Privacy Policy - 2026/01/21

Last updated: [ 01.21.2026 ]

😺 Personal Information Collection and Processing Policy (Privacy Policy)

ILLY Corporation Co., Ltd. (hereinafter referred to as the “Company”) complies with the relevant laws and regulations, including the Personal Information Protection Act and the Location Information Protection Act, to protect the freedom and rights of data subjects. The Company processes and manages personal (location) information lawfully and securely. In accordance with Article 30 of the Personal Information Protection Act and Article 21 of the Location Information Protection Act, the Company establishes and publishes the following Personal (Location) Information Processing Policy to inform data subjects of the procedures and standards for personal (location) information processing and to ensure prompt and smooth resolution of related grievances.

1. Purpose of Processing Personal Information, Collected Items, Retention and Use Period

ILLY Corporation Co., Ltd. processes the personal information of data subjects as follows:ServiceDetailed ServicePurpose of CollectionCollected ItemsRetention and Use Period Catchy(캣치) Membership Registration and ManagementConfirmation of intention to register as a member, personal identification and authentication for provision of membership services, age verification, maintenance/management of membership status, prevention of fraudulent use of services, notifications/announcements[Required] Email, Name, Mobile Phone Number, Unique User Key from SNS Simple Sign-up Provider (when using SNS simple sign-up)Until 3 months after membership withdrawal[Optional] Gender, Date of Birth※ However, in the case of ongoing investigation or inquiry regarding a violation of related laws and regulations, retention is until the completion of the investigation or inquiry.

Catchy(캣치) Pet Counseling and Hospital Referral ServiceProvision of counseling service, proceeding with hospital referral, confirmation of pet information[Required] Member Information: Name, Date of Birth, Gender, Mobile Phone Number; Pet Information: Type, Gender, Name, Age, Weight, Breed, Neutering StatusUntil membership withdrawal[Optional] Counseling Information※ However, retained according to the statutory mandatory retention period.

Catchy(캣치) Grievance HandlingVerification of user identity, confirmation of grievances, contact/notification for fact-finding, notification of results[Required] Name, Mobile Phone Number, Email, Delivery Address, Consultation Details, Order InformationUntil membership withdrawal※ However, retained according to the statutory mandatory retention period.

Catchy(캣치)Promotion and MarketingProvision of event and advertising information and opportunity to participate[Optional] Customer's Service Usage Information (access within the service, orders, event occurrence information), Customer's Device Information (uuid, OS information, app version, push_token), Pet Information (pet type, pet name, pet date of birth, pet breed, pet gender)Until withdrawal of consent or membership withdrawal※ However, retained according to the statutory mandatory retention period.

Catchy(캣치) Performance Statistics and New Service DevelopmentStatistics on product/service usage performance information, New service development[Optional] Customer's Service Usage Information (access within the service, orders, event occurrence information), Customer's Device Information (uuid, OS information, app version, push_token), Pet Information (pet type, pet name, pet date of birth, pet breed, pet gender)Until membership withdrawal※ However, retained according to the statutory mandatory retention period.

※ The information retained and then destroyed for a certain period according to the statutory mandatory retention period is as follows: Legal BasisRetention ItemsRetention Period Article 6 of the Act on Consumer Protection in Electronic Commerce, etc. and Article 6(1) of its Enforcement DecreeRecords on contracts or subscription withdrawal, payment of price, supply of goods, etc.5 yearsRecords on consumer complaints or dispute resolution3 yearsRecords on labeling/advertising6 monthsFramework Act on National TaxesAll ledgers and supporting documents related to transactions stipulated by tax laws5 yearsArticle 22(1) of the Electronic Financial Transactions Act and Article 12(1) of its Enforcement DecreeRecords on electronic financial transactions5 yearsArticle 15-2 of the Communications Secrecy Protection Act and Article 41(2)2 of its Enforcement DecreeService visit records3 monthsArticle 20(2) of the Act on the Use and Protection of Credit InformationRecords on the collection, processing, and use of credit information3 years

2. Provision of Personal Information to Third Parties

① ILLY Corporation Co., Ltd. processes the personal information of data subjects only within the scope specified for the purpose of personal information processing. Personal information is provided to third parties only in cases falling under Article 17 and 18 of the Personal Information Protection Act, such as with the data subject's consent or a special provision in the law. Otherwise, the Company does not provide the data subject's personal information to third parties. ② For the smooth provision of services, ILLY Corporation Co., Ltd. obtains the data subject's consent to provide the minimum necessary scope of information in the following cases:

RecipientPurpose of ProvisionItems ProvidedRetention and Use Period Catchy(캣치) Affiliated Veterinarians and Behavior Language ExpertsProvision of counseling services, proceeding with hospital referral, confirmation of pet information[Member Information] Name, Date of Birth, Gender, Mobile Phone Number, Counseling Information; [Pet Information] Type, Gender, Name, Age, Weight, Breed, Neutering StatusUntil withdrawal of consent or membership withdrawal Catchy(캣치) Affiliated Veterinary Hospitals and Hospital Referral IntermediariesProceeding with hospital reservation service[Member Information] Name, Mobile Phone Number, Date of Birth; [Pet Information] Type, Gender, Name, Age, Weight, Breed, Neutering StatusUntil withdrawal of consent or membership withdrawal ③ In accordance with the "Rules for Personal Information Processing and Protection in Emergency Situations" jointly announced by government ministries, personal information may be provided to relevant organizations without the data subject's consent in emergency situations such as disasters, infectious diseases, incidents/accidents posing an imminent threat to life or body, or urgent property loss. For details, please check by clicking here*. In such cases, ILLY Corporation Co., Ltd. will only provide the minimum necessary personal information based on the relevant laws and will not provide it for purposes other than the stated one.

3. Destruction of Personal Information

① ILLY Corporation Co., Ltd. immediately destroys the corresponding personal information when it becomes unnecessary, such as upon expiration of the personal information retention period or achievement of the processing purpose. ② If personal information must be kept in continuous preservation pursuant to other laws despite the expiration of the personal information retention period agreed upon by the data subject or the achievement of the processing purpose, the personal information is moved to a separate database (DB) or stored in a different location. ③ The procedure and method for personal information destruction are as follows: • Destruction Procedure: ILLY Corporation Co., Ltd. selects the personal information for which a destruction reason has occurred and destroys the personal information after obtaining approval from the Company's Personal Information Protection Officer. • Destruction Method: Personal information recorded/stored in the form of electronic files is destroyed using technical methods that prevent reproduction of the records. Personal information recorded/stored in paper documents is destroyed by shredding or incineration.

4. Rights and Obligations of the Data Subject and Legal Representative, and Method of Exercise

① Data subjects may exercise their rights, such as demanding access, correction, deletion, or suspension of processing of their personal information, against ILLY Corporation Co., Ltd. at any time. ② Rights can be exercised against ILLY Corporation Co., Ltd. in writing or via email, etc., in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and ILLY Corporation Co., Ltd. will take action without delay. ③ Rights can also be exercised through a legal representative or a person who has been delegated the authority. In this case, a power of attorney must be submitted according to the form in Attachment No. 11 of the "Notification on Personal Information Processing Methods (No. 2020-7)." ④ Requests for access to and suspension of personal information processing may be restricted pursuant to Article 35(4) and Article 37(2) of the Personal Information Protection Act. ⑤ A request for correction and deletion of personal information cannot be made if the personal information is specified as the subject of collection in another law. ⑥ ILLY Corporation Co., Ltd. confirms whether the person requesting access, correction/deletion, or suspension of processing, based on the data subject's rights, is the data subject themselves or a legitimate representative.

5. Measures to Secure the Safety of Personal Information

ILLY Corporation Co., Ltd. takes the following measures to ensure the safety of personal information: • Administrative Measures: Establishment and implementation of internal management plans, regular employee training. • Technical Measures: Technical countermeasures against hacking, etc., encryption of personal information, storage of access records, and prevention of falsification/alteration. • Physical Measures: Access control to server rooms, data storage rooms, etc.

6. Matters concerning the Installation, Operation, and Refusal of Automated Personal Information Collection Devices

ILLY Corporation Co., Ltd. uses 'cookies' to store user information and retrieve it frequently to provide individually customized services to data subjects. • Cookies are small pieces of information sent by a server (http) used to operate a website to the user's computer browser, and may be stored on the hard disk of the user's PC computer. • Purpose of Cookie Use: Cookies are used for security management, service improvement, new service development, and provision of customized services and advertisements by analyzing users' connection frequency or visit time, identifying user service usage patterns and tracking footprints, checking secure connection status, and user size. • Installation/Operation and Refusal of Cookies: Service users have the option to choose whether to install cookies. Accordingly, users can refuse the storage of cookies by changing the option settings in their web browser. • Refusing cookie storage may cause difficulties in using some services. • Refusing cookie storage may cause difficulties in using customized services.

7. Matters concerning the Collection, Use, and Refusal of Behavioral Information

① ILLY Corporation Co., Ltd. does not collect and use behavioral information to provide services, benefits, and online customized advertisements optimized for the data subject during the service use process. ② ILLY Corporation Co., Ltd. allows online customized advertising business operators to collect and process behavioral information as follows: Advertising Business Operator for Behavioral Information Collection and ProcessingMethod of Behavioral Information CollectionCollected/Processed Behavioral Information ItemsRetention/Use PeriodBraze Inc, Amplitude Inc, Appsflyer, Google adsAutomatic collection and transmission when the user visits our website or runs the appCustomer's Service Usage Information (access within the service, orders, event occurrence information), Customer's Device Information (uuid, OS information, app version, push_token)Until membership withdrawal or termination of the consignment contract ③ ILLY Corporation Co., Ltd. does not collect sensitive behavioral information that poses a significant risk of infringing on an individual's rights and interests or privacy, such as thoughts, beliefs, family and kinship relations, academic background/medical history, and other social activity experience. ④ ILLY Corporation Co., Ltd. does not collect behavioral information for the purpose of customized advertising from children known to be under the age of 14 or from online services primarily used by children under the age of 14, and does not provide customized advertising to children known to be under the age of 14. ⑤ ILLY Corporation Co., Ltd. allows the collection and use of advertising identifiers for online customized advertising in mobile apps as described in Section ②. The data subject can block or allow customized advertising in the app by changing the settings of the mobile device.1

• Blocking/Allowing Advertising Identifiers on Smartphones2 (1) (Android) ① Settings → ② Privacy → ③ Ads → ③ Reset Advertising ID or Delete Advertising ID3 (2) (iPh4one) ① Settings → ② Privacy → ③ Tracking → ④ Turn off "Allow Apps to Request to Track" ※ Menus and methods may differ slightly depending on the mobile OS version. ⑥ Data subjects can uniformly block or allow online customized advertising by changing web browser cookie settings, etc. However, changing cookie settings may affect the use of some services, such as website auto-login. • Blocking/Allowing Customized Advertising via Web Browser (Details on how to change settings for Internet Explorer, Microsoft Edge, and Chrome omitted for brevity, but the technical instructions are available in the Korean text.) ⑦ Data subjects can inquire about behavioral information, exercise the right to refuse, report damages, etc., using the contact information below: • Department in Charge of Personal Information Protection ◦ Department Name: Product Team ◦ Person in Charge: Junyoung Sohn ◦ Contact: <010-6570-1392>, [email protected]

8. Personal Information Protection Officer and Personal Information Access Request

① ILLY Corporation Co., Ltd. is responsible for overall matters related to personal information processing and designates a Personal Information Protection Officer as follows for handling data subject complaints and providing damage relief related to personal information processing. ② Data subjects can request access to personal information pursuant to Article 35 of the Personal Information Protection Act to the department below. ILLY Corporation Co., Ltd. will strive to ensure that the data subject's request for access to personal information is processed quickly. ③ Data subjects can inquire about all personal information protection-related inquiries, complaints, and damage relief that occur while using the services (or business) of ILLY Corporation Co., Ltd. to the Personal Information Protection Officer and the responsible department. ILLY Corporation Co., Ltd. will respond to and process the data subject's inquiries without delay.

CategoryName, etc.Contact Information

Personal Information

Protection OfficerTitle: CEO

Phone Number: +82 10-6570-1392

Department in Charge of Personal Information

ProtectionName: Sangyoon Shin

Email: [email protected]

Personal Information Access Request

9. Method for Remedy for Infringement of Rights

① ILLY Corporation Co., Ltd. guarantees the data subject's right to self-determination regarding personal information and strives to provide consultation and damage relief for personal information infringement. Please contact the department below if a report or consultation is needed. • Grievance Handling Department ◦ Department Name: Product Team ◦ Person in Charge: Sangyoon Shin
◦ Contact: +82 010-6570-1392 / [email protected] ② Data subjects can apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, etc., to receive relief from personal information infringement. For other reports and consultations regarding personal information infringement, please contact the following organizations: • Personal Information Dispute Mediation Committee: 1833-6972 (without area code) (www.kopico.go.kr) • Personal Information Infringement Report Center: 118 (without area code) (privacy.kisa.or.kr) • Supreme Prosecutors’ Office: 1301 (without area code) (www.spo.go.kr) • Korean National Police Agency: 182 (without area code) (ecrm.cyber.go.kr) ③ A person whose rights or interests have been infringed upon by the disposition or inaction of the head of a public institution regarding the requests under Article 35 (Access to Personal Information), Article 36 (Correction/Deletion of Personal Information), and Article 37 (Suspension of Personal Information Processing, etc.) of the Personal Information Protection Act may file an administrative appeal in accordance with the Administrative Appeals Act. • Central Administrative Appeals Commission: 110 (without area code) (www.simpan.go.kr)

10. Matters Related to the Processing of Personal Location Information

10.1. Purpose of Location Information Processing, Processed Items, and Retention Period ① ILLY Corporation Co., Ltd. processes the customer's location information to provide services. The service name, content, purpose of location information processing, and processed items are as follows:Service NameService Content and Purpose of Location Information ProcessingProcessed ItemsHospital ①Hospital Search Service using Location Information: Provides search results and nearby results (nearby veterinary hospitals, etc.) using location information when a request for information search is made or when the personal location information subject or a mobile device's location information is provided.Personal location information of the data subject or a mobile deviceHospital ②Provision of Lifestyle Convenience Services, such as Hospital Directions: Provides the optimal route, including traffic information and directions, from the location set by the user to the selected veterinary hospital.Health (formerly Play)Walking Service using Location Information: Provides measurement of actual travel distance and step count using the location information when the personal location information subject or a mobile device's location information is provided. ② Matters concerning the provision of personal location information to third parties: Not applicable 10.2. Basis and Period for Retention of Personal Location Information Collection, Use, and Provision Confirmation Data ILLY Corporation Co., Ltd. automatically records the data subject's location information collection, use, and provision confirmation data in the location information system based on Article 16(2) of the Location Information Act and retains it for 6 months. 10.3. Personal Location Information Destruction Procedure and Method ① When the purpose of processing personal location information is achieved, ILLY Corporation Co., Ltd. safely destroys the personal location information by a method that prevents reproduction, after obtaining approval from the Location Information Management Officer. ② Personal location information recorded/stored in the form of electronic files is destroyed using technical methods that prevent reproduction of the records. Personal location information recorded/stored in paper documents is destroyed by shredding or incineration. 10.4. Matters concerning the Provision of Personal Location Information to Third Parties ① ILLY Corporation Co., Ltd. does not provide the data subject's personal location information to a third party except with the data subject's prior consent or in cases based on laws and regulations such as the 'Personal Information Protection Act' or the 'Rules for Personal Information Processing and Protection in Emergency Situations.' ② For ILLY Corporation Co., Ltd. to provide the data subject's personal location information to a third party designated by the data subject, the recipient and purpose of providing the data subject's personal location information must be notified to the data subject and consent must be obtained in advance. ③ If ILLY Corporation Co., Ltd. provides the data subject's personal location information to a third party designated by the data subject in advance, the details of the information provision will be notified to the data subject immediately after the provision or according to the period and frequency selected by the data subject. 10.5. Rights and Obligations of the Legal Guardian of a Child Under 8 Years of Age, etc. ① ILLY Corporation Co., Ltd. considers the consent of the user (hereinafter referred to as the "Child Under 8 Years of Age, etc.")'s legal guardian to the use or provision of personal location information for the protection of the life or body of the Child Under 8 Years of Age, etc., to be the consent of the individual in the following cases: • A child under 8 years of age. • An adult under the constant guardianship of the court. • A person with a mental disability under Article 2(2)2 of the Welfare of Disabled Persons Act who falls under a severe disability under Article 2(2) of the Employment Promotion and Vocational Rehabilitation of Disabled Persons Act (limited to those registered as disabled under Article 32 of the Welfare of Disabled Persons Act). ② A legal guardian who wishes to consent to the use or provision of personal location information for the protection of the life or body of a Child Under 8 Years of Age, etc., must submit a written document to ILLY Corporation Co., Ltd. with the following information recorded and signed (or sealed), attaching a document proving their status as a legal guardian: • Name, address, and date of birth of the Child Under 8 Years of Age, etc. • Name, address, and contact information of the legal guardian. • The fact that the purpose of collecting, using, or providing personal location information is limited to the protection of the life or body of the Child Under 8 Years of Age, etc. • Date of consent. ③ When the legal guardian consents to the use or provision of the personal location information of a Child Under 8 Years of Age, etc., the legal guardian can exercise all the rights of the personal location information data subject.

10.6. Location Information Management Officer • Name: Catchy(캣치) • Department Name: Product Team • Phone Number, Email: +82 10-6570-1392, [email protected]

11. Changes to the Personal Information Processing Policy ① Implementation Date: 01.21.2026 ② Previous versions of the Personal Information Processing Policy can be checked via the link