SHINJIN ERP Privacy Policy 1. Overview Shinjintex Co., Ltd. (“the Company”) respects the privacy of SHINJIN ERP registration applicants and users. Personal information is processed securely in accordance with applicable laws and the Company’s security standards. Anyone may apply for an account, but the service becomes available only after a simple administrator review and approval. This policy applies to SHINJIN ERP. 2. Personal Information We Process The Company may process the following information to receive registration applications, approve accounts, and provide business services: - Required registration information: name, user ID, password, and registration country or operating entity - Account and permission information: approval status, account status, access permissions, employee code, company, department, position, and other information registered during approval and permission assignment - Optional information: email address, mobile phone number, date of birth, and other information voluntarily provided by the user or during the approval process - Automatically generated information: access date and time, IP address, browser and device information, login history, menu usage history, and error logs - Business information: work data created, viewed, approved, or modified in ERP and the related processing history 3. Purposes of Processing Personal information is used to receive and review registration applications, verify identity, manage accounts and permissions, provide warehouse inbound and outbound processing, inventory management, sales materials, product information, promotional and marketing materials, other ERP business functions, prevent security incidents, troubleshoot problems, provide user support, conduct audits, and verify work history. The Company does not use personal information for advertising marketing or personalized advertising without separate consent. 4. Retention Period Personal information is retained while a registration application is processed and during use of the service. If registration is not approved or is withdrawn, or after account deactivation or termination of use, only information required by applicable laws and the Company’s document-retention policy is retained. Information no longer required is securely deleted or separately stored in a non-recoverable manner. 5. Disclosure to Third Parties The Company does not disclose personal information to third parties unless required by law or agreed to in advance by the data subject. Where disclosure is necessary for business purposes, the recipient, purpose, information disclosed, and retention period will be provided in advance. 6. Service Providers When system maintenance, server operation, or security support is entrusted to an external service provider, the Company contractually requires privacy protection, prohibition of unauthorized use, access controls, and incident-response obligations, and supervises the provider. 7. Secure Disposal Personal information is disposed of under internal procedures when its retention period expires or its processing purpose has been fulfilled. Electronic files are deleted using methods that prevent recovery, and paper documents are shredded or incinerated. 8. Your Rights Applicants and users may request access to or correction of their personal information, restriction of processing, withdrawal of a registration application, or account deactivation. Because ERP accounts may be connected to business records and access permissions, users cannot directly delete their accounts. The administrator will process requests after verification. 9. Security Measures The Company applies safeguards including account-based access control, password encryption, access-log retention, security software, server and network access restrictions, periodic inspections, and personnel training. 10. Cookies and Access Information ERP may use cookies to maintain login sessions, save user preferences, and perform security checks. Cookies may be blocked in browser settings, but login and certain ERP functions may then be unavailable. 11. Mobile App Permissions and Processing The SHINJIN ERP Android app may request camera access for barcode or QR scanning and user-initiated capture features. The camera is used only when the user starts such a feature. A decoded code or material the user chooses to send may be transmitted to the Company server for ERP business processing. Current-location access is used only when the user explicitly selects `Enter current location` on the vehicle operation log web page, in order to enter the trip's starting latitude and longitude. The entered coordinates may be stored on the Company server with the vehicle operation record. The app does not collect location in the background and does not request microphone, contacts, broad storage access, notifications, or advertising-tracking permissions. The app may retain cookies and web-storage information in the device WebView to maintain login sessions and provide web-based ERP features. 12. Privacy Contact For requests concerning access, correction, account deactivation, password reset, or any other privacy matter, contact the ERP administrator. Email: erp@shinjintex.co.kr 13. Policy Updates Changes to this policy will be announced on the ERP login screen, through a service notice, or by another appropriate method. Original effective date: January 1, 2025 Last revised and effective: August 25, 2026