This English translation is provided for convenience only. In the event of any discrepancy between the English and Korean versions, the Korean version shall prevail.

Mare Seafood Co., Ltd. (the "Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea ("PIPA") in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.

Article 1 (Purposes of Processing Personal Information)

The Company processes personal information for the purposes below. Personal information will not be used for any other purpose; if the purpose changes, the Company will take necessary measures such as obtaining separate consent in accordance with Article 18 of PIPA.

1. 1. Receiving and handling online inquiries — confirming inquiry details, contacting and notifying for fact-finding, notifying results; sending receipt-confirmation emails, providing trade consultations and quotation information.
2. 2. Business partner management — tasks necessary to maintain trade relationships, such as concluding, performing, maintaining, and managing contracts, settling payments, supplying goods and services, and issuing tax invoices.
3. 3. Marketing and advertising (only with optional consent) — providing information on new products and events, offering opportunities to participate in promotions.
4. 4. Recruitment (applicants only) — identifying and verifying applicants, conducting document screening and interviews, notifying hiring results.
5. 5. Website operation and service improvement — analyzing service usage statistics, preventing fraudulent use by automated programs, ensuring service stability.

Article 2 (Items of Personal Information Processed and Collection Methods)

1. ① The Company processes the following items of personal information:
   • · Online inquiries — (Required) company/organization name, contact person's name, phone number, email, inquiry details; (Optional) department/title, information contained in attached files, referral source.
   • · Business partner management — (Required) trade name, business registration number, representative's name, contact person's name, phone number, email, address, payment and settlement information.
   • · Marketing communications — (Optional) contact person's name, phone number, email.
   • · Job applications — (Required) name, date of birth, phone number, email, address, education and work history; (Optional) qualifications, language proficiency, photo.
   • · Automatically generated information — IP address, cookies, service usage records, access date and time, browser and device information, and behavioral information such as mouse movements.
2. ② The Company collects personal information by the following methods:
   1. 1. direct input by data subjects via the website's online inquiry form;
   2. 2. files voluntarily attached by data subjects when submitting inquiries;
   3. 3. collection via email, phone, fax, and written forms;
   4. 4. collection in the course of concluding contracts and conducting transactions;
   5. 5. submission by applicants when applying for positions;
   6. 6. automatic collection through information-generating tools and bot-blocking services.
3. ③ The Company does not, in principle, process sensitive information under Article 23 of PIPA or unique identification information (including resident registration numbers) under Article 24 of PIPA. However, where specifically required or permitted by law, such information may be processed with separate consent.
4. ④ Please include only the minimum necessary information in files attached to online inquiries; the Company will destroy without delay any personal information unrelated to the processing purpose.

Article 3 (Processing and Retention Period of Personal Information)

1. ① The Company processes and retains personal information within the retention and use period prescribed by law or consented to by the data subject at the time of collection.
2. ② The processing and retention periods are as follows: online inquiries — 1 year after the inquiry is resolved; business partner management — 5 years after the transaction ends; marketing communications — until consent is withdrawn or 2 years from collection; job applications (unsuccessful) — 6 months after the recruitment process ends; job applications (successful) — transferred to HR records upon hiring; website access records — 3 months.
3. ③ Notwithstanding paragraph ②, information whose retention is mandated by applicable law is stored separately for the statutory period:
   1. 1. Act on the Consumer Protection in Electronic Commerce — records on contracts or withdrawal of offers: 5 years; records on payments and the supply of goods: 5 years; records on consumer complaints or dispute resolution: 3 years; records on labeling and advertising: 6 months.
   2. 2. Framework Act on National Taxes and Corporate Tax Act — books and supporting documents on transactions: 5 years.
   3. 3. Protection of Communications Secrets Act — website access records: 3 months.

Article 4 (Provision of Personal Information to Third Parties)

1. ① The Company processes personal information only within the scope specified in Article 1, and provides it to third parties only where the data subject consents or where special legal provisions apply, in accordance with Articles 17 and 18 of PIPA.
2. ② The Company does not currently provide personal information to any third party. Should such provision become necessary, the Company will obtain prior consent specifying the recipient, purpose, items provided, and retention period.

Article 5 (Outsourcing of Personal Information Processing)

1. ① The Company outsources personal information processing tasks as follows: Pointweb — website operation and server hosting; Gabia CNS Inc. (Hiworks) — email service operation; Cloudflare, Inc. — CAPTCHA-alternative security solution (Cloudflare Turnstile).
2. ② When concluding outsourcing contracts, the Company specifies in the contract, pursuant to Article 26 of PIPA, matters such as the prohibition of processing beyond the outsourced purpose, technical and managerial safeguards, restrictions on sub-outsourcing, supervision of the outsourcee, and liability for damages, and supervises whether the outsourcee processes personal information safely.
3. ③ If the outsourced tasks or the outsourcee change, the Company will disclose the change without delay through this Privacy Policy.

Article 6 (Procedures and Methods of Destruction)

1. ① When personal information becomes unnecessary — such as upon expiry of the retention period or achievement of the processing purpose — the Company destroys it without delay.
2. ② Where personal information must be preserved under other laws despite the expiry of the consented retention period or achievement of the purpose, it is moved to a separate database or stored in a different location.
3. ③ Procedures and methods:
   1. 1. Procedure — the Company selects the personal information subject to destruction and destroys it with the approval of the Chief Privacy Officer.
   2. 2. Methods — electronic files are deleted using technical methods that render recovery impossible; paper documents are shredded or incinerated.

Article 7 (Rights of Data Subjects and Legal Representatives and How to Exercise Them)

1. ① Data subjects may exercise the following rights against the Company at any time:
   1. 1. request access to personal information;
   2. 2. request correction of errors;
   3. 3. request deletion;
   4. 4. request suspension of processing.
2. ② Rights may be exercised in writing or by phone, email, or fax, and the Company will act without delay. Email requests may be submitted to sales@maresf.kr.
3. ③ Where a data subject requests correction or deletion of errors, the Company will not use or provide the relevant personal information until the correction or deletion is completed.
4. ④ Rights may be exercised through a legal representative or an authorized agent. In such cases, a power of attorney in accordance with Attached Form No. 11 of the Notification on Personal Information Processing Methods must be submitted.
5. ⑤ Requests for access and suspension of processing may be restricted pursuant to Articles 35(4) and 37(2) of PIPA.
6. ⑥ Consent to receive marketing communications may be withdrawn at any time, upon which sending will stop immediately. Withdrawal requests: sales@maresf.kr or +82-51-711-4233.
7. ⑦ Data subjects must not infringe upon the personal information or privacy of others in violation of PIPA and other applicable laws.

Article 8 (Measures to Ensure the Security of Personal Information)

1. 1. Managerial measures — establishing and implementing an internal management plan; minimizing the number of staff handling personal information and providing regular training; conducting periodic inspections of processing status.
2. 2. Technical measures — managing access rights and controlling access to personal information processing systems; encrypted storage and transmission of personal information (SSL applied); retention of access logs and prevention of forgery or alteration; installing and regularly updating antivirus software against hacking and malware; blocking unauthorized access by automated programs (bots) and restricting attachment file types.
3. 3. Physical measures — storing materials and documents containing personal information in locked storage; controlling physical access to document storage areas.

Article 9 (Installation, Operation, and Refusal of Automatic Collection Devices)

1. ① The Company uses cookies, which store and retrieve usage information, to provide individualized services and to prevent fraudulent use by automated programs.
2. ② Cookies are small pieces of information sent by the server operating the website to the user's browser and stored on the user's device. Purpose of use: improving services through analysis of visits and usage patterns; preventing spam and fraudulent use by automated programs. Refusal: cookie storage can be refused via browser settings — Chrome: Settings > Privacy and security > Third-party cookies; Edge: Settings > Cookies and site permissions; Safari: Preferences > Privacy.
3. ③ Refusing cookies may limit the use of some personalized services, and online inquiry form submissions may not be processed properly.

Article 10 (Chief Privacy Officer and Department Handling Access Requests)

1. ① The Company designates the following Chief Privacy Officer to take overall responsibility for personal information processing and to handle complaints and remedies related to personal information:
   • ▶ Chief Privacy Officer — Name: Ilhyung Na / Position: CEO / Tel: +82-51-711-4233 / Email: sales@maresf.kr
   • ▶ Department handling access requests — Department: Management Support Team / Tel: +82-51-711-4233 / Email: sales@maresf.kr
2. ② Data subjects may direct all inquiries, complaints, and requests for remedy relating to personal information protection arising from the use of the Company's services to the Chief Privacy Officer or the department above. The Company will respond and take action without delay.

Article 11 (Remedies for Infringement of Rights)

Data subjects may apply for dispute resolution or consultation with the following institutions to seek remedy for infringement of personal information:

1. 1. Personal Information Dispute Mediation Committee: 1833-6972 / www.kopico.go.kr
2. 2. Personal Information Infringement Report Center (KISA): 118 / privacy.kisa.or.kr
3. 3. Supreme Prosecutors' Office: 1301 / www.spo.go.kr
4. 4. National Police Agency: 182 / ecrm.police.go.kr

In addition, a person whose rights or interests have been infringed by a disposition or omission of the head of a public institution in response to a request under Articles 35 (access), 36 (correction/deletion), or 37 (suspension of processing) of PIPA may file an administrative appeal as prescribed by the Administrative Appeals Act. Central Administrative Appeals Commission: 110 / www.simpan.go.kr

Article 12 (Changes to this Privacy Policy)

1. ① This Privacy Policy takes effect on August 10, 2026.
2. ② In the event of additions, deletions, or amendments due to changes in laws, policies, or security technology, the Company will give notice through the website's announcements at least 7 days before the effective date — or at least 30 days in the case of significant changes to data subjects' rights.
3. ③ Previous versions: v1.0 (Aug 10, 2026 – present).

Business Information

Company: Mare Seafood Co., Ltd. / CEO: Ilhyung Na / Business Registration No.: 847-86-03545 / Address: 4F, Dongwon Industry Bldg., 70 Jungang-daero (Jungang-dong 4-ga), Jung-gu, Busan, Republic of Korea / Tel: +82-51-711-4233 / Email: sales@maresf.kr