AGP Co, Ltd has the following policy according to the Personal Information Protection Act in order to protect the personal information and rights of the users according to Personal Information Protection Act and handle the user's complaints smoothly related to the personal information. The Company will announce any revision in the personal information handling policy through website (or make the individual notice) when it is to be revised.

Article 1 Purpose of handle the personal information

• 1. We handles the personal information for the following purposes.
  The handled personal information would not be used for purposes other than the followings and if there is any change in the purpose, we will seek to get your prior consent.

  Purposes	Details
  ① Provision of product or service	- For delivery of goods, rendering of service, delivery of agreement or invoice, provision of contents, provision of service specific to customers, authentication of principal - authentication of age, settlement of fee and collection of receivables
  ② Handling of complaints	- Checking the identify of the applicant, checking the complaints, communication for the survey of facts, notice of the handling results, and others. - Handling of complaints through interview, recording on the use of consultation room and health management.

• 2. Program information guide
  Our company processes personal information for the purpose of providing information on programs organized by the company and providing opportunities for participation.

Article 2 Period of handling and keeping the personal information

In principle, once the personal information is collected and used, it shall be destroyed without delay.
But the following informations shall be kept for the specified period due to the following reasons.

• - Items: name and email
  - Period of retention: 3 years
  - Cause of retention: handling the user's questions and requests
  - Items: access log and cookies
  - Cause of retention: improvement in the quality of service through the analysis of the user's access.

Article 3 Matters on the provision of personal information to a third party

The Company does not provide the user's personal information to any third parties except the following cases.

• - The user makes the prior consent.
• - The information is forced to be disclosed due to the laws or regulations or the disclosure is asked by laws enforcing entity according to the specified procedure and method.

Article 4 Procedure and method of destroying the personal information

Once the Company achieves the purposes of collecting and using the personal information, it shall destroy the information without delay. The procedure and method of destroying the information is as follows.

• ① Procedure of destruction
  The Company shall select the personal information to be destroyed and shall get the approval of the person in charge of protecting the personal information and destroy the personal information.
• ② Method of destruction
  The personal information saved in the form of electronic file shall be deleted using the technical method which disables any restoration of the personal information.

Article 5 Items of personal information to be collected

The Company handles the following personal information.

• [Information to be collected when customer makes question on product]
  - Name, email

Article 6 Actions for security of personal information

• 1. Minimization and training of staff handling the personal information
  The Company makes it a policy to designate the limited number of staff for handling the personal information.
• 2. Encryption of personal information
  As the password of user is encrypted, saved and controlled, no other person except the principle is supposed to know it.
• 3. Technical method against the hacking
  The Company installs the security program to prevent any personal information form disclosed or damaged by the hacking or computer virus and checks or revises it on a regular basis. We install the system at the area to which the access from outside is restricted and monitor and disconnect the area in a technical/physical way.
• 4. Access restriction to personal information
  The Company takes actions to restrict the access to personal information through the system of granting, changing or deleting the authority of access to the data base handling the personal information and uses the invasion disconnection system to prevent from unauthorized access from outside.

Article 7 Staff in charge of personal information

The company designates the department and person in charge of protecting the customer's personal information and the complaints related to the personal information as follows.

• [Person in charge of personal information]
  - Staff in charge of personal information : Hwang Eun-sik
  - Position : General manager
  - E-mail : eshwang@alt-s.kr