YOUGO Inc. (hereinafter the "Company"), as a subsidiary of Kishun Inc., operates the membership-based auction service "KISHUN AUCTION" (hereinafter the "Service").

This Policy sets out the Company's policy regarding the handling of personal information acquired in the course of providing the Service (hereinafter this "Policy").

This Policy shall apply together with the personal information protection policy established by Kishun Inc., the brand provider of the Service (hereinafter the "Priority Policy"); and where any inconsistency arises between this Policy and the Priority Policy, this Policy shall apply with priority to the extent relating to the Service.

Article 1 (Definitions)

"Personal information" means information about a living individual that falls under any of the following items:

• information that can identify a specific individual by the name, date of birth, or other description, etc. contained in the information; or

• information that contains an individual identification code.

Article 2 (Scope of Application)

1. This Policy applies to the use of the Service.

2. Where the Company, separately from this Policy, establishes individual terms of use for the Service (hereinafter "Terms of Use") that stipulate the handling of a customer's personal information, not only this Policy but also those Terms of Use shall apply. In this case, where an inconsistency arises between this Policy and the Terms of Use, the Terms of Use shall prevail.

Article 3 (Acquisition of Personal Information)

The Company acquires personal information properly and will not acquire personal information by deception or other wrongful means. The Company acquires personal information, to the extent necessary to provide the Service, by the method of receiving it from customers.

Article 4 (Purposes of Use)

1. The Company shall use acquired personal information for the purposes set out below, and shall handle it only within the scope necessary to achieve those purposes of use. Where it becomes necessary to change a purpose of use, the change shall be made within a scope reasonably deemed to have relevance to the pre-change purpose of use, and the post-change purpose of use shall be notified to or publicly announced to customers.

Personal information regarding Members of the Service:

• to conduct identity verification and prevent unauthorized use of the Service;

• to provide the Service (including listing, bidding, successful bids, formation of contracts, delivery of products, payment settlement, and related communications);

• to carry out responses necessary for the performance of sale contracts between Sellers and Successful Bidders;

• for product delivery procedures and operations incidental thereto;

• to respond to inquiries;

• to create statistical data regarding the use of the Service and to improve the Service;

• to give notice of information about the Service, maintenance information, etc.;

• to make important announcements relating to the Service;

• to prevent and respond to fraudulent acts;

• to respond in accordance with laws and regulations, etc.; and

• for purposes incidental to each of the purposes of use above.

2. The Company shall not use personal information by a method that may encourage or induce illegal or unjust acts.

Article 5 (Provision of Personal Data to Third Parties)

The Company shall not provide personal data, among the personal information it handles, to third parties without the consent of the customer themselves. Provided, however, that this excludes cases falling under any of the following items:

• where the customer has consented in advance;

• where based on laws and regulations;

• where necessary for the protection of the life, body, or property of a person, and it is difficult to obtain the customer's consent;

• where particularly necessary for improving public health or promoting the sound development of children, and it is difficult to obtain the customer's consent;

• where it is necessary to cooperate with a state organ, a local public entity, or a person entrusted by such entities in carrying out affairs prescribed by laws and regulations, and where obtaining the customer's consent is likely to impede the performance of those affairs; or

• where the succession of the Company's business, including the provision of personal information, takes place due to a merger, company split, business transfer, or other cause.

Article 6 (Acquisition of Identity Verification Information)

The Company may, pursuant to the Second-hand Goods Business Act and other related laws and regulations, acquire copies of a driver's license, My Number card, residence card, or other identity verification documents, or information equivalent thereto, for the purpose of verifying a customer's identity when using the Service.

Article 7 (Provision of Information Between Sellers and Successful Bidders)

The Company may, to the extent necessary for the performance of a sale contract formed on the Service, provide to both the Seller and the Successful Bidder the name, address, telephone number, e-mail address, and other personal information necessary for the delivery of products, settlement, or performance of the contract.

Article 8 (Provision to Delivery Operators)

The Company may, to the extent necessary for the delivery of products, provide personal information such as name, address, and telephone number to delivery operators.

Article 9 (Entrustment of the Handling of Personal Data)

The Company may entrust all or part of personal information within the scope necessary to achieve the purposes of use of the Service. In this case, the Company shall exercise necessary and appropriate supervision over the entrusted party.

Article 10 (Disclosure, Correction, and Suspension of Use, etc. of Personal Data)

1. Where a customer requests the disclosure of personal information that cannot be confirmed on the Service, and of records of provision to third parties, the customer may request disclosure in accordance with the procedures separately established by the Company.

2. Where a customer requests the suspension of use, erasure, or suspension of provision to third parties of personal data, the Company shall, after confirming that the request is from the customer themselves, conduct the necessary investigation without delay and respond based on the results thereof.

3. Requests under the preceding paragraphs shall be received by the Company's prescribed online procedure or by post.

Article 11 (Security Control Measures)

The Company shall take necessary and appropriate measures for the prevention of leakage, loss, or damage of personal information and for other security control of personal information.

Article 12 (Joint Use of Personal Data)

In providing the Service, the Company may jointly use personal data, among a customer's personal information, with business partners that conduct operations jointly with the Company. In this case, the Company shall jointly use it after notifying or publicly announcing to customers in advance the matters required by laws and regulations, such as the items of personal data to be jointly used, the purpose of use, the names of the business partners, the types of information, and the name of the party responsible for managing the personal data.

Article 13 (Informative Data)

The Company may acquire cookies, IP address information, device identification numbers, etc., and use them for the prevention of unauthorized use and for service improvement.

Article 14 (Changes to this Policy)

The Company may change this Policy as necessary