This is a reference translation. The Korean original governs any legal interpretation.

BagDrop Seongsu Station Luggage Storage — Terms of Service

These Terms of Service (the "Terms") set out the conditions of use, and the rights, obligations and responsibilities of Hong&Lee Holdings Co., Ltd. (the "Operator") and the user, with respect to the unmanned luggage storage service "BagDrop Seongsu Station Luggage Storage" (the "Service") operated by the Operator. By using the Service you are deemed to have agreed to these Terms.

Article 1 (Effect of the Terms)

1. Using the Service means you agree to these Terms.

2. Using a locker means you agree to these Terms.

Article 2 (Luggage Storage Service)

1. Handling of long-abandoned items (applies to all following clauses)

a. After 14 days of storage, the Operator may collect the items and keep them at a separate location.

b. Fees on collection follow the posted fee schedule.

c. Collection is available on weekdays 09:00–18:00 (Mon–Fri) at a location designated by the Operator.

d. If 28 days pass without contact, the Operator may dispose of the items at its discretion and no objection may be raised.

2. Responsibility for stored items: the Operator is responsible for damage, loss or theft occurring under normal storage conditions.

3. The Service may not be used for any purpose other than storing items.

4. Prohibited items (applies to all following clauses)

a. Items weighing 30kg or more, or items that do not fit in the locker

b. Explosives, flammable materials and other hazardous or toxic substances

c. Items that smell or may decay (fish, animals, food)

d. Firearms, weapons, protest equipment, narcotics

e. Cash, securities, valuables (worth KRW 100,000 or more), items for peddling

5. If you lose your PIN or a fault occurs, you may retrieve your items after verification by the Operator; where on-site verification is required, this may not be handled immediately.

6. Where information is requested in order to resolve a fault, the customer shall cooperate and follow the Operator's instructions.

7. Damages: the user is responsible for damage caused by the user's own fault. The Operator is not responsible for the following.

a. Customer negligence (PIN, payment, misoperation) and inability to prove storage

b. Force majeure such as natural disaster or war

c. Damage arising from storing valuables (worth KRW 100,000 or more)

d. Loss arising from not removing all items after retrieval

e. Seizure by investigative authorities

f. Discretionary disposal under Article 2(1)

g. Damage occurring while waiting for staff to arrive

8. Emergency call-out due to customer fault such as oversized items: failure to open or damage to the door is the customer's responsibility, and an emergency call-out fee (KRW 30,000 per case) and repair costs (at actual cost) will be charged.

9. How to use and door-opening principle

a. Unmanned self-service. Selection, payment and opening are all done at the kiosk; no sign-up or app installation is required.

b. As a rule the locker door opens once. It cannot be reopened after the session ends, and a separate payment is required to use it again even if you removed only part of your items.

10. Excess fees and 24-hour pass settlement

a. The 4-hour base fee is paid in advance; any excess time is calculated automatically at pickup and charged additionally.

b. The 24H PASS is a separate, independent product with no additional charge for 24 hours from the time of payment.

Article 3 (Locker Maintenance and Provision of the Service)

1. The Operator may suspend the Service at its discretion for maintenance and inspection in order to provide it smoothly.

2. The Operator may change the contents of the Service without the user's consent.

3. Complaints are handled promptly; where this is difficult, the Operator will dispatch staff and notify the user under Article 2(5).

Article 4 (Disclaimers)

1. The Operator is not responsible for damage caused to the user or to other users by the user's own fault.

2. The Operator is not responsible for changes in the quality or shape of the stored items themselves, or for damage falling under Article 2(7).

Article 5 (User Obligations)

1. Usage rights and other rights may not be transferred, pledged or assigned to a third party.

2. The following acts are prohibited: a. disturbing public order b. use for crime c. commercial purposes d. any other act judged to be dangerous

Article 6 (Handling of Lost Property)

1. As a rule the Operator is not responsible for the loss of items not kept in a locker.

2. Lost property found during cleaning is kept separately for 14 days; if unclaimed, the Operator may dispose of it at its discretion.

3. The Operator may request information to verify ownership, and the customer shall cooperate.

4. Where ownership cannot be verified the item may not be returned, and clause 2 applies.

Article 7 (Operator Information and Customer Enquiries)

Company: Hong&Lee Holdings Co., Ltd. / Service: BagDrop Seongsu Station Luggage Storage

Location: 2F, 122 Achasan-ro, Seongdong-gu, Seoul (near Seongsu Station Exit 3) / Hours: 24 hours, every day

Customer service: Korean, English, Japanese and Chinese, by phone, KakaoTalk and web chat

Article 8 (Collection and Use of Personal Data, and Marketing Use)

1. The Operator collects and manages the minimum personal data necessary to provide the Service, such as name, contact number and email address, and keeps it secure.

2. Collected personal data may be used broadly for promotional notices, usage statistics and preference analysis, and other online and offline advertising and marketing purposes, and may be used without restriction across domestic and international advertising and marketing platforms including Google Ads (retargeting, email, SMS, KakaoTalk, social media, etc.).

3. Consent to marketing use is not required to use the Service, and refusing it does not restrict your use of the Service.

4. You may withdraw consent at any time through customer service or the opt-out procedure.

5. Detailed collection items, retention periods, provision to third parties and similar matters follow the separate Privacy Policy.

Addendum — These Terms take effect from 31 July 2026. The Operator may amend them in line with changes in law and policy, and will give prior notice of any amendment through a notice within the Service or on the website.

This is a reference translation. The Korean original governs any legal interpretation.

Privacy Policy

BagDrop Seongsu Station Luggage Storage · Hong&Lee Holdings Co., Ltd.

BagDrop Seongsu Station Luggage Storage ("BagDrop", www.bagdropseongsu.com) operated by Hong&Lee Holdings Co., Ltd. (the "Company") establishes the following privacy policy under the Personal Information Protection Act, in order to protect users' personal data and rights and to handle users' concerns relating to personal data smoothly.

1. Purposes of processing personal data

The Company processes personal data for the following purposes. Processed personal data is not used for any purpose other than the following, and where the purpose of use changes, prior consent will be obtained.

a. Providing locker reservation and usage services

Personal data is processed for the purposes of reservation of unmanned lockers (offline kiosk and online reservation/payment), handling storage and pickup, payment and settlement of usage fees, use of products such as the 24H PASS, and enquiry into usage history.

b. Handling customer enquiries and complaints

Personal data is processed for the purposes of responding to customer enquiries by phone, KakaoTalk and web chat, verifying complaints such as loss or damage and notifying the outcome, and retaining records for dispute mediation.

c. Payment and refund processing

Personal data is processed for the purposes of fee payment through simple payment methods such as credit card, Kakao Pay, Samsung Pay, Apple Pay, Alipay and WeChat Pay, cancellation of payment and refund processing, and prevention of fraudulent transactions.

d. Facility safety and protection of stored items

Video data is processed for the purposes of crime prevention within the storage area through CCTV, investigation of theft and loss incidents, facility safety management and fire prevention.

e. Marketing and service improvement

Personal data is processed for the purposes of informing users about new services, providing event and promotion information (with prior consent), analysing service usage statistics and improving quality, and running targeted advertising and measuring advertising effectiveness (conversion tracking, remarketing) through domestic and international online advertising platforms such as Google Ads, Naver, Meta (Facebook/Instagram) and Kakao.

2. Items of personal data processed

The Company processes the following items of personal data.

※ The Company does not collect personal data of children under the age of 14.

3. Processing and retention periods of personal data

① The Company processes and retains personal data within the retention and use period required by law, or the retention and use period consented to by the data subject when the personal data was collected.

② The processing and retention period for each category of personal data is as follows.

Locker reservation and usage information: retained for up to 5 years after pickup (end of use) is completed, then destroyed. However, where a dispute or complaint is in progress, until that is concluded.

Payment (e-commerce) records: under the Act on Consumer Protection in Electronic Commerce,

Records on contracts or withdrawal of subscription: 5 years

Records on payment and supply of goods: 5 years

Records on consumer complaints or dispute handling: 3 years

CCTV video data: 10 days from the date of recording (extended until the matter is concluded where an incident or dispute arises)

Customer service consultation records: 3 years from the date the consultation ends

Website visit records (Protection of Communications Secrets Act): 3 months

4. Provision of personal data to third parties

The Company provides personal data to third parties only where it falls under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or under a specific provision of law, and currently provides personal data as follows.

a. <Payment gateway (PG) and VAN companies>

Recipients: Smartro (PG), Nuri Networks (VAN), and each card company and simple payment provider

Purpose: payment approval, cancellation and settlement processing

Items provided: payment request information (payment method, payment amount, approval number, etc.)

Retention and use period: until the end of the transaction record retention period required by law

b. <Advertising platforms generally>

Recipients: Google (Google Ads, Google Analytics), Naver, Meta (Facebook/Instagram), Kakao and other online advertising platforms used by the Company

Purpose: measuring conversion data such as website visits, reservations and completed payments, serving targeted advertising and analysing advertising effectiveness

Items provided: cookies and advertising identifiers, ad click information, visit and conversion (payment completion) status, access IP and device information

Retention and use period: in accordance with each platform's own data retention policy (users may opt out of targeted advertising in each platform's ad settings)

c. <Investigative authorities, etc.>

Where there is a request from an investigative authority under a legal basis or for investigative purposes, in accordance with the procedures and methods prescribed by law

※ Other than provision to the advertising platforms above, no personal data is provided to third parties for purposes other than reservation, payment and customer service. Should a partnership (accommodation, tourism platforms, etc.) arise in future, this clause will be updated and separate consent obtained.

5. Outsourcing of personal data processing

The Company outsources personal data processing work as follows in order to process personal data smoothly, and in accordance with relevant law it stipulates the matters necessary for personal data to be managed securely when concluding outsourcing contracts.

When concluding an outsourcing contract, the Company specifies in the contract or other document, under Article 26 of the Personal Information Protection Act, matters relating to the prohibition of processing personal data for purposes other than performing the outsourced work, technical and administrative protective measures, restrictions on sub-contracting, management and supervision of the contractor, and liability including damages, and supervises whether the contractor processes personal data securely.

6. Transfer of personal data overseas

As a rule the Company does not transfer users' personal data overseas. However, where payment is made through an overseas simple payment method such as Alipay or WeChat Pay, the minimum information necessary for payment processing may be transferred to the relevant payment provider (located in China).

Recipient: the overseas payment provider operating the Alipay or WeChat Pay payment network (located in China)

Purpose of transfer: payment approval and cancellation processing through the relevant payment method

Items transferred: payment request information (payment amount, transaction number, etc.)

Method of transfer: encrypted transmission over the information and communications network

Retention and use period: until the end of the retention period required by law after payment processing is completed

7. Rights and obligations of data subjects and their legal representatives, and how to exercise them

① Data subjects may exercise rights such as requesting access to, correction of, deletion of, or suspension of processing of their personal data against the Company at any time.

② Rights under paragraph 1 may be exercised against the Company in writing, by email or through customer service under Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will act on them without delay.

③ Rights under paragraph 1 may be exercised through an agent such as the data subject's legal representative or a person duly authorised. In this case a power of attorney in the form of Annexed Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.

④ Requests for access to personal data and for suspension of processing may be restricted under Articles 35(5) and 37(2) of the Personal Information Protection Act.

⑤ Where other laws expressly designate the personal data as subject to collection, deletion of that personal data may not be requested.

⑥ When a request for access, correction, deletion or suspension of processing is made under the data subject's rights, the Company verifies whether the person making the request is the data subject or a duly authorised agent.

8. Installation and operation of CCTV, and matters relating to access

① The Company installs and operates CCTV within the storage area for facility safety and the prevention of theft and loss.

Purpose of installation: facility safety management, fire prevention, crime prevention and investigation of disputes relating to stored items

Number installed: 5 / Locations: main points within the facility such as the locker area and entrances

Recording hours: 24 hours

Retention period: automatically deleted 10 days after the date of recording (except where a dispute or complaint is being handled)

Person responsible: the same as the personal data protection officer (Director Seokho Hong)

② Data subjects may request access to, or confirmation of the existence of, video data in which they appear, and the Company will take the necessary action without delay. However, this applies only where the data subject themselves appears in the footage, and access may be restricted where there is a risk of infringing the privacy of other data subjects.

9. Destruction of personal data

① As a rule the Company destroys personal data without delay once the purpose of processing has been achieved. However, where it must be retained under other laws, it is moved to a separate database and destroyed after the relevant period.

② Destruction procedure: information entered by the user is moved to a separate database (or a separate filing cabinet) after the purpose is achieved, and is destroyed either after being stored for a certain period in accordance with internal policy and relevant law, or immediately.

③ Destruction method: information in electronic file form is deleted using a technical method that makes the records irreproducible, and paper documents are shredded or incinerated.

10. Measures to ensure the security of personal data

The Company takes the following measures to ensure the security of personal data.

Administrative measures: minimising the number of staff handling personal data and providing training, establishing and implementing an internal management plan

Technical measures: management of access rights to the personal data processing system, retention of access records, encrypted transmission of payment information (card information is not stored as it is processed through the PG company), installation of security programmes

Physical measures: access control for the server room, document storage room and similar areas

11. Installation and operation of automatic personal data collection devices, and refusal thereof

① The BagDrop website uses "cookies", which store and retrieve usage information from time to time in order to provide individually tailored services.

② Purpose of cookies: cookies are used to understand visit and usage patterns for the services and website visited, popular search terms, access language (automatic multilingual page guidance) and similar matters in order to provide optimised information, and are also used to provide targeted advertising and measure advertising effectiveness through conversion-tracking and remarketing tags of advertising platforms such as Google Ads, Naver, Meta and Kakao.

③ Installation, operation and refusal of cookies: you may refuse to store cookies in the settings menu at the top of your web browser. Targeted advertising can be refused separately in Google Ad Settings (adssettings.google.com) and in the advertising settings menu of each platform such as Naver, Meta and Kakao. However, if you refuse to store cookies you may experience difficulty using some tailored services (such as automatic language detection).

12. Personal data protection officer

① The Company designates a personal data protection officer as below, who takes overall responsibility for work relating to the processing of personal data and handles complaints and remedies for damage from data subjects in relation to personal data processing.

▶ Personal data protection officer

Name: Seokho Hong

Position: Director

Contact (customer service): 1599-2740

Email: [email protected]

② Data subjects may direct all enquiries, complaints and requests for remedy relating to personal data protection arising while using the Company's services to the personal data protection officer or customer service. The Company will respond and act on enquiries from data subjects without delay.

③ If you need to report or consult about an infringement of personal data, you may contact the following organisations.

Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)

Personal Information Infringement Report Centre: 118 (privacy.kisa.or.kr)

Supreme Prosecutors' Office Cybercrime Investigation Unit: 1301 (www.spo.go.kr)

National Police Agency Cyber Bureau: 182 (cyberbureau.police.go.kr)

13. Changes to this Privacy Policy

This Privacy Policy applies from its effective date. Where there are additions, deletions or corrections to its contents in accordance with law or policy, notice will be given through the website from 7 days before the change takes effect. However, where there is a significant change to users' rights, notice will be given at least 30 days in advance.

Date of notice: 1 August 2026

Effective date: 1 August 2026

This is a reference translation. The Korean original governs any legal interpretation.

BagDrop Seongsu Station Luggage Storage — Cancellation & Refund Policy

Written: 2026-08-02

Operator: Hong&Lee Holdings Co., Ltd.

Service: BagDrop Seongsu Station Luggage Storage (2F, 122 Achasan-ro, Seongdong-gu, Seoul)

Article 1 (Purpose)

The purpose of this Policy is to set out the criteria and procedures for cancellation of payment and refunds in connection with the use of the unmanned luggage storage service "BagDrop Seongsu Station Luggage Storage" (the "Service") operated by Hong&Lee Holdings Co., Ltd. (the "Company").

This Policy complies with the Act on Consumer Protection in Electronic Commerce (the "E-Commerce Act") and related laws, and sets out specific refund criteria reflecting the nature of the Service (unmanned, physical storage, use beginning immediately on payment).

Definition of the point of payment

Payment for this Service occurs up to twice depending on the plan. Under this Policy, "payment" includes both of the following points in time.

Unless expressly distinguished, each clause below applies equally to both the first and the second payment.

Article 2 (Nature of the Service and Notice of Grounds Limiting Withdrawal of Subscription)

1. This Service is a physical, "use begins immediately" service in which the user is assigned a locker on payment and can store items at once.

2. Under Article 17(2)5 of the E-Commerce Act and its Enforcement Decree, withdrawal of subscription may be restricted for the portion of a service that has already commenced. In addition, for products paid for online in advance, the Company may sell them as conditional products with restricted refunds regardless of whether storage has begun, on the premise of the user's express consent (notice and consent on the payment screen). Specific criteria follow Articles 3 to 5.

3. The Company gives prior notice of the contents of paragraph 2 on the payment screen and in the Terms of Service, and the user is deemed to have confirmed and agreed to this before payment.

Article 3 (Cancellation and Refund after Storage Begins)

3-1. Base plan (4 hours base + hourly excess charge)

1. From the moment the locker door opens and items are placed inside (the point at which the control system switches to "in use"), the service is deemed to have commenced.

2. In this case the 4-hour base fee already paid is not refunded. This is because it constitutes actual provision of a service, in that a specific resource (the locker) can no longer be provided to another user for that period.

3. Any hourly excess charge incurred is settled and billed only for the time actually elapsed at the point of pickup, and no overcharging for unelapsed time occurs (same as the pricing rules in §2).

3-2. 24H PASS

1. The 24H PASS is a flat-rate product usable without additional charge for 24 hours from the time of payment.

2. Cancellation before storage begins (before the locker switches to in use): where payment was completed online, refunds are as a rule not available, in accordance with Article 3-3.

3. Cancellation or mid-term refund requests after storage begins: refunds are as a rule not available. However, cases where normal use was impossible due to reasons attributable to the Company or the vendor (the locker manufacturer/operator) (Article 5) are an exception.

3-3. Non-use after online payment (no-show) — no refund as a rule

1. Where the user completes advance payment through the website, the product (locker usage right) is deemed confirmed to the user at the point payment is completed.

2. If the user subsequently does not visit the site, or does not store items due to a simple change of mind (including no-shows), this is treated as abandonment of use due to the user's own change of mind and the amount paid is not refunded.

3. This article applies commonly to all products payable online, including the base plan and the 24H PASS. (On-site kiosk payment is structured so that storage occurs at the same time as payment and is not subject to this article; Article 3-1 applies instead.)

4. However, cases falling under Article 5 (reasons attributable to the Company), such as where a reservation was not assigned due to a system error, are an exception and are refunded.

Article 4 (Second Payment — Settlement of Excess Charges at Pickup)

This article applies only to the second payment (settlement of excess charges) arising at the point of pickup where a base-plan user has used the locker for more than 4 hours. (The 24H PASS does not involve a second payment and is not subject to this article.)

1. Normal payment and retrieval: where the second payment is approved normally, the locker door opens normally and the items are retrieved, that payment is regarded as legitimate consideration for the time actually elapsed and is not subject to refund.

2. Objection to overcharging: where the user considers that the excess charge billed differs from the time actually elapsed, an objection may be raised through customer service.

– The Company verifies the validity of the amount billed on the basis of the control system's entry/exit logs (locker opening history).

– Where the system logs confirm a discrepancy between the time actually elapsed and the amount billed, the difference is refunded by transfer to an account in the user's name under Article 7.

3. Where the second payment is completed but the locker does not open: where the user's items are inside the locker and the door does not open after payment due to a system error or locker fault, this is treated as a serious matter infringing the user's right of access to their property and is handled as follows.

– Customer service attempts remote action immediately on receipt (within operating hours), and where remote action does not resolve it, the principle is highest-priority response including dispatching an on-site technician.

– No additional charge is applied for the extra waiting time arising while retrieval is delayed, and where fault on the Company's part is confirmed, the second payment already made is refunded in full or separate compensation is considered.

4. Duplicate approval of the second payment: where the second payment is approved twice due to a communication error or similar, the excess approval is refunded automatically or on request as soon as it is confirmed. (Duplicate approval of the first payment is handled the same way — see Article 5(2).)

5. Where the door does not open because the second payment fails: where payment is attempted with a valid payment method but is not approved due to a PG/VAN error and the items cannot be retrieved, alternative means such as manual opening through customer service (remote action) are supported first. Since no payment was actually made this is not subject to refund, but supporting successful payment is the highest priority.

Article 5 (Refunds for Reasons Attributable to the Company — Full Refund + Compensation Considered for Delays)

Where the user was unable to use the Service normally for the reasons below, the Company refunds the full amount paid and, where necessary, considers separate compensation (provision of an alternative locker, coupons, etc.).

1. Where payment was completed but no locker was assigned or the door did not open due to a system error

2. Duplicate payment due to an error in the payment system (PG/VAN) (applies to both the first prepayment and the second settlement payment)

Refunds for the above reasons are, as a rule, processed proactively by the Company as soon as they are confirmed, without a separate claim from the user.

Article 6 (Reasons Attributable to the User — Refund Restricted)

Refunds are as a rule restricted in the following cases.

1. Where the user requests cancellation after storage has begun due to a simple change of mind, without any loss of items (Article 3-1 applies)

2. Where the user completed payment online but does not store items due to a simple change of mind (including no-shows) (Article 3-3 applies)

3. Delay in use caused by the user losing their authentication method such as PIN, QR code or card (however, the Company provides support where it can be resolved by remote assistance through customer service)

4. Damage or sanctions arising from the user storing prohibited items (hazardous goods, perishables and other items prohibited under the Terms of Service) at their own discretion

5. Refund requests for flat-rate products such as the 24H PASS made solely on the ground that the actual time used was short (Article 3-2)

Article 7 (Refund Procedure and Timeframe)

1. Refund request: submitted through customer service (phone / KakaoTalk / web chat) or a website enquiry. On submission, payment details (order number, last 4 digits of the card, date and time of payment) and refund account details (bank name, account number, account holder) may need to be confirmed.

2. Responsible party: refunds are handled directly by the Operator (the Company); the vendor (World Locker) only forwards the details received to the Company.

3. Processing timeframe: processed after the grounds for refund are confirmed. The time until it is actually reflected depends on the actual approval-cancellation processing time of the payment method concerned (card company, etc.).

4. Refund method: partial refunds are not supported, and refunds are processed by transfer to an account in the user's name. Account details (bank name, account number, account holder) are confirmed when the refund is requested.

Article 8 (Customer Service and Processing Hours)

1. Customer service hours: 09:00–23:00 daily (every day of the year)

2. Support is provided in Korean, English, Japanese and Chinese through phone, KakaoTalk and web chat.

3. Refund requests received outside operating hours are as a rule processed the next day. Matters that can be resolved immediately by remote action (opening the door, resetting, etc.) follow the call-centre operating-hours standard (the 09:00–11:00 immediate remote-action window).

Article 9 (Dispute Resolution)

1. Where a refund-related dispute arises between the Company and the user, it is resolved by mutual consultation as a rule.

2. Where consultation does not succeed, the Act on Consumer Protection in Electronic Commerce and the Consumer Dispute Resolution Criteria (notified by the Fair Trade Commission) apply, and mediation may be applied for with the Korea Consumer Agency or the Electronic Commerce Dispute Mediation Committee where necessary.

Addendum

1. This Policy applies from its effective date.

2. The Company may amend this Policy in line with relevant laws and operational needs, and will notify users of any amendment through a notice within the Service or the procedure for amending the Terms of Service.