you can accept all cookies, confirm each time a cookie is stored, or refuse to store all cookies by setting the options in your web browser.

• ▶ How to refuse cookie settings

  Example: You can choose to accept all cookies, confirm each time a cookie is saved, or refuse to save all cookies by selecting the options in your web browser.
  Example settings (for Internet Explorer): Tools > Internet Options > Privacy at the top of your web browser.
  However, if you refuse to install cookies, we may have difficulty providing the Service.

Personal Information Complaint Service

In order to protect your personal information and handle complaints related to personal information, the Company has designated the following departments and personal information managers.

Personal Information Manager

Name: Kim, Yong Chan

E-mail : andrew@citcosmetic.co.kr

Telephone number : +82 70-4915-3102

You may report any complaints related to personal information protection arising from the use of the Company's services to the person in charge of personal information management or the department in charge. The Company will provide a prompt and sufficient response to the user's report.

If you need to report or consult about other personal information infringement, please contact the following organizations.

• 1.Personal Dispute Mediation Committee (www.1336.or.kr/1336)
• 2.Information Protection Mark Certification Committee (www.eprivacy.or.kr/02-580-0533~4)
• 3.Supreme Prosecutors' Office Internet Crime Investigation Center (http://icic.sppo.go.kr/02-3480-3600)
• 4.National Police Agency Cyber Terrorism Response Center (www.ctrc.go.kr/02-392-0330)