<aside> <img src="notion://custom_emoji/05620394-f3bb-4bd8-91a4-577349e2359c/182161ce-0d22-80c3-8f3e-007a6189033f" alt="notion://custom_emoji/05620394-f3bb-4bd8-91a4-577349e2359c/182161ce-0d22-80c3-8f3e-007a6189033f" width="40px" />

SellSmart Platform Privacy Policy

</aside>

1. Core16 Privacy Policy

Core16 complies with the Personal Information Protection Act and related laws to protect the freedom and rights of data subjects. We process and manage personal information lawfully and securely. In accordance with Article 30 of the Personal Information Protection Act, we have established and disclosed this Privacy Policy to inform data subjects about the procedures and standards for the processing and protection of personal information and to ensure swift and smooth resolution of related grievances.

2. Purpose of Processing Personal Information

Core16 processes personal information for the following purposes. Personal information will not be used for any purpose other than those specified below. Should the purpose of use change, we will take necessary measures, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

1. Membership Registration and Management
   • Confirming intent to register, identifying and authenticating users for membership services, maintaining and managing membership status, preventing fraudulent use of services, verifying legal guardian consent for children under 14, providing notifications, and handling grievances.
2. Service Provision
   • Providing investment information, delivering tailored content, performing identity and age verification, sending notifications, and transmitting emails.
3. Customer Management
   • Verifying identity, addressing complaints, and delivering announcements.

3. Categories of Personal Information Processed

Core16 collects and processes only the minimum personal information necessary to provide its services.

1. Personal Information Processed Without Consent
   • Core16 processes the following personal information items without the data subject’s consent:
     • Membership Service Operations
       • Legal Basis: Article 15(1)(4) of the Personal Information Protection Act (“Performance of a Contract”)
       • Items Collected and Used: Email address
2. Personal Information Processed With Consent
   • Core16 processes the following personal information items with the data subject’s consent, in accordance with Article 15(1)(1) and Article 22(1)(7) of the Personal Information Protection Act.

4. Retention and Processing Period of Personal Information

① Core16 processes and retains personal information within the retention and use period stipulated by law or agreed upon with the data subject at the time of collection.

② The specific retention and processing periods are as follows:

1. Membership Registration and Management: Until the withdrawal of membership from the business/organization’s website. However, retention may extend until the resolution of the following cases:
2. Ongoing Investigations or Probes Due to Legal Violations: Until the conclusion of such investigations or probes.
3. Unresolved Claims or Obligations Arising from Website Use: Until the settlement of such claims or obligations.
4. Provision of Goods or Services: Until the completion of goods/services delivery and payment settlement.
5. Records Related to Transactions Under Article 6 of the Act on Consumer Protection in Electronic Commerce, Etc.:
   • Records of contracts, withdrawals, payments, and supply of goods: 5 years
   • Records of consumer complaints or dispute resolution: 3 years