ATLAS LINK Co., Ltd. (“ATLAS LINK”, “we”, “our”) is committed to protecting your privacy and providing transparency about our data practices. This policy explains how we collect, use, share, store and protect your information through our website and services, and sets out your privacy rights and choices.

1. Scope

This policy applies to the ATLAS LINK website (www.atlaslink.co.kr, including the English pages), the Online Inquiry form, the Ethics Hotline, and the connected products, applications and services we provide (the “Services”), wherever you access them, including the Republic of Korea, the EU/EEA and the UK. It is written in line with the Personal Information Protection Act of the Republic of Korea and applicable international data protection laws.

2. Information We Collect

• Online inquiries: your name, email address, phone number and the content of the message you send us.
• Ethics Hotline reports: the report type and category, title, a description of the matter (who, when, where, witnesses and evidence), the report date and, if you choose to provide it, the reporter’s name. Reports may be submitted anonymously.
• Security vulnerability reports (PSTI): the product model reference or EAN, the purchase date and shop, a description of the vulnerability and, if you share it, your contact information.
• Technical and usage data: IP address, access logs and cookies, which our servers and security tools record automatically when you use the website.

3. Use of Information

• To respond to your inquiries and handle your complaints, and to inform you of the result.
• To receive, investigate and handle reports submitted to the Ethics Hotline.
• To receive, assess and respond to security vulnerability reports and to provide security updates.
• To operate, secure and improve the website and the Services, and to detect and prevent abuse or fraud.
• To comply with legal and regulatory obligations.

4. Sharing and Disclosure

• We do not sell personal information.
• We do not provide your personal information to third parties, except where required by law or requested by an investigating authority through the procedures set by law.
• We entrust the following service providers with processing on our behalf, only to operate the Services, and they are bound by confidentiality obligations:
  • Cloudflare, Inc. (United States): website hosting, server operation and security.
  • Resend (United States): delivery of notification emails for inquiries and reports.
• If a transfer or outsourcing of processing becomes necessary, we will disclose the details in this policy without delay.

5. Cookies and Tracking

Our website may use cookies and similar technologies to operate the site, remember your display choices (for example, closing a pop-up notice for a period of time) and keep the site secure. You can allow, block or delete cookies through your browser or device settings. Blocking cookies may limit some features of the website.

6. International Transfers

Personal data may be processed and stored in the Republic of Korea and in the United States, where our service providers operate. We apply appropriate safeguards so that your data receives a high level of protection, including for transfers from the EU/EEA and the UK in accordance with applicable data protection laws.

7. Data Security and Retention

We protect personal information with administrative, technical and physical safeguards, including an internal management plan, staff training, access control and authorization management, encryption of sensitive identifiers and security software.

We keep personal information only as long as necessary for the purpose for which it was collected or as required by law, and then destroy it without delay. In particular:

• Inquiries and complaints: retained for three (3) years after the matter is resolved, then destroyed.
• Ethics Hotline reports: retained for three (3) years after the report is closed, then destroyed.
• Information we are required to keep by law, or that is needed for an ongoing investigation, is kept for the period set by the relevant law or until the investigation ends.

Electronic files are deleted so that they cannot be restored, and paper records are shredded or incinerated. Security researchers can find our vulnerability disclosure guidelines in our PSTI Policy.

8. Your Rights and Choices

Subject to applicable data protection laws, you have the following rights regarding your personal data:

• Access: you may request information about the personal data we hold about you and how it is processed.
• Correction: you may request correction of inaccurate or incomplete data.
• Erasure: you may request deletion of your data when it is no longer needed or when processing is unlawful.
• Restriction: you may request that we suspend or limit the processing of your data in certain circumstances.
• Object and withdraw consent: you may object to certain processing, and where processing is based on your consent you may withdraw it at any time.
• Data portability: where technically feasible, you may request a copy of your personal data in a transferable format.

You may exercise these rights in writing, by phone, email or fax, or through a legal representative. We will respond without delay.

9. Contact

We have designated the following Chief Privacy Officer and departments to handle personal information protection, complaints and requests to access personal information.

10. Changes to This Policy

We will notify you of significant changes through our website or by direct communication, as appropriate. The latest version is always available at https://www.atlaslink.co.kr/en/privacy_policy.

This Privacy Policy applies from October 22, 2026.