Privacy Policy

Pangram Co., Ltd. (the “Company”) complies with the Personal Information Protection Act and other applicable laws, and establishes and discloses this Privacy Policy as follows in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.

Article 1. Purpose of Processing Personal Information

The Company processes personal information for the following purposes. Personal information collected will not be used for any purpose other than those listed below, and if the purpose of use changes, the Company will take the necessary measures in accordance with applicable laws.

Consultation on and responses to product and business inquiries
Information on quotations, product specifications, minimum order quantities, lead times, etc.
Receipt of sample requests, shipment, and delivery confirmation
Business consultations and handling of customer requests
Dispute resolution and review of consultation history

Article 2. Items of Personal Information Processed and Methods of Collection

1. Product and business inquiries — Required: company name, contact name, email address, inquiry details / Optional: department and position, phone number, website address, and any other information entered or attached by the inquirer
2. Sample requests and shipment — Required: company name, contact name, phone number, email address, shipping address, requested products and quantities / Optional: department and position, shipping-related requests
3. Information that may be automatically generated and collected — In the course of using the website, information such as access IP, access date and time, browser and operating system information, and service usage records may be automatically generated and collected.
4. Methods of collecting personal information — Website inquiry and sample request forms / email, phone, fax, and consultations / written forms and business cards / information automatically generated in the course of operating the website

Article 3. Processing and Retention Period of Personal Information

The Company destroys personal information without delay once the purpose of processing has been achieved or the retention period has expired.

Records of product and business inquiries: 3 years from the date the inquiry is resolved
Records of sample requests and deliveries: 3 years from the date of delivery
Website access logs: 3 months
However, where a transaction has led to an actual contract or order, or where retention is required by applicable laws, the information will be kept for the period prescribed by those laws.
Records of contracts or withdrawal of offers: 5 years (Basis: Act on the Consumer Protection in Electronic Commerce)
Records of payment and supply of goods: 5 years (Basis: Act on the Consumer Protection in Electronic Commerce)
Records of consumer complaints or dispute resolution: 3 years (Basis: Act on the Consumer Protection in Electronic Commerce)
Website access logs: 3 months (Basis: Protection of Communications Secrets Act)

Article 4. Provision of Personal Information to Third Parties

The Company processes data subjects' personal information only within the scope of the purposes specified in Article 1 and, in principle, does not provide it to third parties. However, personal information may be provided in the following cases:

Where the data subject has given prior consent
Where there are special provisions in law, or where it is necessary to comply with legal obligations
Where investigative agencies or other authorities request it in accordance with the procedures and methods prescribed by law

Article 5. Outsourcing of Personal Information Processing

To ensure smooth business operations, the Company may outsource part of its personal information processing to external companies. When entering into an outsourcing contract, the Company stipulates the matters necessary to ensure that personal information is managed securely in accordance with the Personal Information Protection Act, and manages and supervises the contractor's processing of personal information.

Courier: CJ Logistics Corporation (delivery of products and samples)
Website hosting and maintenance: Cafe24 Corp. (website operation, system maintenance, and data storage)

Article 6. Procedures and Methods for Destroying Personal Information

When personal information is no longer needed, such as when the retention period has expired or the purpose of processing has been achieved, the Company destroys it without delay.

Destruction procedure: Personal information for which a reason for destruction has arisen is selected → destroyed in accordance with the Company's internal procedures
Destruction method: Electronic files are deleted in a way that makes them impossible to recover or reproduce / paper documents are shredded or incinerated

Article 7. Rights and Obligations of Data Subjects and How to Exercise Them

Data subjects may at any time request access to, correction or deletion of, or suspension of processing of their personal information, and may withdraw their consent to its collection and use.
These rights may be exercised in writing, by phone, or by email, and the Company will take action without delay in accordance with applicable laws.
Data subjects may exercise their rights through a legal representative or an authorized person. In this case, a power of attorney may need to be submitted in accordance with applicable laws.

Article 8. Measures to Ensure the Security of Personal Information

Minimizing and training staff who handle personal information
Restricting and managing access rights to personal information
Installing security programs and conducting regular inspections
Applying necessary protective measures when transmitting and storing personal information
Controlling access to documents and storage media containing personal information

Article 9. Automatic Personal Information Collection Devices

The Company may use cookies to analyze website usage and provide stable services. Cookies are small pieces of information stored in the user's browser, and users can allow or block cookies through their web browser settings. However, if cookies are blocked, some website features may not function properly.

Article 10. Personal Information Protection Officer

The Company has designated a Personal Information Protection Officer as follows to oversee personal information processing and to handle inquiries, complaints, and remedies for damages related to personal information.

Name: Jae-sang Park
Department and position: Management Support Team / Managing Director
Phone: +82-32-818-3616
Email: support@casepg.com

Article 11. Remedies for Infringement of Rights

If you need to report or seek consultation regarding an infringement of personal information, you may contact the following organizations:

Personal Information Infringement Report Center (KISA): privacy.kisa.or.kr / 118 (no area code)
Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
Supreme Prosecutors' Office: www.spo.go.kr / 1301 (no area code)
Korean National Police Agency: ecrm.police.go.kr / 182 (no area code)

Article 12. Changes to This Privacy Policy

This Privacy Policy applies from its effective date. If its contents change, we will provide notice through the website.

Date of announcement: October 1, 2026
Effective date: October 1, 2026