Privacy Policy
Travel Us (hereinafter "the Company") establishes the following Privacy Policy to protect the personal information of users in accordance with relevant laws and regulations, including the Act on Promotion of Information and Communications Network Utilization and Information Protection, and the Personal Information Protection Act, and to handle related grievances promptly and smoothly.
This Privacy Policy provides information related to the Company's processing of personal information, explains the rights of customers and how they can exercise those rights, and provides contact information for the Privacy Officer who can be reached for any questions regarding personal information while using the Company's services.
1. Purpose of Collection and Use of Personal Information
If you wish to use the Company's membership services, you must enter the following required information. Failure to enter optional items will not restrict your use of the service.
| Purpose of Collection and Use | Items Collected and Used | Retention and Use Period |
|---|---|---|
| Service Registration and Use [Required] | Name, email, phone number | [Members]: Until membership withdrawal [Non-members]: Until the purpose of personal information use is achieved (Subject to applicable laws) |
| Location-based Service Provision [Required] | Personal location information | |
| SNS Registration [Required] | Kakao: Email / Mobile / Nickname / Profile Naver, Google, Apple: Email | |
| Prevention of Illegal/Fraudulent Use and Service Analysis [Required] | Auto-generated info: Device info (device type, OS version), usage records (IP address, cookies, service usage history, etc.) | |
| Purchase of Adventure Products Requiring Personal Information [Required] | Passport image, white-background personal photo | |
| Product Purchase (Common) [Required] | Name, email, phone number | |
| Flight Ticket Purchase [Required] | Passenger information (name, gender, date of birth, nationality, visa copy and other certificates (if fare documentation is required)) Overseas products: English name, passport number, passport expiry date, country of issue Card payment: Cardholder name, card number, expiry date, first 2 digits of PIN, installment period, card type (personal/family/corporate), date of birth (domestic products) Cash payment: Cash receipt, mobile phone, business registration number | |
| Occupation Verification [Required] | Email, mobile phone | |
| Purchase of Products Requiring Identity Verification [Required] | Name, date of birth, gender, resident/foreigner status, CI/DI, carrier info, mobile phone | |
| Customer Center Inquiry [Required] | Email, name, mobile phone, reservation number | |
| Travel Companion Recruitment and Community Membership [Required] | Gender, nickname, mobile phone, profile photo | |
| Bank Transfer Refund [Required] | Account holder name, bank, account number |
2. Sharing and Provision of Personal Information
The Company uses members' personal information within the scope disclosed in 'Purpose of Collection and Use of Personal Information' and does not provide it to others beyond that scope. However, for the purpose of providing quality services, the Company may provide personal information to third parties after obtaining the member's consent during the product reservation and purchase process.
| Recipient | Information Provided | Purpose of Provision | Retention and Use Period |
|---|---|---|---|
| Local Land Operator | Name, email, phone number, flight number, white-background ID photo and passport photo (if documentation is required) | For visa application agency services, local permit issuance, travel preparation, and airport pickup services | Until the purpose of personal information use is achieved (Subject to applicable laws) |
3. Outsourcing of Personal Information Processing
The Company outsources personal information processing to external companies as follows for smooth business operations, including service provision, maintenance and management, and user convenience.
(1) Domestic Personal Information Processing Outsourcing Status
| Processor | Outsourced Task |
|---|---|
| Amazon Web Services Inc. | Cloud system operation and storage for service provision |
| Toss, KakaoPay, SamsungPay, Naver Financial, NHN Payco, NHN KCP | Payment processing |
| NHN KCP | Mobile phone identity verification |
| Channel Corporation | Chat consultation |
4. Retention and Use Period of Personal Information
The retention and use period of collected personal information is from the time of service use contract (membership registration) until the service use contract is terminated (withdrawal request). In principle, the Company destroys personal information without delay when it becomes unnecessary, such as when the retention period has expired or the processing purpose has been achieved.
However, if there is a recognized need for preservation under relevant laws and regulations such as the Commercial Act and the Act on Consumer Protection in Electronic Commerce, the Company retains member information for a certain period set by the relevant laws for preservation purposes.
| Retained Information | Retention Period | Legal Basis |
|---|---|---|
| Records of payment and supply of goods | 5 years | Act on Consumer Protection in Electronic Commerce |
| Records of contracts or withdrawal of subscription | 5 years | Act on Consumer Protection in Electronic Commerce |
| Records of consumer complaints or dispute resolution | 3 years | Act on Consumer Protection in Electronic Commerce |
| Records of display and advertising | 6 months | Act on Consumer Protection in Electronic Commerce |
| Records related to location information | 6 months | Act on Protection and Use of Location Information |
| Website visit records | 3 months | Protection of Communications Secrets Act |
5. Procedure and Method for Destruction of Personal Information
In principle, the Company destroys personal information without delay when it becomes unnecessary, such as when the retention period has expired or the processing purpose has been achieved. If personal information must continue to be preserved under other laws despite the expiration of the agreed retention period or achievement of the processing purpose, the personal information is stored separately in a separate database or with access controls applied.
The Company's procedures and methods for destroying personal information are as follows.
(1) Destruction Procedure
The Company selects personal information for which a reason for destruction has arisen and destroys it according to the methods below.
(2) Destruction Method
Personal information printed on paper is destroyed by shredding or incineration, and personal information stored in electronic file format is destroyed using technical or physical methods that make it impossible to reproduce the records.
6. Customer Obligations and Exercise Methods
(1) Customer Rights
Customers may at any time request correction, withdrawal of consent, deletion, or inspection of collected information. However, withdrawal of consent or deletion may restrict partial or full use of the service. Personal information collected by the Company can be verified through the following methods.
Website: My Info > Profile Management
Mobile App: My Info > Profile Management
For information that cannot be verified directly through the Tripmozzi website or app, you may contact the customer center (1:1 chat, tripmozzi@tripmozzi.com, 070-7954-6515) to check. To request withdrawal of consent, deletion, or suspension of processing of personal information, you may submit a request through the Company's customer center. Additionally, customers may withdraw consent to the collection and use of personal information at any time by withdrawing membership. Such requests may restrict partial or full use of the service. Withdrawal, deletion, or suspension of processing may be difficult in cases where there is a specific legal provision, where it is unavoidable to comply with a legal obligation, where there is a concern of harm to another person's life or body, where there is a concern of unjustly infringing on another person's property or other interests, or where the information subject has not clearly expressed an intention to terminate the contract when personal information cannot be processed.
The information will not be used or provided to others until the requested processing is complete. If incorrect personal information has already been provided to a third party for reasonable cause, the Company will immediately notify the third party of the result and take measures to withdraw consent, delete, or suspend processing.
(2) Customer Obligations
Customers have an obligation to protect their own personal information. The Company is not liable for problems arising from leakage of personal information due to the customer's own negligence (such as transferring, renting, or losing their ID (email address), password, or access medium, or leaving while logged in without the Company's fault), or due to hacking using methods or technologies that cannot be blocked by security measures under applicable laws. Customers must keep their personal information up to date, and customers are responsible for problems caused by entering inaccurate information. Registering as a member by stealing another person's personal information or processing payments by stealing IDs may result in loss of customer status and punishment under applicable laws. Customers are responsible for maintaining security for their ID, password, etc. and may not transfer or lend these to third parties. Customers are obligated to cooperate with periodic security activities in accordance with the Company's personal information protection policy.
7. Internet Access Information File Settings
The Company may collect and store information automatically generated during service use or device information that cannot identify individuals in order to provide customers with convenient and efficient personalized services.
(1) Cookies
Cookies are small text files that are transmitted to and stored on the user's device when accessing a website to ensure efficient and secure web use. When you revisit the website after cookies are stored, the cookies recognize the user's device and automatically load previous settings and usage history. Additionally, the Company may analyze information about visited services, access times and frequencies, and information generated or provided during service use to provide services (including advertising) tailored to the customer's preferences and interests. Customers have a choice regarding cookies and may allow all cookies, require confirmation each time a cookie is stored, or refuse to store all cookies by setting options in the web browser. You can check and change cookie settings for your current browser through the methods below.
* You can check the settings method for each browser through the links below.
- Microsoft Edge
- Chrome Browser
- Firefox
- Safari
8. Personalized Advertising
The Company's personalized advertising refers to advertising that analyzes and infers users' interests, hobbies, preferences, and tendencies by processing behavioral information and then provides advertising tailored to users.
The definitions of terms used in the Korea Communications Commission's 'Online Personalized Advertising Personal Information Protection Guidelines' and this notice are as follows.
- - Online behavioral information: Online user activity information that can identify and analyze users' interests, hobbies, preferences, and tendencies, such as website visit history, app usage history, and purchase and search history
- - Online personalized advertising: Online advertising that analyzes/infers users' interests, hobbies, preferences, and tendencies by processing behavioral information and then provides advertising tailored to users
(1) Behavioral Information Collection and Use Notice
Behavioral information is automatically collected and stored during the service use process and is used in a state where individual identification is impossible, and is not used in combination with personal information.
Behavioral information collection is automatically generated and stored during the service use process.
| Behavioral Information Collection/Processing Advertiser | Behavioral Information Collected | Behavioral Information Collection Method | Purpose of Behavioral Information Collection | Retention, Use Period and Subsequent Information Processing Method |
|---|---|---|---|---|
| Travel Us | User's website visit history, app usage history, search history | Automatically collected when user visits/runs website/app | Providing personalized advertising based on user interests | Website/app visit info: 2 years, product search info: 2 years |
(2) Behavioral Information Provision Notice
Behavioral information such as website visit records, search records, and app usage records based on users' non-identifiable advertising identifiers may be provided to affiliated companies (advertisers), and the operational status is as follows.
| Recipient | Items Provided | Recipient's Purpose of Use |
|---|---|---|
| Facebook, Kakao, Google, Naver | User's website visit history, app usage history, search history, advertising identifier | Providing personalized advertising based on user interests |
(3) Method of Exercising User Control
Users may refuse to receive such personalized advertising at any time, in which case non-personalized advertising will be displayed. Methods for blocking personalized advertising are as follows.
| Category | Opt-out Method |
|---|---|
| Android | Google Settings > Ads > Deselect Ad Personalization |
| iOS | iPhone Settings > Privacy > Advertising > Limit Ad Tracking |
9. Security Measures for Personal Information Protection
The Company takes the following measures to ensure the security of personal information to prevent loss, theft, leakage, alteration, or damage of personal information when processing users' personal information.
(1) Encrypted Storage
Personal information including users' passwords is encrypted for storage and management, and verification and changes to personal information are only possible by the person who knows the password. Data is transmitted using encrypted communication channels, and in addition to passwords, when encryption is required by law, it is processed accordingly.
(2) Secure Management
The Company makes every effort to prevent leakage and damage of personal information from hacking, viruses, etc. using intrusion prevention systems and threat detection systems. The Company uses the latest antivirus programs to prevent users' personal information and data from being leaked or damaged, and transmits and receives personal information safely over the network through encrypted communication.
(3) Minimization of Personal Information Processing and Training
The Company limits the number of personnel responsible for handling personal information to the minimum and emphasizes compliance with laws and internal policies through management measures such as training for personal information processors. The Company establishes and operates an internal management plan for personal information protection.
10. Privacy Officer and Institution Inquiry Guide
The Company designates the Privacy Officer and responsible department as follows to be responsible for overall personal information processing and to handle complaints and remedies related to personal information processing. Users may direct all inquiries, complaints, and remedy requests related to personal information arising from using the Company's services to the Privacy Officer and personal information protection department. The Company will respond and process user inquiries without delay.
- Privacy Officer: Kim Jinho
- Contact: 070-7954-6515
- Email: tripmozzi@tripmozzi.com
If you need to report or consult about other personal information infringements, you may contact the following institutions. The following institutions are government agencies; if you are not satisfied with the Company's own personal information complaint handling or personal information damage relief results, or if you need more detailed assistance, please contact them.
- Personal Information Dispute Mediation Committee (1833-6972)
- Personal Information Infringement Report Center (KISA, dial 118)
- National Police Agency Cyber Investigation Bureau (Cyber Crime Report System (ECRM), dial 182)
- Supreme Prosecutors' Office Cyber Investigation Division (dial 1301)
11. Duty to Notify
The Privacy Policy may be changed as needed due to laws, government policies, or internal company policies. If there are additions, deletions, or modifications to the content, notice will be given without delay at least 7 days before the revision through the website's 'Notice' and email. However, for significant changes to user rights, notice will be given at least 30 days in advance.
This Privacy Policy applies from July 1, 2024, and the previous Privacy Policy can be found through the notice board.
