Purpose and Items of Personal Information Processing Holistic Beauty Tour is committed to using personal information solely for the stated purposes and will obtain consent if there are any changes in the usage objectives. Mudiocean utilizes collected personal information for the following purposes: Access Request for Personal Information: According to Article 35 of the Personal Information Protection Act, individuals can request access to their personal information held by Mudiocean. However, there are limitations as specified in Article 35(5) of the same act. Collected Items (Mandatory): Name, Affiliation (Company Name), Email, Contact Number. Retention Period: In principle, once the collection and purpose of personal information are fulfilled, Mudiocean promptly destroys the information. However, if required by relevant laws, certain information may be retained for a specified period. ㆍ Records related to display and advertising under the Electronic Commerce Consumer Protection Act: 6 months. ㆍ Communication records under the Telecommunications Secrecy Protection Act: 3 months. ㆍ Verification information retention under the Act on Promotion of Information and Communication Network Utilization and Information Protection: 6 months after the end of posting on the bulletin board. Rights and Methods of Exercise by the Data Subject Users have the following rights as data subjects: Access Request for Personal Information: Individuals can request access to their personal information held by Mudiocean, with limitations as specified by law. Correction/Deletion Request for Personal Information: Individuals can request correction or deletion of their personal information held by Mudiocean, except when other laws specify the collection of such information. Request for Suspension of Personal Information Processing: Individuals can request the suspension of personal information processing held by Mudiocean, with possible exceptions specified by law. Notification of Action: Mudiocean will notify the individual of its actions regarding requests for access, correction/deletion, or processing suspension within 10 days. Requests can be made through the relevant department. Exercise of Rights through Representatives: Data subjects can exercise their rights through legal representatives or authorized agents, requiring submission of a power of attorney. Personal Information Destruction Mudiocean takes necessary technical, managerial, and physical measures for the security of personal information, in accordance with Article 29 of the Personal Information Protection Act. Establishment and Implementation of Internal Management Plans: Mudiocean establishes and implements internal management plans based on the 'Personal Information Safety Measures Standards.' Minimization and Education of Personal Information Handlers: Mudiocean minimizes the designation of personal information handlers and conducts regular education. Access Restriction to Personal Information: Mudiocean controls access to personal information by granting, changing, or revoking access rights. It also uses intrusion detection and prevention systems to control unauthorized access. Encryption of Personal Information: User information is stored and managed in encrypted form. Critical data is encrypted during storage and transmission. Technical Measures Against Hacking: Mudiocean installs security programs, regularly updates and checks them, and establishes systems to monitor and block unauthorized access. Unauthorized Access Control: Mudiocean maintains a separate physical storage location for personal information systems, implements access control procedures, and establishes procedures for monitoring and controlling access. Personal Information Protection Manager For inquiries or reports related to personal information protection, contact Mudiocean's designated personal information protection manager. Changes to the Privacy Policy This privacy policy is effective from February 1, 2024.