INMS Co., Ltd. ("the Company") complies with the Personal Information Protection Act and establishes this privacy policy to protect the rights of data subjects and handle related grievances promptly.

Article 1 (Purpose of Processing)

The Company processes personal information for the following purposes. It is not used for any other purpose, and if the purpose changes, separate consent will be obtained in accordance with Article 18 of the Personal Information Protection Act.

1. Inquiry handling and consultation — Verifying product and service inquiries, assigning personnel, responding and consulting
2. Solar simulation service — Delivering simulation results and follow-up consultation

Article 2 (Items Collected)

Category	Required	Optional / Auto-collected
Online inquiry	Name	Contact number, e-mail (Auto) IP address, access time
Solar simulation	Name, address, e-mail, contact number	—

Article 3 (Retention Period)

The Company processes and retains personal information within the period agreed upon collection or as required by law.

Category	Retention period	Basis
Online inquiry	1 year after consultation	Consent of data subject
Solar simulation	1 year after consultation	Consent of data subject

Article 4 (Provision to Third Parties)

The Company processes personal information only within the scope specified in Article 1, and provides it to third parties only with the consent of the data subject or where specifically permitted by law.

Currently, the Company does not provide users' personal information to third parties.

Article 5 (Consignment of Processing)

The Company consigns personal information processing as follows for smooth service provision.

Consignee	Consigned work
Cafe24 Corp.	Website hosting and server operation

Article 6 (Destruction Procedure)

When personal information becomes unnecessary due to the expiration of the retention period or achievement of the processing purpose, the Company destroys it without delay.

• Procedure — Personal information whose retention period has expired is destroyed without delay and is not transferred to a separate database.
• Method — Electronic files are deleted using technically irreversible methods; paper documents are shredded or incinerated.

Article 7 (Rights of Data Subjects)

1. Data subjects may at any time request access, correction, deletion, or suspension of processing of their personal information.
2. Such rights may be exercised in writing or by e-mail, and the Company will act on them without delay.
3. If a data subject requests correction or deletion due to an error, the Company will not use or provide the information until the correction or deletion is complete.

Article 8 (Security Measures)

The Company takes the following measures to ensure the security of personal information.

• Minimizing and training staff handling personal information
• Restricting access to personal information (administrator access control)
• Retention of access logs
• Technical countermeasures against hacking

Article 9 (Privacy Officer)

The Company designates a privacy officer as follows to oversee personal information processing and to handle complaints and remedies from data subjects.

Name	To be announced
Position	To be announced
Contact	Tel 031-331-9952  |  E-mail To be announced

Article 10 (Remedies for Infringement)

Data subjects may apply for dispute resolution or consultation to the following organizations.

Organization	Phone	Website
Personal Information Dispute Mediation Committee	1833-6972	www.kopico.go.kr
Privacy Infringement Report Center	118	privacy.kisa.or.kr
Supreme Prosecutors' Office	1301	www.spo.go.kr
National Police Agency	182	ecrm.police.go.kr

Article 11 (Changes to this Policy)

This privacy policy is effective from August 11, 2026.