개인정보처리방침

1. Purpose of Collection and Use of Personal Information

The Company processes personal information for the following purposes. If the processing purpose is changed, necessary measures, such as obtaining separate consent, will be implemented in accordance with relevant laws and regulations.

• Receiving and replying to inquiries regarding partnerships, products, ODM, etc.
• Consultation for recruitment and business-related inquiries
• Management of service usage history and prevention of fraudulent use
• Fulfillment of obligations under relevant laws and regulations

2. Personal information items collected

The company may collect the following information through inquiry forms, etc.

• Required: Name, Company Name, Location (Country/City), Email, Phone Number, Inquiry Type, Inquiry Content
• Selection: Title
• Automatic Collection: Service usage records (server and security logs), including IP address, browser information, and access date and time

3. Retention and Use Period for Personal Information

The Company will destroy such information without delay once the purposes for which it was collected and used have been fulfilled. However, the following information will be retained for the periods specified below for the reasons stated.

• Inquiry Response Record: 3 years after the inquiry is resolved (internal response history management)
• When retention is required under relevant laws and regulations: The period specified in such laws and regulations

4. Disclosure of Personal Information to Third Parties

The Company processes users' personal information only within the scope specified in Article 1 and does not disclose it to third parties without the user's consent. However, this does not apply in cases where a request is made pursuant to laws and regulations.

5. Outsourcing of Personal Information Processing

To ensure the smooth provision of services, the Company may outsource the processing of personal information as follows. When outsourcing such processing, the Company establishes the necessary provisions to ensure that personal information is managed securely in accordance with relevant laws and regulations.

• Website hosting & server management: Hosting provider
• Sending and Receiving Email: Mail Server/Email Service Provider

Any changes to the contracted companies or the scope of work will be disclosed through this policy.

6. Procedures and Methods for the Destruction of Personal Information

• Disposal Procedure: Once the purpose has been fulfilled, the information will be disposed of in accordance with internal policies and applicable laws and regulations.
• Disposal Method: Delete electronic files in a manner that prevents recovery, and shred or incinerate paper documents.

7. Rights and Obligations of Data Subjects and How to Exercise Them

Users may request the Company to access, correct, delete, or suspend the processing of their personal information at any time. Requests to exercise these rights may be submitted in writing, such as via email, and the Company will take action without delay.

8. Measures to Ensure the Security of Personal Information

The company is taking administrative, technical, and physical measures to ensure the security of personal information.

• Minimizing the Number of Employees Handling Personal Information and Providing Training
• Access Rights Management and Log Retention
• Technical safeguards, such as security software

9. Operation of Cookies

The company may use cookies to operate the site. Users can refuse to save cookies or delete them through their browser settings. However, if you refuse to save cookies, there may be restrictions on the use of some services.

10. Chief Privacy Officer

The company is in overall charge of personal information processing tasks, and designates a Chief Privacy Officer as follows to handle complaints and remedy damages of information subjects related to personal information processing.

• Person in Charge: Data Protection Officer
• Email: contact@medifab.com

11. Remedies for Violations of Rights

If you need to report a personal information breach or seek advice, you can contact the agencies listed below.

• Privacy Infringement Report Center: privacy.kisa.or.kr / 118
• Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
• Cyber Investigation Division, Supreme Prosecutors' Office: www.spo.go.kr / 1301
• National Police Agency Cyber Investigation Bureau: ecrm.police.go.kr / 182

12. Changes to the Privacy Policy

This policy is effective as of August 14, 2026. If any content is added, deleted, or modified due to changes in laws, regulations, policies, or security technologies, the changes will be posted on the website.