Privacy Policy

Britestone (hereinafter the "Company") values users' personal information and, in accordance with the Personal Information Protection Act, has established this privacy policy and makes every effort to protect users' personal information.

Purposes of Collecting and Using Personal Information

Britestone processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than those below, and if the purpose of use changes, we will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

• Receiving online inquiries
• Receiving Microchip sample requests
• Cookies, IP information, etc. during website use

Items Collected and Collection Methods

Items Collected

Collection Methods

• Users enter personal information through the inquiry or Microchip sample request pages on the website (we collect only the minimum information necessary for processing).
• Web logs (IP addresses) are collected automatically

Retention and Use Period of Personal Information

Britestone processes and retains personal information within the retention and use period prescribed by law, or the period consented to by the user at the time of collection.

The Company provides a procedure for users to consent to the collection and use of their personal information. If you consent, you are deemed to agree that the personal information you enter will be stored in our database and used for the purposes stated at the time of consent. Users may refuse to consent to the collection and use of personal information; however, refusal may limit the services available.

Destruction Procedures and Methods

When personal information becomes unnecessary — such as upon expiration of the retention period or fulfillment of the processing purpose — Britestone destroys it without delay.

Destruction procedure

• After its purpose has been fulfilled, personal information provided by users is transferred to a separate database (or a separate filing cabinet in the case of paper documents), stored for a certain period in accordance with internal policies and other applicable laws (see the retention and use period), and then destroyed.
• Personal information transferred to a separate database is not used for any purpose other than that for which it is retained, except as required by applicable law.

Destruction methods

• Personal information stored in electronic file format is deleted using technical methods that make the records unrecoverable.
• Personal information printed on paper is destroyed by shredding or incineration.

Rights and Obligations of Users and Legal Representatives, and How to Exercise Them

• Users may at any time exercise their rights against Britestone, including requesting access to, correction of, deletion of, or suspension of the processing of their personal information.
• To view or amend your personal information, contact the personal information manager in writing, by phone, or by email, and we will act without delay.
• If a user requests correction of an error in their personal information, we will not use or provide that information until the correction is completed. If incorrect personal information has already been provided to a third party, we will notify the third party of the correction without delay so that it can be corrected.
• Personal information terminated or deleted at the user's request is handled as specified in the 'Retention and Use Period of Personal Information' and is processed so that it cannot be viewed or used for any other purpose.

Measures to Ensure the Security of Personal Information

• Personal information is stored encrypted in our database, so that even if it were leaked through an external intrusion, it could not be used.
• Information entered and transmitted through the website is protected with SSL to ensure it is transmitted securely.
• To provide services and manage personal information securely, we install and regularly update antivirus software on our personal information processing systems and conduct periodic inspections. To guard against hacking and other external intrusions, we have installed intrusion prevention/detection systems and continuously monitor for external intrusions. We also grant minimal access privileges to the personal information processing systems and conduct regular reviews and monitoring.
• We have formed a personal information protection committee that meets at least twice a year, periodically reviewing and applying the personal information management plan, privacy issues, and changes in relevant laws, in a continuous effort to improve and correct our practices.
• We require personal information handlers to sign a privacy pledge and conduct privacy training at least twice a year, reinforcing the importance of personal information and its secure management. We also minimize the privileges of personal information handlers to reduce unnecessary access to and exposure of personal information.

Chief Privacy Officer

Britestone has designated a chief privacy officer, as shown below, to take overall responsibility for personal information processing and to handle user complaints and provide remedies related to the processing of personal information.

Remedies for Infringement of Rights

If you need to report or consult on other privacy infringements, please contact the organizations below.

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
• National Police Agency: 182 (cyberbureau.police.go.kr)