COA (hereinafter referred to as the ‘Company’) values customers’ personal information and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection. Through this privacy policy, the Company wishes to inform you regarding the purpose and method for which the personal information you provided is being used and what measures are being taken to protect your personal information.

If the Company revises its privacy policy, we will notify you through website notices (or individual notices).

This policy shall be effective from June 17, 2024.

1. Items of Personal Information Collected

The Company collects the following personal information for registration of membership, consultation, service application, etc.

• Items collected : Name, ID, password, contact information, home address, email address, service use record, access log, access IP information, and status SMS reception
• Method of collecting personal information : Website (Information entered for membership subscription)

2. Purposes of the Collection and Use of Personal Information

The Company uses the collected personal information for the following purposes.

• Member management : Verification of identity for the use of membership services, personal identification, prevention of unauthorized use and fraudulent use by delinquent members, confirmation of intent to sign up for membership, management of member complaints such as complaint handling, and delivery of notices
• Used for marketing and advertising : Delivering advertising information such as event notifications, identifying the frequency of access, or statistics on members’ service use
  Information provided by members will not be used for purposes other than those described above, and if the scope, purpose, or use of the collected information changes, necessary measures will be taken, such as obtaining separate consent.

3. Retention and Use Period of Personal Information

In principle, after the purposes of collecting and using personal information have been achieved, personal information is destroyed without any delay. However, if retention is necessary in accordance with the provisions of relevant laws and regulations, the Company will retain member information for a certain period of time specified in the relevant laws and regulations as follows.

Basis of Items Required to be Retained and Payment Records

• - Retention period for records related to contracts or withdrawal of subscription: 3 years
• - Records on contracts or withdrawal of subscription, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
• - Records of payment and supply of goods, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
• - Records of consumer complaints or dispute settlement: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)

4. Procedures and Methods for the Destruction of Personal Information

In principle, the Company destroys personal information without any delay after the purposes of the collection and use of personal information have been achieved. Destruction procedures and methods are as follows.

Destruction Procedures
The information you entered for membership subscription, etc. is transferred to a separate DB (in the case of paper, a separate filing cabinet) after the purposes are achieved. It is stored for a certain period (refer to the retention and use period) according to the reasons for information protection according to internal policies and relevant laws and regulations, and is destroyed after the expiry of the said period.
Personal information transferred to a separate DB will not be used for any purposes other than those for which it is retained, unless required by laws or regulations.

Method of Destruction
Personal information stored in electronic file format is destroyed using technical methods that render the records unrecoverable.

5. Provision of Personal Information

In principle, the Company does not provide users' personal information to outside parties. However, exceptions are made in the following cases:
1) If users provide consent in advance, in accordance with the provisions of laws or regulations; and
2) If there is a request from an investigation agency in accordance with the procedures and methods set forth in the law for the purpose of investigation.

6. Consignment of Personal Information Processing

The Company consigns the following work to an external professional company.

• - Consignee: 3ANYINC Co., Ltd.
• - Details of consigned work: Website and system management (hosting / maintenance)

7. Rights of Users and Legal Representatives and Methods of Exercising the Rights

All users and their legal representatives can view or modify the registered personal information of themselves or the relevant children under the age of 14 at any time, and may also request the withdrawal of membership.

To view/edit personal information of users or children under the age of 14, click “Change Personal Information” (or “Modify Member Information’, etc.”). To withdraw membership (or withdraw consent), click “Withdraw Membership” and complete the identity verification process. After going through the verification process, you can directly view, edit, or withdraw your membership. Alternatively, you can contact the Privacy Officer in writing, by phone or email, and we will take action without any delay.

If you make a request for correction of an error in your personal information, the personal information will not be used or provided until the correction is completed. Additionally, if incorrect personal information has already been provided to a third party, we will notify the third party of the correction without any delay so that the correction can be reflected.

For the personal information that has been canceled or deleted at the request of the user or their legal representative, the Company processes the information as specified in the “Retention and Use Period of Personal Information Collected by the Company” so that it cannot be viewed or used for any other purpose.

8. Matters Concerning the Installation, Operation, and Prohibition of Automatic Personal Information Collection Devices

The Company operates ‘cookies’ that store and retrieve your information from time to time. A cookie is a very small text file that the server used to run the website sends to your browser, and is stored on your computer's hard disk.

The Company uses cookies for the following purposes:

Purpose of Using Cookies
The Company uses cookies for targeted marketing and to provide personalized services by analyzing the access frequency and visit time of members and non-members, identifying the users’ tastes and areas of interest, tracking users’ traces, and identifying the users’ degree of participation in various events and number of visits.
You have the option to install cookies.
Therefore, by setting options in your web browser, you can allow all cookies, confirm each time a cookie is saved, or refuse to save cookies in their entirety.

How to Refuse the Setting of Cookies
You can allow all cookies by selecting the options of the web browser you use, confirm each time you save a cookie, or refuse to save cookies in their entirety.

Setting Method
- Example of setting method (for Internet Explorer): “Tools” at the top of the web browser > Internet Options > Personal Information
However, if you refuse to install cookies, there may be difficulties in providing our services to you.

9. Matters in Relation to the Handling of Complaints regarding Personal Information

In order to protect customers' personal information and handle complaints related to personal information, the Company designates the relevant department and Privacy Officer as follows.

If you need to report or consult about infringements of personal information, you can contact the organizations below.

• - Personal Information Infringement Reporting Center (www.privacy.kisa.or.kr / 118 without area code)
• - Supreme Prosecutors' Office Cyber Crime Investigation Department (www.spo.go.kr / 1301 without area code)
• - National Police Agency Cyber Security Bureau (cyberbureau.police.go.kr / 182 without area code)