ALLSALE Corp. (the "Company") processes personal information for the following purposes. The personal information being processed is not used for any purpose other than those listed below, and if the purpose of use changes, the Company will take necessary measures such as obtaining separate consent in accordance with applicable privacy laws.

• Membership registration and management: identifying members, confirming intent to use the service, and delivering notices
• Service provision: managing affiliate campaigns, matching creators, and analyzing performance
• Marketing and advertising: developing new services and providing tailored services, and sharing event information
• Service improvement: improving the service and developing new services through analysis of service usage records

The Company processes and retains personal information within the retention and use period required by law or the retention and use period consented to by the data subject at the time of collection.

• Member information: Until membership withdrawal (however, if an investigation for violation of applicable laws is in progress, until such investigation concludes)
• Records on contracts or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records on consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
• Website visit records: 3 months (Protection of Communications Secrets Act)

As a rule, the Company does not provide the data subject's personal information to third parties. The following are exceptions.

1. When the data subject has given prior consent
2. When required by law, or when an investigative agency requests it in accordance with the procedures and methods prescribed by law for investigative purposes

The Company outsources personal information processing tasks as follows in order to provide the service smoothly.

The data subject may exercise the following privacy-related rights against the Company at any time.

1. Request to access personal information
2. Request to correct personal information in case of errors
3. Request to delete personal information
4. Request to suspend the processing of personal information

Rights may be exercised in writing, by phone, or by email, and the Company will act on such requests without delay.

When personal information becomes unnecessary due to the expiration of the retention period, achievement of the processing purpose, or similar reasons, the Company destroys the relevant personal information without delay.

• Destruction procedure: Personal information whose retention period has expired is destroyed immediately, and information that must be retained under the law is stored separately and securely.
• Destruction method: Information in electronic file form is deleted using technical methods that make recovery and reproduction impossible, and paper documents are shredded or incinerated.

The Company designates a Personal Information Protection Officer as follows to take overall responsibility for personal information processing and to handle data subjects' complaints and provide remedies related to personal information processing.