HEATVIS (hereinafter referred to as the "Company") values your personal information and complies with applicable laws related to the promotion of information and communications network utilization and information protection.

Through this Privacy Policy, the Company informs you of how the personal information you provide is used and what measures are taken to protect personal information.

If this Privacy Policy is revised, the Company will notify you through a website notice (or individual notice).

This Policy takes effect as of July 27, 2026.

1. Personal Information Collected

The Company collects the following personal information for consultation and related purposes.

Online Inquiry
- Items collected: Name, contact number, email, inquiry details, etc.

2. Purpose of Collection and Use of Personal Information

The Company uses the collected personal information for the following purposes:
Fulfillment of contracts related to service provision, and responding to inquiries arising from service provision

3. Retention and Use Period of Personal Information

In principle, the Company destroys personal information without delay after the purpose of collection and use has been achieved. However, if retention is required under applicable laws, the Company retains member information for the period prescribed by such laws as follows.

Retention Items and Legal Grounds for Payment Records

• - Records related to contracts or withdrawal of subscriptions: 3 years
• - Records related to contracts or withdrawal of subscriptions: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)
• - Records related to payment and supply of goods/services: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)
• - Records related to consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)

4. Procedures and Methods for Destruction of Personal Information

In principle, the Company destroys personal information without delay after the purpose of collection and use has been achieved. The procedures and methods of destruction are as follows.

Destruction Procedure
Information entered by users for membership registration or other purposes is transferred to a separate database (or a separate document file in the case of paper records) after the purpose has been achieved, and is stored for a certain period in accordance with internal policies and applicable laws (see Retention and Use Period), and then destroyed.
Personal information transferred to a separate database will not be used for any purpose other than retention as required by law.

Destruction Method
Personal information stored in electronic file form is deleted using technical methods that make the records unrecoverable.

5. Provision of Personal Information

In principle, the Company does not provide users' personal information to external parties. Exceptions apply in the following cases:
When users have given prior consent; or when required by law, or when requested by investigative agencies in accordance with the procedures and methods prescribed by law for investigative purposes

6. Hosting and Maintenance

To provide its services, the Company outsources operations to an external specialist as follows.

• - Trustee: 3ANY INC.
• - Outsourced tasks: Website and system management (hosting / maintenance)

7. Rights of Users and Legal Representatives, and How to Exercise Them

Users may view or correct their registered personal information at any time and may also request withdrawal of membership.
To view or correct personal information, please use "Edit Personal Information" (or "Edit Membership Information," etc.). To withdraw membership (withdraw consent), please click "Withdraw Membership," complete identity verification, and then view, correct, or withdraw directly.
Alternatively, please contact the Personal Information Manager in writing, by phone, or by email, and we will take action without delay.
If you request correction of errors in your personal information, we will not use or provide the relevant personal information until the correction is completed.
If incorrect personal information has already been provided to a third party, we will notify the third party of the correction result without delay so that the correction can be made.
Personal information that has been withdrawn or deleted at the user's request is handled in accordance with the "Retention and Use Period of Personal Information Collected by the Company," and is processed so that it cannot be viewed or used for any other purpose.
For children under the age of 14, legal representatives have the right to view or correct the child's personal information and to withdraw consent to collection.

8. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

The Company uses cookies and similar technologies that store and retrieve your information from time to time. A cookie is a very small text file sent by the server used to operate a website to your browser and stored on your computer's hard disk.

The Company uses cookies for the following purposes.

Purpose of Cookies
Analyzing visit frequency and visit time of members and non-members, identifying user preferences and areas of interest, tracking navigation paths, and measuring participation in events and number of visits for targeted marketing and personalized services. You have the option to accept or refuse cookies.
Accordingly, you may set your web browser options to allow all cookies, to confirm each time a cookie is stored, or to refuse the storage of all cookies.

How to Refuse Cookie Settings
You may refuse cookie settings by selecting options in the web browser you use, allowing all cookies, confirming each time a cookie is stored, or refusing the storage of all cookies.

Setting Method
Example (Internet Explorer): Tools at the top of the web browser > Internet Options > Privacy
However, if you refuse to install cookies, you may experience difficulty using some services.

9. Personal Information Complaint Service

To protect customers' personal information and handle related complaints, the Company has designated the relevant department and Personal Information Manager as follows.

For reports or consultation regarding other personal information infringements, you may contact the following organizations.

• - Personal Information Infringement Report Center (privacy.kisa.or.kr / dial 118 without an area code)
• - Supreme Prosecutors' Office Cyber Investigation Division (www.spo.go.kr / dial 1301 without an area code)
• - Korean National Police Agency Cyber Bureau (police.go.kr / dial 182 without an area code)