Privacy Policy

Betterway Systems Co., Ltd. (hereinafter the "Company") complies with the Personal Information Protection Act and other relevant laws, and protects users' personal information and rights and interests. Accordingly, the Company establishes and discloses the following Privacy Policy.

Article 1. Purposes of Processing Personal Information

The Company processes personal information for the following purposes. If the purpose of processing changes, the Company will obtain prior consent.

1. Membership registration and management: Confirming intent to join, identifying users, maintaining and managing qualifications, preventing fraudulent use, and delivering various notices

2. Provision of services and performance of contracts: Production, ordering, and delivery of printed materials; payment, settlement, and refunds; verification of uploaded content

3. Customer consultation and dispute resolution: Receiving and handling complaints, dispute mediation, service consultation

4. Marketing and advertising (with users' separate consent): Notices of new services and events, delivery of promotional information, customized product recommendations and advertisements on our website

5. Service improvement and statistical analysis: Aggregation and analysis of usage statistics, improving service quality, developing new services

Article 2. Personal Information Items Processed

The Company collects the following personal information to provide its services.

1. Items Collected and Retention Periods

① Membership Registration

[Required] Name, date of birth, email, mobile phone number, ID, password

[Optional] Gender, phone number

[Retention] Until membership withdrawal

② Payment and Product Orders

[Required] Recipient information (name, mobile phone number, phone number, address), payment information (method, amount, date/time, approval number), sender information (upon customer request: name, mobile phone number, address)

[Common] Quick-delivery dispatch contact number (when "Customer Quick Delivery" is selected), file contact number (optional)

[Retention] 5 years (Act on Consumer Protection in Electronic Commerce)

③ Cash Receipt Issuance

[Information collected] Mobile phone number or resident registration number

[Legal basis] Income Tax Act, Act on Restriction on Special Cases Concerning Taxation (issuance)

[Retention] 5 years (Framework Act on National Taxes Section 85-3)

④ Tax Invoice Issuance

[Information collected] Company name, business registration number, representative name, business address, contact person information (name, email, phone number)

[Retention] 5 years (Framework Act on National Taxes Section 85-3)

⑤ Bank Transfer Refund

[Information collected] Bank name, account number, account holder

[Retention] 5 years (Act on Consumer Protection in Electronic Commerce)

⑥ Customer Consultation and Inquiries

[Information collected] Contact person information (name, phone number, position, email), company name, etc.

[Retention] Destroyed immediately after consultation is completed

⑦ Marketing and Promotional Information Use (Opt-in)

[Information collected] Name, date of birth, gender, mobile phone number, email, usage records

[Retention] Until consent is withdrawn or membership is terminated

⑧ Information Automatically Collected During Service Use

The following information may be automatically generated and collected during service use.

[Information collected] IP address, cookies, access logs, usage records, device information, access date/time

2. Method of Collecting Personal Information

Website, phone, email, live online chat

3. Overseas Transfer of Personal Information

The Company transfers personal information overseas as follows for the provision of its services. In accordance with the Personal Information Protection Act, the Company discloses the following information. Users may refuse the service if they do not consent to the overseas transfer.

Google LLC

Recipient / Contact : Google LLC / privacy-shield-korea@google.com

Country of Transfer : United States

Items Transferred : Online identifiers (cookies, device identifiers), service usage/behavioral information (aggregated)

Date and Method of Transfer : Automatically transmitted over the network at the time of service use

Purpose of Transfer : Analysis of service usage statistics (Google Analytics)

Retention/Use Period : Up to 14 months from collection (GA4 setting) or until the purpose of analysis is achieved

Method of Refusal : Install the GA opt-out browser add-on (tools.google.com/dlpage/gaoptout) or block browser cookies

PayPal Pte. Ltd.

Recipient / Contact : PayPal Pte. Ltd. / paypal@generalagent.co.kr

Country of Transfer : Singapore

Items Transferred : Email address, payment amount, order number, device information, card/account information necessary for payment approval and settlement

Date and Method of Transfer : Encrypted and transmitted in real time via electronic means upon payment request

Purpose of Transfer : Settlement of PayPal payments, fraud prevention, and security monitoring

Retention/Use Period : Until the end of the retention period set by global financial regulations and PayPal's internal policies

Method of Refusal : You may refuse the transfer by not selecting PayPal as a payment method. If you refuse, payment and service use through PayPal will be restricted.

Anthropic, PBC (live online chat only)

Recipient / Contact : Anthropic, PBC / privacy@anthropic.com

Country of Transfer : United States

Items Transferred : Chat message content (including order numbers, URLs, and email addresses in protected form)

Date and Method of Transfer : Transmitted via HTTPS API call at the time each message is sent

Purpose of Transfer : Real-time translation and generation of post-chat work summaries

Retention/Use Period : In accordance with Anthropic's API data retention policy

Method of Refusal : You may refuse the transfer by not using the live online chat. If you refuse, use of the live online chat service will be restricted.

4. Content Uploaded by Users

• Purpose of retention: Order processing, convenience for reorders, dispute handling

• Retention period: 1 year from the order date (upon reorder, extended to 1 year from the most recent reorder date; if an i-Token is used, extended until the i-Token expires)

Article 3. Retention Period and Processing/Destruction of Personal Information

1. Retention Periods

The Company destroys personal information without delay after the purpose of collection and use has been achieved, and retains it for the following periods as required by law or the Company's internal policy.

• Member information (registration/change history) : Until membership withdrawal (Performance of service agreement / member consent)

• Records of contracts and withdrawal of subscription : 5 years (Act on Consumer Protection in Electronic Commerce)

• Records of payment and supply of goods : 5 years (Act on Consumer Protection in Electronic Commerce)

• Records of consumer complaints and dispute handling : 3 years (Act on Consumer Protection in Electronic Commerce)

• Tax invoices and other transaction documents : 5 years (Framework Act on National Taxes / Value-Added Tax Act)

• Cash receipts (including resident registration numbers) : 5 years (Framework Act on National Taxes Section 85-3)

• Access records of the personal information processing system : 2 years (Standards for Ensuring the Safety of Personal Information Section 8 (processing of unique identification information))

• Service usage access logs : 6 months (Company internal policy)

• Records to prevent re-registration of abusive users : 1 year (Company internal policy)

• User-uploaded content : 1 year from the order date (upon reorder, extended to 1 year from the most recent reorder date; if an i-Token is used, extended until the i-Token expires)

2. Procedures and Methods of Destruction

The Company, in principle, destroys personal information without delay once the purpose of collection and use has been achieved.

• Personal information in electronic file form is permanently deleted using methods that make the record unrecoverable.

• Personal information printed on paper is destroyed by shredding or incineration.

3. Measures to Ensure the Safety of Personal Information

In accordance with Article 29 of the Personal Information Protection Act, the Company implements the following managerial, technical, and physical measures to ensure safety.

• Managerial: Establishment and implementation of an internal management plan; minimization of personnel handling personal information and regular training

• Technical: Access control and authority management; encryption of passwords and unique identification information; retention of access records and prevention of forgery/alteration; security programs

• Physical: Access control for server rooms and data storage facilities

Article 4. Provision of Personal Information to Third Parties

The Company does not, in principle, provide users' personal information to external parties. However, the following are exceptions:

① Where the user has given separate prior consent

② Where required by law, or where requested by an investigative agency in accordance with the procedures and methods prescribed by law for investigative purposes

③ Where a user consults on or purchases design services, as follows:

Remind Design

Purpose of Use : Verification of the client, consultation and performance of contract, service provision, refund processing and dispute resolution

Items Provided : Company name (or customer name), contact number, email

Retention/Use Period : Destroyed after the purpose is achieved

Article 5. Outsourcing of Personal Information Processing

The Company outsources the minimum necessary work to specialized companies for the smooth provision of services. In accordance with relevant laws, the Company stipulates the matters necessary to ensure that personal information is safely managed under outsourcing agreements.

PayPal Pte. Ltd.

Outsourced Task : Payment processing and settlement

Overseas : Overseas (Singapore)

Retention/Use Period : Upon withdrawal or termination of outsourcing agreement

Kakaopay Corp., Naver Financial Corp., Gmarket Inc., NHN Payco Corp., KG Inicis Co., Ltd.

Outsourced Task : Payment processing and settlement

Overseas : Domestic

Retention/Use Period : Upon withdrawal or termination of outsourcing agreement

CJ Logistics, Korea Post, individual delivery service providers (quick delivery), Dver Inc.

Outsourced Task : Delivery of ordered products and safe number service

Overseas : Domestic

Retention/Use Period : Upon withdrawal or termination of outsourcing agreement

LG CNS

Outsourced Task : KakaoTalk notification and SMS delivery

Overseas : Domestic

Retention/Use Period : Upon withdrawal or termination of outsourcing agreement

Amazon Web Services

Outsourced Task : Cloud server operation and data storage (Seoul region)

Overseas : Domestic processing

Retention/Use Period : 1 year from the order date (upon reorder, extended to 1 year from the most recent reorder date; if an i-Token is used, extended until the i-Token expires)

Google LLC

Outsourced Task : Service usage statistics analysis (GA)

Overseas : Overseas (United States)

Retention/Use Period : Up to 14 months from collection

Humus On

Outsourced Task : Marketing email delivery

Overseas : Domestic

Retention/Use Period : Until consent is withdrawn or membership is terminated

Article 6. Rights of Users

Users may make the following requests regarding their personal information at any time:

• Request to access personal information

• Request to correct errors (use/provision suspended until correction is completed)

• Request to delete (excluding information subject to mandatory collection under law)

• Request to suspend processing

• Request to transmit personal information (Article 35-2 of the Act)

• Request to refuse or request an explanation regarding automated decisions (Article 37-2 of the Act)

Users may exercise these rights by written request, phone, or email to the Personal Information Protection Manager. In the case of an agent, a power of attorney (Annex Form No. 11 under the "Notification on the Method of Processing Personal Information") must be submitted. The legal representative of a child under the age of 14 may exercise the above rights with respect to the child's personal information, and the Company will process such requests after verifying the legal representative's status.

Article 7. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

The Company operates devices such as "cookies" that periodically store and retrieve your information. A cookie is a small text file sent to your browser by the server used to operate the Company's website, and is stored on your computer's hard disk.

1. Purposes of Using Cookies, etc.

• PC authentication (including mobile device authentication)

• Analyzing the access frequency and visit duration of members and non-members to understand service usage statistics and improve services, and providing customized product recommendations and advertisements on our website only to members who have consented to receive marketing information

2. How to Refuse Cookie Settings

You have the option to decide whether to allow cookies to be installed. You may set options in your web browser to allow all cookies, to be prompted for confirmation each time a cookie is saved, or to refuse the storage of all cookies. However, if you refuse to allow cookies, you may experience difficulties using some services.

3. Examples of How to Refuse Cookie Settings

• Chrome: Top of browser > Settings > Privacy and security > Clear browsing data

• Edge: Top of browser > Settings > Cookies and site permissions > Manage and delete cookies and site data

• Safari: Settings > Apps > Safari > Advanced > Block All Cookies

Article 8. Collection, Use, and Refusal of Behavioral Information

The Company collects and uses behavioral information for service usage statistics analysis, quality improvement, and customized product recommendations and advertisements on our website.

• Items collected: Visit history, search/purchase history, click information

• Method of collection: Cookies, web log analytics tools (Google Analytics), service usage records (members' purchase and visit history)

• Purpose of use: (Aggregated) statistical analysis and quality improvement / (with opt-in consent) customized product recommendations and advertisements on our website

• Retention period: Up to 14 months from the date of collection for Google Analytics data (GA4 setting; not a statutory period) / Until consent is withdrawn or membership is terminated for member usage records used for customized recommendations

• Method of refusal: GA opt-out add-on or blocking browser cookies / Customized recommendations stop when marketing consent is withdrawn

• The Company does not allow third parties to collect behavioral information for advertising purposes.

Article 9. Personal Information Protection Officer

The Company designates the following Personal Information Protection Officer to oversee personal information processing and to handle user complaints and remedy damages. Users may direct inquiries regarding personal information protection, complaint handling, and remedy of damages arising from the use of the Company's services to the contact information below. The Company will respond to and process user inquiries without delay.

Personal Information Protection Officer (CPO)

Name : Park Hae-jun

Position/Title : Executive Director

Contact : 02-1544-6698, redprinting@redprinting.co.kr

Personal Information Protection Manager

Name : Kim Ki-seok

Position/Title : Deputy General Manager

Contact : 02-1544-6698, redprinting@redprinting.co.kr

Article 10. Remedies for Infringement of Rights and Interests

Users may apply for dispute resolution or consultation with the following organizations to obtain remedies for infringement of personal information.

• Personal Information Infringement Report Center (Korea Internet & Security Agency) : 118 (no area code) / privacy.kisa.or.kr

• Personal Information Dispute Mediation Committee : 1833-6972 (no area code) / kopico.go.kr

• Supreme Prosecutors' Office, Cyber Investigation Division : 1301 (no area code) / spo.go.kr

• Cyber Crime Reporting System (National Police Agency) : 182 (no area code) / ecrm.police.go.kr

Article 11. Changes to the Privacy Policy

This Privacy Policy may be revised due to changes in laws or service policy.

• In the event of changes, the Company will provide notice at least 7 days prior to implementation. For significant changes, such as the addition of new collection items, overseas transfers, or changes to outsourcing arrangements, the Company will provide notice at least 30 days prior to implementation.

Announcement Date: September 30, 2026  │  Effective Date: October 14, 2026