Shinhan Alpha REIT Co., Ltd. (hereinafter referred to as the “Shinhan Alpha REIT” or the “Company”) values the personal information of its users and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection and other relevant laws and regulations.

Through this Privacy Policy, the Company informs users of the purposes and methods for which the personal information provided by users is utilized and what measures are being taken to protect such information.

If the Company revises this Privacy Policy, it will notify users through announcements on the website (or individual notices).

ο This Privacy Policy shall be effective as of January 23, 2026.

Article 1. Personal Information Collected

The Company collects the following personal information for the purpose of handling civil complaints and providing responses.

• ο Collected Items: Name, Email address
• ο Method of Collection: Website (Inquiry/Consultation Board)

Article 2. Purpose of Collection and Use of Personal Information

The Company uses collected personal information for the following purposes:

• ο Customer Inquiry Management: Handling user inquiries and delivering responses

Article 3. Right to Refuse Consent and Disadvantages of Refusal

Users have the right to refuse consent to the collection of required personal information.
However, since the information collected through the inquiry function is necessary for processing and responding to inquiries, refusal to consent may result in limitations in receiving normal inquiry services and responses.

Article 4. Retention and Use Period of Personal Information

The Company retains and uses personal information for three (3) months according to the purpose of collection and use and then destroys the information.

• Relevant Law: Article 15 of the Personal Information Protection Act (Collection and Use of Personal Information)

Article 5. Rights and Obligations of the Information Subject and Methods of Exercise

• ① The information subject may exercise the following rights regarding personal information protection at any time:
  • 1) Request access to personal information
  • 2) Request correction of errors
  • 3) Request deletion
  • 4) Request suspension of processing
• ② Such rights may be exercised through written request, telephone, e-mail, or fax, and the Company will take prompt action.
• ③ If the information subject requests correction or deletion of personal information due to errors, the Company will not use or provide the personal information until the correction or deletion has been completed.
• ④ These rights may also be exercised through a legal representative or an authorized agent. In this case, a power of attorney in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
• ⑤ The information subject shall not infringe upon the personal information or privacy of themselves or others processed by the Company in violation of relevant laws such as the Personal Information Protection Act.

Article 6. Procedures and Methods for Destruction of Personal Information

In principle, the Company destroys personal information without delay once the purpose of collection and use has been achieved.

• ο Destruction Procedure
  - Personal information entered by users is stored for three (3) months in accordance with internal policies and then destroyed.
  - Personal information transferred to a separate database will not be used for purposes other than those required by law.
• ο Destruction Method
  - Personal information stored in electronic file format is deleted using technical methods that prevent recovery of the records.

Article 7. Provision of Personal Information

In principle, the Company does not provide users’ personal information to external parties.
However, exceptions may apply in the following cases:

• - When users have given prior consent
• - When disclosure is required by law or requested by investigative authorities according to legal procedures

Article 8. Consignment of Personal Information Processing

The Company does not outsource the processing of personal information to external companies without the user's consent.
If such outsourcing becomes necessary in the future, the Company will notify users of the outsourced party and the scope of the tasks and obtain prior consent where required.

Article 9. Measures to Ensure the Security of Personal Information

The Company implements the following measures to ensure the security of personal information:

• • Administrative Measures: Establishment and implementation of internal management plans, regular employee training
• • Technical Measures: Access control for personal information processing systems, installation of access control systems, encryption of personal information, installation of firewalls and antivirus software
• • Physical Measures: Access control to computer rooms and document storage areas

Article 10. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

The Company does not use cookies, which store and retrieve information subjects’ usage data.

Article 11. Personal Information Protection Manager

Shinhan REITs Management Co., Ltd., the asset management company of Shinhan Alpha REIT, is responsible for overseeing personal information processing and has designated the following person in charge of personal information protection to handle inquiries, complaints, and damage relief related to personal information.

Personal Information Protection Manager

- Position : Head of Corporate Planning Division, Shinhan REITs Management Co., Ltd.

- Name : Jong Soo Lim

- Tel : +82-2-2158-7400

- E-mail : jongsoot@shinhan.com

Users may contact the above manager regarding any inquiries, complaints, or requests for remedies related to personal information protection arising from the use of the Company’s services. The Company will respond promptly.