WYS EN SCÈNE Co., Ltd. (the “Company”) establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea to protect users’ personal information, guarantee users’ right to informational self-determination, and ensure prompt and effective handling of complaints related to personal information.

This Privacy Policy may be amended from time to time due to changes in applicable laws, government guidelines, or the Company’s internal policies.

In the event of any amendment, the Company will notify users at least 7 days in advance through the Service or by email.

If the amendment materially affects users’ rights or obligations, the Company will provide notice at least 30 days in advance, and may obtain additional consent where required by law.

1. Purpose of Processing Personal Information

The Company processes personal information for the following purposes and does not use such information for any other purposes.

If the purpose of processing changes, the Company will obtain separate consent or take other necessary measures in accordance with Article 18 of the Personal Information Protection Act.

A. User and Account Management

Personal information is processed for user identification, provision of user services, enforcement of the Terms of Service, restriction of use by users who violate the Terms, prevention of acts that disrupt service operation or constitute fraudulent use, confirmation of intent to register, prevention of duplicate registrations or subscriptions, verification of legal guardian consent for payments made by minors (under the age of 19), record retention for dispute resolution, and handling of complaints and inquiries.

B. Performance of Service Contracts and Billing

Personal information is processed for the provision of content, processing of purchases and payments, issuance of invoices, and settlement of service fees.

C. Provision of Event and Promotional Information (Optional)

With the user’s consent, personal information may be processed to provide event information, participation opportunities, and promotional or advertising information.

The Company does not send commercial or promotional messages without prior consent and complies with applicable laws when doing so.

D. Service Improvement and Statistical Analysis

Personal information may be processed for the development of new services, provision of personalized services, improvement of service quality, analysis of access frequency, and generation of usage statistics.

2. Personal Information Processed

The Company collects and processes the following personal information to provide the Service.

Required Information

A user ID generated during registration and SNS-linked identifiers are collected and processed for purposes such as user identification, service provision, prevention of fraudulent use, and restriction of duplicate registrations.

Optional Information

Users may voluntarily provide additional information. The Company processes such information only when the user chooses to provide it.

Failure to provide optional information does not restrict general service use, but access to certain services (such as age-restricted content) may be limited.

Stages of Collection

3. Outsourcing of Personal Information Processing

The Company does not provide users’ personal information to third parties without consent, except where required by applicable laws.

For efficient and enhanced service provision, the Company may outsource certain personal information processing tasks to external service providers.

If the scope of outsourcing or the service provider changes, the Company will disclose such changes through this Privacy Policy without delay.

The Company enters into contracts with outsourced service providers specifying compliance with personal information protection laws, confidentiality obligations, prohibition of third-party provision, responsibility in the event of incidents, and destruction of personal information upon termination of outsourcing, and supervises such providers accordingly.

4. Retention and Use Period of Personal Information

The Company destroys personal information without delay once the purpose of collection and use has been achieved.

However, personal information may be retained for a certain period where required by the Company’s internal policies or applicable laws.

Retention Under Internal Policy

Service usage records, user information, purchase and usage history may be retained for up to three (3) months after account deletion or withdrawal of consent to prevent service confusion and respond to account recovery requests.

Retention Required by Law

Destruction Procedures and Methods

Personal information whose retention period has expired is destroyed without delay.

Electronic files are deleted using technical methods that prevent recovery, and paper documents are shredded or incinerated.

5. Users’ Rights and How to Exercise Them

Users may access, correct, or delete their personal information at any time, and may request account deletion or exercise other rights related to personal information.

The Company verifies the identity of the user exercising such rights.

If correction of personal information is requested, the Company will not use or provide such information until the correction is completed.

Personal information deleted or terminated at the user’s request is processed in accordance with the retention period specified in this Privacy Policy and is not used for any other purposes.

6. Technical and Administrative Safeguards

The Company implements technical and administrative measures to prevent loss, theft, leakage, alteration, or damage of personal information, including:

The Company is not responsible for incidents caused by users’ negligence or basic internet security risks. Users are responsible for managing their own accounts securely.

7. Automatic Collection of Personal Information and Opt-Out

The Company may collect and use users’ behavioral information, such as service usage history, search history, and purchase history, for purposes including personalized services, advertising, and service improvement.

Users may restrict or disable the use of advertising identifiers or cookies through device or browser settings.

Disabling such features may limit access to certain personalized services.

8. Remedies for Infringement of Rights

Users may submit inquiries, complaints, or requests for relief related to personal information through the customer support channels provided within the Service, and the Company will respond promptly and in good faith.

In addition, users may seek consultation or file reports regarding personal information infringement with the following organizations:

Addendum

This Privacy Policy shall take effect on February 5, 2026.