FABLE Co., Ltd. (hereinafter "the Company") values your personal information and complies with applicable laws on the promotion of information and communications network use and information protection.

Through this Privacy Policy, the Company informs you of the purposes and methods of use of the personal information you provide and the measures taken to protect your personal information.

When the Company revises this Privacy Policy, it will announce the changes through the website notice (or individual notice).

This policy is effective as of November 13, 2025.

1. Personal Information We Collect

The Company collects the following personal information for consultation and related purposes.

Online Inquiries
- Items collected: Name, contact information, email, inquiry content, etc.

2. Purpose of Collection and Use of Personal Information

The Company uses the collected personal information for the following purposes.
Performance of contracts for service provision and handling of inquiries and responses related to the provision of services.

3. Retention and Use Period of Personal Information

In principle, the Company destroys personal information without delay after the purpose of collection and use has been achieved. However, when retention is required by applicable laws, the Company retains member information for the period specified by such laws.

Retention Items and Legal Basis

• - Records on contracts or withdrawal of consent: 3 years
• - Records on contracts or withdrawal of consent: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
• - Records on payment and supply of goods, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
• - Records on consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)

4. Procedure and Method of Destruction of Personal Information

In principle, the Company destroys personal information without delay after the purpose of collection and use has been achieved. The procedure and method of destruction are as follows.

Destruction Procedure
Information entered by users for membership registration, etc. is transferred to a separate DB (or a separate filing cabinet in the case of paper) after the purpose is achieved and is stored for a certain period in accordance with internal policy and other relevant laws (see retention and use period) before being destroyed.
Personal information transferred to a separate DB is not used for any purpose other than retention unless required by law.

Destruction Method
Personal information stored in electronic file form is deleted using technical methods that make the records irreproducible.

5. Provision of Personal Information

The Company does not provide users' personal information to third parties in principle. Exceptions are made in the following cases.
When users have given prior consent; when required by law; or when an investigative authority requests such information in accordance with procedures and methods prescribed by law for investigative purposes.

6. Hosting and Maintenance

The Company entrusts the following operations to external service providers for the performance of its services.

• - Service provider: Three Any I&C Co., Ltd.
• - Entrusted tasks: Website and system management (hosting / maintenance)

7. Rights of Users and Legal Representatives and How to Exercise Them

Users may at any time access or correct their registered personal information or request withdrawal of membership.
To access or correct personal information, use "Change personal information" (or "Edit member information," etc.); to withdraw membership (withdraw consent), click "Withdraw membership" and complete the identity verification process to access, correct, or withdraw directly.
Alternatively, you may contact the personal information manager in writing, by phone, or by email, and we will take action without delay.
If you request correction of errors in your personal information, we will not use or provide such personal information until the correction is complete.
If incorrect personal information has already been provided to a third party, we will notify the third party of the correction result without delay so that the correction can be made.
Personal information that has been terminated or deleted at the user's request is processed in accordance with the "Retention and Use Period of Personal Information Collected by the Company" and is not made available for access or use for any other purpose.
In the case of children under 14 years of age, the legal representative has the right to access or correct the child's personal information and to withdraw consent to collection.

8. Installation, Operation and Refusal of Automatic Collection of Personal Information

The Company operates "cookies" and similar technologies that store and retrieve your information. A cookie is a very small text file sent by the server that operates the website to your browser and stored on your computer's hard disk.

The Company uses cookies for the following purposes.

Purpose of Use of Cookies
Analyzing connection frequency and visit times of members and non-members; identifying user preferences and areas of interest and tracking usage; providing targeted marketing and personalized services by identifying level of participation in events and number of visits. You have the right to choose whether to allow cookies.
Therefore, you may set your web browser to allow all cookies, to be prompted each time a cookie is stored, or to refuse all cookies.

How to Refuse Cookie Settings
You can refuse cookie settings by selecting the options in your web browser to allow all cookies, to be prompted each time a cookie is stored, or to refuse all cookies.

Setting Method
Example (Internet Explorer): Tools at the top of the web browser > Internet Options > Privacy
Please note that refusing cookies may result in difficulties in providing our services.

9. Customer Service Regarding Personal Information

The Company has designated the following department and personal information manager to protect customers' personal information and handle complaints related to personal information.

For reports or counseling regarding personal information infringement, you may contact the following agencies.

• - KISA Privacy Violation Report Center (privacy.kisa.or.kr / 118)
• - Supreme Prosecutors' Office Cyber Investigation Department (www.spo.go.kr / 1301)
• - National Police Agency Cyber Bureau (police.go.kr / 182)