Terra Riese

Privacy Policy
Terrariese (hereinafter the "Company") regards the personal information of data subjects as important and complies with the Personal Information Protection Act and other relevant laws and regulations.
In order to protect the personal information of data subjects and to handle personal information related grievances promptly and smoothly, the Company establishes and discloses the following Privacy Policy.

Article 1 Purpose of Processing Personal Information
The Company processes personal information for the following purposes.
The personal information being processed is not used for any purpose other than those stated below, and if the purpose of use is changed, the Company will take the measures required under the relevant laws and regulations.
1. Online inquiries : receiving quotation inquiries, product inquiries, partner registration requests and other inquiries, verifying the inquirer, providing consultation and responses by telephone or email, and informing the inquirer of the results
2. Quotation requests : receiving quotation requests for catalog products, preparing and sending quotations, and negotiating terms of trade
3. Member (buyer) management : identifying member companies and verifying identity, providing member-only services (catalog viewing, quotation requests, one-to-one inquiries), managing trade and shipping terms, and delivering notices
4. Dispute response : confirming the facts relating to inquiries, quotations and transactions, responding to disputes, and managing consultation records

Article 2 Personal Information Items Processed
The Company collects and processes the following personal information in order to provide its services.
1. Online inquiries
- Required items : inquiry type, company name, name/position, phone number, email, inquiry details
2. Quotation requests
- Required items : name, company name, phone number, email
3. Members (buyers)
- Required items : ID, password, member name (company name), name of the person in charge, country, city, phone number, email
- Trade related items : preferred freight terms, deposit and other trade condition information
4. Automatically collected items
- In the course of using the service, IP address, access date and time, service usage records, cookies, browser and device information and similar data may be automatically generated and collected.
5. Collection methods
- Completion of online inquiry and quotation request forms on the website, and registration of member information upon application for partner registration
Please take care not to enter personal information unnecessary for handling your inquiry, such as resident registration numbers, passport numbers or health information, in the inquiry details.

Article 3 Processing and Retention Period of Personal Information
The Company processes and retains personal information within the period consented to by the data subject at the time of collection or within the period prescribed by the relevant laws and regulations.
1. Online inquiry information : 3 years from the date the inquiry is completed
2. Quotation request information : 3 years from the date of the quotation request (where a transaction is concluded, for the period prescribed by the relevant laws below)
3. Member information : until withdrawal of membership or loss of member status
However, where retention is required under the relevant laws and regulations, the information is retained for the period prescribed by those laws.
- Books and supporting documents concerning transactions : 5 years (Framework Act on National Taxes, Commercial Act)
- Website visit records (access logs) : 3 months (Protection of Communications Secrets Act)

Article 4 Procedure and Method of Destroying Personal Information
When the retention period has elapsed or the purpose of processing has been achieved and the personal information is no longer necessary, the Company destroys the personal information without delay.
Where personal information must continue to be retained under other laws and regulations, it is transferred to a separate database or stored in a different location.
Personal information is destroyed as follows.
- Personal information stored in electronic file form is deleted in a manner that makes it impossible to recover or reproduce.
- Personal information printed on paper is destroyed by shredding or incineration.

Article 5 Provision of Personal Information to Third Parties
In principle, the Company processes the personal information of data subjects only within the scope of the purposes set out in Article 1, and does not provide personal information to third parties without the prior consent of the data subject.
However, personal information may be provided in accordance with the relevant laws and regulations in the following cases.
- Where the data subject has given prior consent
- Where there are special provisions in the law or where it is necessary to comply with legal obligations
- Where an investigative or supervisory authority makes a request in accordance with due process
- Where it is necessary to protect the life, body or property of the data subject or a third party

Article 6 Entrustment of Personal Information Processing
The Company does not currently entrust the processing of personal information to any external company.
Should the Company entrust personal information processing to an external company in the future for the smooth provision of its services, the trustee and the details of the entrusted work will be disclosed through this Privacy Policy.
When concluding an entrustment agreement, the Company specifies in the contract such matters as the prohibition of use beyond the purpose of processing, measures to ensure the security of personal information, restrictions on re-entrustment, and the management and supervision of the trustee, in accordance with personal information protection laws.

Article 7 Transfer of Personal Information Overseas
The Company does not transfer the personal information it collects to other countries.
Should an overseas transfer of personal information arise in the future, the Company will inform data subjects of the recipient, the destination country, the items transferred, the purpose, the date, time and method of transfer and the retention period, and will take the measures required under the relevant laws and regulations.

Article 8 Rights and Obligations of Data Subjects and How to Exercise Them
Data subjects may exercise the following rights relating to the protection of personal information against the Company at any time.
- Request to access personal information
- Request to correct or delete personal information
- Request to suspend the processing of personal information
- Withdrawal of consent to the collection and use of personal information
Data subjects may exercise their rights in writing, by telephone or by email, and the Company will verify the identity of the applicant and take the necessary measures without delay in accordance with the relevant laws and regulations.
Data subjects may exercise their rights through a legal representative or an authorized agent. In such cases, the Company may request the submission of a power of attorney and other documents prescribed by the relevant laws and regulations.

Article 9 Measures to Ensure the Security of Personal Information
The Company implements the following security measures to prevent personal information from being lost, stolen, leaked, forged, altered or damaged.
- Minimizing the number of staff handling personal information and managing access rights
- Access control for personal information processing systems
- Encrypted storage of member passwords and secure management of administrator accounts
- Application of encrypted communication when transmitting personal information
- Installation of security programs and regular updates
- Retention and inspection of access logs relating to personal information processing
- Internal management and staff training for the protection of personal information

Article 10 Installation and Operation of Devices that Automatically Collect Personal Information and How to Refuse Them
The Company may use cookies or automatically collect access information in order to provide smooth website services, such as maintaining login sessions.
Cookies are small pieces of information that the website sends to the user web browser, and users may allow or refuse the storage of cookies through their browser settings.
If the storage of cookies is refused, the use of certain website functions, such as member services that require login, may be restricted.
The Company does not currently collect behavioral information for the purpose of providing advertising tailored to the interests of users.

Article 11 Personal Information Protection Officer
The Company designates a Personal Information Protection Officer as follows to take overall responsibility for personal information processing and to handle complaints and provide remedies for damage relating to personal information.
- Personal Information Protection Officer : Lee Kyung-sook
- Company : Terrariese
- Email : terrachloe@naver.com
- Address : 5F, 23, Changgyeonggung-ro 16-gil, Jongno-gu, Seoul, Republic of Korea
Data subjects may direct any inquiries, complaints or requests for remedies relating to personal information protection arising from their use of the services of the Company to the Personal Information Protection Officer.
The Company will respond to such inquiries promptly and in good faith.

Article 12 Remedies for Infringement of Rights
Data subjects may contact the following organizations for remedies, consultation or dispute mediation relating to personal information infringement.
- Personal Information Infringement Report Center : 118 (without area code) (privacy.kisa.or.kr)
- Personal Information Dispute Mediation Committee : 1833-6972 (www.kopico.go.kr)
- Cybercrime Investigation Division, Supreme Prosecutors Office : 1301 (without area code) (www.spo.go.kr)
- National Office of Investigation, Korean National Police Agency : 182 (without area code) (ecrm.police.go.kr)

Article 13 Changes to the Privacy Policy
This Privacy Policy may be amended in line with changes to laws and regulations, Company policy or the content of its services.
If this Privacy Policy is amended, the details of the change and its effective date will be announced through the notices section of the website or the Privacy Policy page.
- Date of announcement : September 15, 2026
- Effective date : September 15, 2026

Consent to the Collection and Use of Personal Information
Terrariese collects and uses personal information as follows in order to receive and respond to online inquiries.
- Purpose of collection and use : receiving quotation, product, partner registration and other inquiries, providing consultation and responses, and informing the inquirer of the results
- Items collected : inquiry type, company name, name/position, phone number, email, inquiry details
- Retention and use period : 3 years from the date the inquiry is completed
- Notice on refusal of consent : You have the right to refuse consent to the collection and use of your personal information. However, if you do not consent, the receipt of and response to online inquiries may be restricted.