Article 1 (Personal Information)

"Personal information" refers to information about an individual defined by the Personal Information Protection Law, which includes information about a living individual, such as name, date of birth, address, telephone number, contact information, and other descriptions that can identify a specific individual.

Article 2 (Methods of Collecting Personal Information)

OKL Corporation (hereinafter referred to as "the Corporation") may request personal information such as name, date of birth, address, telephone number, email address, bank account number, driver's license number, passport number, etc., when users register for use.

Article 3 (Purpose of Collecting and Using Personal Information)

The purposes for which the Corporation collects and uses personal information are as follows:

• To allow users to view and modify their registration information, view usage status, and display information such as registration information, services used, and related charges.
• To use email addresses to notify and communicate with users, send documents or contact users as necessary using contact information such as name and address.
• To verify the identity of users, use information such as name, date of birth, address, telephone number, bank account number, driver's license number, passport number, and the result of delivery confirmation with registered mail.
• To bill users for services used, including information about the types and periods of services used, billing amounts, names, addresses, bank account numbers, or credit card numbers.
• To facilitate user data entry by displaying information registered with the Corporation on the input screen or transferring to other services (including those provided by partners) based on user instructions.
• To refuse the use of services by users who violate the terms of use or attempt to use services for fraudulent or unjust purposes, by using information to identify individuals such as usage patterns, names, and addresses.
• To respond to inquiries from users by using necessary information about services provided by the Corporation to users, such as inquiry content and billing information, as well as information about user service usage status and contact information.
• Associated purposes with the above usage purposes.

Article 4 (Provision of Personal Information to Third Parties)

1. Except as otherwise provided by laws and regulations on the protection of personal information, the Corporation shall not provide personal information to third parties without the prior consent of the user. However, this does not apply in cases permitted by the Personal Information Protection Law and other laws and regulations.

• When required by law.
• When necessary to protect a person's life, body, or property, and it is difficult to obtain the person's consent.
• When the following matters are notified or disclosed in advance:Including the provision to third parties in the purposes of use.
• Items of data provided to third parties.
• Methods or means of providing to third parties.
• Stopping the provision of personal information to third parties at the request of the individual.

2. Notwithstanding the preceding paragraph, the following cases shall not be considered as provision to third parties:

• When the Corporation entrusts all or part of the handling of personal information within the scope necessary to achieve the purposes of use.
• When personal information is provided in connection with the merger or other reasons for business succession.
• When personal information is jointly used with a specific person, if the individual is notified in advance of the purpose of joint use, the items of personal information to be jointly used with the person, the scope of persons jointly using, the purposes of use by the persons, and the name or title of the person responsible for the management of such personal information, or made easily accessible to the individual.

Article 5 (Correction and Deletion of Personal Information)

1. Users may request the Corporation to correct or delete their personal information if it is incorrect, through procedures established by the Corporation.
2. If the Corporation determines that it is necessary to comply with a user's request under the preceding paragraph, it will promptly correct or delete the relevant personal information and notify the user of this.

Article 6 (Suspension of Use of Personal Information, etc.)

If the Corporation is requested by the individual to suspend or delete the use of personal information ("use suspension, etc.") because it is handled beyond the scope of the purposes of use or because it was obtained by fraudulent means, the Corporation will promptly conduct necessary investigations based on the results thereof, suspend or delete the use of personal information, and notify the individual accordingly. However, if it is difficult to take measures to suspend the use, etc., due to the large costs associated with suspending the use, etc., or if it is impossible to take alternative measures to protect the rights and interests of the individual, alternative measures will be taken to protect the rights and interests of the individual.

Article 7 (Changes to the Privacy Policy)

The content of this policy may be changed without notifying users.
Unless separately specified by the Corporation, the revised privacy policy shall take effect from the time it is posted on the website.