NOVAIT (hereinafter referred to as "the Company") values your personal information and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.

Through this Privacy Policy, the Company informs you of how the personal information you provide is used and what measures are taken to protect it.

If the Company revises this Privacy Policy, it will be announced through website notices (or individual notices).

This policy is effective from June 1, 2026.

1. Personal Information Collected

The Company collects the following personal information for consultation and related purposes.

Online Inquiry
- Items collected: Name, contact information, email, inquiry details, etc.

2. Purpose of Collection and Use

The Company uses the collected personal information for the following purposes.
Fulfillment of contracts related to service provision and responding to inquiries regarding services

3. Retention and Use Period

In principle, personal information is destroyed without delay once the purpose of collection and use has been achieved. However, if retention is required under applicable laws, the Company retains member information for the period specified below.

Items Retained and Legal Basis for Retention of Payment Records

• - Records regarding contracts or subscription withdrawals, etc.: 3 years retention period
• - Records regarding contracts or subscription withdrawals, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, Etc.)
• - Records regarding payment and supply of goods, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, Etc.)
• - Records regarding consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce, Etc.)

4. Destruction Procedure and Method

In principle, the Company destroys personal information without delay once the purpose of collection and use has been achieved. The destruction procedure and method are as follows.

Destruction Procedure
Information you enter for membership registration, etc. is transferred to a separate database (or a separate filing cabinet in the case of paper records) after the purpose has been achieved, stored for a certain period in accordance with internal policies and other applicable laws for information protection (see Retention and Use Period), and then destroyed.
Personal information transferred to a separate database is not used for any purpose other than retention unless required by law.

Destruction Method
Personal information stored in electronic file format is deleted using technical methods that prevent the records from being reproduced.

5. Provision of Personal Information

The Company does not, in principle, provide users' personal information to external parties. However, exceptions apply in the following cases.
When users have given prior consent; when required by law; or when requested by investigative agencies for investigative purposes in accordance with procedures and methods prescribed by law

6. Hosting and Maintenance

The Company entrusts operation to external specialized companies as follows for service fulfillment.

• - Entrusted party: THREEANY INC.
• - Entrusted work: Website and system management (hosting / maintenance)

7. Rights of Users and Legal Representatives

Users may at any time view or modify their registered personal information and may request membership cancellation.
To view or modify personal information, use "Change Personal Information" (or "Edit Member Information," etc.); to cancel membership (withdraw consent), click "Withdraw Membership" and complete identity verification to directly access, correct, or withdraw.
Alternatively, contact the Privacy Officer in writing, by phone, or by email, and we will take action without delay.
If you request correction of errors in your personal information, the Company will not use or provide such personal information until correction is completed.
If incorrect personal information has already been provided to a third party, the Company will notify the third party of the correction results without delay so that correction can be made.
Personal information deleted or destroyed at the user's request is processed in accordance with "Retention and Use Period of Personal Information Collected by the Company" and cannot be accessed or used for any other purpose.
For children under 14 years of age, legal representatives have the right to view or modify the child's personal information and to withdraw consent for collection.

8. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

The Company uses cookies and similar devices that store and retrieve your information from time to time. Cookies are very small text files sent by the server operating the website to your browser and stored on your computer's hard drive.

The Company uses cookies for the following purposes.

Purpose of Using Cookies
Analyzing access frequency and visit duration of members and non-members, identifying user preferences and interests and tracking browsing activity, and determining participation in events and number of visits for targeted marketing and personalized services. You have the choice whether to accept cookies.
Therefore, you may configure your web browser to allow all cookies, confirm each time a cookie is saved, or refuse to save all cookies.

How to Refuse Cookie Settings
You can configure your web browser options to allow all cookies, confirm each time a cookie is saved, or refuse to save all cookies.

Settings
Example (Internet Explorer): Tools > Internet Options > Privacy at the top of the web browser
However, if you refuse cookie installation, there may be difficulties in providing services.

9. Complaint Service Regarding Personal Information

The Company has designated the relevant department and Privacy Officer below to protect customers' personal information and handle complaints related to personal information.

For reports or consultations regarding other personal information infringements, you may contact the following organizations.

• - Personal Information Infringement Reporting Center (privacy.kisa.or.kr / 118 without area code)
• - Cyber Investigation Division, Supreme Prosecutors' Office (www.spo.go.kr / 1301 without area code)
• - Cyber Bureau, Korean National Police Agency (police.go.kr / 182 without area code)