eZEX PRIVACY POLICY
eZEX Co., Ltd. (the "Company") complies with the personal information protection provisions of applicable laws, including the Personal Information Protection Act of Korea, and sets out its Privacy Policy as follows.
[Notice of Privacy Policy Revision]
The eZEX Co., Ltd. Privacy Policy is revised as follows.
- Revision: new article on personal information processing in the "C2O Smart Farm" smartphone app (Article 9) — items processed, retention period, outsourcing to Google LLC and overseas transfer
- Announcement date: October 8, 2026 / Effective date: November 7, 2026
Article 1 (Purpose of Processing Personal Information)
To provide better, higher-quality service for customers' online business with the Company, the Company's website collects users' personal information through membership registration.
Article 2 (Personal Information Collected)
The personal information collected by the Company with the user's consent is as follows:
1. Individuals
Name, gender, resident registration number, address, mobile phone number, password
2. Corporations and other organizations
Name of corporation (or organization), business registration number (or unique identification number), address, main telephone number, password
Article 3 (Processing, Retention Period and Destruction of Personal Information)
(1) The Company uses and processes users' personal information only within the scope specified in Article 1.
(2) In principle, once the purpose of collecting and using personal information has been achieved, the Company destroys the information in accordance with its internal guidelines. However, where retention is required by relevant laws, the Company keeps the personal information for a certain period.
Article 4 (Provision of Personal Information to Third Parties)
In principle, the Company does not provide personal information to third parties. However, the Company may provide personal information to third parties in the following cases:
- 1. Where the user has consented in advance to provision to, or disclosure by, a third party
- 2. Where provision is required by laws and regulations
- 3. Where the personal information is necessary to perform a contract for providing services and it is difficult to obtain the consent in item 1 for economic or technical reasons
- 4. Where the information is processed into a form in which individuals cannot be identified
Article 5 (Rights and Obligations of Data Subjects and How to Exercise Them)
Users may exercise the following rights regarding personal information protection against the Company at any time. The legal representative of a child under the age of 14 may request access to, correction or deletion of, or suspension of processing of the child's personal information.
1. Request for access to personal information
Users may request access to their personal information held by the Company in accordance with Article 35 of the Personal Information Protection Act. However, access at the user's request may be restricted in the following cases:
- Where access is prohibited or restricted by relevant laws
- Where access may harm the life or body of another person, or may unfairly infringe on the property or other interests of another person
- Where access would make it difficult to perform a contract, for example because the Company could no longer provide the service agreed with the user, and the user has not clearly expressed an intention to terminate the contract before requesting access
2. Request for suspension of processing of personal information
Users may request suspension of processing of their personal information held by the Company in accordance with Article 37 of the Personal Information Protection Act. However, suspension at the user's request may be restricted in the following cases:
- Where there are special provisions in relevant laws, or suspension is unavoidable to comply with legal obligations
- Where suspension may harm the life or body of another person, or may unfairly infringe on the property or other interests of another person
- Where suspension would make it difficult to perform a contract, for example because the Company could no longer provide the service agreed with the user, and the user has not clearly expressed an intention to terminate the contract before requesting suspension
Article 6 (Measures to Ensure the Security of Personal Information)
In accordance with Article 29 of the Personal Information Protection Act, the Company takes the following technical, administrative and physical measures necessary to ensure security:
1. Minimizing and training staff who handle personal information
Staff who handle personal information are designated, and personal information is managed only by those staff.
2. Regular internal audits
Internal audits are conducted regularly to ensure the security of personal information handling.
3. Establishment and implementation of an internal management plan
An internal management plan is established and implemented for the safe processing of personal information.
4. Restriction of access to personal information
Access to personal information is restricted by allowing only staff who handle personal information to process it, and only when necessary.
5. Prevention of forgery and alteration of access records
Security functions are used so that records of access to the personal information processing system are not forged, altered, stolen or lost.
6. Locking devices for document security
Documents and auxiliary storage media containing personal information are kept in a secure place with a locking device.
7. Access control for unauthorized persons
A separate physical storage location is kept for personal information, and access control procedures are established and operated for it.
Article 7 (Person Responsible for Personal Information Protection)
The Company designates the following person responsible for personal information protection, who oversees personal information processing and handles data subjects' complaints and remedies for damage related to personal information processing:
- Person responsible for personal information protection
- Tel: +82-31-608-4700
- Fax: +82-31-608-4701
- Address: RM508, Ssangyong IT Twin Tower II, 531, Dunchon-daero, Jungwon-gu, Seongnam-si, Gyeonggi-do, 13216, Korea
Article 8 (Remedies for Infringement of Rights)
Users may contact the following organizations for remedies for, or consultation about, infringement of personal information. These organizations are independent of the Company. Please contact them if you are not satisfied with the Company's own complaint handling or remedy results, or need further help.
- Personal Information Dispute Mediation Committee: 118 (no area code) (privacy.kisa.or.kr)
- Personal Information Infringement Report Center: 118 (no area code) (privacy.kisa.or.kr)
- Cyber Crime Investigation Unit, Supreme Prosecutors' Office: +82-2-3480-3571 (cybercid@spo.go.kr)
- Cyber Terror Response Center, Korean National Police Agency: 1566-0112 (www.netan.go.kr)
Article 9 (Processing of Personal Information in the "C2O Smart Farm" Smartphone App)
(1) Purposes and items processed
eZEX Co., Ltd. processes the following information for the use of the smartphone app "C2O Smart Farm" (the "App"):
- 1. Mobile phone number: identity verification (SMS authentication) at App login, and identification of registered farm users
- 2. Device identifiers (Firebase installation ID, push notification token): sending push notifications, such as controller alerts
- 3. App error information (device model, operating system version and error log at the time of a crash): identifying the causes of App errors and improving stability
The App does not collect names, addresses, resident registration numbers or location information, and does not use personal information for advertising or personalized marketing.
(2) Retention and use period
Mobile phone numbers are retained until the App registration is cancelled and are destroyed without delay after cancellation. Device identifiers and error information are retained and then deleted according to the retention policy of the processor below.
(3) Outsourcing of processing and overseas transfer
To provide the service smoothly, eZEX Co., Ltd. outsources the processing of personal information as follows, and in this process the information is transferred overseas.
- Processor: Google LLC (Firebase Cloud Messaging, Firebase Crashlytics)
- Destination countries: the United States and other countries where Google data centers are located
- Items transferred: device identifiers, App error information
- Time and method of transfer: transmitted over the network when the App is used
- Purpose: sending push notifications, analyzing App errors
- Retention period: until the outsourcing contract ends, or for the period set by the processor's retention policy
Users can refuse the overseas transfer by turning off App notifications in the device settings or by deleting the App. In this case, push notifications will not be received.
(4) Contact
Inquiries about personal information in the App: Customer Support Team, +82-31-608-4722, service@ezex.co.kr
Article 10 (Changes to the Privacy Policy)
This Privacy Policy takes effect on November 7, 2026. Any additions, deletions or modifications will be announced through the notices on the website or on this Privacy Policy page at least 7 days before the revision (at least 30 days before for important changes). If consent is required because of changes such as to the collection and use of personal information or provision to third parties, a separate consent procedure will be provided.
- Announcement date: October 8, 2026
- Effective date: November 7, 2026
- Date first established: June 1, 2017