1. Purpose of Collection and Use of Personal Information

Lessontalk collects and uses personal information for the following purposes:

A. Membership Management

• Member registration and identity verification
• Providing membership services and personal identification
• Prevention of unauthorized use and fraudulent activities
• Service usage restrictions for violating members
• Delivery of notices and handling complaints

B. Service Provision

• Academy and instructor management features
• Student enrollment management and lesson booking services
• Payment and settlement services
• Calendar and schedule management functions
• Notification and announcement delivery

C. Marketing and Advertising

• Development of new services and customized service provision
• Event information and participation opportunities
• Service provision and advertisement placement based on demographic characteristics
• Service usage statistics analysis

2. Categories of Personal Information Collected

Lessontalk collects the following personal information to provide services:

3. Retention and Use Period of Personal Information

Lessontalk destroys personal information without delay after the purpose of collection and use is achieved. However, in cases where retention is necessary under relevant laws, we retain information as follows:

A. Upon Member Withdrawal

• Immediate destruction of personal information upon withdrawal (minimum information retained for 30 days to prevent fraudulent use)

B. Retention According to Laws

• Records on contracts or withdrawal: 5 years (E-Commerce Act)
• Records on payment and supply of goods: 5 years (E-Commerce Act)
• Records on consumer complaints or dispute resolution: 3 years (E-Commerce Act)
• Access log records: 3 months (Protection of Communications Secrets Act)

4. Provision of Personal Information to Third Parties

Lessontalk does not provide users' personal information to third parties in principle. However, exceptions include:

• When users have given prior consent
• When required by law or at the request of investigative agencies following legal procedures
• When necessary to provide services (e.g., payment gateway providers, delivery companies)

5. Outsourcing of Personal Information Processing

Lessontalk outsources personal information processing as follows for smooth service provision:

6. Rights of Data Subjects and How to Exercise Them

Users can exercise the following rights at any time:

• Request access to personal information
• Request correction and deletion of personal information
• Request suspension of personal information processing
• Account deletion (withdrawal of consent)

Rights can be exercised directly through the "My Information" menu on the Lessontalk website or app, or through customer service.

7. Measures to Ensure Safety of Personal Information

Lessontalk takes the following technical and managerial measures to protect personal information:

• Personal information encryption: Passwords are encrypted and stored
• Hacking prevention: Firewall installation and intrusion prevention system operation
• Access control: Access to personal information restricted to minimum personnel
• Security program installation: Virus prevention using antivirus programs
• Employee training: Regular security training for staff handling personal information

8. Cookie Operation and Rejection

Lessontalk uses cookies to provide customized services to users.

A. What are Cookies?

Very small text files sent by the server operating the website to the user's browser and stored on the user's computer.

B. Purpose of Cookie Use

• Maintaining login status
• Providing user-customized services
• Website visit and usage pattern analysis

C. How to Reject Cookie Settings

Users can reject cookie storage through web browser settings. However, rejecting cookies may cause difficulties in using some services that require login.

9. Personal Information Protection Officer

Lessontalk has designated a Personal Information Protection Officer to handle complaints and remedy damages related to personal information processing:

10. Changes to Privacy Policy

This Privacy Policy may be changed with additions, deletions, or modifications due to changes in laws, policies, or security technologies. Changes will be announced through the website and app at least 7 days before implementation.

11. Remedies for Rights Infringement

Data subjects may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency Personal Information Infringement Report Center for remedies due to personal information infringement.

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office Cybercrime Investigation Unit: 1301 (www.spo.go.kr)
• National Police Agency Cyber Safety Bureau: 182 (cyberbureau.police.go.kr)