Privacy Policy

YEST Co., Ltd. (the "Company") values the personal information of data subjects and complies with the Personal Information Protection Act and other relevant laws of the Republic of Korea.
Through this Privacy Policy, the Company informs users of the items of personal information it collects, the purposes of collection and use, the retention and use period, and the procedures and methods for destruction, and makes every effort to protect users' rights and interests.

1. Personal Information Collected and Collection Methods

The Company may collect the following personal information in the course of providing services such as inquiry submission, job applications, and visitor registration.

• Website inquiries (Customer Center / Location & Contact): Name, email address, phone number, inquiry content
• Job applications: Name, phone number, email address, education and career details entered in the application (further details provided during the hiring process)
• Visitor registration: Name, affiliation, phone number, purpose and date/time of visit
• Information automatically generated and collected during service use: Access IP, cookies, access logs, service usage records

Personal information is collected when users directly enter it through inquiry/registration forms on the website.

2. Purpose of Collection and Use

• Handling customer inquiries and complaints, including notifying users of processing results
• Processing recruitment procedures (verifying eligibility, providing hiring process updates, etc.)
• Safety management and access control for visitors to Company premises
• Preventing fraudulent use of services and improving services through statistics and analysis

3. Retention and Use Period

In principle, the Company destroys personal information without delay once the purpose of its collection and use has been achieved.
However, where retention is required under applicable law, the Company retains the information for the period specified below.

Retained Item	Legal Basis	Retention Period
Records of contracts or withdrawal of subscription	Act on Consumer Protection in Electronic Commerce	5 years
Records of consumer complaints or dispute resolution	Act on Consumer Protection in Electronic Commerce	3 years
Website visit records (access logs)	Protection of Communications Secrets Act	3 months

4. Procedures and Methods of Destruction

In principle, users' personal information is destroyed without delay once the purpose of its collection and use has been achieved.
Personal information stored in electronic file form is deleted using technical methods that render the records unrecoverable, and personal information recorded on paper documents is destroyed by shredding or incineration.

5. Provision and Outsourcing of Personal Information

In principle, the Company does not provide users' personal information to third parties.
Exceptions are made only where the user has given prior consent or where required by law.
The Company may outsource part of its personal information processing operations to external specialized companies to improve services, and in such cases, the necessary matters are specified in the outsourcing contract to ensure personal information is managed securely.

6. Rights and Obligations of Data Subjects and How to Exercise Them

Users may, at any time, request to view, correct, delete, or suspend the processing of their personal information held by the Company.
Such requests may be made in writing, by phone, or by email to the Chief Privacy Officer listed below, and the Company will take the necessary action without delay.

7. Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information.

• Limiting access to personal information to the minimum number of personnel necessary and operating access control systems
• Conducting regular security training for employees who process personal information
• Installing security programs and regularly updating and inspecting them to guard against hacking and similar threats
• Encrypting personal information and preventing forgery/falsification of access records

8. Chief Privacy Officer

The Company designates a Chief Privacy Officer, who is responsible for overseeing personal information processing and handling complaints and remedying damages related to personal information processing, as follows.

Role	Chief Privacy Officer
Affiliation / Position	Management Support Team, YEST Co., Ltd.
Contact	Tel. +82-31-612-3333  |  Email. yest@yest.co.kr

9. Duty to Give Notice

Should there be any addition, deletion, or modification to this Privacy Policy, notice will be given through the notices section of the website at least 7 days prior to the amendment taking effect.

Announcement date: July 14, 2026
Effective date: July 21, 2026