Privacy
Policy

Article 1 (Purposes of Processing Personal Information)

The Company processes personal information for the following purposes. The personal information processed is not used for any purpose other than those listed below, and where the purpose of use changes, the Company will take the measures required under applicable law.

Free admissions consultations and inquiry responses

• Receiving applications for admissions-competitiveness assessments
• Confirming and responding to student/parent consultation requests
• Coordinating and providing guidance on consultation schedules

Program information and application management

• Responding to inquiries about programs such as rowing programs, training camps, international-school leagues, and portfolio consulting
• Confirming eligibility to participate in programs
• Participation guidance, schedule notices, and operational contact

School partnership and affiliation inquiries

• Receiving partnership inquiries from international schools and institutions
• Reviewing and responding to collaboration proposals

Customer management and service improvement

• Managing consultation history
• Improving service quality
• Preventing disputes and handling complaints

Marketing and promotional communications

• Providing news about new programs, information sessions, camps, competitions, and events

※ Marketing communications are sent only where separate consent has been obtained.

Article 2 (Personal Information Items Processed)

The Company may process the following personal information in order to provide its services.

1. Free admissions consultation / general inquiries

• Required: name, contact number, inquiry details
• Optional: email, school name, grade level, programs of interest, study-abroad/international-school status, details of the consultation requested

2. Student/parent consultation requests

• Required: applicant name, contact number, consultation-subject type (student/parent), inquiry details
• Optional: student's school name, grade level, athletic experience, target admissions direction, preferred consultation schedule

3. School partnership inquiries

• Required: contact person's name, organization name, contact number, email, inquiry details
• Optional: desired partnership details, information about the operating school

4. Information that may be automatically generated and collected during service use

• IP address, cookies, access date and time, access logs, browser information, device information, visit history

Article 3 (Processing and Retention Periods)

The Company processes and retains personal information within the retention and use period required by law or consented to by the data subject.

• Free admissions consultation and general inquiry information — retained for 1 year from the date of collection
• Student/parent consultation request information — retained for 1 year from the date the consultation ends
• School partnership and affiliation inquiry information — retained for 3 years from the date the inquiry is resolved
• Marketing and promotional information — retained until consent is withdrawn

However, where applicable law requires personal information to be retained for a certain period, it will be kept for the period prescribed by that law.

Article 4 (Provision of Personal Information to Third Parties)

The Company processes personal information only within the scope specified in Article 1 and, in principle, does not provide personal information to third parties without the data subject's consent. The following are exceptions:

• Where the data subject has given prior consent
• Where there is a special provision in the law
• Where there is a lawful request from an investigative or other relevant authority in accordance with the procedures prescribed by law

Article 5 (Outsourcing of Personal Information Processing)

The Company may outsource personal information processing tasks to external providers in order to deliver its services smoothly. When entering into an outsourcing agreement, the Company stipulates the matters necessary to ensure personal information is processed safely in accordance with applicable law, and supervises the trustee. Where the Company uses external services, it discloses the trustee and the outsourced tasks through its website.

Article 6 (Procedures and Methods for Destroying Personal Information)

When personal information becomes unnecessary — for example, upon expiry of the retention period or achievement of the processing purpose — the Company destroys it without delay.

Destruction procedure

The Company identifies the personal information for which a reason for destruction has arisen and destroys it in accordance with internal policy and applicable law.

Destruction method

• Electronic files: permanently deleted by a method that prevents recovery or reproduction
• Paper documents: shredded or incinerated

Article 7 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them)

Data subjects may exercise the following rights against the Company at any time:

• The right to request access to their personal information
• The right to request correction of their personal information
• The right to request deletion of their personal information
• The right to request suspension of processing
• The right to withdraw consent

These rights may be exercised in writing, by telephone, or by email, and the Company will act on such requests without delay.

Article 8 (Processing the Personal Information of Children Under 14)

Where the Company processes the personal information of children under the age of 14, it takes the necessary measures, including obtaining the consent of a legal representative, in accordance with applicable law. Requests to access, correct, delete, or suspend the processing of such a child's personal information may be exercised directly by the legal representative.

Article 9 (Measures to Ensure the Security of Personal Information)

The Company takes the following measures to ensure the security of personal information:

• Minimizing personal information access privileges
• Managing and training staff who handle personal information
• Establishing and implementing an internal management plan
• Installing and inspecting security programs
• Applying technical safeguards when storing personal information
• Applying physical safeguards to documents and storage media

Article 10 (Installation, Operation, and Refusal of Automatic Data Collection Devices)

The Company may use cookies to provide users with more convenient services.

Purposes of using cookies

• Analyzing website access statistics
• Identifying usage patterns
• Improving services

How to refuse cookies

Users can refuse the storage of cookies through their web browser settings. However, refusing cookies may limit the use of some services.

• Chrome: Settings > Privacy and security > Delete browsing data
• Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
• Mobile browsers: cookies can be blocked from each browser's privacy settings menu

Article 11 (Privacy Officer)

The Company designates the following Privacy Officer to oversee personal information processing and to handle complaints and remedies from data subjects relating to such processing.

Data subjects may direct any inquiries, complaints, or requests for remedy regarding personal information protection that arise while using the Company's services to the Privacy Officer, and the Company will respond to and handle them without delay.

Article 12 (Requests to Access Personal Information)

Data subjects may submit requests to access their personal information to the contact below. The Company will make every effort to process such access requests promptly.

Article 13 (Remedies for Infringement of Rights)

To obtain relief for infringement of personal information, data subjects may consult or report to the following agencies:

• Personal Information Infringement Report Center: 118 / privacy.kisa.or.kr
• Personal Information Dispute Mediation Committee: 1833-6972 / www.kopico.go.kr
• Supreme Prosecutors' Office: 1301 / www.spo.go.kr
• National Police Agency: 182 / ecrm.police.go.kr

Article 14 (Changes to This Privacy Policy)

The Company may amend this Privacy Policy in line with changes to laws, policies, or services. Where this Privacy Policy is changed, the Company will announce the changes through its website.

• Date of announcement: January 1, 2026
• Effective date: January 1, 2026