1. Information to be collected and method of collection

(1) Personal information items to be collected

The personal information collected by the Company includes:

• Information provided by the users
  • full name
  • email address
  • User’s subjective opinions about other users within the group
• Information collected while the users use services
  • IP address, log data, use time, search word input by users, internet protocol address, cookie
  • Preference, advertisement environment, visited pages regarding service use of users

(2) Method of collection

The Company collects user information through the following methods:

• Webpage, written form, email, and information collection tools
• Provided by partner companies

2. Use of collected information

The Company uses collected user information for the following purposes:

• Member management and identification
• To detect and deter unauthorized or fraudulent use of the Service
• To fulfill contracts, process service payments, and settle fees for requested services
• Improvement of existing services and development of new services
• To notify users of site functions or policy changes
• To help you connect with other users you already know and, with your permission, allow other users to connect with you
• To analyze service usage statistics, provide tailored services, and place advertisements based on statistical data
• To provide information on promotional events and offer opportunities to participate
• To comply with applicable laws or legal obligations
• Use of information with prior user consent (e.g., for marketing and advertising)

The Company agrees to obtain user consent if it wishes to use information for purposes other than those expressly stated in this Policy.

3. Disclosure of collected information

The Company will not disclose personal information to third parties, except in the following cases:

• When the Company shares information with affiliates, partners, or service providers;
  • When affiliates, partners, and service providers perform services such as billing, order fulfillment, product delivery, and dispute resolution (including payment and delivery disputes) on behalf of the Company
• When users have provided prior consent to disclose;
  • When the user chooses to receive information about products and services of certain companies by sharing personal information with those companies
  • When the user opts to allow sharing of personal information with other company sites or platforms, such as social networking sites
  • Other cases where the user gives prior consent for sharing personal information
• When disclosure is required by law:
  • If required by laws and regulations
  • If disclosure is required by investigative agencies for crime detection, following legal procedures and methods

4. Cookies, Beacons, and Similar Technologies

The Company may collect aggregate, non-personal information through 'cookies' and 'web beacons.'

Cookies are small text files sent to the user's browser by the server for operating the Company’s websites, and stored on the user's hard drive.

A web beacon is a small piece of code embedded in websites and emails. Using web beacons, we can determine whether a user has interacted with certain websites or email content.

These functions help evaluate and improve services and enhance user experiences, enabling the Company to provide better services.

The types of cookies collected by the Company and their purposes are as follows:

• Strictly necessary cookies
  • Store information entered in an order form while navigating other pages during a browser session
  • Verify login status on the website
  • Connect users to specific applications or servers
• Performance cookies
  • Web analytics: provide statistical data on website usage
  • Advertisement response rate: measure the effectiveness of the Company’s advertisements
  • Affiliate tracking: anonymously provide feedback to affiliated companies
• Functionality cookies
  • Store preferences such as layout, text size, default settings, and colors
• Targeting or advertising cookies
  • Target users on other websites through social networks, which use information about the user’s visits
  • Provide user visit information to ad agencies to suggest ads that may interest users

Users can choose cookie settings. They may allow all cookies, be notified each time a cookie is saved, or block all cookies. However, if a user blocks cookies, some services provided by the Company may be difficult to use.

5. User's Rights

Users or their legal representatives, as primary agents of their information, may exercise the following rights regarding the Company’s collection, use, and sharing of personal information:

• Access personal information
• Request corrections or deletion
• Withdraw previously given consent

To exercise the above rights, you may contact the Company by email or phone (or reach the person responsible for personal information management or their deputy). The Company will take measures without delay; however, it may reject your request if there is a lawful or equivalent reason.

6. Security

The Company considers the security of users' personal information very important. The Company has implemented the following security measures to protect users' personal information from unauthorized access, disclosure, use, or modification:

• Encryption of personal information
  • Transmit users' personal information through an encrypted communication zone
  • Encrypt and store important information, such as passwords
• Countermeasures against hacking
  • Install systems in controlled areas to prevent hacking or virus-related data leaks or damage
  • Establish and implement an internal management plan
  • Take measures to prevent forging or alteration of access records

7. Modification of Privacy Protection Policy

The Company may amend this Policy periodically. In such cases, it will notify users through the website bulletin board or individual notices (e.g., written documents or email) and obtain user consent if required by law.

8. Others

• Data transfer to other countries
  • As a global business, the Company may transfer users' personal information to companies in other countries for purposes stated in this Policy. The Company takes reasonable measures to protect personal information wherever it is transferred, stored, or processed.
  • When using or disclosing personal information obtained from the EU or Switzerland, the Company may comply with the US-EU and Swiss-US Privacy Shields, use EU-approved standard contractual clauses, or implement other safeguards in line with EU regulations.

9. Contact Information of the Company

If you have any questions about this Policy or wish to update your information, please contact the Company using one of the following methods:

Company name: Treest

Email: support@treestcorp.com

Company's Data Protection Officer

Email: hyeonsu.lee@treestcorp.com