Muzlive Co., Ltd. (hereinafter referred to “Company) has complied and would comply with the personal information protection regulations under the related laws and regulations that information and communication service providers shall comply with including the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., the Protection of Communication Secrets Act, and the Telecommunications Business Act and is making best efforts to protect the rights and interests of users by establishing the privacy policy.

In accordance with Article 30 of the Personal Information Protection Act, the Company establishes and discloses the privacy policy to protect the personal information of data subjects and to handle related grievances promptly and smoothly as follows. Unless otherwise separately described herein, it applies to all personal information files processed by the Company. However, if any separate privacy policy is enacted and implemented in other service platforms directly operated by the Company for processing of the Company’s business affairs, it shall be followed and posted on the website operated by the applicable platform.

This Privacy Policy shall come into effect from October 4, 2024.

Article 1 (Purpose of Collection/ Use of Personal Information)

The Company ('www.kitbetter.com' hereinafter 'kitbetter.com') collects the minimum personal information required in the process of sign-up, service, use of customer center, event participation, fax/phone inquiries, etc. and should obtain consent to it by giving a notice in advance.

The Company processes personal information for the purposes as described below. The personal information to be processed shall not be used for purposes other than those below and, if the purpose of use is changed, the Company would take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Website sign-up and management
   • Personal information is processed for the purpose of confirming the intention to sign up as a website member (hereinafter referred to as “member”), identifying and verifying the identity according to the membership service, maintaining and managing membership, preventing illegal use of services, various public notification and notices, and handling grievances.
2. Providing goods or services
   • Personal information is processed for the purpose of delivering goods, providing services, providing contents, and customized services.
3. Use in marketing and advertising
   • Personal information is processed for the purpose of developing new services (products), providing customized services, event/advertising information and participation opportunities, providing services according to demographic characteristics, posting advertisements and so on.
4. Service improvement, etc.
   • Service use records, IP addresses, cookies, connected device model names, OS information, etc. are automatically generated and collected, and used for prevention of illegal use of the service, confirmation of use history, access frequency and usage statistics, handling of customer inquiries, service improvement, etc.
5. The company provides a social login feature through Google and Apple to simplify membership registration and service usage. The company collects the following personal information:
   • Email address, Name, Profile picture, Any other relevant data provided through Google or Apple
   • Purpose of Use: Membership registration and login via the social login feature, identity verification, and providing customized services.
   • Retention Period: 3 months after membership withdrawal or as specified by relevant laws.

Article 2 (Processing and Retention Period of Personal Information)

The Company shall destroy the personal information of the data subject without delay when the purpose of collection/use of personal information, such as membership withdrawal, is achieved. However provided, personal information of members shall be retained for each of the reasons and periods below exceptionally:

1. Internal policy of the Company

   • Prevention of re-signup by bad users, prevention of illegal use, billing of charge to customers who failed to pay for the service, and response to other complaints.
     • Retention period: 6 months after membership withdrawal (However, when payment is made in full in case of unpaid billing and when the complaint is resolved in case of responding to complaints)
     • Retained information: ID, name, e-mail, mobile phone number, encrypted identification information (CI), date of sign-up and withdrawal

2. When the data subject directly requests preservation of personal information or when the Company obtains the consent of the data subject individually

   1. Retention period and information: Retained for the applicable period only for items/periods for which the data subject's request or consent was obtained

3. When it is decided to preserve without a consent of the user in accordance with laws and regulations.

   Ground laws	Information to be preserved	Retention period
   Act on Consumer Protection in Electronic Commerce, etc.	Records on contracts or withdrawal of subscription	5 years
   Act on Consumer Protection in Electronic Commerce, etc., Commercial Act, Framework Act on National Taxes, Income Tax Act, Corporate Tax Act, Value Added Tax Act	Records on payment and supply of goods, commercial books and business slips, documentary evidences	5 years
   Act on Consumer Protection in Electronic Commerce, etc.	Records on consumer complaints or dispute resolution	3 years
   Protection of Communication Secrets Act	Records on site visits	3 months

4. In accordance with the Personal Information Validity Period System, the Company informs members who have not used the service for 1 year at least 30 days before the expiration date and separately stores personal information and destroys the personal information separately kept without delay after 4 years.

Article 3 (Use of Collected Personal Information and Provision to Third Parties)

The Company shall inform the data subject of personal information through the Terms of Use, the privacy policy, etc. and use it within the scope of obtaining consent and does not use it or provide it to a third party beyond this scope. When providing personal information to a third party, the Company shall inform the data subject of the recipient, items to be provided, purpose of providing personal information, period of retention and use in advance, request consent/agreement and, if the member does not agree, shall not provide the personal information. However, if the data subject does not provide personal information to a third party when using the tie-up service, it shall be notified there may be disadvantages including the tie-up service not available and benefits of the tie-up service in using the tie-up service.

1. However, when set forth in laws such as the Personal Information Protection Act, the personal information of the data subject may be used or provided to a third party without the consent of the member in following cases:
   • If necessary for settlement of the price and charge according to the service
   • When otherwise set forth in other laws including - Protection of Communication Secrets Act, Framework Act on National Taxes, Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., Telecommunications Business Act, Local Tax Act, Criminal Procedure Act, etc.
   • However, the personal information of the member shall not be provided unconditionally, even if there is a special provision in the law and it is required by the administrative agency or investigative agency for administrative or investigation purposes but may be provided only when it can be confirmed that it is the data required by the laws including warrant or document sealed by the head of the agency as prescribed by laws. .
   • Provision to Third parties for Social Login Functionality