Privacy Policy

JMT Inc. (hereinafter referred to as the “Company”) establishes and discloses the following Personal Information Processing Policy in accordance with Article 30 of the Personal Information Protection Act in order to protect the personal information of data subjects and to ensure the prompt and smooth handling of related grievances.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those stated below. In the event the purpose of use is changed, the Company will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Website Membership Registration and Management
   Personal information is processed for purposes such as confirming intention to register as a member, identification and authentication for provision of membership services, maintenance and management of membership qualifications, identity verification under the limited real-name verification system, prevention of fraudulent use of services, confirmation of consent from a legal representative when processing personal information of children under the age of 14, various notices and communications, and grievance handling.
2. Provision of Goods or Services
   Personal information is processed for purposes such as delivery of goods, provision of services, dispatch of contracts and invoices, provision of content, customized services, identity verification, age verification, payment and settlement of fees, and debt collection.
3. Grievance Handling
   Personal information is processed for purposes such as verifying the identity of complainants, confirming complaint details, contacting and notifying for fact-finding investigations, and notifying processing results.

Article 2 (Processing and Retention Period of Personal Information)

① The Company processes and retains personal information within the retention and usage period prescribed by applicable laws or within the retention and usage period consented to by the data subject at the time of collection.

② The respective processing and retention periods are as follows:

1. Website Membership Registration and Management: Until withdrawal from the business/organization website.
   However, in the following cases, until the relevant matter is resolved:
   1. Where investigations or inquiries are in progress due to violations of relevant laws and regulations, until the completion of such investigations or inquiries;
   2. Where creditor-debtor relationships arising from website use remain outstanding, until the settlement of such relationships.

Article 3 (Provision of Personal Information to Third Parties)

① The Company processes personal information of data subjects only within the scope specified in Article 1 (Purpose of Processing Personal Information), and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or pursuant to special provisions of law. Otherwise, personal information will not be provided to third parties.

② For the smooth provision of services, the Company may provide personal information to a third party within the minimum necessary scope with the consent of the data subject pursuant to Article 17(1)1 of the Personal Information Protection Act, as follows:

• Recipient: TFE Co., Ltd.
• Purpose of Use by Recipient: Business partnership
• Items Provided: Name, address, telephone number, email address
• Retention and Use Period by Recipient: During the transaction period

Article 4 (Rights of Data Subjects and Legal Representatives and Methods of Exercise)

① Data subjects may exercise the following rights related to personal information protection at any time:

1. Request for access to personal information
2. Request for correction in case of errors
3. Request for deletion
4. Request for suspension of processing

② Such rights may be exercised in writing, by telephone, email, facsimile, etc., and the Company will take action without delay.

③ Where a data subject requests correction or deletion due to errors, the Company will not use or provide the relevant personal information until the correction or deletion is completed.

④ The rights under paragraph 1 may be exercised through a legal representative or authorized agent. In such cases, a power of attorney in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.

⑤ Data subjects shall not infringe upon their own or others’ personal information and privacy processed by the Company in violation of the Personal Information Protection Act and related laws.

Article 5 (Items of Personal Information Processed)

The Company processes the following personal information items:

• Required items: Name, address, telephone number, email address
• Optional items: Areas of interest

Article 6 (Destruction of Personal Information)

① The Company destroys personal information without delay when the retention period has expired or when the processing purpose has been achieved and the information becomes unnecessary.

② Where personal information must be preserved under other laws despite expiration of the consented retention period or achievement of processing purpose, such personal information will be transferred to a separate database (DB) or stored in a different location.

③ Procedures and methods for destruction are as follows:

1. Destruction Procedure
   The Company selects personal information subject to destruction and destroys it with the approval of the Personal Information Protection Officer.
2. Destruction Method
   Personal information recorded and stored in electronic file form is destroyed in a manner that prevents recovery, and personal information recorded on paper documents is destroyed by shredding or incineration.

Article 7 (Measures to Ensure Security of Personal Information)

The Company implements the following measures to ensure security:

1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
2. Technical measures: Access control management for personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
3. Physical measures: Access control to computer rooms and data storage rooms

Article 8 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)

① The Company uses “cookies” to store and retrieve usage information in order to provide customized services.

② Cookies are small pieces of information sent by the server (HTTP) used to operate the website to the user’s browser and stored on the user’s PC or mobile device.

③ Data subjects may configure browser options to allow or block cookies. However, refusal to store cookies may result in difficulties in using customized services.

(Web and mobile browser settings omitted for brevity in this structured version but can be formatted for official upload if needed.)

④ The Company collects and uses information such as user visit patterns, frequently searched keywords, and secure connection status in order to provide optimized information.

Article 9 (Personal Information Protection Officer)

① The Company designates the following Personal Information Protection Officer:

Personal Information Protection Officer
- Name: Kazuhiro Tanami
- Title: Head of Management Support Team
- Tel: 81-42-985-8855
- Email: jmt_01@jmt21.jp
- Fax: 81-42-985-8860

Personal Information Protection Department
- Department: Management Support Team, JMT Inc.
- Tel: 81-42-985-8855
- Email: jmt_01@jmt21.jp
- Fax: 81-42-985-8860

② Data subjects may contact the above officer or department regarding inquiries, complaints, or remedies related to personal information protection. The Company will respond without delay.

Article 10 (Remedies for Infringement of Rights)

Data subjects may contact the following institutions regarding remedies for personal information infringement:

1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
4. National Police Agency: 182 (ecrm.police.go.kr/minwon/main)

Article 11 (Enforcement and Amendment of this Policy)

This Privacy Policy shall be effective as of February 25, 2026.