CELL Corp. — Cigarette Filter Manufacturer in Korea & Indonesia (since 1984)

CELL Corp. ("the Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act (PIPA) of the Republic of Korea, in order to protect the personal data of data subjects and to handle related grievances promptly.

1. Purpose of Processing

The Company processes personal data for the purposes below and does not use it for any other purpose. Where the purpose changes, the Company will take the measures required under Article 18 of PIPA, including obtaining separate consent.

1. Handling inquiries — verifying product and business inquiries submitted through the contact form, routing them to the responsible staff, and replying to the enquirer
2. Business consultation — pre-contract discussion of quotations, samples and supply conditions, and management of consultation records
3. Website operation — usage statistics, prevention of unauthorised access and misuse, and stable service operation

2. Categories of Personal Data and Collection Method

• Contact form (required) — company / contact name, email address, message content
• Contact form (optional) — information contained in a file voluntarily attached by the user
• Automatically collected — IP address, access date and time, browser and OS information, service usage records, referrer

Collection method: direct entry by the user through the website contact form, and automatic generation during use of the service.

3. Processing and Retention Period

• Inquiry and consultation records: 3 years from the date of receipt (destroyed without delay once the purpose is achieved)
• Web server / CDN access logs: 3 months (Protection of Communications Secrets Act)
• Other data required to be retained by law: for the period prescribed by the relevant statute

4. Provision to Third Parties

The Company does not provide personal data to third parties, except where the data subject has given separate consent or where otherwise permitted under Articles 17 and 18 of PIPA.

5. Entrustment of Processing

In accordance with Article 26 of PIPA, the Company specifies in the contract the obligations regarding safe processing, restriction on sub-entrustment, supervision and liability for damages, and supervises whether the processor handles personal data safely.

6. Cross-border Transfer

The Company does not transfer personal data overseas. The infrastructure used to handle inquiries is located in Korea (Seoul region). Should an overseas transfer become necessary, the Company will give prior notice and obtain the consent required under Article 28-8 of PIPA.

7. Destruction of Personal Data

When the retention period expires or the purpose of processing is achieved, the Company destroys the personal data without delay (within 5 days of the event).

• Electronic files: permanently deleted by technical means that prevent recovery
• Paper documents: shredded or incinerated

8. Rights of Data Subjects and How to Exercise Them

1. Data subjects may at any time request access, correction, deletion, suspension of processing, or withdraw consent.
2. Requests may be made in writing or by email, and the Company will act on them without delay.
3. Rights may be exercised through a legal representative or an authorised agent, in which case a power of attorney must be submitted.
4. Rights of access and suspension of processing may be restricted under Article 35(4) and Article 37(2) of PIPA.

9. Security Measures

• Administrative — internal management plan, minimisation of staff handling personal data, regular training
• Technical — access rights management, access control systems, encryption in transit (HTTPS/TLS), security updates
• Physical — access control for locations where records are kept

10. Automatic Collection Devices (Cookies)

1. This website does not use third-party advertising or tracking cookies.
2. Usage statistics are measured with an analytics tool operated on the Company's own server, which does not store personally identifiable information.
3. Preferences such as the display language are stored in the browser's localStorage and can be deleted at any time in the browser settings.
4. Users may refuse the storage of cookies through their browser settings; some features may then be unavailable.

11. Privacy Officer

• Privacy Officer: Jaeho Yoo (Chief Executive Officer)
• Contact: sales@cellcorp.kr

Data subjects may direct any inquiry, complaint or request for remedy relating to personal data protection to the contact above; the Company will respond without delay.

12. Remedies for Infringement

Data subjects may apply to the following bodies for dispute resolution or consultation regarding personal data infringement.

• Personal Information Dispute Mediation Committee — +82-1833-6972 (www.kopico.go.kr)
• Privacy Infringement Report Centre — 118 (privacy.kisa.or.kr)
• Cyber Investigation Division, Supreme Prosecutors' Office — 1301 (www.spo.go.kr)
• National Office of Investigation, Korean National Police Agency — 182 (ecrm.police.go.kr)

13. Changes to this Policy

This Privacy Policy is effective from 25 August 2026. Any addition, deletion or amendment arising from changes in law, policy or security technology will be announced on this website at least 7 days before it takes effect.

Announced: 18 August 2026  |  Effective: 25 August 2026