Privacy Policy

Trip Supporters Co., Ltd. complies with the personal information protection provisions under the Personal Information Protection Act and other relevant laws, and strives to protect users’ personal information to the best of its ability. Through this Privacy Policy, the Company informs you of how the personal information you provide is used and in what manner, and what measures are being taken to protect your personal information.

1. Items of personal information to be collected and methods of collection

a. Items to be collected

At registration: name (including English name), email address, password, nationality, language region, mobile phone number (optional), date of birth (optional)

When signing up easily (social login): email and profile identification information received from the respective social service provider

When using the AI recommendation service: travel preferences information directly entered by the user, such as travel itinerary, interests, planned destinations, and number of companions

When purchasing or reserving through the Content Store: orderer’s name, actual user’s name (if a proxy reservation is made), the English name on the passport (if needed for flight, accommodation, etc. reservations), contact information, email, payment information (card issuer name, part of the card number, etc. information processed through the PG company), and shipping address (for physical product purchases)

When using partner companies’ quotes and bidding: the number of travelers, itinerary, budget, contact information, etc. that the user inputs to request a quote

For customer inquiries and consultations: name, email, contact information, inquiry details

Information automatically generated and collected during service use: access IP address, cookies, visit date and time, service usage records, device information (OS, device identification value), records of improper use

B. Collection Method

Direct user input during membership registration and service use via the website and application, automatic collection through information-generating tools, collection during consultation through the customer center, and provision from affiliated partners (for reservation and fulfillment confirmation purposes)

2. Purpose of Collecting and Using Personal Information

The Company uses the personal information collected for the following purposes.

Confirmation of intention to register, identification and authentication of identity in connection with providing membership services, maintenance and management of membership status

Personalized travel itinerary and product recommendations for providing AI recommendation services

Linking information for matching quotations and bids with partners, as well as for reservations and contract fulfillment

Ordering and payment, shipping, reservation confirmation, and refund/settlement processing for Content Store products (accommodations, activities, tours, cultural experiences, K-Beauty, K-POP merchandise, etc.)

Customer consultation and complaint handling, delivering announcements

Prevention of service misuse, prevention of unauthorized use, and assurance of service stability

Use for developing new services and marketing/advertising (only if separate consent has been obtained)

Providing services and placing advertisements based on statistical characteristics, and providing event information and opportunities for participation

3. Retention and Use Period of Personal Information

In principle, the Company shall destroy the relevant personal information without delay after the purpose for which it was collected and used has been fulfilled. However, the following information is retained for the specified period for the reasons stated below.

a. Retention of information according to the company’s internal policies

Fraudulent use record: 1 year (to prevent fraudulent use)

b. Retention of information pursuant to relevant laws: If it is necessary to retain member information for the period prescribed by relevant laws, the Company retains member information for the period prescribed by those laws.

Records related to contracts or withdrawal of subscription, etc.: 5 years (Electronic Commerce Act)

Records related to payment and the supply of goods, etc.: 5 years (Electronic Commerce Act)

Records related to consumer complaints or dispute resolution: 3 years (Electronic Commerce Act)

Records related to display/advertising: 6 months (Electronic Commerce Act)

Books and supporting documents related to transactions as prescribed by tax law: 5 years (Framework Act on National Taxes)

Website visit record: 3 months (Protection of Communications Secrets Act)

After the retention period has expired, the personal information will be destroyed without delay.

4. Procedures and Methods for Destroying Personal Information

In principle, users’ personal information is destroyed without delay once the purpose of collecting and using the personal information has been fulfilled.

Destruction procedure: Information entered by users is transferred to a separate database after the purpose is fulfilled (or to a separate filing cabinet in the case of paper), and is destroyed after being stored for a certain period in accordance with internal policies and other relevant laws and regulations for information protection.

Destruction method: Personal information stored in electronic file form is deleted using technical methods that make recovery impossible, and paper copies of personal information are destroyed by shredding or incineration.

5. Provision of Personal Information to Third Parties

The Company, in principle, does not provide users' personal information to external parties. However, the following cases are exceptions.

Provision to partners (travel agencies, accommodation and activity providers, etc.): When a user purchases a product from the Content Store or confirms a reservation through a quote or bid, the minimum necessary information for fulfilling the reservation and concluding the contract (such as the purchaser’s name, contact information, email, number of people, schedule, etc.) is provided to the relevant partner.

If the user has given separate consent in advance

When required by law or upon the request of investigative agencies in accordance with procedures and methods prescribed by law for investigative purposes

6. Delegation of Personal Information Processing

To provide smooth services, the Company entrusts personal information processing tasks to external specialized companies as described below, and, in accordance with relevant laws, stipulates necessary provisions in the outsourcing contracts to ensure the safe management of personal information.

Details of the entrusted tasks by the entrusted company

[PG Company/Payment Agency Name Listed] NHN KCP

[Cloud/Hosting Company Name Listed] AWS

* The outsourcing company and the details of outsourced tasks may be changed in the future, and any changes will be notified through this policy.

7. Transfer of Personal Information Abroad

The Company transfers (or entrusts processing of) personal information to an overseas AI service provider as described below in order to provide AI recommendation services.