Privacy Policy

Wonpoong Co. Privacy Policy

Wonpoong Co. (the “Company”) complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws and regulations. The Company establishes and publishes this Privacy Policy to protect individuals’ personal information and to promptly and effectively address privacy-related concerns.

1. Purposes of Processing Personal Information

The Company processes personal information for the following purposes. Personal information will not be used for purposes other than those specified below. If a processing purpose changes, the Company will take the necessary measures under the Personal Information Protection Act, including obtaining separate consent where required.

a. Product Inquiries and Consultation

The Company processes personal information to review product inquiries, respond to consultation and quotation requests, provide relevant materials, and communicate the results of such requests.

b. Website Operation and Security

The Company processes personal information necessary to maintain stable website operation, prevent misuse, and respond to security incidents.

c. Marketing Communications

The Company provides product information, newsletters, and event announcements to individuals who have separately consented to the collection and use of their personal information for marketing purposes.

2. Categories of Personal Information Processed and Collection Methods

The Company collects only the minimum personal information necessary for each processing purpose.

Purpose

Personal Information Processed

Collection Method

Product inquiries and consultation

Name, mobile phone number, email address

Website inquiry form

Website operation and security

IP address

Automatically collected during website use

Marketing communications

Name, mobile phone number, email address

Application form with separate consent

Purpose	Personal Information Processed	Collection Method
Product inquiries and consultation	Name, mobile phone number, email address	Website inquiry form
Website operation and security	IP address	Automatically collected during website use
Marketing communications	Name, mobile phone number, email address	Application form with separate consent

3. Processing and Retention Periods

① The Company processes and retains personal information within the periods prescribed by applicable laws or agreed to by the individual when the information is collected.

② The retention periods for each processing purpose are as follows:

Processing Purpose

Retention Period

Product inquiries and consultation

One year from the date the inquiry is received

Website operation and security

One year from the date the access log is generated

Marketing communications

One year from the date of consent or until consent is withdrawn, whichever occurs first

Processing Purpose	Retention Period
Product inquiries and consultation	One year from the date the inquiry is received
Website operation and security	One year from the date the access log is generated
Marketing communications	One year from the date of consent or until consent is withdrawn, whichever occurs first

③ Where other laws require the retention of personal information, the Company stores that information separately from other personal information and processes it only for the purposes and periods prescribed by those laws.

4. Disclosure of Personal Information to Third Parties

The Company does not disclose individuals’ personal information to third parties. However, the Company may disclose personal information within the permitted scope where separate consent has been obtained or a legal basis exists.

5. Outsourcing of Personal Information Processing

The Company does not outsource personal information processing to external service providers.

6. Overseas Transfer of Personal Information

The Company does not transfer personal information outside the Republic of Korea.

7. Procedures and Methods for Destroying Personal Information

① The Company destroys personal information without delay when it is no longer necessary, including when the retention period expires or the processing purpose has been fulfilled.

② The procedures and methods for destroying personal information are as follows:

Destruction procedure: The Company identifies personal information that must be destroyed and destroys it in accordance with its internal approval procedures.
Electronic files: Personal information is deleted using methods that prevent recovery or reproduction.
Paper documents: Personal information is destroyed by shredding, incineration, or other appropriate methods.

8. Rights of Individuals and Legal Representatives and How to Exercise Them

① Individuals may request access to, correction or deletion of, or suspension of the processing of their personal information, and may withdraw their consent.

② Requests may be submitted by telephone or email using the contact details of the Personal Information Protection Officer listed in Section 11. The Company will take the necessary action and communicate the results within the time limits and in accordance with the procedures prescribed by applicable laws.

③ Rights may also be exercised through a legal representative or an authorized agent. In such cases, the Company may request a power of attorney or other documents verifying the representative’s authority.

④ Requests for access to or suspension of the processing of personal information may be restricted under Article 35(4) and Article 37(2) of the Personal Information Protection Act. Individuals may not request deletion where another law expressly requires the collection of the personal information concerned.

⑤ The Company may verify that the person submitting the request is the individual concerned or their duly authorized representative.

⑥ The Company ensures that the procedures for exercising these rights are no more difficult than the procedures used to collect personal information.

9. Measures to Safeguard Personal Information

The Company takes the following measures to safeguard personal information:

Administrative measures: Establishment and implementation of an internal management plan, limitation of personnel handling personal information, and employee training.
Technical measures: Management of access permissions for personal information processing systems, access controls, encryption of personal information as required by applicable laws, retention and review of access logs, protection against log tampering, and installation, operation, and updating of security software.
Physical measures: Access and entry controls for facilities and materials where personal information is stored.

10. Installation, Operation, and Refusal of Automatic Data Collection Technologies

The Company does not use cookies to store or retrieve information about website users.

11. Personal Information Protection Officer and Contact Point for Rights Requests

The Company appoints a Personal Information Protection Officer to oversee personal information processing and handle privacy-related complaints and remedies.

Personal Information Protection Officer

Name: 윤영동 (Yoon Young-dong)
Department and Position: Team Leader, General Affairs and Planning Team
Telephone: 010-8869-7951
Email: yoonyd@wonpoong.co.kr

Individuals may use the contact details above for privacy-related inquiries, complaints, requests for remedies, and requests to exercise their rights arising from their use of the Company’s services. The Company will respond and take action promptly in accordance with applicable laws.

12. Remedies for Privacy Infringement

Individuals may contact the following organizations for consultation, reporting, or dispute resolution concerning privacy infringement:

Personal Information Infringement Report Center: 118 (no area code required within Korea) / privacy.kisa.or.kr
Personal Information Dispute Mediation Committee: 1833-6972 / www.kopico.go.kr
Korean National Police Agency: 182 (no area code required within Korea) / ecrm.police.go.kr

13. Effective Date of This Privacy Policy

① This Privacy Policy takes effect on October 1, 2026.

② If the Company changes this Privacy Policy, it will publish the changes and their effective date on its website. Changes that materially affect individuals’ rights will be separately announced before or immediately upon amendment. Where separate consent is required, the Company will obtain such consent in accordance with applicable laws.