Privacy
Privacy Policy
Effective Date: 2026-11-01
[name] (the "Company") operates the Palliwa service (the "Service") in compliance with the Personal Information Protection Act (개인정보 보호법) and other applicable laws and regulations, and processes users' personal information as follows.
1. Personal Information Collected and Collection Methods
The Company provides the Service without requiring membership registration and collects only the information that users enter themselves when placing an order or making an inquiry.
When Placing an Order
- Name, email address
- Accommodation name, accommodation address, room number, name of the person who made the accommodation reservation, check-in and check-out dates
- Receipt method, delivery notes, order notes
- Order details (products, quantities, amounts), type of payment method, payment approval information (transaction number)
- Language used for the Service
When Making an Inquiry
- Name, email address, order number (optional), inquiry details
Automatically Collected Information
- Access logs, browser type, device information (for Service stability and error analysis)
The Company does not collect identification information such as passport numbers. Payment method information such as card numbers is processed by electronic payment service providers, and the Company does not store it.
2. Purposes of Use of Personal Information
- Receiving orders, purchasing products, delivery, and processing payments and refunds
- Providing order status updates, contacting users when delivery issues occur, and responding to inquiries
- Preventing fraudulent use, resolving disputes, and fulfilling legal obligations
- Analyzing Service errors and improving quality
3. Retention and Use Period of Personal Information
The Company destroys personal information without delay once the purpose of collection has been achieved. However, the following information is retained for the periods below in accordance with applicable laws.
- Records on contracts or withdrawal of offers, payments, and supply of goods: 5 years (Act on the Consumer Protection in Electronic Commerce, Etc. (전자상거래 등에서의 소비자보호에 관한 법률))
- Records on consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, Etc.)
- Service access logs: 3 months (Protection of Communications Secrets Act (통신비밀보호법))
4. Provision of Personal Information to Third Parties
The Company provides the minimum information necessary to deliver the Service, as follows.
- Domestic online retailers from which products are purchased, and courier companies that carry out delivery: recipient name (name of the person who made the accommodation reservation), accommodation address, room number, and delivery instructions. Provided for delivery purposes, until delivery is completed.
Otherwise, the Company does not provide personal information to third parties, except with the user's consent or where specifically required by law.
5. Outsourcing of Personal Information Processing and Overseas Transfer
The Company outsources the processing of personal information to the following companies to operate the Service. Some of these companies have servers located outside Korea, so personal information is transferred overseas.
- Payment processing: PortOne, Toss Payments, Korea Information & Communications (KICC) — payment approval and refund processing (Republic of Korea)
- Database hosting: Supabase, Inc. — storage of order and inquiry information (server location: Seoul, Republic of Korea)
- Web hosting: Vercel Inc. — Service operation and access logs (server location: United States)
- Email delivery: Resend, Inc. — sending order notification emails (server location: United States)
The items transferred overseas are name, email address, accommodation information, and order details. The transfer takes place when the information is transmitted over the network at the time of an order or inquiry. The retention period is as set out in Section 3. Users may refuse the overseas transfer, but in that case they will not be able to use the Service.
6. Rights of Users
Users may at any time request access to, correction of, deletion of, or suspension of processing of their personal information. Requests should be made by email (support@palliwa.com), and the Company will process them without delay after verifying the user's identity. However, information that must be retained under applicable laws cannot be deleted, and in such cases the Company will notify the user of the reason.
7. Destruction of Personal Information
Personal information whose retention period has expired or whose processing purpose has been achieved is deleted in a manner that makes it unrecoverable in the case of electronic files, and shredded or incinerated in the case of paper documents.
8. Cookies and Browser Storage
The Service stores shopping cart contents and the selected language in the user's browser. This information is not transmitted to the Company's servers, and users can delete it through their browser settings. The Service does not use tracking cookies for advertising purposes.
9. Measures to Ensure the Security of Personal Information
- Encryption of communications (HTTPS)
- No storage of payment method information
- Access rights management and retention of access logs
- Use of random tokens in order lookup links and blocking of search engine indexing
10. Chief Privacy Officer
- Name: [privacyOfficer]
- Email: support@palliwa.com
Users may submit privacy-related inquiries, complaints, and requests for remedies to the contact above. Users may also seek assistance from the Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118 with no area code) and the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).
11. Changes to This Policy
If this Policy is changed, the Company will post a notice on the Service starting 7 days before the effective date. This document was written in Korean, and in the event of any discrepancy between the Korean original and a translation, the Korean original prevails.