BYZEN (the "Company") values your personal information and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection.

Through this Privacy Policy, the Company explains how the personal information you provide is used, and what measures are taken to protect it.

If this Privacy Policy is revised, the Company will announce the changes through a notice on the website or by individual notice.

This Policy takes effect on September 23, 2026.

1. Personal Information We Collect

The Company collects the following personal information for inquiries and consultations.

Inquiries
- Items collected: name, contact number, email, subject, message, and similar details

2. Purpose of Collection and Use

The Company uses the personal information it collects for the following purposes.
Performance of contracts for the provision of services, and responses to inquiries related to those services

3. Retention and Use Period

In principle, personal information is destroyed without delay once the purpose of collection and use has been achieved. Where retention is required by applicable law, the Company keeps the information for the periods set out below.

Items retained and legal basis for payment records

• - Records on contracts or withdrawal of offers: 3 years
• - Records on contracts or withdrawal of offers: 5 years (Act on Consumer Protection in Electronic Commerce)
• - Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce)
• - Records on consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)

4. Destruction Procedure and Method

In principle, the Company destroys personal information without delay once the purpose of collection and use has been achieved. The procedure and method are as follows.

Procedure
Information you enter is transferred to a separate database after the purpose has been achieved (or to a separate file in the case of paper records). It is stored for a certain period under internal policy and applicable law (see Retention and Use Period) and is then destroyed.
Personal information moved to a separate database is not used for any purpose other than retention, unless required by law.

Method
Personal information stored in electronic files is deleted by a technical method that makes the records irrecoverable.

5. Provision of Personal Information

The Company does not provide users' personal information to third parties in principle. Exceptions are as follows.
Where users have given prior consent, or where disclosure is required by law or by a lawful investigative request made under the procedures set by law

6. Hosting and Maintenance

To perform its services, the Company entrusts operations to the following external specialist.

• - Trustee: 3ANY I&C Co., Ltd.
• - Entrusted work: website and system management (hosting / maintenance)

7. Rights of Users and Legal Representatives

You may view or correct your registered personal information at any time, and you may request cancellation of your registration.
To view or correct personal information, use "Change personal information" (or "Edit member information"). To cancel registration (withdraw consent), select "Withdraw membership", complete identity verification, and then view, correct, or withdraw directly.
You may also contact the Privacy Officer in writing, by phone, or by email, and the Company will act without delay.
If you request correction of an error, the Company will not use or provide that information until the correction is complete.
If incorrect information has already been provided to a third party, the Company will notify that party of the correction without delay.
Personal information cancelled or deleted at your request is handled as stated in the retention period, and is not viewed or used for any other purpose.
For a child under 14, the legal representative has the right to view or correct the child's personal information and to withdraw consent to its collection.

8. Cookies: Installation, Operation, and Refusal

The Company uses cookies, which store and retrieve information from time to time. A cookie is a very small text file that the server operating the website sends to your browser and that is stored on your computer's hard disk.

The Company uses cookies for the following purposes.

Purpose of cookies
To analyze visit frequency and time for members and non-members, to understand preferences and interests and track usage, and to measure event participation and repeat visits for targeted marketing and personalized services. You have a choice about the installation of cookies.
You may set your browser to allow all cookies, to ask for confirmation each time a cookie is stored, or to refuse all cookies.

How to refuse cookies
You can refuse cookies by selecting the options in your web browser so that all cookies are allowed, confirmation is requested each time a cookie is stored, or all cookies are refused.

How to set this
Example (Internet Explorer): Tools at the top of the browser > Internet Options > Privacy
If you refuse cookies, some services may be difficult to provide.

9. Privacy Complaints

To protect customers' personal information and handle complaints, the Company designates the following department and Privacy Officer.

For reports or advice on other privacy infringements, you may contact the organizations below.

• - Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
• - Supreme Prosecutors' Office, Cyber Investigation Division (www.spo.go.kr / 1301)
• - Korean National Police Agency, Cyber Investigation Bureau (police.go.kr / 182)