Mone Vocal Academy Privacy Policy

1. Purpose of Processing Personal Information

Mone Vocal Academy processes personal information solely to ensure that users can access and enjoy our services smoothly. Personal information will not be used for any purpose other than those listed below. Should the purpose of use change, the Company will implement appropriate measures — including obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act — before proceeding.

1. Website Membership Registration and Management: Personal information is processed for the purposes of identity verification, authentication, age verification, maintenance and management of membership status, prevention of fraudulent use of services, and various notices and notifications related to the provision of membership services.
2. Handling Civil Complaints: Personal information is processed to identify the nature of complaints, to contact users for fact-finding purposes, and to communicate the outcome of the resolution process.
3. Provision of Goods or Services: Personal information is processed to deliver music education content, process payments, and carry out settlements.
4. Marketing and Advertising: Personal information is processed to develop new services, provide personalized content, offer event and promotional information and participation opportunities, validate services, and generate statistics on member service usage.
5. Other: Personal information is processed to prevent illegal or fraudulent use and to support auto-login functionality.

2. Processing and Retention Period of Personal Information

Mone Vocal Academy retains and uses members' personal information for the duration of their active membership. The Company does not directly collect personal information from users; instead, it receives or is granted access to personal information from Teachable for processing and retention purposes.

Personal information is permanently destroyed by non-reproducible means once the purpose of collection and use has been fulfilled or when a user withdraws from membership.

However, where retention is necessary to prevent the recurrence of membership abuse, to address disputes involving rights infringement or defamation, or to cooperate with official investigations, the member's personal information may be retained for up to one year following withdrawal. Where applicable laws — such as the Commercial Act or the Act on Consumer Protection in Electronic Commerce — require preservation of certain records, the Company will transfer the relevant member information to a separate, access-restricted database or electronic file and retain it for the period prescribed by those laws before destruction.

Retention Under Mone Vocal Academy Internal Policy

Retention Under Applicable Laws

3. Items of Personal Information Processed

Mone Vocal Academy processes the following personal information, which is received from or made accessible by Teachable.

Items Collected by Teachable

Collection Methods

• Upon website or mobile web membership registration
• Upon payment for paid services
• During the modification of member information or the use of services

4. Processing of Personal Information of Children Under 14

1. Mone Vocal Academy does not accept membership registrations from children under the age of 14.
2. If a user misrepresents their age or registers using another person's information, full responsibility lies with that user.
3. If the Company becomes aware that personal information of a child under 14 has been collected, it will immediately revoke the membership and destroy the relevant personal information.
4. If you discover that personal information of a child under 14 has been collected, please contact the Chief Privacy Officer at monemusic2022@naver.com.

5. Processing of Personal Information of Minors Aged 14 to 18

1. Mone Vocal Academy advises that minors aged 14 or older but under 19 must obtain the consent of a legal representative before purchasing paid services.
2. If a minor makes a payment without the consent of a legal representative, the minor or their legal representative may request cancellation of that payment from the Company.
3. Legal representatives may request to view, correct, delete, or suspend the processing of a minor member's personal information. The Company will take prompt action upon verifying the legitimacy of any such request.

6. Provision of Personal Information to Third Parties

Mone Vocal Academy processes users' personal information only within the scope described in Section 1 and does not, as a general rule, provide it to third parties. Exceptions apply only in the following circumstances:

• When required for statistical compilation, academic research, or market research, and provided in a form that does not identify any specific individual
• When necessary for the settlement of fees arising from transactions involving goods or services
• When necessary for identity verification to prevent theft or fraud
• When required by law or legally mandated provisions

7. Consignment of Personal Information Processing

To ensure smooth operations, Mone Vocal Academy entrusts certain personal information processing tasks to the following third parties. Information shared in connection with these arrangements is limited to the minimum extent necessary for service provision.

8. Overseas Transfer of Personal Information

To ensure the stable provision of services, Mone Vocal Academy entrusts hosting operations to an overseas service provider, which may involve the transfer of personal information outside the Republic of Korea.

9. Procedure and Method for Destroying Personal Information

Mone Vocal Academy destroys personal information without delay once it is no longer necessary — for example, upon the expiration of the retention period or the fulfilment of the processing purpose.

1. Destruction Procedure: The Company identifies the personal information to be destroyed and carries out the destruction process with the approval of the Chief Privacy Officer.
2. Destruction Method: Personal information stored in electronic file formats is permanently deleted in a manner that prevents any reproduction. Personal information in printed form is shredded or incinerated.

10. Rights and Obligations of Users and Legal Representatives

1. Users may, at any time, request access to, correction of, deletion of, or suspension of processing of their personal information held by the Company.
2. Such requests may be submitted to Mone Vocal Academy via the internet, email, or other means in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act. The Company will act on all requests without undue delay.

• Users may directly view and update their personal information via "Edit Member Information" on the website.
• To withdraw consent or cancel membership, users may send a request to monemusic2022@naver.com or contact us through Channel Talk.

3. Rights under Paragraph 1 may be exercised through an authorized representative, such as a legal guardian or a person holding a power of attorney. In such cases, a power of attorney in the format prescribed by Form 11 of the "Notice on Personal Information Processing Methods (No. 2020-7)" must be submitted.
4. Requests for access to and suspension of processing of personal information may be subject to restrictions under Article 35, Paragraph 4, and Article 37, Paragraph 2 of the Personal Information Protection Act.
5. Requests for correction or deletion of personal information cannot be made if the information is explicitly designated for collection under other applicable laws.
6. When processing requests for access, correction, deletion, or suspension, Mone Vocal Academy will verify whether the requester is the individual concerned or a duly authorized representative.

11. Installation, Operation, and Rejection of Automatic Data Collection Devices

Mone Vocal Academy uses "cookies" — small data files stored on users' devices — to deliver personalized services.

1. Purpose of Using Cookies: Cookies help the Company understand usage patterns across services, including frequently visited pages, popular search terms, and secure connection status, in order to provide users with optimized information. Service usage is also analyzed through marketing analytics tools.
2. Managing Cookie Settings: Users can control cookie preferences through their web browser settings. Options typically include allowing all cookies, prompting for confirmation each time a cookie is saved, or refusing all cookies. Please note that disabling cookies may affect the availability of certain services.

12. Consent to Receive Advertising Information

1. Mone Vocal Academy sends advertising communications — including newsletters, event announcements, and promotional content — via email, mobile phone, and other channels only with the user's prior consent.
2. Users may withdraw their consent to receive advertising communications at any time, and the Company will cease sending such communications without delay upon receiving such a request.
3. Consent may be withdrawn via the unsubscribe link in any marketing email, through the member information modification page on the website, or by contacting us through Channel Talk.

13. Measures to Ensure the Security of Personal Information

Users' personal information is protected primarily through individual account credentials and identity verification. In addition, Mone Vocal Academy implements the following technical and administrative safeguards to prevent unauthorized access, leakage, alteration, or destruction of personal information:

Technical Measures

1. Account authentication credentials are encrypted and stored, and are accessible only to the individual user.
2. The Company performs regular data backups to protect against data loss and uses up-to-date antivirus software to guard against computer viruses that could compromise user information.
3. Mone Vocal Academy uses security technologies such as SSL to ensure the secure transmission of personal information over networks, including during payment processing.
4. To defend against hacking and other external threats, the Company deploys an intrusion prevention system to block unauthorized access and continuously works to maintain and improve systemic security.

Administrative Measures

1. When processing personal information at a user's request, Mone Vocal Academy verifies the user's identity through the most appropriate means available and takes all reasonable steps to handle the information securely.
2. Access to personal information is restricted to the Chief Privacy Officer and employees whose roles require handling such data. Compliance with the Privacy Policy is reinforced through regular training for all personnel involved in personal information management.

14. Chief Privacy Officer

For any inquiries, requests, or complaints regarding the processing of personal information by Mone Vocal Academy, please contact the Chief Privacy Officer using the details below:

15. Remedies for Infringement of Data Subject Rights

If you need to report a personal information infringement or seek consultation, please contact the Personal Information Infringement Report Center operated by the Korea Internet & Security Agency (KISA). If you have suffered financial or personal harm as a result of a personal information infringement, you may also seek relief through the Personal Information Dispute Mediation Committee.

16. Changes to the Privacy Policy

1. This Privacy Policy is effective from June 12, 2026.
2. Any additions, deletions, or amendments to this Privacy Policy will be notified to users through an announcement on the website at least 7 days before the changes take effect. Where changes significantly affect user rights, notice will be provided at least 30 days in advance.

17. Exceptions to the Privacy Policy

California Users and Residents

If your complaint has not been satisfactorily resolved by the Company, you may contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs in writing at 1625 North Market Blvd., Suite N 112, Sacramento, California 95834, or by telephone at (800) 952-5210 or (916) 445-1254.

EU Users and Residents

If you reside in the European Economic Area (EEA) or the United Kingdom (UK), please be aware that your country's data protection laws may differ from those in the Republic of Korea. Regardless, the Company will take all necessary steps to protect your personal information in accordance with this Privacy Policy and all applicable law.

Your Privacy Rights

In certain regions, including the EEA and UK, you have specific rights under applicable data protection legislation. These may include the right to access and obtain a copy of your personal information, to request rectification or erasure, to restrict or object to the processing of your personal information, and, where applicable, the right to data portability.

Where the Company processes your personal information on the basis of your consent, you have the right to withdraw that consent at any time. Please note, however, that withdrawal of consent does not affect the lawfulness of any processing carried out prior to that withdrawal, nor does it affect processing conducted on other lawful grounds.

If you reside in the EEA or UK and believe your personal information is being processed unlawfully, you have the right to lodge a complaint with your local data protection supervisory authority. Contact details can be found at: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

If you reside in Switzerland, contact details for the relevant data protection authority are available at: https://www.edoeb.admin.ch/edoeb/en/home.html.

California Shine the Light

Under California Civil Code Section 1798.83 (the "Shine the Light" law), California residents may request, once per calendar year and free of charge, information about any categories of personal information we disclosed to third parties for direct marketing purposes in the preceding calendar year, including the names and addresses of those third parties.

If you are under 18 years of age, reside in California, and hold a registered account on our website, you have the right to request the removal of content you have publicly posted. To submit such a request, please contact us using the information provided above and include the email address associated with your account along with a statement confirming your California residency. Please note that removal may not be complete or comprehensive across all systems, including backup copies.