1. General Provisions

MECSTECH Co., Ltd. (hereinafter referred to as the “Company”) is fully committed to protecting the personal information of its customers and complies with the Information and Communications Network Act (hereinafter referred to as the “Network Act”), the Personal Information Protection Act, and other relevant laws and government guidelines.

In accordance with Article 27-2 of the Network Act, the Company establishes and discloses this Privacy Policy by posting it at its business premises and providing a link on the main page of the MECSTECH website (https://www.mecstech.com/main.php). This ensures that customers can easily review the measures taken by the Company to protect their personal information at any time.

This Privacy Policy may be amended due to changes in applicable laws, regulations, or internal operating policies. In the event of any amendment, the Company shall promptly notify customers of the reasons for and details of such changes via the Company website or at its business premises.

2. Consent for Collection and Use of Personal Information
3. The Company shall be deemed to have obtained the customer’s consent to the collection, use, and outsourcing of personal information when the customer signs a consent form (written or electronic) that clearly states the purpose, items, and methods of collection, or when the customer provides consent through a certified authentication process on the Company’s website.
4. The Company may collect and use personal information without explicit consent in the following cases:

• When necessary for the performance of a service contract, where obtaining ordinary consent is significantly difficult due to economic or technical reasons;
• When necessary for billing and settlement related to service provision;
• When otherwise permitted or required by the Network Act or other applicable laws.

1. For the outsourcing of personal information processing necessary for service performance, the Company may proceed without separate notice or consent, provided that the outsourced party and the details of the outsourced tasks are disclosed in this Privacy Policy.
2. Customers have the right to refuse the collection of their personal information. However, refusal may result in the inability to provide certain services or limitations on service use.
3. Items Collected and Purposes of Use
4. The Company collects only the minimum information necessary to verify user identity, provide customized services, and process transactions (payments, refunds, etc.).
5. Items Collected:

• For Individual Members: Name, mobile number, ID, password (for identity verification, complaint handling, and surveys).
• For Corporate Members: Representative’s name, business registration number, business contact information.
• For Transaction/Communication: Email, telephone number, address (for shipping, notices, and product information).
• For Payments: Bank account information, mobile number.
• Automatically Collected: IP address, access logs, and service usage records (for fraud prevention and service improvement).

1. The Company will not use personal information for purposes other than those specified, nor will it provide it to third parties without prior consent, except where required by laws such as the Electronic Commerce Act or the National Taxes Act.
2. Rights of Customers and Legal Guardians
3. Customers may request access to, correction of, or withdrawal of consent for their personal information at any time. Requests can be made via telephone at +82-32-323-8366. The Company will take immediate action, and the relevant information will not be used until the correction is completed.
4. For children under the age of 14, the Company obtains consent from their legal guardians. Legal guardians may exercise the same rights (access, correction, withdrawal) on behalf of the child.
5. Retention and Destruction of Personal Information

The Company destroys personal information without delay once the purpose of collection is achieved. However, certain information is retained as required by law:

• Contract/Subscription Records: 5 years (Electronic Commerce Act)
• Payment/Supply Records: 5 years (Electronic Commerce Act)
• Consumer Complaints/Disputes: 3 years (Electronic Commerce Act)
• Access Logs: 3 months (Protection of Communications Secrets Act)
• Fraudulent Transaction Records: 5 years (Company Policy)

Destruction Methods:

• Hard copies: Shredding or incineration.
• Electronic files: Irreversible deletion using technical methods.

Note: Inactive accounts (no activity for a specific period) will be managed in accordance with the “Personal Information Validity Period” under the Network Act.

6. Technical and Administrative Protection Measures

The Company implements the following security measures:

• Technical: Encryption of passwords and important data, use of antivirus software, SSL for secure data transmission, and intrusion prevention systems.
• Administrative: Limiting access to the minimum number of authorized personnel, regular security training for employees, and internal audits. Authorized personnel include those handling customer inquiries and the Chief Privacy Officer.

7. Linked Websites

The Company’s website may contain links to third-party websites. The Company is not responsible for the privacy practices or content of such external sites. Users are encouraged to review the privacy policies of any linked websites they visit.

8. Customer Support and Complaint Handling

We value your feedback. For inquiries or complaints regarding personal information, please contact:

• Customer Service: +82-32-323-8366
• KISA Privacy Center: Tel: +82-118 / https://privacy.kisa.or.kr
• National Police Agency (Cyber Bureau): Tel: 182 / https://ecrm.police.go.kr

9. Personal Information Protection Officer

The Company has designated the following officers to protect customer information and handle related grievances:

• Chief Privacy Officer: Cheol-Gyu Song
• Privacy Manager: Kyung-Gon Kim
• Tel: +82-32-681-9683
• Email: sale@mecstech.com

10. Amendments

This Privacy Policy was established on May 1, 2023. Any changes due to legal or security updates will be notified via the Company’s website prior to the effective date.

Effective Date: May 1, 2023