Privacy Policy

This Privacy Policy takes effect on December 5, 2025.

Smile Beauty Systems INC. collects, retains, and processes personal information in accordance with applicable laws and regulations. We strictly comply with the Personal Information Protection Act and related legislation to lawfully process personal data and to manage it safely, ensuring the protection of the rights and freedoms of data subjects while properly carrying out our public duties.
Pursuant to Article 30 of the Personal Information Protection Act, we establish and disclose this Privacy Policy to provide data subjects with clear guidance on our procedures and standards for handling personal information, and to ensure that any related inquiries or complaints can be addressed promptly and efficiently.

1. Purpose of Processing Personal Information, Items Collected, and Retention & Usage Period

Smile Beauty Systems INC. collects only the minimum amount of personal information necessary for performing its duties and handling inquiries. Detailed information regarding the specific items of personal data processed and the purposes for which they are used is provided in the Privacy Policy of each respective service, where data subjects can review and verify such details.

2. Provision of Personal Information to Third Parties

Smile Beauty Systems INC. provides personal information to third parties only in cases that fall under Articles 17 and 18 of the Personal Information Protection Act, such as when the data subject has given consent or when a specific provision of the law permits it.

1. When separate consent has been obtained from the data subject
2. When a specific provision under another law permits such disclosure
3. When it is clearly necessary to protect the urgent life, body, or property interests of the data subject or a third party
4. When the personal information cannot be used for purposes other than the original purpose, or cannot be provided to a third party, and such use or provision is essential for performing duties prescribed by other laws, and the matter has been reviewed and approved by the Personal Information Protection Commission
5. When required to provide information to a foreign government or international organization for the implementation of treaties or other international agreements
6. When necessary for the investigation of crimes, the initiation or maintenance of prosecution
7. When necessary for the performance of judicial duties by the courts
8. When necessary for the execution of criminal sentences, protective measures, or custodial dispositions
9. When urgently required for public health, public safety, or general welfare

Smile Beauty Systems INC. will notify users of the following items and obtain their consent before providing personal information to any third party.

1. The recipient of the personal information
2. The purpose of use of the personal information (in the case of provision, the purpose of use by the recipient)
3. The items of personal information to be used or provided
4. The retention and usage period of the personal information (in the case of provision, the retention and usage period by the recipient)
5. The fact that the data subject has the right to refuse consent, and if any disadvantages may arise from refusal, the details of such disadvantages

3. Delegation of Personal Information Processing (Outsourcing)

This website does not outsource any tasks related to the processing of personal information.
However, if Smile Beauty Systems INC. entrusts the processing of personal information to a third party, the details of the outsourced tasks and the entrusted party (including any subcontractors) will be disclosed on the website of the corresponding service.

4. Procedures and Methods for Destroying Personal Information

1. Establishment of a Destruction Plan
   · Smile Beauty Systems INC. establishes a personal information destruction plan in accordance with internal policies and applicable laws.
2. Destruction Procedures and Timeline
   · Personal information entered by users is destroyed without delay within five (5) days after the retention period has expired or the purpose of processing has been achieved.
3. Methods of Destruction
   · When destroying personal information processed by Smile Beauty Systems INC., the following methods are used:

– For electronic files: permanently deleted using technical methods that prevent recovery
– For records, printouts, written documents, or other non-electronic media: shredded or incinerated

Even if the retention period agreed to by the data subject has expired, or the purpose of processing has been fulfilled, certain personal information may be preserved in accordance with other applicable laws. In such cases, the information is stored separately by transferring it to a separate database (DB) or by changing the storage location.

5. Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them

Smile Beauty Systems INC. promptly destroys personal information without delay when it is no longer necessary, such as when the retention period has expired or the purpose of processing has been fulfilled.

1. Data subjects may exercise their rights at any time with respect to Smile Beauty Systems INC., including the right to access, correct, delete, suspend processing of, or withdraw consent for their personal information.
   ※ Requests for access, etc., regarding the personal information of children under the age of 14 must be made directly by their legal representative.
   Data subjects aged 14 or older who are minors may exercise their rights themselves or through their legal representative.
2. Rights may be exercised through written request, email, or fax in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act.
   Smile Beauty Systems INC. will take prompt action upon receiving such requests.
   [Notice on Personal Information Processing Methods (No.2023-12), Attachment No. 8] Personal Information Access Request Form
3. Delegation Form
   [Notice on Personal Information Processing Methods (No.2023-12), Attachment No.11] Power of Attorney
4. Requests for access or suspension of processing may be restricted under Articles 35(4) and 37(2) of the Personal Information Protection Act.
5. Requests for correction or deletion may not be accepted if the relevant personal information is explicitly required to be collected under other applicable laws.
6. When a data subject makes a request for access, correction, deletion, or suspension of processing,
   Smile Beauty Systems INC. verifies whether the requester is the data subject or a legitimate representative.
7. Requests for access to personal information may be submitted to the department below.
   Smile Beauty Systems INC. will make every effort to ensure that such requests are handled promptly.

6. Measures to Ensure the Security of Personal Information

Smile Beauty Systems INC. implements the following measures to ensure the security and protection of personal information.

1. Establishment and Implementation of an Internal Management Plan
   · Smile Beauty Systems INC. establishes and implements an internal management plan in accordance with the “Standards for Ensuring the Security of Personal Information.”
2. Minimization and Training of Personnel Handling Personal Information
   · The company minimizes the number of employees authorized to handle personal information and provides them with regular training.
3. Access Restrictions to Personal Information
   · Access to databases that process personal information is controlled through the granting, modification, and revocation of access privileges.
   Unauthorized external access is blocked through the use of firewall and intrusion prevention systems.
4. Retention and Protection of Access Logs
   · Records of access to the personal information processing system (such as web logs and summary data) are retained and managed for at least one year.
   ※ However, if the system processes personal information of 50,000 or more data subjects, or processes unique identification information or sensitive information, such logs are retained and managed for at least two years.
5. Encryption of Personal Information
   · Users’ personal information is encrypted during storage and management.
   Important data is encrypted during both storage and transmission, and additional security functions are applied when necessary.
6. Technical Measures Against Hacking and Other Threats
   · To prevent the leakage or damage of personal information caused by hacking, computer viruses, or similar incidents,
   Smile Beauty Systems INC. installs security programs, conducts periodic updates and inspections,
   places systems in areas with restricted external access, and applies technical and physical monitoring and blocking measures.
7. Physical Access Control for Unauthorized Persons
   · The physical storage location of systems containing personal information is maintained separately,
   and access control procedures are established and operated to restrict entry by unauthorized individuals.

7. Installation and Operation of Automatic Personal Information Collection Devices and How to Refuse Them

1. Smile Beauty Systems INC. uses cookies when necessary to collect access statistics and improve services during website operation.
2. A cookie is a small piece of data sent from the server (HTTP) operating the website to the user’s web browser,
   and it may be stored on the hard drive of the user’s PC or on a mobile device.
   – Purpose of cookie use: Cookies are used to analyze user access patterns and improve services.
   – Installation, operation, and refusal of cookies: Users may allow, block, or delete cookies through their web browser settings.

▶ Allowing/Blocking Cookies in Web Browsers
· Chrome: Browser Settings > Privacy and Security > Clear Browsing Data
· Edge: Browser Settings > Cookies and Site Permissions > Manage and Delete Cookies and Site Data
· Whale: Browser Settings > Privacy > Clear Browsing Data

▶ Allowing/Blocking Cookies in Mobile Browsers
· Chrome (Mobile): Mobile Browser Settings > Privacy and Security > Clear Browsing Data
· Safari: Device Settings > Safari > Advanced > Block All Cookies
· Samsung Internet: Mobile Browser Settings > Browsing Data > Delete Browsing Data

8. Personal Information Protection Officer and Department in Charge of Personal Information Management

1. Smile Beauty Systems INC. appoints a Personal Information Protection Officer who is responsible for overseeing all tasks related to personal information processing,
   as well as handling complaints and providing remedies for data subjects in connection with personal information matters.
2. Data subjects may contact the Personal Information Protection Officer or the department in charge for any inquiries, complaints, or requests for remedies related to personal information protection that arise while using the services of Smile Beauty Systems INC.
   The company will respond to and process such inquiries without delay.

9. Remedies for Infringement of Data Subjects’ Rights

Data subjects may seek dispute resolution or consultation in order to obtain remedies for personal information infringements through the Personal Information Protection Portal or the Personal Information Infringement Report Center operated by the Korea Internet & Security Agency (KISA).
For reporting or consulting on other personal information–related infringements, data subjects may also contact the institutions listed below.

1. Personal Information Dispute Mediation Committee: +82-1833-6972 (www.privacy.go.kr)
2. Personal Information Infringement Report Center (KISA): +82-118 (privacy.kisa.or.kr)
3. Supreme Prosecutors’ Office: +82-1301 (www.spo.go.kr)
4. National Police Agency: +82-182 (ecrm.cyber.go.kr/minwon/main)

Under Articles 35 (Access to Personal Information), 36 (Correction and Deletion of Personal Information), and 37 (Suspension of Processing) of the Personal Information Protection Act, a person whose rights or interests have been infringed due to a disposition or omission made by the head of a public institution in response to such requests may file an administrative appeal pursuant to the Administrative Appeals Act.

※ Central Administrative Appeals Commission: +82-110 (www.simpan.go.kr)

10. Amendments to the Privacy Policy

1. This Privacy Policy is effective as of December 5, 2025.