MD Works Korea (hereinafter, the "Company") values your personal information and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.

Through this Privacy Policy, the Company informs you of the purposes and methods for which personal information you provide is used, and what measures are taken to protect personal information.

If this Privacy Policy is amended, the Company will announce the changes through website notices (or individual notices, where applicable).

This Policy is effective from March 16, 2026.

1. Personal information items collected

For consultations and similar purposes, the Company collects the following personal information.

Online inquiries
- Items collected: name, contact information, email, inquiry details, etc.

2. Purposes of collection and use of personal information

The Company uses collected personal information for the following purposes:
performance of contracts related to service provision, and responding to inquiries in connection with service provision

3. Retention and use period of personal information

In principle, after the purposes of collection and use of personal information are achieved, the relevant information is destroyed without undue delay. However, where retention is required under applicable laws and regulations, the Company retains member information for the periods prescribed by those laws and regulations as outlined below.

Retention items and legal basis for retention of transaction records

• - Retention period for records concerning contracts or withdrawal of offers, etc.: 3 years
• - Records concerning contracts or withdrawal of offers, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)
• - Records concerning payment and supply of goods, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)
• - Records concerning consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)

4. Procedures and methods for destruction of personal information

In principle, after the purposes of collection and use of personal information are achieved, the Company destroys the relevant information without undue delay. Procedures and methods for destruction are as follows.

Destruction procedure
Information entered for membership registration, etc., is transferred to a separate database after the purposes are achieved (or stored in a separate filing cabinet in the case of paper records), retained for a certain period in accordance with internal policies and other applicable legal grounds for information protection (see retention and use period), and then destroyed.
Personal information transferred to a separate database is not used for any purpose other than retention unless required by law.

Destruction method
Personal information stored in electronic file form is deleted using technical methods that make the records irreproducible.

5. Provision of personal information

In principle, the Company does not provide users' personal information to external parties. Exceptions apply only in the following cases:
where users have given prior consent; where required by law; or where investigative agencies request information in accordance with procedures and methods prescribed by law for investigative purposes.

6. Hosting and maintenance

To perform services, the Company entrusts operations to external specialists as follows.

• - Entrusted party: ThreeAny I&C Co., Ltd.
• - Scope of entrusted work: website and system management (hosting / maintenance)

7. Rights of users and legal representatives and how to exercise them

Users may at any time view or correct their registered personal information, or request withdrawal of membership.
To view or correct personal information, use the "Change personal information" (or "Edit member information," etc.) function; to withdraw membership (withdraw consent), click "Withdraw membership" and complete identity verification to access, correct, or withdraw directly.
You may also contact the Personal Information Protection Manager in writing, by phone, or by email, and the Company will take action without undue delay.
If you request correction of errors in personal information, the Company will not use or provide the relevant personal information until the correction is completed.
If incorrect personal information has already been provided to a third party, the Company will notify the third party of the correction result without undue delay so that correction can be made.
Personal information terminated or deleted at the user's request is handled in accordance with the "Retention and use period of personal information collected by the Company" and is processed so that it cannot be viewed or used for any other purpose.
For children under 14 years of age, the legal representative has the right to view or correct the child's personal information and to withdraw consent to collection.

8. Installation, operation, and refusal of automatic personal information collection devices

The Company uses "cookies" that store and retrieve your information from time to time. A cookie is a very small text file sent by the server operating the website to your browser and stored on your computer's hard disk.

The Company uses cookies for the following purposes.

Purposes of using cookies, etc.
To analyze visit frequency and visit duration of members and non-members, understand user preferences and interests, track browsing patterns, measure participation in events and number of visits, and provide targeted marketing and personalized services. You have the choice whether to allow cookies.
Therefore, you may allow all cookies, confirm each time a cookie is saved, or refuse all cookie storage by setting options in your web browser.

How to refuse cookie settings
You may allow all cookies, confirm each time a cookie is saved, or refuse all cookie storage by selecting options in your web browser.

How to configure settings
Example (Internet Explorer): Tools at the top of the browser > Internet Options > Privacy
Note: If you refuse cookie installation, service provision may be difficult.

9. Complaint services regarding personal information

To protect customers' personal information and handle complaints related to personal information, the Company designates the relevant department and Personal Information Protection Manager as follows.

If you need to report personal information infringement or seek counseling, you may contact the following institutions.

• - Personal Information Infringement Report Center (privacy.kisa.or.kr / dial 118 without area code)
• - Supreme Prosecutors' Office Cyber Investigation Department (www.spo.go.kr / dial 1301 without area code)
• - National Police Agency Cyber Bureau (police.go.kr / dial 182 without area code)