Ritchko operates in accordance with the Personal Information Protection Act to protect users' personal information and rights, and to facilitate the handling of user grievances related to personal information.

Ritchko will announce any amendments to the personal information processing policy via website notifications (or individual notifications).

This policy will be implemented from April 17, 2023.

Purpose of Personal Information Processing

Ritchko processes personal information for the following purposes. The processed personal information will not be used for purposes other than these, and if the usage purpose changes, we plan to obtain prior consent.

• 1. Membership Registration and Management We process personal information for the purpose of maintaining and managing membership, confirming identity under restrictive personal identification system, preventing unauthorized use of services, various notices and notifications, grievance management, and record keeping for dispute settlement.
• 2. Civil Complaint Processing We process personal information for the purpose of confirming the identity of the complainant, confirming the complaint, contacting and notifying for fact investigation, and notifying the result of processing.
• 3. Provision of Goods or Services We process personal information for the purpose of service provision, sending invoices, content provision, personalized service provision, fee payment and settlement.
• 4. Utilization for Marketing and Advertising We process personal information for the purpose of developing and providing personalized services for new services (products), providing event and advertising information and participation opportunities, confirming service validity, checking connection frequency, or compiling statistics on members' use of services.

Personal Information Processing and Retention Period

1. Ritchko processes and retains personal information within the personal information retention and use period agreed upon when collecting personal information from information subjects or as prescribed by law.
2. Each personal information processing and retention period is as follows.
   • 1.<Membership Registration and Management> Personal information related to <Membership Registration and Management> will be retained and used for the purpose of use from the date of consent to collection and use until <semi-permanent>.

Rights and Obligations of the Information Subject and Exercise Method

The information subject can exercise the following rights as a personal information subject at any time.

1. The information subject can request Ritchko for access, correction, deletion, and processing stop of personal information at any time.
2. The rights under Paragraph 1 can be exercised through written, email, fax, etc. to Ritchko in accordance with Paragraph 1 of Article 41 of the Enforcement Decree of the Personal Information Protection Act, and Ritchko will take immediate action.
3. The exercise of rights under Paragraph 1 can be done through a legal representative of the information subject or a person who has been delegated. In this case, you must submit a power of attorney according to Form 11 of the Enforcement Rules of the Personal Information Protection Act.
4. The right to view and the request to stop processing personal information may be restricted according to Paragraph 5 of Article 35 and Paragraph 2 of Article 37 of the Personal Information Protection Act.
5. If the personal information is specified as a collection target in other laws, the request for correction and deletion cannot be requested.
6. Ritchko verifies whether the person who made the request for viewing, correction or deletion, or the request to stop processing is the person or a legitimate representative.