Privacy Policy

Contentsbest (hereinafter referred to as the "Company") processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

A. Personal Information Collection Items

B. Automatically Generated Information

C. Purpose of Personal Information Processing

① The Company processes and retains personal information within the personal information retention and use period stipulated by law or the personal information retention and use period agreed upon when collecting personal information from the data subject.

② Each personal information processing and retention period is as follows:

• Membership information: Until membership withdrawal
• Payment information: 5 years (as per the Consumer Protection Act)
• Marketing information: 1 year from collection

① The Company processes personal information only within the scope specified in Article 1 (Purpose of Personal Information Processing) and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as the consent of the information subject or special provisions of the law.

② The Company currently does not provide personal information to third parties.

① The Company outsources personal information processing tasks as follows to ensure smooth personal information processing:

① The data subject may exercise the following rights related to personal information protection against the Company at any time:

1. Request to view personal information

2. Request for correction if there are errors

3. Request for deletion

4. Request to stop processing

② The rights under Paragraph ① can be exercised through written document, email, fax, etc., in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.

① The Company destroys personal information without delay when it becomes unnecessary, such as when the purpose of processing personal information has been achieved or the retention period has expired.

② If personal information must be retained after the retention period agreed upon with the data subject has expired or the purpose has been achieved, due to other laws, the Company transfers the relevant personal information to a separate database (DB) or changes the storage location.

③ The procedures and methods for destroying personal information are as follows:

1. Destruction procedure: The Company selects personal information for which the reason for destruction has occurred and destroys it with approval from the Company's personal information protection officer.
2. Destruction method: Personal information stored in electronic files is destroyed using methods that prevent recovery, and personal information recorded and stored on paper documents is destroyed by shredding or incineration.

The Company takes the following measures to ensure the security of personal information:

1. Administrative Measures
   • Development and implementation of internal management plan
   • Regular employee training
2. Technical Measures
   • Access rights management for personal information processing systems
   • Installation of access control systems
   • Encryption of unique identification information
   • Installation of security programs
3. Physical Measures
   • Access control for computer rooms and data storage rooms

You may report any complaints related to personal information protection that occur while using the Company's services to the Personal Information Protection Officer or relevant department. The Company will promptly provide sufficient answers to your reports.

This Privacy Policy is effective from March 18, 2025.