Privacy Policy

Norsvale (hereinafter "Company") values users' personal information and complies with the Personal Information Protection Act and other applicable laws. This policy describes the types, purposes, retention periods, and handling of personal information collected by the Company.

Article 1 (Types of Personal Information Collected)

The Company collects only the minimum personal information necessary for service provision.

Collected Items

• Required: Email address
• Automatically Collected: IP address, cookies, access date/time, service usage records, device information

Article 2 (Purpose of Collecting and Using Personal Information)

Collected personal information is used for the following purposes.

• Sending newsletters and research materials
• Service improvement and usage statistics analysis
• Compliance with legal obligations
• Prevention of illegal or fraudulent use

Article 3 (Retention and Use Period of Personal Information)

Collected personal information is destroyed immediately after the purpose of collection is achieved. However, if preservation is required under applicable laws, it will be retained for the period specified.

Article 4 (Provision of Personal Information to Third Parties)

The Company does not in principle provide users' personal information to external parties. However, exceptions apply in the following cases.

• When the user has given prior consent
• When required by law or requested by law enforcement agencies

Article 5 (Use of Cookies)

The Company uses cookies to provide better services. Cookies are small pieces of information sent by the server running the website to the user's browser, and may be stored on the user's hard drive.

Users may refuse the use of cookies through browser settings. However, refusing cookies may limit the use of some services.

Article 6 (User Rights)

Users may exercise the following rights at any time.

• Request to access personal information
• Request to correct errors
• Deletion request
• Request to stop processing

Rights may be exercised by email request, and the Company will take action without delay.

Article 7 (Ensuring Security of Personal Information)

The Company takes the following measures to protect personal information.

• Minimizing staff who handle personal information and providing training
• Restricting access to personal information
• Access controls on database systems processing personal information
• Establishing technical measures against hacking and external intrusions

Article 8 (Privacy Officer)

The Company designates a Privacy Officer to protect users' personal information and handle related complaints. For inquiries regarding personal information, please contact us through the Site.

Article 9 (Policy Changes)

This Privacy Policy may be added to, deleted from, or modified due to changes in laws, policies, or security technology. Changes will be posted and announced on the Site.