NEXONE BIO Co., Ltd. ("the Company") is committed to protecting personal information and complies with applicable laws and regulations, including the Act on Promotion of Information and Communications Network Utilization and Information Protection.

This Privacy Policy explains how the Company collects, uses, retains, and protects the personal information of users. If this policy is revised, such changes will be announced on our website or notified individually.

Effective Date: February 17, 2025

1. Personal Information Collected The Company collects the following personal information for purposes such as consultation:

• Online inquiries: Country, company name, name, job title, contact number, email address, content of inquiry, etc

2. Purpose of Collection and Use The Company collects and uses personal information for the following purposes:

• To fulfill service-related agreements

• To respond to inquiries and provide requested services

3. Retention and Use Period In principle, personal information is destroyed without delay once the purpose of collection and use has been fulfilled. However, information may be retained for a certain period as required by relevant laws:

• Records on contracts or subscription withdrawals: 5 years (Act on Consumer Protection in E-commerce)

• Records on payments and supply of goods: 5 years

• Records on consumer complaints or dispute resolution: 3 years

4. Destruction Procedure and Method

• Procedure: Information entered by users is moved to a separate database (or a separate file for physical documents) after its purpose has been achieved and is retained for a period according to internal policy and legal requirements before being destroyed.

• Method: Personal information stored electronically is deleted using technical methods that render the data unrecoverable.

5. Provision of Personal Information to Third Parties The Company does not disclose personal information to third parties without prior consent, except when required by law or by request of investigative authorities in accordance with legal procedures.

6. Entrusted Third-Party Service Providers To operate its services, the Company entrusts certain tasks to external service providers:

• Service provider: 3ANYINC

• Scope of work: Website hosting and maintenance

7. Rights of Users and Legal Representatives Users may access, correct, or delete their personal information at any time, or withdraw their consent.

• Access or correction may be requested through the “Edit Personal Information” or similar options after user verification.

• For membership withdrawal, users may click “Unsubscribe” and complete the identification process.

• Alternatively, users may contact the Personal Information Manager via phone or email.

• If incorrect data has already been shared with third parties, the Company will notify them of the correction without delay.

• For users under the age of 14, a legal representative may exercise these rights on their behalf.

8. Use of Cookies The Company uses cookies to improve user experience. Cookies are small text files sent to the user's browser by the server and stored on the user's device.

Purposes of Use :
• Analyze visit frequency and behavior
• Understand user preferences and usage patterns
• Deliver personalized services and marketing

Cookie settings: Users can manage cookie preferences via browser settings:
• Allow all cookies
• Confirm each time cookies are stored
• Block all cookies

Example (Internet Explorer): Tools > Internet Options > Privacy tab
Note: Disabling cookies may limit access to certain services.

9. Contact for Personal Information Inquiries

In order to protect the personal information of customers and handle any complaints related to such information, the company designates the following department and person responsible for personal information:

For further assistance, users may also contact the following organizations:

• • Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
• • Cyber Investigation Division, Supreme Prosecutors’ Office (www.spo.go.kr / 1301)
• • Cyber Bureau, National Police Agency (www.police.go.kr / 182)