K.FAIRS Co., Ltd. (the "Company") values the personal information of its users and complies with applicable laws and regulations, including the Personal Information Protection Act of the Republic of Korea. Through this Privacy Policy, the Company explains the purposes and methods of processing personal information and the measures implemented to protect such information.

1. Purpose of Collection and Use of Personal Information

The Company processes personal information for the following purposes. Personal information is not used for purposes other than those stated below. In the event the purpose of use changes, the Company will take necessary measures, including obtaining separate consent where required by law.
Membership Registration and Management: Verification of membership registration, user identification and authentication, maintenance and administration of membership status, and prevention of unauthorized or fraudulent use of services.
Provision of Services: Processing applications for exhibition utility services, rental and installation of equipment, payment processing and settlement, and management of service usage records.
Customer Support: Responding to inquiries, conducting fact-finding investigations, providing notifications, and communicating the results of request processing.

2. Categories of Personal Information Collected

The Company collects the minimum personal information necessary to provide its services.
Mandatory Information: [User ID, Password, Contact Person Name, Contact Person Mobile Number, Contact Person Email Address, Company Name, Business Registration Number]
Optional Information: [Department Name, Job Title, Fax Number]
Payment Information: [Credit Card Information, Bank Account Information, and other payment-related information required for payment processing]
Automatically Generated Information: Service usage records, access logs, cookies, IP addresses, and related technical information.

3. Retention and Use Period of Personal Information

The Company retains and processes personal information within the retention period prescribed by applicable laws or agreed to by the user at the time of collection.
The retention and use period for each category is as follows:
Membership Registration and Management: Until membership withdrawal. (However, where service application records exist, retention shall be subject to applicable legal requirements)
Records Retained Pursuant to Applicable E-Commerce Laws:
Records related to contracts or withdrawal of subscriptions: 5 years
Records related to payments and supply of goods or services: 5 years
Records related to consumer complaints or dispute resolution: 3 years

4. Provision of Personal Information to Third Parties

The Company processes personal information only within the scope specified in this Privacy Policy and provides personal information to third parties only where the user has provided consent or where such provision is permitted under applicable laws and regulations.
The Company, in principle, does not provide users' personal information to external third parties.

5. Entrustment of Personal Information Processing

To facilitate efficient service operations, the Company entrusts certain personal information processing activities to the following service providers:
Payment Processing Service Provider: Eximbay
Server Management and System Operation: SYSFORU Co., Ltd.

6. Rights and Obligations of Data Subjects

Users may at any time access, review, correct, update, or request deletion of their personal information and may request termination of their membership in accordance with applicable laws and procedures established by the Company.

7. Procedures and Methods for Destruction of Personal Information

The Company shall promptly destroy personal information when the retention period has expired or the purpose of processing has been achieved. Electronic files containing personal information shall be permanently deleted using technical methods that prevent recovery or reproduction.

8. Measures to Ensure the Security of Personal Information

The Company implements appropriate administrative, technical, and physical safeguards to protect personal information.
Administrative Measures: Establishment and implementation of internal management policies and periodic employee training
Technical Measures: Access control management, encryption of personal information and unique identification information, installation and operation of security software, and other protective measures.

9. Personal Information Protection Officer

The Company has designated the following Personal Information Protection Officer responsible for overseeing personal information protection matters and handling user inquiries, complaints, and requests for remedies.
Personal Information Protection Officer
Name: HyeongJune Lee
Title: Assistant Manager
Contact: hyeongjune.lee@kfairs.com

10. Amendments to this Privacy Policy

This Privacy Policy shall become effective on **July 1, 2026**. The Company reserves the right to amend this Privacy Policy in accordance with applicable laws and operational requirements. Any amendments shall be announced through the Company's website prior to their effective date.