Aurora Five Co., Ltd. (hereinafter referred to as the “Company”) provides a wireless internet service (including web, mobile web, and app services) under the name “Shook App Service” (hereinafter referred to as the “Service”). The Company values the protection of its members’ personal information and strives to protect it to the best of its ability.

The Company complies with relevant laws and regulations regarding the protection of personal information, including but not limited to the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection (“Information Communications Network Act”). It also adheres to regulations, notices, directives, and guidelines established by relevant government agencies.

The Company establishes and complies with the following privacy policy. This policy is publicly disclosed through the services operated by the Company (including websites, mobile sites, and smartphone apps) to ensure that members can access it easily at any time.

This privacy poliy applies to all members using the Shook Service and its related offerings. It outlines how personal information is used and protected and the measures the Company takes to ensure the protection of such information.

◆ Purpose of Collection and Use of Personal Information

  1. The Company collects personal information within the minimum necessary scope during the membership registration and service usage process. The collection items and purposes are disclosed in advance. When a customer reads this Privacy Policy, enters the required items, and clicks the "Complete Registration" button or checks "Confirm" or "I Agree," it is considered that the customer consents to the processing of personal information.

  2. Personal information collected by the Company is divided into required information, essential for performing the core functions of the Shook service and handling operations, and optional information, which is collected to provide additional services tailored to members' needs. Members are informed that refusing to provide required information may restrict access to Shook's products and services. However, they are also informed that refusing to provide optional information will not affect service usage.

  3. The Company does not collect personal information that may significantly infringe on fundamental human rights, such as race, ethnicity, ideology, creed, place of origin, political orientation, criminal records, or health status. However, if such information is unavoidable due to the type of member or the nature of the services provided, the Company may process information that the member has already publicly disclosed through external services or explicitly agreed to disclose within the Shook service.

  4. Members' personal information is collected and used through various methods, including but not limited to: ◦ The Company’s website (including mobile sites and smartphone apps) ◦ Written forms ◦ Phone calls, landlines, or faxes for identity verification of the member or their representative ◦ Service inquiries via phone, help boards, or email ◦ Participation in events, prize draws, or delivery requests ◦ Information provided by partners or affiliates ◦ Delegation to identity verification institutions and their provided data ◦ Data collected through tools during wired and wireless internet service usage

  5. Each piece of personal information provided by members is processed for the purposes listed below. This includes both the information provided at the time of membership registration and any updated information (whether updated directly by the member or upon the member's request)

<Membership stage>

required item

This table includes classification, surrender of collection, and purpose of use.

Purpose of use of collection and use items

Name, date of birth, ID, password, email, nickname, mobile phone number, gender, legal representative information for children under the age of 14 (the legal representative name, mobile phone number, e-mail, legal representative encrypted identification information (CI))

① Operation and management of membership services (such as willingness and age to join, compliance with qualifications and restrictions, and processing of membership and withdrawal)

② Communication channels, such as notification of important matters, such as changes in terms of use, terms and conditions of service products, personal information processing policies, service changes, suspension, disability, infringement accidents, etc

③ Handling service complaints and complaints, and announcing results

④ Violation of all laws and regulations related to services, including the Copyright Act, the Information and Communication Network Act, the Youth Protection Act, and other sanctions on illegal use of services that infringe on the rights of the company and other members, etc

⑤ Performance of members' right to view and correct information in accordance with laws and regulations related to personal information protection

⑥ fulfillment of the obligation to retain and preserve under relevant statutes, such as the Information and Communication Network Act, etc

When connecting to Kakao account: Kakao profile information (nickname/profile photo), e-mail selections

This table includes classification, surrender of collection use, and purpose of use.

Purpose of use of collection and use items

Mobile phone number, e-mail

① Use of public relations and marketing, such as event, new/reorganized products, service guidance, and notification

② Reflect opinions on new service development and customer service improvement

<Step of Service Use>

Mandatory item (member input information)

This table includes classification, surrender of collection, and purpose of use.

Purpose of use of collection and use items

When selecting mobile phone/i-PIN identity: Name, date of birth, gender, internal/foreign status, duplicate subscription confirmation information (DI), encrypted identification information (CI) Some contents and services, age or identity verification according to relevant laws and regulations in financial transactions, information of legal representative (legal representative name, mobile phone number, e-mail, encrypted identification information (CI) of legal representative) Some contents and services of minors, and confirmation of intention of legal representative during financial transactions

①Information by payment method

② fulfillment of preservation and provision obligations under relevant laws and regulations

③ Consignment of performance of paid service contract ( ※Information such as credit card company name, credit card number, expiration date, mobile number, and gift certificate number entered by members during the purchase and payment stage is not stored directly by the company.)

Buyer's name, Buyer's contact information (mobile number, email), recipient's name, recipient's contact information (mobile number, landline number), delivery address, portal ID (when purchasing a fan club subscription product), date of birth

This table includes classification, surrender of collection, and purpose of use.

Purpose of use of collection and use items

Service usage records, site visit records, IP Address, cookies, etc

① Check service history

② Sanctions on illegal activities and illegal activities explicitly prohibited by relevant statutes, service terms and conditions, detailed usage guides, etc

③ fulfillment of the obligation to retain and provide information under relevant laws and regulations

④ Analysis of access frequency and utilization of statistics to provide customized services

⑤ Expansion of service system infrastructure for seamless service delivery

Selections

This table includes classification, surrender of collection, and purpose of use.

Purpose of use of collection and use items

SNS ID, SNS contact information, e-mail SNS account connection

Name, ID, nickname, mobile phone number, legal representative information, terminal information, subscription carrier information, bank account information, credit card information, etc

Account bank, account number, and name of deposit for handling civil complaints, such as inquiries, consultations, refunds, disability response, etc. related to service use

① cash refund processing

② fulfillment of preservation obligations under relevant laws and regulations

Mobile phone number and business registration number proof of income deduction

Name, ID, nickname, mobile phone number, landline number, address, e-mail, gender, date of birth, delivery address, etc

① Target marketing, online and offline events and events, and winners' draw

② Gift Delivery to Event Winners

③ Above, ①, ② Consignment of work or provision to a third party (Only the minimum amount of personal information is used until the winner is drawn, and prior notice and consent must be sought when guiding events, etc.)

◆ Holding and using period of personal information collected

Where the purpose of withdrawal from membership, collection and use of personal information is achieved, the personal information of members shall be destroyed without delay: Provided, That the personal information of members shall be retained exceptively for the following reasons and periods.

  1. According to the company's internal policy

(1) Responding to complaints about changes in membership information

  1. When a member directly requests the preservation of personal information, or when the company individually obtains the consent of the member
  1. Where it is determined to preserve it without the consent of the user in accordance with the law

<Reservation period: 5 years>

This table contains the underlying laws, preservation information, and preservation period.

Information on the preservation of the underlying laws and regulations

Records on withdrawal of consumer contracts or subscriptions in e-commerce, records on consumer protection in e-commerce, commercial law, basic national tax law, income tax law, corporate tax law, value-added tax law settlement and supply of goods, commercial books and business statements, supporting documents

<Preservation period: 3 years>

This table contains the underlying laws, preservation information, and preservation period.

Information on the preservation of the underlying laws and regulations

Act on Consumer Protection in Electronic Commerce, etc

Record of consumer complaints or dispute settlement

<Reservation period: 6 months>

This table contains the underlying laws, preservation information, and preservation period.

Record of visiting the website of the Act on the Protection of Communication Secrets information on the preservation of the Act on

◆ Use of collected personal information and provision to third parties

  1. The customer's personal information shall be informed to the customer through the terms and conditions of use and the personal information processing policy, etc., and shall not be used beyond the scope or provided to a third party. Where personal information is provided to a third party, the member shall be notified in advance of "the recipient, the purpose of use of the recipient, the items of personal information provided, the holding and the period of time, and shall not be provided if the member does not agree. Provided, That where a member fails to provide personal information to a third party in using the relevant affiliated service, the purpose of the affiliated service and the benefit of the affiliated service shall be informed of the disadvantages when he/she rejects the consent.
  2. However, for reasons prescribed by laws such as the Information and Communication Network Act, in each of the following cases, the member's personal information may be used or provided to a third party without the member's consent.

(1) Where it is necessary for the settlement of charges for the provision of services

(2) Where there are special provisions in other laws, such as the Communications Secret Protection Act, the Framework Act on National Taxes, the Information and Communication Network Act, the Telecommunications Business Act, the Local Tax Act, and the Criminal Procedure Act

Even if there are special provisions in the law, the personal information of members is not provided unconditionally even if the administrative office or investigative agency has requested it for administrative or investigative purposes, and it is provided only when it can be confirmed that it is the data required by the law, such as a warrant or a written seal of the head of the agency as prescribed by the law.

  1. The company provides personal information as follows for service use and event progress.

<To be provided>

a performance organizer/projector

This table contains the items provided, purpose of provision, retention and usage period.

Purpose of provision of provision items and period of use

① Buyer Information (ID, Name, Mobile Number, Email)

② Ticket Reservation, Cancellation, Refund Information

③ Recipient information (name, mobile number, landline number), delivery address

④ Invoice number

◆ Procedures and methods for destroying personal information

After the purpose of use of the collected personal information is achieved, the relevant information shall be destroyed without delay according to the storage period and period of use. The procedure and method of destruction shall be as follows.