Privacy Policy

Optapex Privacy Policy

Last Updated: 2025/03/17

This is the privacy policy of LG CNS Co, Ltd. for data collected through Optapex. Werespect your privacy and understand that you have a right to know why we collect yourpersonal information and what we do with it. This Privacy Policy applies to information wecollect by or through Optapex.

The Optapex, MOP announces the Privacy Policy as follows.

1. Items of personal information to be processed

A. The Company collects the following personal information for efficient customerconsultation and provision of various services.

Contact Us
- Required information: Name, country of residence, email, company name
- Optional : Business description, job title, phone number

You have the right to withhold consent to the collection of ‘required information’, and youmay withhold consent to the collection of optional information other than the requiredinformation. If you do not agree to the collection of required information, your use of theservice may be restricted.

B. In the process of using the service, the following information may be automaticallygenerated and collected.
- IP address, date and time of visit, service usage records

C. Method of collection of personal information

The Company collects personal information using the following methods.
– Contact Us, Sign Up, Log In

2. Purpose of processing and using personal information

The Company processes the collected personal information for the following purposes.

● Provision of information and guides (responses) on customer inquiries and statusmanagement
● Facilitation of communication between executives and employees and work processesto answer customer inquiries
● Provision of resource materials and newsletters and for marketing purposes

3. Sharing and provision of collected personal information

The Company uses the user’s personal information within the scope notified in “2. Purposeof processing and using personal information” and does not use it beyond the scopetherein or disclose the user’s personal information to third parties without the prior consentof the user. However, exceptions may be made in the following cases.

● When the user has agreed to the disclosure in advance
● When there is a request from the investigative agency in accordance with the provisionsof the law or in accordance with the procedures and methods set forth in the law for thepurpose of investigation

4. Processing and retention period of personal information

The Company processes and retains the following information for the period specified forthe following reasons.

A. Retention of information according to Company policy

Processing and retention period of personal information

Items retained

Purpose of retention

Retention period

To provide solutionservices

Until accountclosure

Name, country of residence, phonenumber, email, company name, jobtitle, category

Checking the inquirydetails

Until accountclosure

Name, email, company

Email marketing

36 months

● The Company stores and utilizes the information until the end of subscription, anddestroys the information without delay after the purpose of collection and use isachieved or when the user withdraws consent.

● We retain your personal data for as long as your account is active. Upon accountclosure, to ensure compliance with legal and operational requirements, we will delete oranonymize your data unless required by law to keep it for a longer period.

● Other personal information is retained for the consented retention period if priorconsent is obtained individually from the user for the retention period.

B. Retention of information in accordance with relevant laws and regulations

● If an investigation, etc., is in progress due to a violation of related laws, the Companyretains the information for a certain period of time in accordance with the relevant lawsand regulations until the end of the investigation.

5. Matters Regarding Transfer of Personal Information

In order to improve the service, the Company transfers personal information as follows,and stipulates necessary matters (prohibition of handling personal information forpurposes other than the purpose of consigned business, restrictions on re-transfer,measures to ensure security, etc.) so that personal information can be safely managedduring consignment contracts in accordance with relevant laws and regulations. When theconsignee changes, the Company will disclose the changes through this Privacy Policywithout delay.

1) Company name: Amazon Web Service

- Duties and purpose: Data storage and system operation- Country of transfer of personal information: USA
- Items of personal information to be transferred: All personal information collected inthe process of providing services
- Date and time of transfer of personal information: When information is entered forservice use
- Method of transfer of personal information: Storing personal information in the AmazonWeb Service computing environment
- Period of retention and use of personal information: Retention until the expiration dateof the user’s personal information

2) Company Name: Stripe, Inc.

- Duties and Purpose: Payment processing and billing management
- Country of Transfer of Personal Information: USA
- Items of Personal Information to Be Transferred: Name, email address, phone number,payment method details (e.g., credit/debit card information)
- Date and Time of Transfer of Personal Information: At the time a payment is processedor billing information is entered
- Method of Transfer of Personal Information: Secure transmission via Stripe’s paymentprocessing platform
- Period of Retention and Use of Personal Information: Retention in accordance withStripe’s policies; please refer to Stripe’s Privacy Policy for more details

6. Rights of users and legal representatives and methods of exercising suchrights

You have the right to:

Access and obtain a copy of your personal information.
Request correction of any inaccurate or incomplete data.
Request deletion of your personal information under certain circumstances.
Object to or restrict the processing of your personal information.

Withdraw your consent at any time without affecting the lawfulness of processing based onconsent before its withdrawal. To exercise these rights, please contact us atoptapex@lgcns.com / mop@lgcns.com.

7. Technical/administrative protection measures for personal information

The Company takes the following technical/administrative measures to ensure security sothat personal information is not lost, stolen, leaked, falsified or damaged in processingusers’ personal information.

A. Technical protection measures for personal information
- The Company takes the following technical measures to ensure safety so thatpersonal information is not lost, stolen, leaked, falsified or damaged while processingyour personal information.
- In preparation for external intrusions such as hacking, each server uses an intrusionprevention system and vulnerability analysis system to ensure security.

B. Administrative protection measures for personal information

– Restrictions and training on personal information handlersThe Company ensures that personal information is handled only by those who are incharge of the relevant tasks. For this purpose, a separate password is assigned andregularly renewed. The Company always emphasizes compliance with the PrivacyPolicy through regular training for the persons in charge.
– Restriction of access to personal information processing systemThe Company has established internal standards for system access rights of personalinformation handlers and manages their grants, changes, and cancellations. TheCompany is implementing measures to manage personal information handlers, such asmanaging the standard/change period when generating passwords for personalinformation handler access rights. In addition, if personal information is lost, leaked,falsified, or damaged due to an internal manager’s mistake or an incident in technicalmanagement, the Company will immediately inform you of the fact and deviseappropriate measures and compensation.

8. Procedure and method of personal information destruction

As a general rule, the Company destroys the information without delay after the purpose ofcollecting and using personal information is achieved. The destruction procedure andmethod are as follows.

1. Destruction procedure
The information entered by the user is destroyed after being stored for a certain periodof time once its purpose has been achieved, in accordance with internal policies andother reasons for information protection pursuant to relevant laws (refer to retention anduse period). Personal information will not be used for any purpose other than storing fora certain period of time unless otherwise required by law. Should you wish yourinformation provided for marketing purposes be destroyed immediately, please contactus at optapex@lgcns.com / mop@lgcns.com with your name and email.

2. Destruction method

– Personal information stored in the form of electronic files is completely deleted fromthe hard disk using a technical method that cannot reproduce the record.
– Personal information printed on paper is shredded with a shredder or destroyed byincineration.

9. Contact information of the Personal Information Manager and the persons incharge

In order to protect users’ personal information and handle complaints related to personalinformation, the Company appoints the relevant departments and Personal InformationManagers as follows.

10. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), the legal basis for processing yourpersonal data is consent.

11. Email Communications

You will receive emails to verify your account when you sign up or request a demo. Youmay also receive notifications related to our service. You can opt-out of marketingcommunications at any time.

12. California Consumer Privacy Act (CCPA) Additional Information

For California residents, we provide the following additional information:

● Categories of personal information collected in the past 12 months: Identifiers,professional information, internet activity information
● Categories of sources: Directly from you, automatically through your use of ourwebsite
● Business purpose for collecting: As described in Section 2 of this policy
● Categories of third parties with whom we share personal information: Serviceproviders (e.g., AWS)

California residents can access their personal data through our solution.

13. Account Closure and Data Deletion

When you close your account with our service, we will delete all personal information wehandle directly in accordance with our data retention and destruction policies. However,

please note that data related to billing and payment, such as your name, email address,billing address, phone number, and payment method details, is processed and stored byour payment processor, Stripe. Stripe retains this information in accordance with its ownprivacy policy and legal obligations.

If you wish to request deletion of your billing-related data stored by Stripe, you maycontact us at optapex@lgcns.com, and we will assist you in facilitating this request withStripe. Alternatively, you may contact Stripe directly by referring to their Privacy Policy.

14. Children’s Privacy

Our services are intended for general audiences and are not directed at children under theage of 13. We do not knowingly collect personal information from children under 13. If webecome aware that we have inadvertently collected personal information from a childunder 13 without verifiable parental consent, we will take reasonable steps to delete suchinformation as soon as possible. If you believe that we may have collected informationfrom or about a child under 13, please contact us at optapex@lgcns.com.