Noah System Website Privacy Policy

1. Purposes of Processing and Items Processed

1. The Company's website does not operate any feature that receives personal information from users, such as sign-up, login or inquiry forms.
2. However, the website server automatically records access logs (IP address, date and time of access, requested page, referring page address, and browser information) to ensure service stability, respond to security incidents and handle errors.
3. When a user sends an inquiry to the email address provided on the website (support@noahsystem.co.kr), the Company processes the email address, name (if provided), contents of the inquiry and any attachments in order to receive and answer the inquiry and to respond to disputes.

2. Processing and Retention Period

1. The access logs described in Article 1(2) are kept for a certain period under the policy of the hosting provider that operates the website server (Cafe24 Corp.) and are then deleted automatically. The Company does not separately download or keep the access logs. However, where retention is required by law, such as for the investigation of a security incident, they are kept for the required period.
2. Inquiry emails described in Article 1(3) are kept for 3 years from the date the inquiry is resolved and are then destroyed. Records of consumer complaints or dispute resolution, such as those regarding payments or refunds, are kept for 3 years under the Act on the Consumer Protection in Electronic Commerce, etc., and other inquiries are kept for the same period in order to respond to repeated inquiries on the same matter and to disputes.

3. Provision of Personal Information to Third Parties

The Company does not provide personal information processed under this Privacy Policy to third parties, except in cases falling under Articles 17 and 18 of the Personal Information Protection Act (such as the consent of the data subject or special provisions of law).

4. Entrustment of Personal Information Processing

The Company entrusts the following work for the operation of the website and for answering email inquiries.

5. Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them

1. Data subjects may at any time exercise their rights to request access to, correction or deletion of, or suspension of processing of their personal information.
2. The rights under paragraph 1 may be exercised by writing, email, etc. to the Company, and the Company will take action without delay.
3. The rights regarding the personal information of a child under the age of 14 may be exercised by the child's legal representative.

6. Procedures and Methods for Destruction of Personal Information

When personal information becomes unnecessary, such as when the retention period has expired or the purpose of processing has been achieved, the Company destroys it without delay. Personal information stored in electronic files is deleted securely so that it cannot be restored. Inquiry emails (including attachments) whose retention period has expired are checked and deleted regularly every year.

7. Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information.

• Limiting access to the website server management account to the minimum number of people
• Limiting access to inquiry emails to the staff in charge
• Applying a secure connection (HTTPS) that encrypts communication between the website and users
• Not operating any feature (database) on the website that stores personal information such as member information

8. Installation, Operation and Refusal of Devices that Automatically Collect Personal Information

1. The Company's website (www.noahsystem.co.kr) does not install or operate cookies. However, videos on the website are loaded from YouTube (Google LLC, USA) only when the user presses the play button, and at that time Google may collect the user's access information (IP address, cookies, etc.). This information is processed in accordance with the Google Privacy Policy (https://policies.google.com/privacy), and the Company does not receive or use it.
2. Users can refuse the storage of cookies by not playing videos or through their browser settings as follows. Refusing cookies does not restrict the use of the website.
   • Chrome: ⋮ > New Incognito window
   • Edge: … > New InPrivate window
   • Safari: Settings > Safari > Advanced > Block All Cookies
   • Samsung Internet: Tabs > Turn on Secret mode > Start

9. Privacy Officer

The Company has designated the following Privacy Officer, who is responsible for overall personal information processing and for handling complaints and remedying damage of data subjects related to personal information processing.

10. Remedies for Infringement of Rights

Data subjects may report or seek consultation on infringements of personal information from the following organizations (telephone numbers are for calls within Korea).

• Personal Information Dispute Mediation Committee : 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center (KISA) : 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office : 1301 (spo.go.kr)
• Korean National Police Agency : 182 (ecrm.cyber.go.kr)

11. Changes to This Privacy Policy

If the contents of this Privacy Policy change, the Company will give notice through the website from 7 days before the changes take effect.

Addendum

This Privacy Policy takes effect on 2026-11-11.

This Privacy Policy is provided in Korean and English. In the event of any discrepancy between the two versions, the Korean version shall prevail.