Privacy Policy - EPIOME

EPIOME (hereinafter referred to as the "Company") values customers' personal information and complies with the "Personal Information Protection Act". Through the personal information processing policy, the company will inform you what purpose and method the personal information you provide is being used and what measures are being taken to protect your personal information.

1. Personal Information Items Collected
The company is collecting the following personal information for consultation, service application, etc.
- Collections: Name, email address, phone number, contact details
- How to collect personal information: Inquiry mail and website inquiry form

2. Purpose of collection and use of personal information
The Company utilizes the collected personal information for the following purposes.
- The performance of the contract on the provision of the service and the settlement of the fee according to the provision of the service
- Customer management: responding to customer inquiries, providing service-related information
- Use for marketing and advertising: New service information and event guidance

3. Period of retention and use of personal information
Personal information shall be destroyed without delay after the purpose of collection and use has been achieved. However, if it is necessary to preserve it according to the provisions of the relevant laws and regulations, the company will keep the member information for a certain period as follows.
- Items held: Name, email address, phone number, contact details
- Retention period: 1 year

4. Procedures and methods for destruction of personal information
In principle, the company destroys personal information without delay after the purpose of collecting and using it is achieved. The procedure and method of destruction are as follows.
- Destruction procedure: The information inquired by the customer will be transferred to a separate DB after the purpose is achieved, stored for a certain period of time according to the internal policy and other reasons for information protection under relevant laws and regulations, and then destroyed.
- How to destroy: Personal information stored in the form of an electronic file is deleted using a technical method that does not allow the record to be played.

5. Provision of personal information to third parties
In principle, the company does not provide customers' personal information to the outside world. However, exceptions are made in the following cases.
- If the customer agrees in advance
- Where there is a request from an investigative agency in accordance with the provisions of the statute or in accordance with the procedures and methods prescribed in the statute for the purpose of investigation

6. Measures to ensure the safety of personal information
The company is taking the following steps to protect the personal information of its customers.
- Management measures: Establishment and implementation of internal management plans, regular employee training, etc
- Technical measures: Management of access rights, such as personal information processing systems, installation of access control systems, encryption of unique identification information, etc
- Physical measures: Control access to computer rooms, data storage rooms, etc

7. Changes to personal information processing policy
This personal information processing policy will take effect from the date of enforcement, and if there is any addition, deletion, or correction of changes in accordance with laws and policies, it will be notified through notice seven days before the change takes effect.

This policy will take effect on June 16, 2024.