1. Purposes of Processing

• Receiving inquiries and responding to them
• Handling product and technical inquiries and document requests
• Receiving and handling complaints and adverse event reports, in accordance with medical device regulations and our quality management requirements
• Responding to recruitment inquiries
• Analysing website usage and improving our services

2. Personal Information We Process

a. Information you provide — Contact form

Required	Name, e-mail address, mobile phone number, message
Optional	Landline telephone, company name and job title, continent, country

b. Information generated automatically

• Web server access logs (date and time, requested page, browser information) and error logs
• Cookies (see Section 9)
• Information collected by our web analytics tool (see Section 7): country and region, device and browser information, page views and clicks. No directly identifying information such as your name or contact details is collected by this tool.

We do not accept job applications or résumés through this website, and we do not collect sensitive information or unique identification numbers.

3. Retention Periods

Category	Retention period
Inquiry records	3 years from completion of handling
Product complaints / adverse events	As required by medical device regulations and our quality management requirements
Web server access logs	As required by applicable law
Web analytics data	14 months from collection

Where other laws require a longer retention period, we retain the information for that period and then destroy it.

4. Provision to Third Parties

We process personal information only within the purposes stated in Section 1, and provide it to third parties only with your separate consent or where permitted by Articles 17 and 18 of the Personal Information Protection Act. We currently make no routine provision of personal information to third parties.

5. Outsourcing

Where processing is outsourced, we specify data protection obligations in the contract and supervise the processor. Any change will be disclosed through this policy.

6. Destruction of Personal Information

When the retention period expires or the purpose of processing is achieved, we destroy the information without delay. Electronic files are deleted by technical means that prevent recovery; printed materials are shredded or incinerated.

7. Transfer of Personal Information Overseas — Web Analytics

We use Google Analytics, provided by Google LLC, to analyse website usage.

Recipient	Google LLC
Country	United States and other countries where Google LLC operates data centres
Items transferred	Cookie-based online identifiers, IP address, device and browser information, country and region, page views and clicks
Time and method	Transmitted automatically over the network when you visit the website
Purpose	Statistical analysis of website usage and service improvement
Retention	14 months from collection

You may opt out by installing the Google Analytics Opt-out Browser Add-on or by changing your browser's cookie settings.

8. Your Rights and How to Exercise Them

You may at any time request access to your personal information, correction of errors, deletion, or suspension of processing. Requests may be made in writing or by e-mail to the contact in Section 11, and we will act without delay. Requests may also be made through a legal representative or an authorised agent, who must submit a letter of authorisation.

9. Cookies

Cookie	Purpose and lifetime
Session cookie	Keeps your language setting and verifies the anti-bot check on the Contact form — expires when the browser closes or after 2 hours
Pop-up notice cookie	Remembers the "do not show today" choice — expires at midnight
Analytics cookies	Website usage analysis (Section 7), set by Google Analytics

You can refuse or delete cookies in your browser settings. Some features may not work properly if cookies are refused.

10. Security Measures

• Administrative: minimising the number of staff who handle personal information, access rights management, an internal management plan and regular training
• Technical: access control and two-factor authentication for the administration system, one-way encryption of passwords, encryption in transit (HTTPS), and tamper-resistant logging of administrator actions
• Physical: access control to areas where records are stored

11. Data Protection Officer

Officer	Jimin Kim, Director, DVM
Department	GenBody Genetics
Contact	TEL +82 41 523 8990 / E-mail contact@genbody.co.kr
Address	3-18, Eopseong 2-gil, Seobuk-gu, Cheonan-si, Chungcheongnam-do, Korea (31077)

12. Remedies

You may contact the following organisations for dispute resolution or consultation regarding personal information infringement:

• Personal Information Dispute Mediation Committee: +82-1833-6972 (www.kopico.go.kr)
• Korea Internet & Security Agency, Privacy Infringement Report Centre: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office, Cybercrime Investigation Division: 1301 (www.spo.go.kr)
• National Police Agency, Cyber Bureau: 182 (ecrm.police.go.kr)

13. Changes to This Policy

Any addition, deletion or amendment will be announced on this website at least 7 days before it takes effect, or at least 30 days in advance where the change materially affects your rights.