Wawa Line (hereinafter referred to as “the Company”) values the privacy of its users. The company establishes and discloses the personal information processing policy as follows to protect the personal information and rights of information subjects (users) in accordance with the relevant personal information protection laws and to smoothly handle users' complaints.

If the company revises its personal information processing policy, it will notify you through a website notice (or individual notice) and post the revised personal information processing policy on the website.

Article 1 (Personal information collection items and methods)

1. The company collects and receives only the following essential information to provide services to users.

Collection items: User account (ID, encrypted password, email address), payment records required for service operation, and data volume used by the user. Access login history

2. The company does not collect information that can identify individuals other than user accounts (e-mail addresses), and does not collect information that may be a risk of human rights infringement.

Article 2 (Purpose of collection and processing of personal information)

The company collects the minimum amount of personal information to ensure smooth service provision, and it is used for the following purposes.

1) Service provision and user management: As a membership service, user identification and authentication, prevention of use by delinquent users, service complaint handling, and delivery of notices.

2) Utilization of marketing statistics: Demographic analysis for new service development, advertisements and events.

2. The company cannot use collected personal information for any purpose other than the above. However, if the purpose and use of personal information changes in the future, we will notify you.

Article 3 (Personal information retention and use period)

1. While the user uses the services provided by the company, the company continuously retains the user's personal information and uses it as basic data to provide convenient services.

2. The personal information retention period is until the user applies for termination of the service agreement (withdrawal of membership) and the company approves it. However, due to the nature of the service, user accounts are stored separately for one year after termination of the service agreement to prevent abnormal or defective use.

Article 4 (Provision and sharing of personal information)

1. In principle, personal information cannot be provided to third parties unrelated to the service without the user’s consent. However, exceptions are made in the following cases.

1) If you are requested to provide information from an investigative agency or other government agency through a legal procedure in accordance with the law.

2) Other cases required by law.

Article 5 (Personal information protection measures)

The company is doing its best to prevent users' personal information from being leaked or damaged by hacking or computer viruses.

1. In preparation for damage to personal information, data is backed up on a regular basis, and the latest antivirus program is used to prevent users' personal information or data from being leaked or damaged. Personal information can be transmitted safely over the network through encrypted communication, etc. I'm doing it.

2. We strive to have all possible technical devices in place to systematically ensure security.

3. The company's staff handling personal information is limited to the person in charge.

4. The company is not responsible for leaks of personal information due to user negligence, so please make efforts to protect your personal information.

Article 6 (Matters pertaining to collection of opinions and handling of complaints regarding personal information)

The company collects users' opinions regarding personal information protection and prepares all procedures and methods to handle complaints.

1. Users can report complaints to the company's personal information manager and person in charge, and the company will provide a prompt and sufficient response to the user's report. Additionally, complaints can be addressed to the following organizations established and operated by the Korean government.

Personal Information Infringement Reporting Center (http://www.cyberprivacy.or.kr Tel: 1336)

Supreme Prosecutors' Office Internet Crime Investigation Center (http://icic.sppo.go.kr Tel: 02-3480-3600)

National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr Tel: 02-392-0330)

Article 7 (Matters concerning the installation, operation, and refusal of automatic personal information collection devices)

The company uses Google Analytics provided by Google to analyze and analyze website visits. Accordingly, we operate ‘cookies’ that are saved when you visit the website.

However, cookies are limited to the website and do not operate in the app service, so they are unrelated to the user's use of the app service. Additionally, users have choices regarding cookies. You can refuse to accept cookies or set settings in the web browser you are using.

Article 8 (Personal information manager and person in charge)

Personal Information Manager Personal Information Manager

contact service@wawaline.com

Article 9 (Changes to personal information processing policy)

If there are additions, deletions, or changes to content due to changes in laws, policies, or security technology, we will notify you through a notice on our website 7 days prior to the effective date of the change. If you continue to use the site and services, you will be deemed to agree to the changed privacy policy.

Supplementary provisions

(Enforcement Date) This policy was published on October 1, 2023.