Slingshot Studios (hereinafter referred to as the “Company”) complies with applicable personal information protection laws and regulations that information and communications service providers must observe, including the Protection of Communications Secrets Act, the Telecommunications Business Act, and the Act on Promotion of Information and Communications Network Utilization and Information Protection, and makes every effort to protect users’ rights and interests by establishing and implementing this Privacy Policy in accordance with relevant laws.
This Privacy Policy may be amended due to changes in relevant laws, guidelines, or the Company’s internal policies. Users are advised to review this policy regularly when visiting the Company’s website.

The Company’s Privacy Policy is as follows.

1. Definitions of Terms Used in This Privacy Policy
  1. “Personal Information” means information relating to a living individual that makes it possible to identify the individual by name, resident registration number, etc., including symbols, text, voice, sound, and images, or information that can be easily combined with other information to identify a specific individual, even if it cannot identify the individual by itself.
  2. “User” means any person who accesses the Slingshot Studios website ({SITE_URL}) and uses the services provided by the Company in accordance with these terms.
2. Consent to the Collection of Personal Information

The Company provides a procedure that allows users to click either the “Agree” or “Disagree” button regarding the contents of this Privacy Policy or the Terms of Use.
If a user indicates consent, the user shall be deemed to have agreed to the collection of personal information.

3. Items of Personal Information Collected and Methods of Collection
  1. The Company collects the following personal information to ensure smooth customer consultation and service provision. [Online Inquiry / Newsletter Subscription]
    1. Online inquiries, responses, customer consultation: Name, email address, mobile phone number
    2. Newsletter subscription and delivery: Name, email address
    3. IP address-related information: Cookies, access date and time, service usage records
  2. Method of collection of personal information
    The Company collects personal information through the following methods:
    1. Website inquiry boards, telephone, email
4. Protection of Children’s Personal Information
  1. The Company obtains consent from a legal guardian when collecting personal information of children under the age of 14.
  2. The legal guardian of a child under the age of 14 may request access to, correction of, or withdrawal of consent for the child’s personal information. Upon such request, the Company will take necessary measures without delay.
5. Purpose of Collection and Use of Personal Information
  1. Service provision
    1. Provision of various contents and handling of inquiries for users
    2. Handling complaints, customer service, and delivery of notices
  2. Development of new services and use for marketing/advertising
    1. Delivery of promotional information such as events and shipment of prizes to event winners
    2. Development and specialization of new services, provision of services and advertisements based on demographic characteristics
    3. Analysis of access frequency and statistics on service usage
6. Retention and Use Period of Personal Information

The Company retains and uses users’ personal information only for the period necessary to provide services.
Personal information will be destroyed without delay when consent is withdrawn, the purpose of collection and use has been achieved, the retention/use period has expired, or business operations are discontinued.
However, the following information will be retained for the period specified below for the reasons stated.

  1. Act on Consumer Protection in Electronic Commerce, etc.
    1. Personal information and consultation records submitted during inquiries: Retained for 3 years
    2. Records related to consumer complaints or dispute resolution: Retained for 3 years
7. Procedures and Methods for Destruction of Personal Information

In principle, the Company destroys personal information without delay once the purpose of collection and use has been achieved, in accordance with the retention and use period.
The procedures and methods for destruction are as follows.

  1. Destruction procedure
    1. Information entered for site use is stored for a certain period in accordance with internal policies and relevant laws, and then deleted or destroyed.
  2. Destruction method
    1. Personal information stored in electronic file form is deleted using technical methods that make the records irrecoverable.
      Personal information printed on paper is destroyed by shredding or incineration.
8. Provision and Sharing of Personal Information with Third Parties

The Company uses personal information within the scope notified in Article 5 and does not use or provide users’ personal information to third parties beyond that scope without prior consent.

[Provision to Third Parties]

For improved service provision, the Company may provide or share users’ personal information with third parties. In such cases, the Company will notify users in advance via email or written notice of the recipient, items of personal information provided or shared, the purpose, and the period and method of protection, and obtain consent. If the user does not consent, the information will not be provided or shared.
The same procedure will apply if there are changes to or termination of such third-party relationships.

However, exceptions apply in the following cases:

  1. When the user has given prior consent
  2. When required by law or upon lawful request by investigative authorities for investigation purposes
9. Outsourcing of Personal Information Processing

The Company entrusts personal information processing as follows to improve services and ensures safe management in accordance with relevant laws.

Service Provider Outsourced Work
Website Development Specialist Website operation and management

In accordance with Article 26 of the Personal Information Protection Act, outsourcing contracts specify restrictions on processing personal information beyond the scope of work, technical and administrative safeguards, restrictions on re-outsourcing, supervision of contractors, and liability for damages.

If there are any changes to the outsourced work or contractors, the Company will disclose such changes through this Privacy Policy without delay.

10. Users’ Rights and How to Exercise Them
  1. Users may view, modify, or request deletion of their registered personal information at any time.
  2. Requests for viewing or modification can be made via “Edit Information,” and withdrawal of consent (account deletion) can be made in writing, by phone, or by email to the Personal Information Manager.
  3. If a user requests correction of inaccurate personal information, the Company will correct it promptly and notify any third parties to whom the information was provided.
  4. Personal information deleted or terminated at the user’s request will be processed in accordance with “6. Retention and Use Period of Personal Information” and will not be used for other purposes.
11. Installation, Operation, and Refusal of Cookies

Cookies are small pieces of information sent by a website server to a user’s computer and may include information about the visited website and personal information required for service provision. Users may refuse cookies or set their browser to warn when cookies are received.

  1. Purpose of cookie use: Providing customized information based on user interests, analyzing access frequency and usage time, targeted marketing, personalized services, and service improvement.
  2. Installation/operation and refusal of cookies
    1. Users can allow all cookies, confirm each time a cookie is saved, or refuse all cookies via browser settings.
    2. Refusing cookies may limit access to some services.
    3. Cookie settings:
      Firefox: https://support.mozilla.com/ko/kb/disable-third-party-cookies
      Chrome: https://support.google.com/chrome/answer/95647
      Internet Explorer: https://support.microsoft.com/help/17442
      Safari: https://support.apple.com/guide/safari
12. Technical and Administrative Measures for Protecting Personal Information

The Company implements the following technical and administrative measures to ensure the safety of personal information.

  1. Technical measures
    1. Users’ personal information is strictly protected. Users should not disclose their personal information to others and should close their browser after use, especially on shared or public computers.
    2. The Company uses antivirus programs, regular backups, encrypted communication, and firewall systems to prevent unauthorized access, data leakage, and damage.
  2. Administrative measures
    1. Access to personal information is limited to authorized personnel only, who are regularly trained on data protection obligations and security practices.
    2. The Company is not responsible for issues arising from user negligence or general internet-related risks.
13. Personal Information Manager and Contact Information

Users may contact the Personal Information Manager regarding any privacy-related complaints or inquiries, and the Company will respond promptly and sincerely.

Personal Information Manager

Name: Administrator
Department: Security Business Division
Position: Division Head
Contact: privacy@abc.com

14. Remedies for Infringement of Rights of Data Subjects

If you need to report or consult regarding personal information infringement, please contact the Personal Information Infringement Report Center of the Korea Internet & Security Agency (KISA). If you have suffered financial or mental damage due to personal information infringement, you may apply for dispute resolution.

Personal Information Infringement Report Center: http://www.cyberprivacy.or.kr (Tel. 1336)
Personal Information Dispute Mediation Committee: http://www.kopico.or.kr (Tel. 1336)
Privacy Mark Certification Committee: http://www.privacymark.or.kr (Tel. 02-580-0533)
Supreme Prosecutors’ Office Cyber Crime Investigation Center: http://www.spo.go.kr (Tel. 02-3480-3600)
National Police Agency Cyber Bureau: http://www.police.go.kr

15. Obligation to Notify Changes to This Privacy Policy

Any additions, deletions, or modifications to this Privacy Policy will be announced at least 7 days in advance via the “Notices” section. In the case of material changes affecting users’ rights, notice will be given at least 30 days in advance, and additional consent may be obtained if necessary.

Announcement Date: December 24, 2025
Effective Date: December 24, 2025