Privacy Policy

Effective Date: April 24, 2026

WIM Corp. ("the Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea, to protect the personal information of data subjects and to handle related grievances promptly and smoothly.

Article 1. Items Collected and Methods of Collection

The Company collects the following personal information for inquiry processing and customer support. 1. Items Collected (Contact Form) • Required: name, email, inquiry content, consent to collection and use • Optional: phone number (with country code), company name, referral source 2. Methods of Collection • Submission through the contact form on our website • Voluntary provision via email, phone, or other written contact 3. Information Collected Automatically • During service use, IP address, cookies, access logs, and browser information may be generated and collected automatically.

Article 2. Purpose of Collection and Use

The Company uses the collected personal information only for the following purposes and will not use it for any other purpose. • Receiving, verifying, and responding to inquiries • Product and service consultations and technical support • Pre-contractual sales activities and communications • Service usage analytics and user experience improvement (processed in de-identified or aggregated form)

Article 3. Retention and Use Period

The Company destroys personal information without delay once the purpose of collection and use has been fulfilled. • Personal information collected through the contact form: destroyed within 6 months after inquiry resolution • Where retention is required by law, information will be kept for the period specified by that law: - Records of contracts or withdrawal of subscription: 5 years (Act on E-Commerce) - Records of consumer complaints or dispute resolution: 3 years (Act on E-Commerce)

Article 4. Provision of Personal Information to Third Parties

The Company does not provide personal information to third parties as a rule. Exceptions apply only in the following cases: • When the data subject has consented in advance • When there is a specific provision in applicable law, or when an investigative authority requests information through the procedures and methods prescribed by law

Article 5. Outsourcing of Personal Information Processing

The Company may outsource personal information processing tasks when necessary for service operations and will establish the necessary terms to ensure secure management. No outsourcing currently takes place; any future outsourcing will be disclosed through this Policy and, where required, consent will be obtained.

Article 6. Rights of the Data Subject and How to Exercise Them

Data subjects may exercise the following rights with respect to the Company at any time: • Request access to their personal information • Request correction in case of errors • Request deletion • Request suspension of processing These rights may be exercised in writing, by email, or otherwise, and the Company will act on such requests without delay.

Article 7. Procedures and Methods for Destruction

When personal information is no longer necessary — such as upon expiration of the retention period or fulfillment of the processing purpose — the Company destroys it without delay. • Electronic files: permanently deleted using methods that prevent recovery • Paper documents: destroyed by shredding or incineration

Article 8. Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information. • Administrative measures: establishment and implementation of an internal management plan, staff training • Technical measures: access control for personal information systems, encryption, installation of security software • Physical measures: access control for server rooms, data storage areas, etc.

Article 9. Personal Information Protection Officer

The Company designates the following Personal Information Protection Officer to oversee personal information processing and to handle complaints and remedies from data subjects. • Officer: CEO, WIM Corp. • Contact: william@wimcorp.co.kr / +82-53-939-2434 • Address: 501, Venture Office, Daegu Samsung Creative Campus, 51, Hoam-ro, Buk-gu, Daegu, Republic of Korea

Article 10. Remedies for Infringement of Rights

Data subjects may apply for dispute resolution or consultation regarding personal information infringement through the following institutions: • Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr) • Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr) • Supreme Prosecutors' Office Cyber Investigation Division: 1301 (www.spo.go.kr) • National Police Agency Cyber Bureau: 182 (ecrm.police.go.kr)

Article 11. Changes to this Privacy Policy

This Privacy Policy takes effect on the effective date stated above. Any additions, deletions, or amendments due to changes in applicable laws or Company policy will be announced on this page at least 7 days before they take effect.

Wimmy

Ask Wimmy anything!