Privacy Policy

InBody Healthcare Co., Ltd. (hereinafter the "Company"), as people who build the world's best devices, is committed to being a partner that contributes to the sustained enjoyment of healthy lives for all humanity, and we do our utmost to protect your valuable personal information. In accordance with relevant laws and regulations such as the "Act on Promotion of Information and Communications Network Utilization and Information Protection, etc." (hereinafter the "Network Act"), the "Personal Information Protection Act," the "Protection of Communications Secrets Act," and the "Telecommunications Business Act," the Company establishes and discloses the following Privacy Policy in order to protect the personal information of data subjects and to promptly and smoothly handle related grievances. Users have the right to refuse consent to the collection of personal information, and such refusal may result in disadvantages such as restrictions on the provision of certain services.

The Company's Privacy Policy contains the following:

• Article 1 (Purpose of Use of Personal Information and Consent to Provision)
• Article 2 (Items and Methods of Personal Information Collection)
• Article 3 (Retention and Use Period of Personal Information)
• Article 4 (Entrustment of Personal Information Processing and Provision to Third Parties)
• Article 5 (Rights and Obligations of Data Subjects and Legal Representatives)
• Article 6 (Destruction of Personal Information)
• Article 7 (Measures to Ensure the Security of Personal Information)
• Article 8 (Matters Concerning the Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)
• Article 9 (Personal Information Protection Officer and Responsible Staff)
• Article 10 (Remedies for Infringement of Rights)
• Article 12 (Changes to the Privacy Policy)

This Privacy Policy is effective from October 1, 2023.

Article 1 (Purpose of Use of Personal Information and Consent to Provision)

The Company processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following, and if the purpose of use is changed, the Company will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

Provision of body composition analysis (hereinafter "InBody Test") and related services

• Membership registration for the InBody Test and confirmation of intent to register, identity verification for the provision of membership-based services, maintenance and management of membership status, prevention of fraudulent use of services, consultation and inquiries, provision of test information and related content, provision of specific customized services, verification of legal representative's consent when processing the personal information of children under the age of 14, various notifications and announcements, grievance handling, etc.
• Development and provision of new services, supplementary services, and customized services; provision of after-sales service (A/S); service improvement; research and development based on statistical characteristics for service improvement; verification of service effectiveness; analysis of access frequency; and use, analysis, and provision in a form in which specific individuals cannot be identified where necessary for purposes such as statistics or research on members' service use (including other cases necessary to perform services or duties for the relevant individual user)