General Provisions

Gong-pal-liter Global Co., Ltd. (hereinafter referred to as "Company") is making every effort to safely protect members' personal information and complies with provisions in laws related to personal information such as the 「Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.」 and the 「Personal Information Protection Act」, and establishes a personal information processing policy based on relevant laws to do its best to protect user rights and interests. The Company informs you of what purposes and methods the personal information provided by members is being used for and what measures are being taken to protect personal information through this personal information processing policy. The personal information processing policy is disclosed on the 0.8L (Gong-pal-liter) homepage (www.08liter.com, www.08liter.cn, hereinafter 'homepage') so that customers can easily review it at any time. The personal information processing policy may be changed from time to time to provide better services and due to changes in government laws or guidelines, and necessary procedures are established for continuous improvement of the personal information processing policy accordingly. When changes and revisions are made, the Company notifies through the personal information processing policy on the homepage and also quickly informs through email. Users are advised to check frequently when visiting the homepage. Users may refuse consent if they do not want the following matters related to the collection, use, provision, and consignment of personal information. However, please note that if users refuse consent, they may not be able to use all or part of the services.

※ This privacy policy applies equally to all sites (including mobile web/apps) that process personal information of 0.8L (Gong-pal-liter).

Purpose of Personal Information Collection and Use

A. The Company collects the minimum necessary information as mandatory items to provide convenient and beneficial customized information to members for smooth ordering of goods and service products, product delivery, payment settlement when members join the homepage. B. The Company does not collect personal information that may significantly infringe on members' basic human rights such as race and ethnicity, thoughts and beliefs, place of origin and domicile of origin, political orientation and criminal records, health status, etc. C. The collected personal information is used for the following purposes. Member registration related: Identity verification according to membership service use, personal identification procedures, customer inquiries and complaint handling, various notices, delivery of notification matters, record preservation for dispute mediation Product or service provision related: Product purchase and fee payment, product/event item delivery or billing address delivery, etc. Marketing and product information delivery related (optional: when agreeing to receive SMS, email): New service/event information guidance, customer satisfaction surveys, marketing events such as customer interviews, use as statistical data for marketing

Personal Information Collection Items

A. The Company collects the following personal information for member registration, consultation through customer center, and provision of various services.

* For overseas purchasing agency products, customers' personal customs clearance unique numbers are separately entered and consent for provision is obtained for use in product delivery. B. The following information may be automatically generated and collected during service use. Payment information, service usage records, access logs, cookies, access IP information, device information, etc. C. The following payment information may be collected during paid service use. Credit card payment: Card company name, card number, etc. Mobile phone payment: Mobile phone number, telecommunications company, payment approval number, etc. Account transfer: Bank name, account number, etc. Refund: Refund account information (bank name, account number, account holder) D. The Company collects personal information through member registration on the homepage and consultation through the customer center. E. When entering false information, members must guarantee the accuracy and legality of their information. If this is violated and false information is entered through various methods such as stealing others' information, the Company may take 'civil and criminal measures and other legal measures' according to relevant laws and forcibly withdraw the member.

Personal Information Retention and Use Period

The Company, in principle, destroys the relevant personal information without delay after the purpose of personal information collection and use is achieved. However, when there is a need to preserve according to internal policies and relevant laws and regulations, the Company retains member information for a certain period specified by relevant laws as follows. A. Internal policy (fraudulent use records) Basis for preservation: Preservation according to company policy such as exclusion of fraudulent use Preservation period: 6 months B. When there is a need to preserve according to laws such as the Commercial Act ① Records related to contracts or withdrawal of subscription, etc. Basis for preservation: Act on Consumer Protection in Electronic Commerce, etc. Preservation period: 5 years ② Records related to payment settlement and supply of goods, etc. Basis for preservation: Act on Consumer Protection in Electronic Commerce, etc. Preservation period: 5 years ③ Records related to consumer complaints or dispute handling Basis for preservation: Act on Consumer Protection in Electronic Commerce, etc. Preservation period: 3 years ④ Records related to identity verification Basis for preservation: Act on Promotion of Information and Communications Network Utilization and Information Protection, etc. Preservation period: 6 months ⑤ Website visit records Basis for preservation: Protection of Communications Secrets Act Preservation period: 3 months ⑥ Records related to electronic financial transactions Basis for preservation: Electronic Financial Transactions Act Preservation period: 5 years ⑦ Tax base and tax amount declaration data for value-added tax Basis for preservation: Value Added Tax Act Preservation period: 5 years after the final declaration deadline for the tax period C. When there is individual consent from members, it is retained until the period according to individual consent.

Personal Information Destruction Process and Method

Members' personal information is, in principle, destroyed without delay when the purpose of personal information collection and use is achieved. A. Destruction process Information entered by members for member registration, etc. is transferred to a separate DB after the purpose is achieved (separate filing cabinet in case of paper) and stored for a certain period according to information protection reasons under internal policies and other relevant laws (refer to retention and use period) before being destroyed. Personal information transferred to a separate DB is not used for other purposes except as required by law. B. Destruction method Personal information printed on paper is destroyed by shredding with a shredder or incineration. Personal information stored in electronic file format is deleted using technical methods that cannot reproduce records.

Provision of Personal Information to Third Parties

A. The Company uses members' personal information only within the scope notified in the 'Purpose of Personal Information Collection and Use' of the personal information processing policy or within the scope specified in the service terms of use, and does not use it beyond this scope or provide it to third parties. However, in the case of specific products, personal information outside this scope may be delivered to sellers, and in this case, we will seek consent for third-party provision after specifying the purpose of provision, information provided, use period, and provision items.

※ When the purchaser and recipient are different, recipient information (including personal unique customs clearance number for overseas delivery products) may be provided.

Personal Information Processing Consignment

A. The Company stipulates compliance with personal information protection-related laws, confidentiality of personal information, prohibition of provision to third parties, responsibility in case of accidents, consignment period, and obligation to destroy personal information after processing through consignment work contracts, etc., and manages compliance with these. B. The Company consigns personal information as follows to provide better services.

C. International Transfer

The Company consigns to overseas companies as follows for service use.

* Transfer method is transmitted through network each time data is registered, and in the case of Alibaba Cloud, consignment is processed only when members select China when changing countries and consent.

Rights of Members and Their Legal Representatives and Exercise Methods

A. Members may at any time request viewing or provision of their registered personal information, the status of the Company's use of members' personal information or provision to third parties, and the status of consent to the Company for personal information collection, use, and provision consent, and may request correction if there are errors, and may also request deletion or membership withdrawal. B. For inquiries and modifications of personal information of members or children under 14 years of age, member information modification is available, and for membership withdrawal, direct viewing, correction, or withdrawal is possible through 'Member Withdrawal' in My Page. C. In this case, the Company immediately investigates the personal information and takes necessary measures such as correction and deletion according to the member's request and then notifies the member of the results. The Company does not use or provide the relevant personal information until necessary measures are taken. D. Members may at any time request the Company to stop processing their personal information, and in this case, the Company immediately stops all or part of personal information processing according to the request and immediately takes necessary measures such as destruction of personal information for which processing has been stopped. E. If you have any objections or opinions regarding personal information, please contact the personal information protection officer and person in charge by mail, phone, or email, and we will process it immediately upon receipt and guide you through the results. - Member inquiry/modification/withdrawal usage method

- Method to request viewing, correction, deletion, processing suspension, consent withdrawal from the Company If you contact the customer center and the Company's personal information protection officer listed in [Article 9 Complaint Service for Personal Information] of this Personal Information Processing Policy by mail, phone, or email, we will take action immediately after identity verification. However, if the personal information is specified as a collection target in other laws, deletion cannot be requested. C. If members and their legal representatives request correction of errors in personal information, we do not use or provide the relevant personal information until the correction is completed. The Company processes personal information terminated or deleted at the request of members and their legal representatives according to what is specified in the personal information retention and use period and processes it so that it cannot be viewed or used for other purposes.

Member Obligations

A. Members have an obligation to protect their personal information, and the Company bears no responsibility for problems arising from leakage of personal information due to members' carelessness or internet problems. B. Please enter your personal information accurately and up-to-date. The responsibility for problems arising from members' inaccurate information input lies with the members themselves, and when joining or using services by stealing others' personal information, membership qualifications may be lost and punishment may be imposed according to the 「Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.」 and other laws. C. Members have the right to be protected for personal information as well as the obligation to protect themselves and not infringe on others' information. Please be careful not to leak members' personal information including ID and password, and be careful not to damage others' personal information including posts. D. Members must comply with the 「Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.」, Personal Information Protection Act, Resident Registration Act, and other laws related to personal information.

Linked Sites

The Company may provide members with links to other companies' websites or materials. In this case, the Company has no control over external websites and materials, so it cannot be responsible for or guarantee the usefulness of services or materials provided therefrom. When moving to external website pages through links included by the Company, the personal information processing policy of the relevant website is unrelated to the Company, so please review the policy of the newly visited website.

Posts

A. The Company values members' posts and does its best to protect them from being altered, damaged, or deleted. However, the following cases are not so. - Spam posts (e.g., advertisements for specific sites, inducement advertisements and links to other sites, etc.) - Posts that defame others by spreading false facts for the purpose of slandering others - Unauthorized disclosure of others' personal information, content that infringes on the Company's copyright, third parties' intellectual property rights, etc., posts with content different from bulletin board topics

Chat

A. The Company values members' chats and does its best to protect them from being altered, damaged, or deleted. However, the following cases are not so. - Spam posts (e.g., advertisements for specific sites, inducement advertisements and links to other sites, etc.) - Posts that defame others by spreading false facts for the purpose of slandering others - Unauthorized disclosure of others' personal information, content that infringes on the Company's copyright, third parties' intellectual property rights, etc., chats with content different from bulletin board topics - Other chats confirmed to be illegal or improper use applications such as gambling, profit-seeking, harm to public morals, etc.

Installation, Operation, and Refusal of Automatic Personal Information Collection Devices (Cookies, etc.)

A. The Company uses 'cookies' that store and retrieve members' information from time to time to provide more appropriate and useful services to members. Cookies are very small text files sent by the server used to operate the Company's website to members' computers and are stored on members' computer hard disks. Members can choose whether to use cookies. B. Cookie setting refusal method Members can allow all cookies, go through confirmation each time cookies are stored, or refuse storage of all cookies by setting options in the web browser they use. However, please note that if you refuse cookie storage, there may be restrictions on using some services that require login. Method to specify whether to allow cookie installation (in case of Internet Explorer) ① Select [Internet Options] from the [Tools] menu ② Click [Privacy] ③ Click [Advanced] ④ Select whether to allow cookies

Technical/Administrative Protection Measures for Personal Information

The Company implements the following protection measures to protect members' personal information. A. Password encryption Members' passwords are encrypted and stored and managed. Passwords can only be known by the members themselves, and even when checking and changing personal information, it is only possible by the person who knows the password. Therefore, please be especially careful not to let your password be known to others. B. Preparation for hacking and computer viruses, etc. The Company uses necessary security measures to prevent members' personal information from being leaked or damaged by hacking or computer viruses, and is striving to prepare all possible technical methods to secure more advanced security measures. C. Limitation and education of personal information processors The Company limits employees who process personal information to a minimum and regularly conducts education for related employees to check compliance and adherence to this policy. D. Establishment and implementation of internal management plans The Company establishes and implements internal management plans. E. Storage and forgery prevention of access records The Company stores and manages records of access to personal information processing systems (web logs, summary information, etc.) for at least 6 months and manages access records so they are not forged, stolen, or lost. F. Technical measures against hacking, etc. The Company installs security programs and conducts periodic updates and inspections to prevent personal information leakage and damage by hacking or computer viruses, and installs systems in areas controlled from external access and monitors and blocks them technically and physically. G. Access control for unauthorized persons The Company separately establishes physical storage locations for personal information systems that store personal information and establishes and operates access control procedures for them.

Personal Information Manager/Personal Information Protection Officer

To protect members' personal information and handle complaints related to personal information, the Company has a customer service department and personal information manager/personal information protection officer. Please contact the customer service department or personal information manager/personal information protection officer below for inquiries related to members' personal information. □ Customer Service Department: CS Office Phone number: 02-6932-0808 Email: help@08liter.com □ Personal Information Manager/Personal Information Protection Officer Name: Choi Chang-woo Phone number: 02-6932-0808 Email: help@08liter.com ※ If you need to report or consult about other personal information violations, please contact the following organizations. ① Privacy Mark Certification Committee www.eprivacy.or.kr/02-550-9531~2) ② Personal Information Infringement Report Center (www.118.or.kr / 118 without area code) ③ Supreme Prosecutors' Office Cyber Crime Investigation Unit (www.spo.go.kr / 02-3480-3571) ④ National Police Agency Cyber Terror Response Center (www.ctrc.go.kr / 182 without area code)

Protection of Children's Personal Information

Some services may be restricted for children under 14 years of age who require consent from legal representatives.

Obligation to Notify

The personal information processing policy applies from the effective date, and when changes and revisions are made according to laws and policies, it will be notified through the homepage 7 days before implementation. Effective date: January 31, 2023