Privacy Policy

Check the Privacy Policy of ExamVue 365 Flow.

JPI Healthcare Co., Ltd. values your personal information and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection.

Through this Privacy Policy, we inform you of the purpose and method of using the personal information you provide, and what measures are being taken to protect your personal information.

If this Privacy Policy is revised, we will notify you through website announcements (or individual notices).

Collection of Personal Information

We collect the minimum personal information necessary during membership registration or service use.

The minimum information essential for providing the service is collected as mandatory items, and additional information collected to provide specialized services is collected as optional items with your consent. Even if you do not agree to the optional items, there are no restrictions on using the service.

We collect the following minimum personal information for membership registration, consultation, service application, etc.

• Collected items: Name, email, password, mobile phone number, country
• Method of collection: Collection of personal information through website membership registration

Purpose of Using Personal Information

We use the collected minimum personal information for the following purposes. All information provided by users will not be used for purposes other than those necessary for the following purposes, and if the purpose of use changes, prior consent will be sought.

• Statistics on service use
• Provision of new services and event information
• Data for developing new services and providing personalized services
• Fulfillment of contracts regarding service provision and provision of content for fee settlement according to service provision, purchase and fee payment
• Member management
• Identity verification according to the use of membership services, personal identification, prevention of fraudulent use by bad members and prevention of unauthorized use, confirmation of intent to join, handling of civil complaints such as complaint handling, delivery of notices

Retention and Period of Personal Information

In principle, after the purpose of collecting and using personal information is achieved, the information is destroyed without delay without exception.

Destruction of Personal Information

In principle, after the purpose of collecting and using personal information is achieved, the information is destroyed without delay. The destruction procedure and method are as follows.

1. Destruction Procedure

The information entered by the member for membership registration, etc., is transferred to a separate DB (in the case of paper, a separate filing cabinet) after the purpose is achieved, and is stored for a certain period according to internal policies and other related laws and regulations (refer to retention and use period) before being destroyed. Personal information transferred to a separate DB will not be used for any other purpose than being retained unless required by law.

2. Destruction Method

Personal information stored in electronic file format is deleted using a technical method that cannot reproduce the record.

Provision of Personal Information

In principle, we do not provide users' personal information to the outside. However, the following cases are exceptions.

• When users agree in advance
• When required by law, or when there is a request from an investigative agency according to the procedures and methods prescribed by law for investigative purposes

Matters Concerning Measures to Ensure the Safety of Personal Information

• We minimize the designation of personal information handlers and conduct regular training.
• We conduct self-audits at least once a year to ensure safety related to personal information handling.
• Among users' personal information, passwords are encrypted, stored, and managed, and important data files and transmitted data use separate security functions that encrypt them.
• To prevent leakage and damage of personal information caused by hacking or computer viruses, we install security programs, periodically update and inspect them, install systems in areas where access from the outside is controlled, and technically/physically monitor and block them.
• We take necessary measures to control access to personal information by granting, changing, and canceling access rights to the database system that processes personal information.
• We have a separate physical storage location for the personal information system that stores personal information and establish and operate access control procedures for it.

Consignment of Collected Personal Information

We do not consign your information to external companies without your consent. If such a need arises in the future, we will notify you of the consignee and the contents of the consigned work and obtain prior consent if necessary.

Rights of Users and Legal Representatives and How to Exercise Them

To view or modify the personal information of users or children under the age of 14, click 'Change Personal Information' (or 'Modify Member Information', etc.), and to cancel membership (withdraw consent), click "Withdraw Membership" to go through the identity verification process and directly view, correct, or withdraw. Alternatively, if you contact the personal information management manager in writing, by phone, or by email, we will take action without delay. If you request correction of errors in personal information, we will not use or provide the personal information until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, we will notify the third party of the correction processing result without delay so that the correction can be made. We process personal information canceled or deleted at the request of the user or legal representative as specified in the "Retention and Use Period of Personal Information Collected by the Site" and process it so that it cannot be viewed or used for other purposes.

Personal Information Protection Officer and Grievance Handling

To protect customers' personal information and handle complaints related to personal information, we have designated the relevant department and personal information management officer as follows.

• Name of Personal Information Management Officer: Hyungkyu Kim

Phone Number: 02-2108-2580

Email: kimhk@jpi.co.kr

In addition, if you need to report or consult about personal information, please contact the following organizations.

• Personal Information Infringement Report Center (privacy.kisa.or.kr / 118 without area code)
• Supreme Prosecutors' Office Cyber Investigation Division (www.spo.go.kr / 1301 without area code)
• National Police Agency Cyber Safety Bureau (cyberbureau.police.go.kr / 182 without area code)

Duty of Notification

If there are additions, deletions, or modifications to the current Privacy Policy, we will notify you through the 'Notice' on the website at least 7 days before the revision.

• Announcement Date: January 18, 2026
• Effective Date: January 18, 2026