Samyang Foods Privacy Policy

‘Samyang Foods Co., Ltd.’ (hereinafter referred to as “Samyang Foods”) values your personal information and complies with relevant laws and regulations such as the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc. This Privacy Policy has been established and disclosed to inform you of how the personal information you provide is used and managed, and what measures are taken to protect it.

If any changes are made to this policy, they will be announced through the website’s notice section.

1. Items of personal information collected and purpose of use

   Samyang Foods processes personal information for the following purposes. The personal information being processed is not used for any purposes other than those stated below. If the purpose of use is changed, necessary measures such as obtaining separate consent in accordance with relevant laws will be taken.

Category	Items Collected	Purpose of Collection	Retention Period
Required	Email, Password	Sign-up and account management, marketing email delivery	Until service withdrawal

* When collecting personal information, users are provided with an option to agree or disagree with the collection and use of their personal data. Clicking ‘Agree to Terms’ will be regarded as consenting to the collection and use of personal information.

2. Retention and use period of personal information

   Please refer to “1. Items of personal information collected and purpose of use” for the retention and use period of personal information by Samyang Foods. Samyang Foods will promptly destroy personal information once the purpose of collection and use has been achieved. However, if there is a need to retain the information in accordance with relevant laws, customer information may be stored as outlined below. In such cases, the personal information will be managed solely for the purpose of retention.

Relevant Law	Processing and Retention Period
Act on the Consumer Protection in Electronic Commerce	• Records related to contracts or withdrawal of offers: 5 years • Records related to payment and supply of goods: 5 years • Records related to consumer complaints or dispute resolution: 3 years • Records related to display and advertisement: 6 months
Electronic Financial Transactions Act	• Records related to electronic financial transactions: 5 years
Protection of Communications Secrets Act	• Records such as computer communication, internet log data, and tracking data of connection: 3 months

3. Outsourcing of personal information processing

1. Samyang Foods outsources the following personal information processing tasks to ensure smooth handling of personal information operations.
2. Samyang Foods specifies the necessary matters and carries out supervision to ensure that the entrusted companies safely handle personal information in accordance with the Personal Information Protection Act and other relevant laws.
3. If the content of the outsourced tasks or the trustee company changes, such changes will be disclosed through this Privacy Policy.

Trustee (Entrusted Company)	Details of Entrusted Tasks
Google LLC(‘Google’)	Analysis of visitor website usage patterns
Amplitude, Inc

4. Transfer of personal information overseas

• The company outsources part of its personal information processing tasks to overseas service providers as shown below.
• When Samyang Foods uses services of overseas cloud service providers for business operations, it does so only after thoroughly reviewing the providers’ compliance with information and personal data protection standards. These cloud service providers cannot access the company’s customer personal information.
• Notice on the use of Google API
  When using information received from Google API or transmitting it to other apps, Samyang Foods complies with the Google API Services User Data Policy, including the Limited Use requirements.

Company (Data recipient	Samyang Foods	Google, Inc. (Google Analytics & Google API)	Amplitude, Inc.
Purpose of Use	① Sign-up and account management, marketing email delivery	① Analyze usage patterns to provide personalized services (including ads) – Behavior data used for new services and improvements ② Use of Google API: Provides Oauth (Google SSO) and Google Calendar integration services	① Analyze usage patterns to provide users with recommended services (including advertisements) – Behavioral data is analyzed and used as a reference for developing new services and improving existing ones
Items Transferred	Email, password (encrypted)	Cookie information, Google account information	Mobile device model, manufacturer, device unique ID, OS version, carrier
Country of Transfer and Contact Information	United States (AWS) support@buldak.com	United States (AWS) googlekrsupport@google.com	United States (AWS) privacy@amplitude.com
Transfer Time and Method	Transferred via network during service use	Transferred via network during service use	Transferred via network during service use
Retention and Use Period	Until Service Withdrawal	Until Service Withdrawal	Until Service Withdrawal

5. Provision of personal information to third parties

Samyang Foods does not, in principle, provide users’ personal information to external parties. However, exceptions are made in the following cases:

* When users have given prior consent
* When required by law, or when requested by investigative agencies in accordance with procedures and methods prescribed by law for investigative purposes

6. Procedures and methods for destroying personal information

Samyang Foods, in principle, promptly destroys personal information once the purpose of its collection and use has been fulfilled. The procedures and methods for destruction are as follows:a

1. Account-related information is immediately deleted upon membership withdrawal.
2. IP addresses and website usage data are stored for 26 months and then automatically deleted (in accordance with Google Analytics and Amplitude policies).
3. The storage period for cookies varies depending on the type of cookie and can be adjusted through browser settings.

7. Handling of children’s personal information

Samyang Foods takes special care to protect children’s personal information, and its services are not intended for use by children under the age of 13. In addition, the company complies with local laws and implements reasonable technical safeguards to prevent children in service areas where personal information may be collected from accessing the services.

If you become aware that your child has provided personal information without your consent, please contact Samyang Foods.

8. Rights and obligations of the data subject and legal representative, and how to exercise them

If a user or their legal representative requests correction of an error in personal information, Samyang Foods will not use or provide the relevant personal information until the correction is completed. If incorrect personal information has already been provided to a third party, Samyang Foods will promptly notify the third party of the correction result so that the correction can be made. Personal information deleted at the request of the user or legal representative will be handled in accordance with the “Retention and use period of personal information,” and will not be viewed or used for any other purpose. If you have any comments or concerns regarding personal information, please contact the person in charge by mail, phone, or email. Once your identity is verified, appropriate action will be taken without delay.

9. Technical and administrative measures for the protection of personal information

Samyang Foods takes the following technical and administrative measures to ensure the security of users’ personal information.

[Technical measures]

1. Customers’ personal information is protected through separate security features such as data encryption during transmission.
2. Samyang Foods regularly backs up data to guard against hacking and computer viruses, and takes measures to prevent the leakage or damage of users’ personal information or data.
3. Samyang Foods adopts encryption algorithms that allow safe transmission of personal information over the network.
4. Samyang Foods uses intrusion prevention systems to block unauthorized access from outside and strives to implement additional technical measures to ensure system security.

[Administrative measures]

Samyang Foods designates specific employees to handle personal information and limits access to authorized personnel only. Individual passwords are assigned and regularly updated. In addition, staff members receive ongoing training to reinforce compliance with the privacy policy.

10. Installation, operation, and refusal of automatic data collection devices

• Samyang Foods uses ‘cookies’ that store and retrieve user information from time to time in order to provide personalized services and convenience to users.
• A cookie is a small piece of data sent by the server (http) used for operating the website to the data subject’s browser, and it is stored on the data subject’s PC or mobile device.
• The data subject can choose to allow or block cookies through browser settings. However, if cookies are disabled, it may become difficult to use certain personalized services.

< How to allow/block cookies >

▶ Allowing/blocking cookies in web browsers

• Chrome: Browser settings > Privacy and security > Clear browsing data
• Edge: Browser settings > Cookies and site permissions > Manage and delete cookies and site data

▶ Allowing/blocking cookies in mobile browsers

• Chrome: Mobile browser settings > Privacy and security > Clear browsing data
• Safari: Mobile device settings > Safari > Advanced > Block all cookies
• Samsung Internet: Mobile browser settings > Browsing history > Delete browsing history

11. Personal information protection officer

① The company takes full responsibility for tasks related to personal information processing and has designated the following personal information protection officer to handle complaints and provide relief related to personal information processing.

▶ Personal Information Protection Officer

Name: Seongbo Shim
Position: Head of Division
FAX: 02-2157-9069
Email: support@buldak.com

 ※ Connected to the department in charge of receiving and processing personal information access requests.

12. Request to access personal information

You may request access to your personal information in accordance with Article 35 of the Personal Information Protection Act by contacting the department listed below. Samyang Foods will make every effort to process your request promptly.

▶ Department in charge of receiving and processing access requests

Department name: Buldak Brand Division

Email: support@buldak.com

13. Remedies for infringement of users’ rights and interests

If your personal information is infringed, you may seek resolution or counseling by contacting the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency (KISA) Personal Information Infringement Report Center, or other relevant organizations listed below.

1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors’ Office Cyber Crime Division: 1301 (www.spo.go.kr)
4. Korean National Police Agency: 182 (ecrm.cyber.go.kr)

If you believe that your rights or interests have been infringed due to a disposition or failure to act by the head of a public institution in response to your request under Article 35 (Access to Personal Information), Article 36 (Correction or Deletion of Personal Information), or Article 37 (Suspension of Processing of Personal Information) of the Personal Information Protection Act, you may file an administrative appeal in accordance with the Administrative Appeals Act.

14. Duty of notification

In the event of any additions, deletions, or modifications to the current Privacy Policy, such changes will be announced through the website’s ‘Notice’ section at least 7 days prior to the effective date.

15. Changes to the privacy policy

This Privacy Policy will take effect from 03 31, 2025.

16. Miscellaneous

Please note that this “Samyang Foods Privacy Policy” does not apply to personal information collection activities by websites linked to Samyang Foods.