SONBOM Inc. ("the Company") values your privacy and complies with applicable laws and regulations regarding the protection of personal information.

This Privacy Policy explains how we collect, use, store, and protect the personal information you provide through our website.

If this Privacy Policy is revised, any changes will be announced on our website (or through individual notifications, where applicable).

Effective Date: May 1, 2026

1. Personal Information We Collect

The Company collects the following personal information to respond to inquiries and provide our services.

Online Inquiries
- Collected information includes: Name, Contact Number, Email Address, Inquiry Details

2. Purpose of Collecting and Using Personal Information

The Company uses the collected personal information solely for the following purposes:
Responding to inquiries / Communicating regarding requested services / Performing contracts and providing requested services

3. Retention and Use of Personal Information

The Company will promptly delete personal information once the purpose of collection and use has been fulfilled. However, where retention is required by applicable laws and regulations, the Company will retain certain information for the legally prescribed period.

Records Retained

• - Records related to contracts or cancellation of contracts : 5 years (Act on the Consumer Protection in Electronic Commerce)
• - Records of payments and supply of goods/services : 5 years (Act on the Consumer Protection in Electronic Commerce)
• - Records related to customer complaints or dispute resolution : 3 years (Act on the Consumer Protection in Electronic Commerce)

4. Destruction of Personal Information

The Company destroys personal information without delay once the purpose of collection and use has been fulfilled, unless retention is required by law.

Destruction Procedure
Personal information provided by users is stored separately after its intended purpose has been fulfilled and retained only for the period required by internal policies or applicable laws.
Such information will not be used for any purpose other than those required by law.

Destruction Method
Electronic records containing personal information are permanently deleted using technical methods that prevent recovery.

5. Provision of Personal Information to Third Parties

The Company does not disclose users' personal information to third parties except in the following circumstances:
Where prior consent has been obtained from the user / Where disclosure is required by applicable laws or requested by investigative authorities in accordance with legal procedures

6. Outsourced Hosting and Maintenance

To provide stable website services, the Company entrusts certain operations to the following service provider.

• - Service Provider : ThreeAny INC.
• - Services Provided : Website Hosting, Website Maintenance, System Management

7. Rights of Users

Users may request to access their personal information, correct inaccurate information, withdraw consent, or request deletion of personal information.
Requests may be submitted by email or telephone to the Company's Privacy Officer.
If a user requests correction of inaccurate personal information, the Company will not use or disclose such information until the correction has been completed.
Where incorrect personal information has already been disclosed to a third party, the Company will promptly notify the recipient of the correction.
Deleted or withdrawn personal information will be handled in accordance with the retention periods described in this Privacy Policy and will not be used for any other purpose.
For children under the age of 14, their legal guardian may exercise these rights on their behalf.

8. Cookies

The Company uses cookies to improve website functionality and user experience. Cookies are small text files stored on your device by your web browser.

Cookies may be used for the following purposes.

Purpose of Cookies
Analyzing website traffic and visitor behavior, understanding user preferences, improving website performance, providing personalized services, and measuring participation in events or promotions. Users may choose whether to accept cookies through their web browser settings.
You may accept all cookies, receive notification before cookies are stored, or reject all cookies.

How to Reject Cookies
You may choose to accept all cookies, be notified before cookies are stored, or reject all cookies by selecting the options in your web browser.

Settings
Example (Internet Explorer) : Tools > Internet Options > Privacy
Please note that disabling cookies may affect the availability of certain website features.

9. Privacy Contact Information

If you have any questions or concerns regarding this Privacy Policy or the handling of your personal information, please contact us.

For additional assistance regarding personal information protection, you may contact the following organizations.

• - Personal Information Infringement Report Center (PIPC/KISA) (privacy.kisa.or.kr / Tel: 118 within Korea)
• - Supreme Prosecutors' Office – Cyber Investigation Division (www.spo.go.kr / Tel: 1301 within Korea)
• - Korean National Police Agency – Cyber Bureau (ecrm.police.go.kr / Tel: 182 within Korea)