SUGAR SQUARE Law Firm (“SUGAR SQUARE”) establishes and discloses the following Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of Korea in order to protect the personal information of data subjects and to promptly and smoothly handle related grievances.

Article 1 (Categories of Personal Information Processed, Purpose of Processing, and Retention Period)
SUGAR SQUARE processes personal information for the following purposes and retains such information only for the periods stated below. Personal information shall not be used for any purpose other than those specified below. If the purpose of use changes, SUGAR SQUARE will take necessary measures, including obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act.
1. Client Personal Information
1-1. Legal Consultation Services
Data Subjects: Individuals seeking legal consultation services from SUGAR SQUARE
Information Collected:
Required: Name, phone number, reason for consultation request
Optional: Preferred attorney
Purpose of Processing:
Reservation of legal consultations, provision of legal information and services, and communication necessary for matters retained by or involving the client
Retention Period:
Until the purpose of use is achieved or consent is withdrawn
1-2. Sugar Check Service
Data Subjects: Individuals seeking to use Sugar Check services
Information Collected:
Required: Name, phone number, email address, contract to be reviewed, reason for requesting review, and contract status
Purpose of Processing:
Reservation of legal consultations, provision of legal information and services, and communication necessary for matters retained by or involving the client
Retention Period:
Five (5) years from the date of purchase in accordance with applicable laws, including the Act on Consumer Protection in Electronic Commerce
1-3. Newsletter Subscription
Data Subjects: Individuals subscribing to SUGAR SQUARE newsletters
Information Collected:
Required: Name, affiliation/company, email address
Optional: Department, position/title
Purpose of Processing:
Newsletter subscription and distribution
Retention Period:
Until subscription is canceled

2. Attorney Applicant Information
Data Subjects: Judicial Research and Training Institute trainees, domestic law school students, military legal officers, judicial clerks, experienced attorneys, and foreign attorneys
Information Collected:
Name, phone number, email address, practice areas, and information included in resumes such as gender, address, photograph, desired practice area, foreign languages, certifications, reasons for application, additional references, and completed courses (for law school graduates)
Purpose of Processing:
Attorney recruitment and hiring
Retention Period:
Five (5) years from the date of application (for rolling recruitment) or until resignation if hired
However, if requested by the applicant, submitted documents will be returned within fourteen (14) days after hiring decisions are finalized, or within up to 180 days with the applicant’s consent

Article 2 (Provision of Personal Information to Third Parties)
SUGAR SQUARE processes personal information only within the scope specified in Article 1 and provides personal information to third parties only where permitted under Articles 17 and 18 of the Personal Information Protection Act, including where consent has been obtained or special legal provisions apply.
SUGAR SQUARE does not currently provide personal information to third parties.

Article 3 (Outsourcing of Personal Information Processing)
SUGAR SQUARE outsources certain personal information processing tasks as follows:
Service Provider: Imweb Co., Ltd.
Scope of Outsourced Work: Website hosting and maintenance
When entering into outsourcing agreements, SUGAR SQUARE specifies matters required under Article 26 of the Personal Information Protection Act, including prohibition of processing personal information beyond the purpose of outsourcing, technical and administrative safeguards, restrictions on re-outsourcing, supervision of service providers, and liability for damages.
SUGAR SQUARE supervises whether outsourced parties safely process personal information. Any changes to outsourced services or service providers will be disclosed promptly through this Privacy Policy.

Article 4 (Rights and Obligations of Data Subjects and Methods of Exercising Rights)
Data subjects may exercise rights related to personal information protection, including requests for access, correction, deletion, suspension of processing, and withdrawal of consent, in accordance with applicable laws.
Such rights may also be exercised through a legal representative, in which case a power of attorney in the form prescribed by applicable law must be submitted.
Where a data subject requests correction or deletion of personal information due to errors or inaccuracies, SUGAR SQUARE will not use or provide such information until the correction or deletion is completed.
SUGAR SQUARE will promptly take measures regarding the exercise of rights by data subjects in accordance with applicable laws.

Article 5 (Destruction of Personal Information)
SUGAR SQUARE destroys personal information without delay once the retention period expires or the processing purpose has been fulfilled.
If personal information must be preserved pursuant to other laws even after the retention period or processing purpose has expired, such information will be transferred to a separate database or stored separately.
Procedures and methods for destruction are as follows:
1. Destruction Procedure
SUGAR SQUARE selects personal information subject to destruction and destroys such information with approval from the Privacy Officer.
2. Destruction Method
Electronic files are destroyed in a manner that prevents restoration, and paper documents are shredded or incinerated.

Article 6 (Measures to Ensure Security of Personal Information)
SUGAR SQUARE implements the following measures to ensure the security of personal information:
Administrative Measures: Establishment and implementation of internal management plans, regular employee training, etc.
Technical Measures: Access control to personal information processing systems, installation of access control systems, encryption, and security software
Physical Measures: Access control to computer rooms and storage facilities

Article 7 (Privacy Officer)
SUGAR SQUARE designates the following individuals responsible for overseeing personal information processing and handling complaints and remedies related to personal information.
1. Privacy Officer
Name: Jiyoung Park
Position: Managing Partner / Privacy Officer
Phone: +82-2-563-5877
Email: sugar@sugar.legal
2. Privacy Administration Contact
Department: Litigation Team
Contact Person: Minji Ahn
Phone: +82-2-563-5877
Email: sugar@sugar.legal
Data subjects may request access, correction, deletion, or suspension of processing of personal information pursuant to Article 35 of the Personal Information Protection Act through the designated department, and SUGAR SQUARE will respond promptly.

Article 8 (Amendments to the Privacy Policy)
This Privacy Policy may be amended from time to time, and any amendments will be disclosed in accordance with applicable laws.

Article 9 (Remedies for Infringement of Rights)
Data subjects may contact the following institutions regarding personal information infringement, dispute resolution, or consultation:
Personal Information Dispute Mediation Committee
Phone: 1588-6972
Website: www.kopico.go.kr
Personal Information Infringement Report Center
Phone: 118
Website: privacy.kisa.or.kr
Supreme Prosecutors’ Office
Phone: 1301
Website: www.spo.go.kr
Korean National Police Agency
Phone: 182
Website: ecrm.police.go.kr/minwon/main

Article 10 (Effective Date)
This Privacy Policy shall become effective on October 16, 2025.