THOTH (hereinafter referred to as the "Company") establishes and discloses the following personal information processing guidelines in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of information subjects and to promptly and smoothly handle related grievances.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

• 1. Providing responses to customer inquiries on the website and managing current status

Article 2 (Processing and Retention Period of Personal Information)

① The Company processes and retains personal information within the retention and use period of personal information according to laws or the retention and use period of personal information consented to when collecting personal information from information subjects.

② The processing and retention period is as follows.

• 1. Within 1 year from the date of receipt of customer inquiries on the website

Article 3 (Provision of Personal Information to Third Parties) Not applicable

Article 4 (Entrustment of Personal Information Processing) Not applicable

Article 5 (Rights, Duties and Exercise Methods of Information Subjects)

① Information subjects may exercise the following rights related to personal information protection against the Company at any time.

• 1. Request to view personal information
• 2. Request for correction in case of errors, etc.
• 3. Request for deletion
• 4. Request to stop processing

②The exercise of rights under Paragraph 1 can be made to the Company in writing, by phone, or by email, and the Company will take action without delay.

③If an information subject requests correction or deletion of errors in personal information, the Company will not use or provide the personal information until the correction or deletion is completed.

④The exercise of rights under Paragraph 1 can be made through an agent such as a legal representative of the information subject or an authorized person. In this case, a power of attorney in accordance with Form No. 11 attached to the Enforcement Rules of the Personal Information Protection Act must be submitted.

⑤Information subjects shall not infringe on the personal information and privacy of the information subject themselves or others processed by the Company in violation of the Personal Information Protection Act and other related laws.