Giantdrone Co., Ltd (“Company”) highly awares of the importance of your personal information and complies with the ‘Act on the Promotion of Information and Communications Network Utilization and Information Protection.’ Through the privacy policy, the company informs you of the purpose and method of using the personal information that you have provided to us, and what measures are being taken to protect your valuable personal information.

■ Types of information to be collected / Method of collection

A. Types of personal information to be collected

o The company collects the following personal information for sign-up, consultation, and service application purposes.

- Sign-up : Name, Date of Birth, Gender, Login ID, PW, Home phone number, Mobile phone number, E-mail, Information of legal representative for members under 14 years of age.

- Service Application : Address, Payment information

o Service use records, Access logs, Cookies, Access IP, Payment records, and records of illegal/fraudulent use can be generated and collected during the service use or business processing procedures.

B. Method of Collection

-Collecting information through the Home page, Written form, Bulletin board, E-mail, Event application, Delivery request, Telephone, Fax, tools for accumulating created information

■ The Purpose of Collection and use of Personal Information

The company will use the collected personal information for the following purposes:

o Provision of Service related to the Performance of Contract & Payment based on the Performance of Contract

Provision of content, Purchase and payment, Delivery of goods or sending invoices, Authentication for a financial transaction, Financial services

o Member Management

User authentication for using exclusive services for members, Personal identification, Prevention of unauthorized use and illegal/fraudulent use from non-conforming users, Confirming sign-up, Checking age, Verifying consent of legal representatives when collecting personal information of children under the age of 14, Handling grievances and complaints, Delivering notices

o Utilized for marketing and advertising

Delivering advertising information such as events. Identifying the frequency of logins or statistics on the member’s use of service

■ Retention and Utilization Period of Personal Information

By principles, personal information will be demolished immediately after its purpose is to achieve. However, the following information will be retained for the specified period due to the following reasons:

A. Reasons for Information Retention according to Internal Policies of the Company

Although the member has canceled his/her membership, the member’s information can be retained for oo years from the date of cancellation of the service contract for preventing fraudulent use of unauthorized users, resolving disputes, and cooperating with requests from investigation agencies.

B. Reasons for Information Retention according to the Related Laws

It is necessary to preserve the data according to The Act on Consumer Protection in Electronic Commerce, etc., the company shall keep the personal information of the user for a certain period as specified in the related statutes as follows.

o Records of Contract or Subscription Withdrawal, etc.

- Retention Cause : The Act on Consumer Protection in Electronic Commerce

- Retention Period : 5 Years

o Records of Payment and Supply of Goods

- Retention Cause: The Act on Consumer Protection in Electronic Commerce

- Retention Period : 5 Years

o Records of Consumer Complaints and Dispute Treatment

- Retention Cause : The Act on Consumer Protection in Electronic Commerce

- Retention Period : 3 Years

o Log Records

- Retention Cause: The Protection of Communications Secrets Act

- Retention Period : 3 Months

■ Procedure and Method of Destruction of Personal Information

By principles, the company demolishes the personal information immediately after its purpose is to achieve. The destruction procedures and methods are following by:

O Destruction Procedures

The information you have entered for membership registration will be transferred to a separate DB (a separate document box for paper registrations) after the purpose of the information has been achieved. The information will be stored for a certain amount of time based on internal policies and related laws for information protection purposes (see Retention and Utilization Period of Personal Information), and then will be destroyed after the specified period had passed.

Personal information transferred to the separate DB will not use for any other purposes other than the cases specified in the law.

o Destruction Method

Personal information stored in an electronic file format will be deleted through utilizing a technical method in which the records will no longer restore.

■ Provision of Personal Information

The company must not provide the user’s personal information to external third parties under the principles. However, exceptions are specified below:

o When the users have agreed in advance

o If investigation agencies require personal information by law or examination, or undertaking legislation rules require personal information

■ Consignment of Personal Information Processing

For proceeding services, the company consigns task-specialized external subcontractors to process personal information as follows.

o Consignee : [Parcel Company Name]

o Description of consigned task : [Parcel Company Consigned Task Description]

o Consignee : [PG Company Name]

o Description of consigned task : [PG Company consigned Task Description]

■ The Rights of Users and their Legal Representatives & How to Exercise such Rights

o The user can view or modify his/her personal information registered at any time and can request a cancellation of his/her membership.

o To check or modify his/her personal information, the user can click “change personal information (or “modify membership information). To cancel his/her registration or membership (withdraw consent), the user can click ‘delete the account,’ go through an identification process, and correct or withdraw their registration.

o Or you can contact our privacy officer by writing, phone, or e-mail and we will take immediate action.

O If you request a correction of your personal information errors, the information will not be used or provided until the correction completed. In addition, if the wrong personal information diffuses to a third party, we will notify the party to correct the information immediately.

O The company processes personal information that has been revoked or deleted at the request of the users with the content specified in the “Retention and Utilization Period of Personal Information,” and prevents access or use for other purposes.

■ Installation, operation, and the refusal of the automatic personal information

The company uses “cookies” to store and recover your information. “Cookies” are very small text files to send the browser of the users through the server that uses for the website work. The cookies will be stored in the hard-disks of the users’ computer.

The company utilizes cookies for the following purposes:

o Purpose of Cookies

1. To provide target marketing and personalized services for users by analyzing the login frequencies of members/non-members, identifying user tastes and fields of interests, tracking the level of participation in various events, etc.

2. The user has a choice to install the cookies. Therefore, by setting options in your web browser, you may allow all cookies, check each time a cookie is saved, or completely deny to store cookies in your hard-disk.

o How to Refuse Cookie Installation

1. To reject cookie installation, you can select the option in your web browser to allow all cookies, check every time you save them, or refuse to store cookies in your hard-disk.

2. How to set option (If you are using IE): Click the [Tools] tab at the top of your web browser > Internet Options > Privacy

3. However, if you refuse to install cookies, there may be difficulties while being provided with our services.

■ Complaints on Personal Information related Issues:

To protect the personal information of our customers and to deal with complaints regarding personal information, the company designated a specialized department and a privacy officer as follows:

o Privacy Officer

   Name : Lee Yong-woo

   Company : Giantdrone Co., Ltd

   Phone Number : 02.496.8678

   E-mail : master@giantdrone.com

o Privacy Officer

   Name : Lee Yong-woo

   Company : Giantdrone Co., Ltd

   Phone Number : 02.496.8678

   E-mail : master@giantdrone.com

O You can report all personal information protection related complaints, which occur while using the services of the company, to the privacy officer or the department in charge.

o The company will quickly and kindly provide you with appropriate answers regarding your complaints.

o If you need to report or consult any other private information-related concerns or issues, please contact the following agencies:

Korea Internet & Security Agency (privacy.kisa.or.kr / 118)

Supreme Prosecutors’ Office Cybercrime Investigation Division (www.spo.go.kr / 02-3480-2000)

National Police Agency Cyber Bureau (www.ctrc.go.kr/ 182)