The Garden of Natural Solution Co., Ltd. (hereinafter referred to as the “Company”) sets out the Privacy Policy in compliance with Article 30 of the Personal Information Protection Act. The Policy explains the guidelines on what the Company does to protect personal information of data subjects and to address any related complaints quickly and amicably.

Article 1. (Purpose of Processing Personal Information) The Company shall collect and process personal information for the following purposes:
1. Responses to Product Inquiries
To provide answers to your inquiries on our products
2. Marketing- and PR-related Information
For customer relationship activities such as product introductions, event invitations, and product exhibitions.
The Company shall process personal information only for the activities explained above. When there is any change in the purposes, the Company will take necessary measures such as seeking your consent in compliance with Article 18 of the Personal Information Protection Act.

Article 2. (Period of Processing and Retention of Personal Information) ① The Company shall process and retain personal information for a period specified in the related laws and regulations or agreed by data subjects at the time of collecting their personal information.
② The Company shall process and retain the personal information until it closes its business. However, for some exceptional cases, the Company shall retain personal information until their termination. Such exceptions are as follows:
1) Under progress of investigations or examinations for possible breaches of related laws and regulations
2) Remained claim-obligation relationships related to the use of company website.

Article 3. (Rights and Obligations of A Data Subject and his/her Legal Representative, and Method of Exercise) ① A data subject has the rights to request access, correction, or deletion of personal information, or suspension of processing it to the Company at any time.
② A data subject may exercise the rights enumerated above in Paragraph ① via post, email, or fax in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and the Company shall respond to the requests and take necessary measures without delay.
③ A data subject may can exercise the rights enumerated in the above Paragraph ① through his/her legal representative or delegate. In this case, the data subject shall submit the power of attorney pursuant to the Attached Form No. 11 of the Enforcement Rule of the Personal Information Protection Act.
④ When a data subject requests access to or suspension of processing personal information, his/her rights might be restricted in accordance with Articles 35 (5) and 37 (2) of the Personal Information Protection Act.
⑤ A data subject is not allowed to request for deletion of personal information if other laws or regulations require the collection of such information.
⑥ In case a data subject requests for access, correction, or deletion of personal information, or suspension of processing it, the Company shall verify the identity of the data subject or whether his/her legal representative or delegate is righteously entitled as such.

Article 4. (Details on Personal Information to be Processed) The Company handles the following personal information:
1. Responses to Product Inquiries
․Name, company name, country/city, email address, telephone number
2. Marketing- and PR-related Information
․Name, company name, country/city, email address, telephone numbe
3. The following data may be automatically generated and collected while you use our Internet service.
․Your IP address, cookies, MAC address, logs on service usage, visiting logs, and logs on inappropriate usage.

Article 5 (Provision of Personal Information to a Third Party) The Company does not provide users’ personal information to the outside world in principle; provided, however, that this shall not apply in the following cases:
– Where such provision is in accordance with relevant laws and regulations or where there is a request from an investigative agency for the purpose of conducting an investigation according to the procedure and method set forth in applicable laws and regulations;
– Where such provision is necessary for the settlement of charges for the provision of paid services;
– Where particular personal information is processed and provided in an unidentifiable form in order to prepare a statistic or conduct academic research or a market survey; and
– Where users consent to such provision.
※ The list of companies below may change later. Where the list changes or where any user’s personal information other than that set forth herein is provided or shared, such information is provided after a separate procedure to obtain the user’s consent is taken.

① ANS
- Recipient: The Art of Natural Solution Inc. (the U.S.)
- Personal information provided: Connecting information (CI)
- Purpose of use by the recipient: Providing and developing online and offline integrated benefit services, conducting an analysis, and marketing use
- Retention and use period: Until the purpose of providing such information is accomplished.

② TSOC
- Recipient: The Secrets of Caledonia Co., Ltd. (the U.K.)
- Personal information provided: Connecting information (CI)
- Purpose of use by the recipient: Providing and developing online and offline integrated benefit services, conducting an analysis, and marketing use
- Retention and use period: Until the purpose of providing such information is accomplished.

Article 6. (Destruction of Personal Information) ① The Company shall destroy the personal information without delay as soon as the information becomes unnecessary because the retention period ends or the intended goals are achieved.
② Although the retention period agreed by the data subject of information is expired and the goals are accomplished, however, the Company shall move the personal information to a separate database or store the data in a different storage unit in the case that related laws and regulations require the Company to preserve the Procedures and methods for personal information destruction are as follows.
③ Please check the information below to destroy the personal information

1. The Company shall screen out the personal information that falls under the destruction reasons and then destruct the information upon the Company’s our personal information manager’s approval.
2. Destruction method
The Company shall destroy the personal information recorded and stored in a digital format completely not to restore the data. In the case that the information is recorded in papers, the Company incinerates the papers or destroys them with shredders.

Article 7. (Measures to Ensure the Personal Information Safe and Secure) The Company takes the following measures to ensure the safety of the personal information.
1. Administrative measures: Establish and implement internal control plans and regular staff training programs.
2. Technical measures: Control the access rights, install access control systems, encode unique identification information, and install security programs.
3. Physical measures: Control access to the computer room and data center.

Article 8. The Company does not use "cookies," which can store and recall at any time the usage information of a data subject.

Article 9. (Personal Information Manager) ① The Company appoints the following person as a personal information manager and assigns the manager to manage personal information, address the complaints from data subjects, and remedy their damages.
▶ Personal Information Manager
Name : Park Seong-Dae
Title : Director of Management Support Division
Contact : +82-31-374-5240(110), sdpark@naturalsolution.co.kr, +82-31-374-5246
► Department responsible for personal information protection
Name : Management Support Team
Person in charge : Team Leader Hwang Gyu-Tae
Contact : +82-31-374-5240(116), kthwang@naturalsolution.co.kr, +82-31-374-5246
② A data subject may contact the Company’s personal information manager or responsible team to make an inquiry of any personal information issues, raise a complaint or seek a remedy thereof. The Company shall respond to and address any requests by the data subject without delay.

Article 10 (Request for Assess to Personal Information) A data subject may request assess to his/her personal information pursuant to Article 35 of the Personal Information Protection Act to the following departments. The Company will endeavor to promptly process the request for assess to personal information from the data subject.
► Departments receiving and processing requests for assess to personal information
Department: Management Support Team
Person in charge : Team Leader Hwang, Gyu-Tae
Contact: 031-374-5240(116), kthwang@naturalsolution.co.kr, 031-374-5246

Article 11 (Remedies for Infringement on Rights and Interests) A data subject may inquire of the following organizations about damage relief, consultation, etc. about infringement of personal information.
► Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
- Duties in charge: Reporting personal information infringements and applying for consultation
- Homepage: privacy.kisa.or.kr
- Phone: (Without station number) 118
- Address: Personal Information Infringement Report Center, F3, 9 (301-2, Bitgaram-dong), Jinheung-gil, Naju-si, Jeollanam-do, (58324) Republic of Korea
► Personal Information Dispute Mediation Committee
- Duties in charge: Application for personal information dispute mediation, collective dispute mediation (civil settlement)
- Homepage: www.kopico.go.kr
- Phone: (Without station number) 1833-6972
- Address: 4F of Seoul Government Building, 209, Sejongdae-ro, Jongno-gu, Seoul, (03171) Republic of Korea
► Cyber Crime Division of Supreme Prosecutors' Office: 02-3480-3573 (www.spo.go.kr)
► Cyber Security Bureau of National Police Agency: 182 (http://cyberbureau.police.go.kr)

Article 12 (Change of Privacy Policy) ① This Privacy Policy will be effective from March 15, 2019.