PERSONAL INFORMATION PROTECTION ACT
[Enforcement Date: 20 October 2022]

8 Rainbow (hereinafter referred to as the "Company") complies with the Personal Information Protection Act (hereinafter referred to as the "Privacy Policy"), and is doing its best to protect the rights and interests of users by establishing a personal information processing policy in accordance with relevant laws.
The company's privacy policy contains the following contents.

1. Purpose of using personal information and collection items
Name, email, and contact information for customer identification and inquiry handling

2. Processing and retention period of personal information
Personal information is processed and retained within the personal information retention/use period agreed upon when collecting personal information from the data subject. In principle, when the purpose of processing personal information is achieved, it is destroyed without delay. However, in order to respond to further inquiries from customers, it is stored for 3 years upon customers' request.

3. Personal information destruction procedure and method
A. Destruction procedure
- The information entered by the data subject is transferred to a separate DB (separate filing cabinet in the case of paper) after the purpose is achieved, stored for a certain period of time in accordance with internal policies and other relevant laws and regulations, and then destroyed.
- This personal information will not be used for any other purpose other than being retained unless it is required by law.

B. Destruction method
- Personal information printed on paper is shredded with a shredder or destroyed through incineration.
- Personal information stored in the form of an electronic file will be deleted using a technical method that cannot reproduce the record.

4. Rights and obligations of data subjects
Data subjects can inquire or modify their registered personal information at any time, and may request deletion or suspension of processing by contacting the person in charge.

5. Supervision of personal information handlers
In handling personal information, the company is taking the following protective measures to ensure safety so that personal information is not lost, stolen, leaked, altered or damaged.
- Administrative measures establishment/implementation of internal management plan, regular training of handlers, etc.
- Physical measures access control of computer room, data storage room, etc.

6. Contact information regarding privacy policies
- All complaints related to personal information protection can be reported to the person in charge of personal information protection.
- The company will promptly and sufficiently respond to users' reports.
- User should contact the representative number (1688-5945) or the representative email (8rainbow_ceo@naver.com).

7. Others
We inform you that the "8 Rainbow Privacy Policy" does not apply to the collection of personal information by websites linked to its homepage.