Privacy Policy

Samyang Foods Co., Ltd. (hereinafter referred to as the "Company") complies with the Personal Information Protection Act and other related laws and regulations to protect the freedom and rights of users, lawfully process personal information and manage it safely. In accordance with Article 30 of the Personal Information Protection Act, the Company establishes and discloses a privacy policy to guide the procedures and standards for processing personal information and to handle related complaints quickly and smoothly.

Article 1. Collection Items and Purpose of Use of Personal Information

The Company processes personal information for the following purposes. Processed personal information will not be used for purposes other than the following purposes, and if the purpose of use is changed, the Company will take necessary measures such as obtaining separate consent and etc. in accordance with Article 18 of the Personal Information Protection Act.

Method of collection	Purpose of use	Classification	Collection items	Retention Period
Contact Us	Service support for user inquiries/requests	Required	Nationality, Name, Mobile Number, Email, Inquiry details	3 Years
Newsletter	Newsletter subscription support	Required	Email	3 years

※ The following personal information items may be automatically generated and collected during the process of using internet services.
- IP address, access date/time, browser and OS information, visited pages, click history, referring URL, language and region settings and etc.

Article 2. Processing and Retention Period of Personal Information

The Company may process and retain personal information within the period of time specified by law for retaining and using personal information or within the period of time agreed upon by the user at the time of collecting the personal information and may not destroy personal information whose retention and use period has elapsed.

However, personal information whose retention period has elapsed will not be destroyed and may be kept without being destroyed in cases where it needs to be preserved according to "other laws and regulations" or where "separate consent has been obtained."

Record of consumer complaints or dispute resolution
Reason for retention : Consumer Protection Act in E-commerce, etc.
Retention period : 3 years

Article 3. Destruction of Personal Information

Personal information of users shall be destroyed without delay once the purpose of collecting such information has been achieved as originally notified. In addition, personal information of information subjects shall be destroyed without delay except for the data that must be retained under the provisions of related laws specified in Article 2, in the event of revocation of consent. However, the maximum period of "without delay" shall not exceed 7 days to protect the service user's rights in case of any request for restoration or recovery.
Personal information printed on paper shall be destroyed by shredding or incineration, and personal information stored in electronic file format shall be destroyed by using a technical or physical method that cannot reproduce the record. Personal information that has been transferred to a separate DB after the processing purpose has been achieved shall be safely stored and managed in accordance with internal regulations and relevant laws and regulations and shall be destroyed without delay when the retention period has expired. In this case, personal information transferred to a separate DB shall not be used for any purpose other than the agreed purpose or beyond the scope of applicable laws and regulations.

Article 4. Entrustment of Personal Information Processing

Samyang Foods entrusts personal information processing tasks to third parties as listed below to ensure smooth operations.

Samyang Foods stipulates necessary matters in contracts with entrusted companies to ensure personal information is processed securely in accordance with the Personal Information Protection Act and supervises them accordingly.

Any changes to the entrusted tasks or recipients will be disclosed through this Privacy Policy.

Trustee (Entrusted Company)	Details of Entrusted Tasks
Amazon Web Services, Inc	Provision of cloud server infrastructure and data storage management
Google LLC ('Google')	Analysis of website visitor statistics and user behavior

Article 5. Provision of Personal Information to Third Parties

The Company does not provide personal information of users to any third party except in cases where the user has given separate consent or where it is prescribed by law.

Article 6. Collection of Personal Information via Cookies

'Cookie' is a temporary file created automatically when accessing a website, which is a small amount of information sent by the server operating the website to the user's computer browser and is sometimes stored on the hard disk of the user's PC.

The Company uses 'cookies' to save and retrieve user information on a regular basis in order to provide fast and useful services when users use the website.

Users have the right to choose whether or not to accept cookies, and can set their web browser options to allow all cookies, ask for confirmation each time a cookie is saved, or block all cookies. However, if a user refuses to save cookies, there may be restrictions on using some services that require login information to be entered again.

- The method of designating whether to allow cookie installation (in the case of Internet Explorer) is as follows.

• Internet Explorer web browser
[Tools] > [Internet Options] > [Privacy] Tab > [Advanced] > Change advanced privacy settings

• Chrome web browser
Upper right menu [Settings] > [Security and Privacy] > [Cookies and other site data] > Cookie settings

The Company may read the contents of cookies in the user's browser and provide services without additional input such as name according to access by finding additional customer information on the customer's computer.

Article 7. Handling of Children's Personal Information

Samyang Foods takes special care to protect children's personal information. Its services are not intended for children under the age of 13. The Company implements reasonable technical safeguards to prevent children from accessing services where personal information may be collected, in accordance with local laws.
If you become aware that your child has provided personal information without your consent, please contact us.

Article 8. Collection, Use, and Provision of Behavioral Information and Refusal of Consent

The Company uses Google Analytics, a web log analysis tool provided by Google, to provide users with better services.
Google Analytics collects behavioral information of website users through cookies. In this case, only non-personally identifiable information that cannot identify individual users is collected. However, users can refuse to use Google Analytics by installing the Google Analytics blocking browser add-on (https://tools.google.com/dlpage/gaoptout) or by denying cookies in their web browser settings.

Items of Collecting Behavioral Information	Ways of Collecting Behavioral Information	Purpose of Collecting Behavioral Information	Duration of Retention and Use, and Information Processing Method after Expiration
We collect and analyze web log and demographic data based on anonymous cookie information including data from Google Analytics (GA).	We analyze user's website usage patterns using "cookies," which are text files stored on the computer. The information collected through cookies is transferred and stored on Google servers located in the United States. Unless the users specifically refuse the use of Google cookies, they agree to the use of all information generated through Google cookies and Google Analytics by using our services.	The purpose of using the web analytics service, Google Analytics, provided by Google, Inc., is to provide better services to users. It is used to analyze and evaluate how users use the services of the site, understand user demand, and improve and customize the services to provide efficient services.	The processing of information collected through Google Analytics is subject to Google's Privacy Policy and the Google Analytics Terms of Service. * Google Privacy Policy: https://www.google.com/intl/en/policies/privacy/ * Google Analytics Terms of Service: https://www.google.com/analytics/terms/

The methods to block/allow customized advertisements through web browsers are as follows.

Internet Explorer (Internet Explorer 11 for Windows 10)
- Select the Tools button in Internet Explorer and then select Internet options.
- Select the Privacy tab and choose Advanced under Settings, then select either Block or Allow cookies

Microsoft Edge
- Click the '...' icon in the upper-right corner of the Edge window and select Settings.
- Click 'Privacy, search, and services' on the left side of the Settings page and select the level of tracking prevention you want under the 'Tracking prevention' section.
- Choose whether to always use "Strict" tracking prevention when searching InPrivate.
- Select whether to send a "Do Not Track" request under the "Privacy" section at the bottom of the page.

Chrome Browser
- Click the '⋮' icon (Customize and control Chrome) in the upper-right corner of the Chrome window and select Settings.
- Click 'Advanced' at the bottom of the Settings page, and click 'Content settings' under the 'Privacy and security' section.
- Under the 'Cookies' section, select the checkbox for 'Block other companies cookies and site data'.

Article 9. Measures for Securing the Safety of Personal Information

The company takes the following measures to secure the safety of personal information.

Minimization and education of personal information handling employees
The company designates employees to handle personal information and restricts them to a minimum to manage personal information effectively.

Establishment and implementation of internal management plan
The company establishes and implements an internal management plan to ensure the secure handling of personal information.

Encryption of personal information
Passwords among users' personal information are encrypted and stored and managed so that only the users themselves can know them. Additionally, the company uses separate security functions such as encrypting files and transmission data or using file locking functions for important data.

Storage and Prevention of Tampering of Access Records

Classification	Retention Period	Note
NoteAccess Records	For at least a year	However, for personal information processing systems that handle personal information of 50,000 or more users or handle unique identification information or sensitive information, they must be stored and managed for at least 2 years.
Logs of permission changes and revocations	For at least 3 years	-

Access restriction to personal information
The database system that processes personal information applies access control through the granting, changing, and revoking of access rights.

Use of locking devices for document security
Documents, auxiliary storage media, etc. that contain personal information are stored in a secure location with locking devices.

Access control for unauthorized persons
Separate physical storage locations for storing personal information are established, and access control procedures are established and implemented for them.

Article 10. Rights and Obligations of Users and Legal Representatives

User have the obligation to ensure that your personal information is accurate and up-to-date to prevent accidents caused by incorrect information. The user is responsible for any accidents caused by incorrect information input, and the membership may be revoked if false information or identity theft is detected.

Users have the right to protect their personal information and also have the obligation to protect themselves and not infringe on others' information. Also, Users should be careful not to leak your personal information, including your password, and be mindful not to damage others' personal information including postings.
If user fail to fulfill these responsibilities and infringe on others' information or dignity, user may be punished under the "Personal Information Protection Act."

Article 11. Personal Information Protection Officer

Company is responsible for overall management of personal information processing, and has designated a personal information protection manager to handle complaints and remedy related to personal information processing, as follows.

Personal Information Protection Officer
- Name : Seongbo Shim
- Position : Head of Division
- Email : tangle@roundsquare.ai
※ This will connect to the department in charge of personal information protection.

Article 12. Request to access personal information

User may request access to your personal information under Article 35 of the Personal Information Protection Act to the following department. Company will make every effort to process user request for access to personal information promptly.

Department for Processing Requests for Access to Personal Information
- Department : Emerging Brand Division
- E-mail : tangle@roundsquare.ai

Article 13. Remedies for Violations of Rights and Interests

User may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee or the Personal Information Protection Center of the Korea Internet & Security Agency to seek remedies for violations of your rights and interests caused by the infringement of your personal information. For any other inquiries related to reporting or consultation for personal information infringements, please contact the following organizations.

Personal Information Dispute Mediation Committee: (No area code required) 1833-6972 (www.kopico.go.kr)

Personal Information Protection Center: 118 (no area code required) (privacy.kisa.or.kr)

Cyber Investigation Department of the Supreme Prosecutors' Office: 1301 (No area code required) (www.spo.go.kr)

Korean National Police Agency: 182 (no area code required) (ecrm.cyber.go.kr)

According to the provisions of Article 35 (Right to Access Personal Information), Article 36 (Right to Correct or Delete Personal Information), and Article 37 (Right to Suspend Processing of Personal Information) of the Personal Information Protection Act, those who have suffered infringement of their rights or interests due to the disposition taken by the head of a public institution or arbitrary action in response to a request made under the said provisions may request administrative adjudication in accordance with the Administrative Adjudication Act.

Article 14. Obligation to Notify

In case of additions, deletions, or modifications to the current Privacy Policy, the Company will notify users by posting a notice on the "Notice" section of our website at least 7 days prior to the amendments.

Article 15. Changes to the Privacy Policy

This Privacy Policy is effective as of 06.10.2025.