JHealth Shopping Mall (hereinafter referred to as the "Company") values your personal information and complies with the Act on Promotion of Information and Communication Network Utilization and Information Protection.

Through the personal information processing policy, the company will inform you of the purpose and method of using the personal information you provide and what measures are being taken to protect your personal information.

■ Personal Information items and collection methods for collection

A. Items of personal information collected o The company collects the following personal information for membership registration, consultation, and service application. - Membership registration: Name, date of birth, gender, login ID, password, home phone number, mobile phone number, e-mail, information of legal representative for subscribers under the age of 14 - When applying for service: Address, payment information o Service usage records, access logs, cookies, access IP, payment records, and bad usage records may be generated and collected during service usage or business processing. B. Method of collection - Collect through homepage, written form, bulletin board, e-mail, event entry, delivery request, phone, fax, generation information collection tool

■ Purpose of collection and use of personal information

The company utilizes the personal information it collects for the following purposes o The performance of the contract on the provision of the service and the settlement of charges based on the provision of the service Content provision, purchase and charge settlement, delivery of goods or claims, etc., financial transaction self-authentication and financial services o Membership management Identification due to the use of membership services, identification of individuals, prevention of illegal use and unauthorized use of rogue members, confirmation of intention to join, age, confirmation of consent of legal representatives when collecting personal information of children under the age of 14, handling civil complaints such as handling complaints, and delivery of notices o Use for marketing and advertising Statistics on the delivery of advertising information, such as events, identifying the frequency of access, or the use of services by members

■ Period of retention and use of personal information

In principle, after the purpose of collecting and using personal information is achieved, the information is destroyed without delay. However, the following information will be preserved for the period specified for the following reasons.
A. Reasons for holding information according to the company's internal policy Even if a member withdraws, the member's information may be retained for o years from the date of termination of the use contract to prevent the recurrence of illegal use by rogue members, resolve disputes, and cooperate at the request of investigative agencies. B. Reasons for holding information under relevant laws and regulations If it is necessary to preserve it in accordance with the provisions of related laws, such as the Consumer Protection Act on Electronic Commerce, etc., the company keeps member information for a certain period as set forth in the relevant laws as follows.
o Record of contract or withdrawal of subscription, etc -Reasons for preservation: Act on Consumer Protection in Electronic Commerce, etc -Preservation period: 5 years o Record of payment and supply of goods, etc -Reason for Preservation: Consumer Protection in Electronic Commerce, etc. Act -Preservation period: 5 years o Record of consumer complaints or dispute settlement -Reasons for preservation: Act on Consumer Protection in Electronic Commerce, etc -Preservation period: 3 years o Log logging -Reason for Preservation: Communication Secret Protection Act -Preservation period: 3 months

■ Procedures and methods for destruction of personal information

In principle, the company destroys the information without delay after the purpose of collecting and using personal information is achieved. The procedure and method of destruction are as follows.
o Procedure for destruction The information you entered for membership registration, etc., is transferred to a separate DB after the purpose is achieved (in the case of paper, a separate document box) and stored for a certain period of time (refer to the retention and usage period) according to the internal policy and other related laws and regulations. Personal information transferred to a separate DB will not be used for any purpose other than being retained unless it is by law. o Method of destruction Personal information stored in the form of electronic files is deleted using a technical method that cannot be played back.

■ Provision of personal information

In principle, the company does not provide the user's personal information to the outside world. However, exceptions are made in the following cases.
o Users agree in advance o In accordance with the provisions of the statute or in accordance with the procedures and methods prescribed in the statute for the purpose of investigation

■ consignment of collected personal information

The company is entrusted to an external specialized company to perform the service as follows.
o Subject to consignment: [Courier name] o Details of consignment: [Contents of consignment by courier] o Subject to consignment: [PG Company name] o Details of consignment: [Content of consignment by PG]

■ Rights of users and legal representatives and methods of exercising them

o Users can inquire or modify their registered personal information at any time and request cancellation of their subscription. o For users to inquire and modify their personal information, sign up for "change of personal information" (or "modification of membership information", etc.) (withdrawal of consent), click "withdrawal of membership" and read, correct, or withdraw directly after going through the identity verification process. o Or you can contact our Personal Information Protection Officer in writing, by phone or e-mail and we will take action without delay. o If you request a correction for an error in your personal information, the personal information will not be used or provided until the correction is completed. In addition, if the wrong personal information has already been provided to a third party, we will notify the third party of the correction result without delay so that the correction can be made. o The company processes personal information that has been terminated or deleted at the request of the user in accordance with the "retention and usage period of personal information collected by the company" and prevents it from being viewed or used for other purposes.

■ Matters concerning the installation and operation of automatic personal information collection devices and their refusal

The company operates "cookie" that stores and finds your information from time to time. A cookie is a tiny text file that a server used to run a website sends to your browser and is stored on your computer's hard disk. The Company uses cookies for the following purposes.
o Purpose of use of cookies, etc 1. Target marketing and personalized services are provided by analyzing the frequency of access and visit time of members and non-members, identifying users' tastes and areas of interest, tracking their traces, and identifying the degree of participation in various events and the number of visits 2. You have the option to install cookies. Therefore, you can allow all cookies by setting options in your web browser, go through a check each time they are saved, or deny all cookies to be saved. o How to deny cookie settings 1. As a way to deny cookie settings, you can allow all cookies by selecting the options in your web browser, go through a check each time you save them, or deny all cookies from saving them. 2. Example of how to set up (for Internet Explorer): Tools at the top of Web browser > Internet Options > Personal Information 3. However, if you refuse to install cookies, there may be difficulties in providing services.

■ Civil service regarding personal information

The company designates relevant departments and personal information protection officers as follows in order to protect customers' personal information and to handle complaints related to personal information.

o Personal Information Protection Officer

name : Park Eun-joo
affiliation : General Manager of JHealth Shopping Mall
Phone number : 051-327-6119
E-mail : jmedi6119@naver.com

o Personal Information Protection Officer

name : Park Eun-joo
affiliation : General Manager of JHealth Shopping Mall
Phone number : 051-327-6119
E-mail : jmedi6119@naver.com

o You may report any personal information protection-related complaints that occur while using the company's services to the person in charge of personal information protection or the department in charge. o The company will quickly provide sufficient answers to users' reports. o If you need to report or consult other personal information infringement, please contact the following agency. Personal Information Infringement Reporting Center (privacy.kisa.or.kr / 118 without country number) Supreme Prosecutors' Office Cybercrime Investigation Team (www.spo.go.kr / 02-3480-2000) Cyber Safety Bureau of the National Police Agency (www.ctrc.go.kr/ 182)

Consent to provide Kakao's personal information to a third party

1. Recipient of offer
2. Purpose of use by recipient
3. Personal information items provided
This service provides your personal information to the following affiliates, corporations, organizations, and institutions for better service provision. Notification and consent are sought when adding affiliates, etc.

the recipient of the offer	Purpose of use	Information items provided
JHealth	Consultation and service delivery	Data including member information and service usage status
a delivery company	delivery of goods	Name, Phone Contact, Delivery Address

4. Period of retention and use of personal information of a person receiving personal information - We will hold it until the end of the service, except for the following cases. • If prescribed separately by Acts and subordinate statutes, keep it until the relevant period • If a member voluntarily withdraws, it will be kept for one month to prevent acts such as name theft, etc. from occurring • If it is necessary to keep it for a certain period in preparation for litigation, dispute, etc., it shall be kept for one year after withdrawal in order to respond to customers and to cooperate with related investigative agencies for illegal users - For purposes such as statistics and academic research, personal information can be kept in a form that does not recognize a specific individual. 5. Information on disadvantages for the right to refuse consent and non-consent You have the right to refuse consent, but if you refuse consent, you cannot use services such as contracts/transactions.