Article 1 (Purpose of Personal Information Processing)

1. HairBe processes personal information for the following purposes, and the processed personal information will not be used for purposes other than the following. If the purpose of use changes, we will take necessary measures, including obtaining separate consent, in accordance with the Personal Information Protection Act.
   1. Providing Face Shape Analysis Report Service
      1. Personal information is processed for the purpose of providing Face Shape Analysis Report service.
   2. Providing Hairstyle Experience Service
      1. Personal information is processed for providing related information messages when updating functions.

Article 2 (Processing and Retention Period of Personal Information)

1. HairBe processes and retains personal information within the scope of the consent received at the time of personal information collection and in accordance with the law.
2. The processing and retention period for each type of personal information is as follows:
   1. Providing Face Shape Analysis Report Service
      1. Photos provided by users: Until the user's deletion request (maximum 1 year)
      2. User's facial analysis data and user-provided cheekbone and jaw information: Until the creation of the Face Shape Analysis Report.
   2. Providing Hairstyle Experience Service
      1. photos provided by users: Until the user's deletion request (maximum 1 year)

Article 3 (Provision of Personal Information to Third Parties)

1. HairBe processes personal information within the scope defined in Article 1 (Purpose of Personal Information Processing) and provides personal information to third parties only when the user consents or when it is required by law or the Personal Information Protection Act.
2. HairBe does not provide personal information to third parties and will obtain consent from users if such provision becomes necessary.

Article 4 (Outsourcing of Personal Information Processing)

1. HairBe does not outsource personal information processing tasks.
2. If the content of the outsourced task changes, HairBe will promptly disclose it through this Privacy Policy.

Article 5 (Rights and Obligations of Data Subjects and Methods of Exercising Rights)

1. Data subjects may exercise their rights, such as accessing, correcting, deleting, or requesting the suspension of personal information processing, at any time.
2. The exercise of rights under paragraph 1 can be done through written requests, email, facsimile (FAX), etc., in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act. HairBe will take action without delay.
3. If the exercise of rights under paragraph 1 is done through a legal representative or an agent, the agent must submit a power of attorney in accordance with Form No. 11 of the Enforcement Rule on the Methods of Personal Information Processing.
4. The rights to access and request the suspension of processing pursuant to paragraph 1 may be limited in accordance with Article 35, Paragraph 4, and Article 37, Paragraph 2 of the Personal Information Protection Act.
5. In cases where personal information cannot be corrected or deleted as specified in other laws, HairBe will notify the data subject.

Article 6 (Items of Personal Information to be Processed)

1. HairBe processes the following personal information items:
   • Classification: Purpose of Collection and Use: Mandatory/Optional: Items of Collection and Use:
   • Face Shape Analysis: Calculation of user's facial proportions for AI face shape analysis: Mandatory: User's facial photo, User-provided cheekbone and jaw information
   • Hairstyle Experience: Provision of information messages related to function updates: Mandatory: User's phone number