Privacy Policy

1. Personal Information Collected

The Company collects the following personal information for consultations, service applications, and related purposes.

(1) Items Collected

• ① When an Educational Institution uses the Service: name, mobile phone number, email address, and Educational Institution information (academy name, address, etc.)
• ② When a student is registered: name and user ID
• ③ Information automatically collected in the course of using the Service: cookies, service usage records, access logs, and similar data may be generated and collected automatically.

(2) Methods of Collection

Personal information is collected through the website, app, telephone, consultation board, email, events, and similar channels.

2. Purpose of Collection and Use of Personal Information

The Company uses collected personal information for the following purposes.

(1) Educational Institution Use and Service Provision

• · Consultation with Educational Institutions and response to inquiries
• · Performance of contracts regarding use of the Dodo & Friends Service
• · Management of Service use by Educational Institutions and students
• · Management of students' Service use and learning records
• · Delivery of Service-related information and Notices

(2) Member and User Management

• · Identification of Users and management of Service use
• · Management of student accounts
• · Handling of complaints and inquiries

(3) Service Improvement and Operation

• · Analysis of Service usage status and statistics
• · Improvement and stable operation of the Service
• · Improvement of Users' convenience in using the Service

3. Retention and Use Period of Personal Information

In principle, the Company destroys personal information without delay when the purpose of collection has been achieved or upon a member's request. The Company may separately obtain a member's consent, or notify or specify the retention period to the member in advance. Provided, however, that personal information may exceptionally be retained for the periods specified below.

(1) If retention is required under the Act on the Consumer Protection in Electronic Commerce, etc., the Commercial Act, or other statutes, the information shall be used only for the purpose of such retention, and the retention periods are as follows.

① Records of contracts or withdrawal of offers, etc.

• · Grounds for retention: Act on the Consumer Protection in Electronic Commerce, etc.
• · Retention period: 5 years

② Records of payment and supply of goods, etc.

• · Grounds for retention: Act on the Consumer Protection in Electronic Commerce, etc.
• · Retention period: 5 years

③ Records of consumer complaints or dispute resolution

• · Grounds for retention: Act on the Consumer Protection in Electronic Commerce, etc.
• · Retention period: 3 years

④ Website visit records

• · Grounds for retention: Protection of Communications Secrets Act
• · Retention period: 3 months

(2) Where necessary for fee settlement arising from the provision of the Service, or for statistics, academic research, or market surveys, and where the information is provided in a form that cannot identify a specific individual, or where the Company collects personal information from a member, the period of use shall continue until the member expresses an intent to terminate and the termination of the Service Agreement has been processed.

While a member uses the Service provided by the Company, the Company may continue to retain the member's personal information and use it to provide the Service and for related purposes.

Provided, however, that if the member personally requests termination of the Service Agreement, or if the purpose of collection of personal information collected for a temporary purpose (such as a survey or event) has been achieved, the personal information shall be completely deleted by a method that cannot be restored, so that it cannot later be viewed or used. The grace period is one (1) month.

4. Procedures and Methods for Destruction of Personal Information

In principle, the Company destroys personal information without delay after the purpose of collection and use has been achieved. The procedures and methods of destruction are as follows.

(1) Destruction Procedures

• ① Occurrence of grounds for destruction: The Company selects and destroys the relevant personal information when the retention period under its internal policy and applicable laws has expired.
• ② Long-term inactive members: Personal information of a member for whom five (5) years have elapsed from the end of the remaining learning period shall be destroyed without delay in accordance with the Company's internal policy.

(2) Destruction Methods

• ① Personal information stored in electronic file form is deleted using a technical method that makes the records unrecoverable.
• ② Personal information printed on paper is destroyed by shredding or incineration.

5. Installation, Operation, and Refusal of Automatic Collection Devices

The Company uses "cookies" that store and retrieve usage information from time to time in order to provide members with personalized services. A cookie is a small amount of information that a server (HTTP) used to operate a website sends to a User's computer browser, and it may also be stored on the hard disk of the User's PC.

(1) Purpose of Using Cookies

Cookies are used to identify website visits and usage patterns of members and non-members, and to provide Users with optimized information, including targeted marketing.

(2) Installation, Operation, and Refusal of Cookies

Users may refuse the storage of cookies through their web browser settings.

• ① Microsoft Edge: browser top menu > Settings > View advanced settings > cookie menu options
• ② Chrome: browser top menu > Settings > Advanced > Content settings > cookie menu options
• ③ Internet Explorer: Tools at the top of the browser > Internet Options > Privacy menu options
• ④ Chrome on mobile: Chrome app > More (top right) > History > Clear browsing data > select a time range > check "Cookies and site data" and "Cached images and files" > Clear data
• ⑤ Safari on mobile: Safari app > Clear History and Website Data > Confirm
• ⑥ Naver on mobile: Naver app > Settings > Clear cache + Browsing history > Delete cookies

(3) Provided, however, that if cookie storage is refused, it may become difficult to use personalized services.

6. Protection of Personal Information

The Company complies with the personal information protection provisions under applicable laws that information and communications service providers must observe, including the Protection of Communications Secrets Act, the Telecommunications Business Act, and the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., as well as the personal information protection guidelines established by the Ministry of Information and Communication.

7. Sharing and Provision of Personal Information

In principle, the Company does not provide Users' personal information to third parties. Provided, however, that the following cases are excepted.

• (1) Where Users have given prior consent
• (2) Where required by law, or where a request is made by an investigative agency in accordance with the procedures and methods prescribed by law for investigative purposes

8. Entrustment of Collected Personal Information

The Company does not entrust customers' information to external companies without the customer's consent. Provided, however, that personal information is entrusted as follows in connection with electronic payments, event prizes, product delivery, and bulk sending of SMS, MMS, and email. In accordance with applicable laws, the Company stipulates the necessary matters in the entrustment agreement so that personal information can be managed securely.

9. Personal Information Complaints

To protect customers' personal information and handle complaints related to personal information, the Company has designated the following department and personal information manager.

(1) Chief Privacy Officer

(2) You may report any personal information protection complaint arising from use of the Company's Service to the personal information manager or the responsible department. The Company will promptly respond to and handle Users' inquiries and reports.

(3) If you need to report or consult regarding other personal information infringement, please contact the following organizations.

• · Personal Information Infringement Report Center (www.1336.or.kr / 118 without an area code)
• · ePrivacy Mark Certification Committee (www.eprivacy.or.kr / 02-580-0533~4)
• · Supreme Prosecutors' Office Internet Crime Investigation Center (http://icic.sppo.go.kr / 02-3480-3600)
• · Korean National Police Agency Cyber Terror Response Center (www.ctrc.go.kr / 02-392-0330)