Privacy Policy

Trip Supporters Co., Ltd. complies with the personal information protection provisions under the Personal Information Protection Act and other relevant laws, and strives to protect users’ personal information to the best of its ability. Through this Privacy Policy, the Company informs you of how the personal information you provide is used and in what manner, and what measures are being taken to protect your personal information.

1. Items of personal information to be collected and methods of collection

a. Items to be collected

At registration: name (including English name), email address, password, nationality, language region, mobile phone number (optional), date of birth (optional)

When signing up easily (social login): email and profile identification information received from the respective social service provider

When using the AI recommendation service: travel preferences information directly entered by the user, such as travel itinerary, interests, planned destinations, and number of companions

When purchasing or reserving through the Content Store: orderer’s name, actual user’s name (if a proxy reservation is made), the English name on the passport (if needed for flight, accommodation, etc. reservations), contact information, email, payment information (card issuer name, part of the card number, etc. information processed through the PG company), and shipping address (for physical product purchases)

When using partner companies’ quotes and bidding: the number of travelers, itinerary, budget, contact information, etc. that the user inputs to request a quote

For customer inquiries and consultations: name, email, contact information, inquiry details

Information automatically generated and collected during service use: access IP address, cookies, visit date and time, service usage records, device information (OS, device identification value), records of improper use

B. Collection Method

Direct user input during membership registration and service use via the website and application, automatic collection through information-generating tools, collection during consultation through the customer center, and provision from affiliated partners (for reservation and fulfillment confirmation purposes)

2. Purpose of Collecting and Using Personal Information

The Company uses the personal information collected for the following purposes.

Confirmation of intention to register, identification and authentication of identity in connection with providing membership services, maintenance and management of membership status

Personalized travel itinerary and product recommendations for providing AI recommendation services

Linking information for matching quotations and bids with partners, as well as for reservations and contract fulfillment

Ordering and payment, shipping, reservation confirmation, and refund/settlement processing for Content Store products (accommodations, activities, tours, cultural experiences, K-Beauty, K-POP merchandise, etc.)

Customer consultation and complaint handling, delivering announcements

Prevention of service misuse, prevention of unauthorized use, and assurance of service stability

Use for developing new services and marketing/advertising (only if separate consent has been obtained)

Providing services and placing advertisements based on statistical characteristics, and providing event information and opportunities for participation

3. Retention and Use Period of Personal Information

In principle, the Company shall destroy the relevant personal information without delay after the purpose for which it was collected and used has been fulfilled. However, the following information is retained for the specified period for the reasons stated below.

a. Retention of information according to the company’s internal policies

Fraudulent use record: 1 year (to prevent fraudulent use)

b. Retention of information pursuant to relevant laws: If it is necessary to retain member information for the period prescribed by relevant laws, the Company retains member information for the period prescribed by those laws.

Records related to contracts or withdrawal of subscription, etc.: 5 years (Electronic Commerce Act)

Records related to payment and the supply of goods, etc.: 5 years (Electronic Commerce Act)

Records related to consumer complaints or dispute resolution: 3 years (Electronic Commerce Act)

Records related to display/advertising: 6 months (Electronic Commerce Act)

Books and supporting documents related to transactions as prescribed by tax law: 5 years (Framework Act on National Taxes)

Website visit record: 3 months (Protection of Communications Secrets Act)

After the retention period has expired, the personal information will be destroyed without delay.

4. Procedures and Methods for Destroying Personal Information

In principle, users’ personal information is destroyed without delay once the purpose of collecting and using the personal information has been fulfilled.

Destruction procedure: Information entered by users is transferred to a separate database after the purpose is fulfilled (or to a separate filing cabinet in the case of paper), and is destroyed after being stored for a certain period in accordance with internal policies and other relevant laws and regulations for information protection.

Destruction method: Personal information stored in electronic file form is deleted using technical methods that make recovery impossible, and paper copies of personal information are destroyed by shredding or incineration.

5. Provision of Personal Information to Third Parties

The Company, in principle, does not provide users' personal information to external parties. However, the following cases are exceptions.

Provision to partners (travel agencies, accommodation and activity providers, etc.): When a user purchases a product from the Content Store or confirms a reservation through a quote or bid, the minimum necessary information for fulfilling the reservation and concluding the contract (such as the purchaser’s name, contact information, email, number of people, schedule, etc.) is provided to the relevant partner.

If the user has given separate consent in advance

When required by law or upon the request of investigative agencies in accordance with procedures and methods prescribed by law for investigative purposes

6. Delegation of Personal Information Processing

To provide smooth services, the Company entrusts personal information processing tasks to external specialized companies as described below, and, in accordance with relevant laws, stipulates necessary provisions in the outsourcing contracts to ensure the safe management of personal information.

NHN KCP: Payment processing and payment agency

Amazon Web Services: Providing Cloud Servers and Data Storage for Service Operations

* The outsourcing company and the details of outsourced tasks may be changed in the future, and any changes will be notified through this policy.

7. Transfer of Personal Information to Foreign Countries

The Company transfers (or entrusts to) personal information to overseas AI service providers as follows to provide AI recommendation services.

Transferee: Anthropic, PBC (or its affiliates/resale partners)

Previous country: United States

Previous date and method: at the time of service use, transmitted over the network

Travel preference information entered by the previous user in the AI recommendation service (excluding direct payment information and passwords)

Processing for the recipient's purpose of generating AI responses

Retention and use period: In accordance with the purpose of processing or the relevant company's policy

When a user books or purchases products from an overseas partner (such as an overseas airline or a lodging provider located abroad), the minimum information required to fulfill the reservation may be transferred to the partner in that country.

When using overseas payment methods (such as cards issued abroad), the payment information may be transferred to the country where the card issuer or PG company is located for payment authorization.

Users have the right to refuse the transfer of personal information; however, in such cases, the use of related services such as AI recommendation services and reservations for products from overseas partners may be restricted.

8. Rights and Obligations of Data Subjects and How to Exercise Them

Users may exercise the following personal information protection rights with the Company at any time.

Request for Access to Personal Information

Request correction if there are any errors

Request for deletion

Request for suspension of processing

The exercise of the rights under paragraph 1 may be made to the Company by written notice, phone, email, etc., and the Company will take prompt action.

If a user requests correction of erroneous personal information, the Company will not use or provide the relevant personal information until the correction is completed.

The exercise of rights may also be made through a representative such as the user's legal guardian or an authorized person, in which case a power of attorney in the form prescribed in Appendix 11 of the Notice on the Method of Processing Personal Information must be submitted.

9. Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information.

Administrative measures: Establish and implement an internal management plan, conduct regular employee training

Technical measures: management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, and installation of security programs

Physical measures: Access control in data centers, storage rooms, etc

10. Matters Concerning the Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

The Company uses cookies to provide personalized services to users.

Users can refuse the storage of cookies through their web browser settings, but this may cause difficulties in using the service.

11. Personal Information Protection Officer

The Company takes overall responsibility for personal information processing and has appointed a Data Protection Officer as follows to handle complaints and provide remedies related to personal information processing.

Personal Information Protection Officer

Name: UM Chanyong

Position: Representative Director

Contact: 02-6736-5532

이메일: info@tripsupporters.com

Users may direct any inquiries, complaints, or requests for remedies related to personal information protection arising from the use of the Company's services to the person responsible for personal information protection or the relevant department.

12. Methods for Remedying Rights Violations

Data subjects may seek remedies for personal information violations by applying for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency Personal Information Infringement Report Center, etc.

Personal Information Dispute Mediation Committee: 1833-6972 (no area code) (www.kopico.go.kr )

Personal Information Infringement Report Center: 118 (no area code) (privacy.kisa.or.kr )

Supreme Prosecutors' Office: 1301 (no area code) (www.spo.go.kr )

National Police Agency: 182 (no area code) (ecrm.cyber.go.kr )

13. Duty of Disclosure

If there are any additions, deletions, or modifications to this Privacy Policy, we will notify you via the 'Notices' section of the website at least 7 days in advance. However, if there is a significant change affecting users' rights, such as the collection and use of personal information or provision to a third party, we will notify users at least 30 days in advance.

14. Matters Concerning the Collection, Use, and Refusal of Behavioral Information

1. The Company uses Google Analytics 4, a web analytics service provided by Google LLC, for service usage statistical analysis and service improvement.

② Collected items: website visit and page view records, usage behavior records such as clicks, device, operating system, and browser information, approximate access region by country and city, and online identifiers such as cookies

③ Collection method: Information is automatically collected through cookies and scripts when users visit the website or use the services.

④ Retention and use period: Automatically deleted 14 months after collection.

⑤ Collected information is stored and processed on Google LLC's (U.S.) servers, and the Company does not collect personally identifiable information such as names or contact details through this.

⑥ Users can refuse the collection of behavioral information by changing their web browser's cookie settings or by installing the blocking add-on provided by Google (https://tools.google.com/dlpage/gaoptout) .