Privacy Policy

Article 1 (Purposes of Processing Personal Information)

The Company processes personal information for the following purposes. Personal information being processed will not be used for purposes other than those stated below. If a purpose changes, the Company will take necessary measures, such as obtaining separate consent.

1. Service provision: vehicle inspection and gate-in management, vehicle photography and recordkeeping, vehicle shipment management, and inventory status inquiries
2. Account management: identity verification for service use and identification and authentication of personnel

Article 2 (Categories of Personal Information Collected)

The Company collects the following personal information to provide its services.

1. Required information: login information (email address, name, and password)
2. Information collected automatically while using the service:
   • Location information: GPS coordinates for recording vehicle inspection locations
   • Photographs: vehicle images and inspection-related images, including Shipping Marks and Black Labels
   • Device information: device identifier and operating system version

Article 3 (Processing and Retention Period)

The Company processes and retains personal information within the retention and use periods prescribed by applicable laws or agreed to when the information was collected from the data subject.

1. Service usage records: five years under the Act on the Consumer Protection in Electronic Commerce, Etc.
2. Vehicle inspection records and photographs: five years under the Commercial Act, Customs Act, and other applicable laws
3. Login records: three months under the Protection of Communications Secrets Act

Article 4 (Provision of Personal Information to Third Parties)

The Company processes personal information only within the scope specified in Article 1. The Company provides personal information to third parties only when permitted under Article 17 of the Personal Information Protection Act, such as with the data subject's consent or where specifically authorized by law.

Article 5 (Entrustment of Personal Information Processing)

The Company entrusts the following personal information processing work to facilitate its operations.

1. Cloud service provider: data storage and server operations; storage location: Singapore

Article 6 (Overseas Transfer of Personal Information)

The Company transfers personal information overseas in order to provide its services.

1. Destination country: Singapore
2. Timing and method: transmitted over a network when the service is used
3. Categories transferred: all personal information listed in Article 2
4. Purpose: data storage and processing for service provision
5. Retention and use period: as specified in Article 3

Article 7 (Rights and Obligations of Data Subjects and How to Exercise Them)

Data subjects may exercise the following rights regarding personal information at any time.

1. Request access to personal information
2. Request correction of inaccurate information
3. Request deletion
4. Request suspension of processing

These rights may be exercised in writing or by email. The Company will respond without undue delay.

Article 8 (Destruction of Personal Information)

The Company destroys personal information without undue delay when it is no longer necessary, including when the retention period expires or the processing purpose has been fulfilled.

1. Procedure: unnecessary personal information is destroyed with the approval of the Chief Privacy Officer
2. Method: electronic files are permanently deleted using methods that prevent recovery, and paper documents are shredded or incinerated

Article 9 (Measures to Safeguard Personal Information)

The Company takes the following measures to protect personal information.

1. Administrative measures: establishing and implementing internal management plans and providing regular employee training
2. Technical measures: managing access rights to personal information processing systems, installing access control systems, encrypting unique identification information, and installing security software
3. Physical measures: controlling access to computer rooms, data storage rooms, and similar facilities

Article 10 (Chief Privacy Officer)

The Company has appointed the following Chief Privacy Officer to oversee personal information processing and to handle complaints and remedies relating to personal information.

Article 11 (Changes to This Privacy Policy)

This Privacy Policy applies from its effective date. Any additions, deletions, or corrections resulting from changes in laws or Company policy will be announced at least seven days before the changes take effect.

Article 12 (Remedies for Infringement of Rights)

Data subjects may contact the following organizations for consultation or remedies concerning personal information infringement.

• Personal Information Infringement Report Center: 118 / privacy.kisa.or.kr
• Personal Information Dispute Mediation Committee: 1833-6972 / www.kopico.go.kr
• Supreme Prosecutors' Office Cyber Investigation Department: 1301 / www.spo.go.kr
• Korean National Police Agency Cyber Bureau: 182 / cyberbureau.police.go.kr