Dental Care Co., Ltd. (hereinafter referred to as “the Company”) establishes and discloses the following Personal Information Processing Policy in accordance with Article 30 of the Personal Information Protection Act, in order to protect the personal information of data subjects and to ensure prompt and efficient handling of any related inquiries or complaints.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes. Personal information being processed will not be used for purposes other than those specified below, and if the purpose of use changes, the Company will take the necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.

• 1. Providing responses to customer inquiries submitted through the website and managing inquiry status

Article 2 (Processing and Retention Period of Personal Information)

① The Company processes and retains personal information within the retention period agreed upon by the data subject at the time of collection or within the period specified by applicable laws and regulations.

②The processing and retention periods are as follows:

• 1. Within 1 year from the date the customer inquiry is received through the website

Article 3 (Provision of Personal Information to Third Parties) Not Applicable

Article 4 (Outsourcing of Personal Information Processing) Not Applicable

Article 5 (Rights and Obligations of Data Subjects and Methods of Exercise)

① Data subjects may exercise the following rights related to the protection of their personal information at any time with respect to the Company:

• 1. Request for access to personal information
• 2. Request for correction of errors, if any
• 3. Request for deletion
• 4. Request for suspension of processing

② The rights under Paragraph 1 may be exercised through written request, telephone, or email, and the Company will take the necessary measures without delay.

③ When a data subject requests correction or deletion due to errors in their personal information, the Company will not use or provide the relevant personal information until the correction or deletion has been completed.

④ The rights under Paragraph 1 may be exercised through a legal representative or an authorized agent. In such cases, a power of attorney in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.

⑤ Data subjects must not violate relevant laws and regulations by unlawfully infringing upon the personal information or privacy of themselves or others being processed by the Company.