Privacy Policy

COSMAS BIOSCIENCE (the “Company,” “we,” “us,” or “our”) establishes and publishes this Privacy Policy pursuant to Article 30 of the Personal Information Protection Act of the Republic of Korea to protect your personal information and address related concerns promptly and effectively.

1. Purposes of Processing Personal Information

We process personal information for the following purposes. We do not use personal information for purposes other than those described below. If these purposes change, we will take the necessary measures, including obtaining separate consent where required, in accordance with Article 18 of the Personal Information Protection Act.

Website Registration and Account Management

To confirm your intention to register, identify and authenticate users of membership services, maintain and manage accounts, verify identity where required by law, prevent misuse of our services, verify the consent of a legal representative when processing the personal information of children under 14, deliver notices, and handle complaints.

Provision of Products and Services

To deliver products, provide services and content, send contracts and invoices, offer personalized services, verify identity and age, process payments and settlements, and collect outstanding amounts.

Handling Inquiries and Complaints

To verify the identity of individuals submitting complaints, review their concerns, communicate during investigations, and notify them of the outcome.

2. Retention of Personal Information

We process and retain personal information for the period required by applicable law or the period to which you consented when the information was collected.

Personal information used for website registration and account management is retained until you close your account.

However, we may retain the relevant information for a longer period in the following circumstances:

(a) If an investigation or inquiry concerning a suspected violation of applicable law is ongoing, until that investigation or inquiry is completed.

(b) If any outstanding payment obligations or claims arise from your use of the website, until those obligations or claims are settled.

3. Your Rights and How to Exercise Them

You may exercise the following rights regarding your personal information at any time:

(a) Request access to your personal information.

(b) Request correction of inaccurate information.

(d) Request suspension of the processing of your personal information.

You may submit a request in writing, by telephone, email, or fax. We will respond without undue delay.

If you request correction or deletion, we will not use or disclose the information concerned until the correction or deletion is completed.

You may also exercise these rights through your legal representative or another authorized representative. In such cases, a power of attorney using Form No. 11 attached to the Enforcement Rule of the Personal Information Protection Act must be submitted.

You must not infringe upon your own or another person’s personal information or privacy in violation of the Personal Information Protection Act or other applicable laws.

4. Personal Information We Process

The following information may be generated and collected automatically when you use our online services:

IP addresses, cookies, MAC addresses, service usage records, website visit records, and records of service misuse.

5. Deletion and Destruction of Personal Information

We delete or destroy personal information without undue delay when it is no longer necessary, including when its retention period expires or its processing purpose has been fulfilled.

If applicable law requires us to retain personal information after the agreed retention period expires or the processing purpose has been fulfilled, we transfer it to a separate database or store it separately.

Deletion and Destruction Procedure

We identify personal information that is no longer required and delete or destroy it with the approval of the person responsible for personal information protection.

Deletion and Destruction Methods

Personal information stored electronically is destroyed using methods that prevent recovery, such as low-level formatting. Personal information recorded on paper is shredded or incinerated.

6. Measures to Protect Personal Information

We implement the following measures to safeguard personal information:

Administrative Measures

Establishing and implementing an internal management plan and providing regular employee training.

Technical Measures

Managing access permissions for personal information processing systems, implementing access control systems, encrypting unique identification information, and installing security software.

Physical Measures

Restricting access to server rooms, document storage areas, and other relevant facilities.

7. Cookies and Your Choices

We use cookies to store and retrieve information about your use of our website so that we can provide personalized services.

Cookies are small pieces of information sent by the server operating a website to your browser. They may be stored on your device.

Why We Use Cookies

We use cookies to understand how visitors access and use our services and websites, identify popular search terms, determine whether connections are secure, and provide information tailored to users.

Managing Cookies

You can refuse the storage of cookies through your browser’s privacy settings. In browsers that provide this menu, you can access these options under Tools > Internet Options > Privacy.

If you block cookies, some personalized services may not function as intended.

8. Privacy Officer and Contact Department

We have designated the following privacy contact to oversee the processing of personal information and handle privacy-related complaints and requests for assistance.

Privacy Officer Contact

Department: Development Team 2, Research and Development Department

Email: info@cosmasbio.com

Inquiries sent to this address are directed to the department responsible for personal information protection.

Department Responsible for Personal Information Protection

Department: Development Team 2, Research and Development Department

Email: info@cosmasbio.com

You may contact the privacy officer or the department above regarding any privacy-related questions, complaints, or requests for assistance arising from your use of our services or business activities. We will respond and address your request without undue delay.

9. Requests to Access Personal Information

You may request access to your personal information under Article 35 of the Personal Information Protection Act by contacting the department below. We will make every effort to process your request promptly.

Department Handling Access Requests

Department: Development Team 2, Research and Development Department

Email: info@cosmasbio.com

10. Privacy Complaints and Dispute Resolution

You may contact the following organizations in the Republic of Korea for advice or assistance concerning personal information infringements.

Personal Information Infringement Report Center

Operated by the Korea Internet & Security Agency (KISA)

Services: Reporting personal information infringements and requesting consultation

Website: privacy.kisa.or.kr

Telephone: 118, without an area code, within Korea

Address: Personal Information Infringement Report Center, 3rd Floor, 9 Jinheung-gil, Naju-si, Jeollanam-do 58324, Republic of Korea

Personal Information Dispute Mediation Committee

Services: Personal information dispute mediation and collective dispute mediation for civil resolution

Website: www.kopico.go.kr

Telephone: 1833-6972, within Korea

Address: 4th Floor, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul 03171, Republic of Korea

Cybercrime Investigation Division, Supreme Prosecutors’ Office

Telephone: +82-2-3480-3573

Website: www.spo.go.kr

Cyber Safety Bureau, Korean National Police Agency

Telephone: 182, within Korea

Website: cyberbureau.police.go.kr

11. Effective Date and Changes to This Privacy Policy

This Privacy Policy takes effect on September 11, 2026.