Acasia Restaurant Inc. has established the following Privacy Policy in accordance with the Personal Information Protection Act to safeguard users’ personal information and rights, and to smoothly handle any grievances related to personal information.
The company will announce any revisions to this Privacy Policy through website notices (or individual notices). This policy is effective from December 24, 2024.

1. Purpose of Personal Information Collection and Use
① The Company processes personal information for the following purposes. Processed personal information will not be used for purposes other than those specified below, and if the purpose changes, necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act will be taken.
a. Customer Consultation: Personal information is processed for the purpose of contact notification for confirming and responding to franchise-related inquiries, and notifying processing results.
b. Information Provision: Personal information is processed for purposes such as providing information about programs hosted by the Company.
② The Company collects personal information in the following ways.
- Website

2. Items of Personal Information Processed
① The Company processes the following personal information items.
a. Customer Consultation
- Required: Name, contact information (access IP, cookies, service usage records, access logs)
- Optional: None
b. Information Provision
- Required: Name, contact information (access IP, cookies, service usage records, access logs)
- Optional: None

3. Retention and Processing Period of Personal Information
① The Company processes and retains personal information within the retention and use period stipulated by law or agreed upon when collecting personal information from the data subject.
② The specific personal information processing and retention periods are as follows.
a. Customer Consultation: Personal information is processed for purposes such as contact notification for confirming and responding to site user inquiries, and notifying processing results.
b. Information Provision: Personal information is processed for purposes such as providing information about programs hosted by the Company.
c. Retention Period: 5 years

4. Destruction of Personal Information
① In principle, the Company destroys personal information without delay after the retention period has elapsed once the purpose of processing personal information has been achieved. The procedures, deadlines, and methods of destruction are as follows.
- Destruction Procedure: Information entered by users is transferred to a separate DB (or separate document for paper) after the purpose is achieved, stored for a certain period according to internal policy and other relevant laws, and then destroyed immediately. At this time, personal information transferred to the DB is not used for other purposes except as required by law.
- Destruction Deadline: When the retention period of user personal information has expired, it will be destroyed within 5 days from the end of the retention period. When personal information becomes unnecessary due to the fulfillment of the processing purpose, discontinuation of the service, or termination of the business, it will be destroyed within 5 days from the date it is recognized as unnecessary.
- Destruction Method: Electronic files are destroyed using technical methods that prevent record reproduction. Personal information printed on paper is destroyed by shredding or incineration.

5. Provision of Personal Information to Third Parties
① In principle, the Company processes users' personal information within the scope specified in Section 1 (Purpose of Collection and Use), and does not process beyond the original scope or provide it to third parties without prior user consent.
However, personal information may be processed in the following cases.
- When the user has given prior consent to provision and disclosure to third parties
- When provision is required by law or regulation
- When personal information is necessary for the performance of a contract for service provision and it is significantly difficult to obtain ordinary consent for economic/technical reasons
- When personal information is processed into a state that cannot identify individuals
② When providing personal information to third parties, the Company must notify through the privacy policy about the recipient, purpose of use, items of personal information provided, and retention and use periods.
③ However, if a user does not consent to third-party provision and disclosure, they may be disadvantaged in terms of service restrictions or information access provided by the Company.

6. Consignment of Personal Information Processing
① The Company does not consign personal information, and if consignment occurs, it will be announced through notices at least 15 days in advance, followed by revision of the Privacy Policy.

7. Rights, Obligations, and Exercise Methods of Data Subjects
① Data subjects may exercise the following personal information protection rights against the Company at any time.
a. Request to access personal information
b. Request for correction in case of errors
c. Request for deletion
d. Request for suspension of processing
② The exercise of rights under Paragraph 1 may be done in writing, by email, or by fax in accordance with Form No. 8 of the Enforcement Rules of the Personal Information Protection Act, and the Company will take action without delay.
③ If a data subject requests correction or deletion of errors in personal information, the Company will not use or provide such personal information until the correction or deletion is completed.
④ The exercise of rights under Paragraph 1 may be done through a legal representative or an authorized agent. In this case, a power of attorney in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.

8. Installation, Operation, and Refusal of Personal Information Collection Devices
① The Company operates cookies and other devices that continuously store and retrieve customer information.
a. What are cookies?
- The Company uses cookies to store and frequently retrieve user information in order to provide personalized and customized services.
- Cookies are very small text files sent by the server operating the website to the user's browser and stored on the user's hard disk. When the user visits the website again, the website server reads the cookie content stored on the user's hard disk to maintain user settings and provide customized services.
- Cookies do not automatically/actively collect personally identifiable information, and users can refuse or delete cookie storage at any time.
b. Company's Purpose of Cookie Use
- Used to understand visit and usage patterns for each service and website visited by users, popular search terms, secure access status, user scale, etc., to provide optimized customized information including advertisements.
c. Cookie Installation/Operation and Refusal
- Users have the option to choose cookie installation. Therefore, users can allow all cookies, require confirmation each time cookies are stored, or refuse all cookie storage by setting browser options.
- However, if you refuse cookie storage, some services may be difficult to use.
- The method for specifying cookie installation permission (for Internet Explorer) is as follows.
(1) Select [Internet Options] from the [Tools] menu.
(2) Click the [Privacy] tab.
(3) Set the [Privacy Level].

9. Personal Information Protection Officer
① The Company is responsible for overseeing all matters related to personal information processing, and has designated a Personal Information Protection Officer as follows for handling complaints and providing remedies related to personal information.
▶ Personal Information Protection Officer
- Department: Head of Marketing Dept.
- Officer: Ms. Murielle Masicla
- Contact: 966-681-1104
② Data subjects may contact the Personal Information Protection Officer and the relevant department for any inquiries, complaint handling, and remedies related to personal information protection arising from the use of the Company's services. The Company will respond and handle inquiries without delay.