Privacy Policy

Questour, operated by MetaBe Co., Ltd. (the “Service,” “we,” “our,” or “us”), values your personal information and is committed to protecting your privacy.
We comply with applicable laws, including the Act on Promotion of Information and Communications Network Utilization and Information Protection of the Republic of Korea.

This Privacy Policy explains:

• what personal information we collect,

• how and why we use it,

• how long we retain it,

• and how you can exercise your rights.

---

1. Personal Information We Collect and How We Collect It

(1) Information collected

We collect the following types of personal information when you register, contact us, or apply for/use our services:

• When creating an account (membership registration):
  User ID, password, mobile phone number, email address, name
  For users under the age of 14: information of the legal guardian

• When requesting paid services, delivery, or purchases:
  Shipping address, payment information

In addition, during service use and in the course of transactions, we may automatically collect:

• service usage records,

• access logs,

• cookies,

• IP address,

• payment records,

• records of fraudulent or unauthorized use.

(2) Collection methods

We collect personal information through:

• our website or mobile service,

• written forms,

• customer inquiries and support,

• message boards,

• email,

• event/contest entries,

• delivery requests,

• phone or fax,

• and automated data collection tools.

---

2. Purposes of Collection and Use of Personal Information

We use the personal information we collect for the following purposes:

1. Provision of services and fulfillment of contracts

   • Providing content, processing purchases, billing and payment

   • Shipping physical items or delivering invoices/receipts

   • Verifying identity for financial transactions

2. Member management

   • Verifying identity for member-only services

   • Preventing unauthorized or fraudulent use of accounts

   • Confirming sign-up intent

   • Verifying age and, where the user is under 14, obtaining parental/guardian consent

   • Handling complaints and inquiries

   • Sending notices

3. Marketing and promotions

   • Providing event information, promotional or advertising messages

   • Notifying you of new services or service updates operated by MetaBe

   • Analyzing access frequency and service usage statistics to improve or personalize the Service

---

3. Retention and Use Period of Personal Information

In principle, we destroy personal information without delay once the purpose of collection and use has been fulfilled.

However, we may retain personal information for the periods stated below:

(1) Internal retention under our policy

Even after a Member withdraws (account termination), we may retain certain information for up to one (1) year from the date of termination in order to:

• prevent re-registration and repeated misuse by users who violated terms,

• resolve disputes,

• and cooperate with requests from investigative authorities.

(2) Retention required by law

We may retain certain records for the period required by applicable law, including the Act on the Consumer Protection in Electronic Commerce, etc. Retention items include:

• Records related to contracts or withdrawal of offers:

  • Retention period: 5 years

  • Legal basis: Act on the Consumer Protection in Electronic Commerce, etc.

• Records related to payment and supply of goods/services:

  • Retention period: 5 years

  • Legal basis: Act on the Consumer Protection in Electronic Commerce, etc.

• Records related to consumer complaints or dispute resolution:

  • Retention period: 3 years

  • Legal basis: Act on the Consumer Protection in Electronic Commerce, etc.

• Log records (connection data):

  • Retention period: 3 months

  • Legal basis: Protection of Communications Secrets Act

---

4. Destruction of Personal Information

Once the retention period has expired or the purpose of processing has been achieved, we will destroy the relevant personal information without undue delay.

(1) Destruction procedure

• Information you provide at registration or during service use is transferred to a separate database (or, for physical documents, stored in a secure file) once the purpose is fulfilled.

• It is retained only for the period required under internal policy or applicable laws (see Section 3), and then permanently destroyed.

• Personal information transferred to a separate database is not used for any purpose other than legal retention unless required by law.

(2) Destruction method

• Personal information stored in electronic form is deleted using technical methods that make recovery impossible.

---

5. Provision of Personal Information to Third Parties

As a rule, we do not disclose or provide personal information to external third parties.

However, we may provide personal information:

• when you have given prior consent; or

• when required by law, or pursuant to a lawful request from an investigative or regulatory authority following the proper legal procedures.

---

6. Outsourcing / Delegation of Processing

For the purpose of providing the Service, we may entrust certain operations to third-party service providers.

• Consignee (example): Courier / logistics companies (e.g. CJ and other delivery services)
  Entrusted task: Product delivery and shipping

• Consignee (example): Payment service providers (e.g. Inicis, Naver Pay, etc.)
  Entrusted task: Payment processing for credit cards and other payment methods

When we entrust processing, we require such service providers to comply with applicable privacy and security obligations.

---

7. Rights of Users (and Legal Guardians) and How to Exercise Them

• You may, at any time, view or correct your registered personal information, or request account deletion (membership withdrawal).

• You can update your information through the “Edit Personal Information,” “Account Settings,” or similar menu.

• To withdraw consent and terminate your membership, you may use the “Delete Account / Withdraw Membership” function after completing identity verification.

You may also contact our Privacy Officer in writing, by phone, or by email to request access, correction, or deletion. We will respond without undue delay.

If you request correction of inaccurate personal information, we will not use or disclose that information until correction is completed.
If such information has already been provided to a third party, we will notify that third party of the corrected information without undue delay.

Personal information that is deleted or deactivated at your request will be handled in accordance with the retention and destruction procedures described in this Privacy Policy and will not be accessed or used for any other purpose except as permitted by law.

For users under the age of 14, their legal guardian may exercise these rights on their behalf.

---

8. Cookies and Similar Technologies

We use cookies and similar technologies to collect certain information automatically.

(1) What are cookies?

Cookies are small text files sent by the server operating the website to your browser and stored on your device. Cookies help us recognize your device, analyze usage, and improve our services.

(2) Purposes of cookies

We use cookies for purposes such as:

1. Analyzing visit frequency, visit times, and usage patterns (including for non-members)

2. Understanding user interests and preferences

3. Tracking participation in events and measuring engagement

4. Providing personalized services and targeted marketing

(3) Managing cookies

You may choose whether to accept cookies. You can configure your web browser to:

• allow all cookies,

• prompt you each time a cookie is stored, or

• block all cookies.

Example (Internet Explorer):
Tools > Internet Options > Privacy

Please note that refusing cookies may limit certain features or make it difficult to use parts of the Service.

---

9. Inquiries and Complaints Regarding Personal Information

We designate the following Privacy Officer and department to protect personal information and to handle complaints and inquiries related to personal information.

Privacy Officer
Name: Sangyeol Lee
Affiliation: MetaBe Co., Ltd.
Tel: +82-2-303-4871
Email: youandifarm@naver.com

You may report any privacy-related complaints arising from the use of the Service to the Privacy Officer or the department above. We will make commercially reasonable efforts to provide a prompt and sufficient response.

If you require further assistance or wish to file a complaint with an external authority, you may contact the following agencies in Korea:

• Personal Information Infringement Report Center (Korea Internet & Security Agency, KISA): privacy.kisa.or.kr / dial 118 (no area code)

• Supreme Prosecutors’ Office Cyber Crime Investigation Unit: www.spo.go.kr / +82-2-3480-2000

• National Police Agency Cyber Bureau: www.ctrc.go.kr / dial 182 (no area code)