Privacy Policy

The Foundation processes personal information for the following purposes. Personal information processed will not be used for any purpose other than the following, and if the purpose of use changes, necessary measures such as obtaining separate consent will be taken. ① Providing donation services: Processing one-time and recurring donations, confirming payments, viewing donation history ② Member management: Membership registration and management, identity verification, identification for service use ③ Issuing donation receipts: Issuing tax deduction receipts and reporting to the National Tax Service ④ Customer service: Responding to inquiries, handling complaints, delivering notices ⑤ Marketing and advertising: Sending newsletters, notifying events and campaigns (with separate consent)

① Upon membership registration (Social Login) - Required: Name (nickname), email, phone number, date of birth, profile image ※ Items by provider · Kakao: Nickname, email, phone number, date of birth, profile image · Naver: Name, email, phone number, date of birth · Google: Name, email, phone number, date of birth, profile image ② During donation process - Required: Name, email, phone number, donation amount, payment method information - Optional: Date of birth, address (for donation receipt issuance) ③ For donation receipt issuance - Required: Name, resident registration number or business registration number, address ④ Automatically generated/collected during service use - IP address, cookies, service usage history, access logs

① Member information: Until membership withdrawal (immediately deleted upon withdrawal, subject to retention periods under applicable laws) ② Donation and payment information: 5 years (Act on Consumer Protection in Electronic Commerce) ③ Donation receipt-related information: 5 years (Framework Act on National Taxes) ④ Consumer complaints and dispute records: 3 years (Act on Consumer Protection in Electronic Commerce)

The Foundation does not provide users' personal information to external parties in principle, except in the following cases: ① When the user has given prior consent ② When required by law or requested by investigative agencies through legally prescribed procedures ③ For payment processing

The Foundation outsources personal information processing as follows:

Users may exercise the following rights at any time: - Request access to personal information - Request correction of errors - Request deletion - Request suspension of processing These rights may be exercised through written request, phone, or email. The Foundation will respond without delay.

When personal information becomes unnecessary due to the expiration of the retention period or achievement of the processing purpose, it will be destroyed without delay. ① Electronic files: Permanently deleted using methods that prevent recovery or regeneration ② Paper documents: Shredded or incinerated

▶ Privacy Officer - Name: Kim Sook - Email: bkmfoundation@bf4bf.or.kr Users may contact the Privacy Officer regarding all privacy-related inquiries, complaints, and remedies arising from the use of the service.

Users may apply for dispute resolution or consultation to the following organizations: ▶ Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr) ▶ Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr) ▶ Supreme Prosecutors' Office: 1301 (www.spo.go.kr) ▶ National Police Agency: 182 (ecrm.cyber.go.kr)

This Privacy Policy is effective from May 7, 2026.