Privacy Policy

Article 1 (Purpose of Collection and Use of Personal Information, Items, and Retention Period)

We lawfully collect and process personal information only to the minimum extent necessary to provide services and perform contracts.

Article 2 (Protection of Personal Information of Children Under 14)

When accepting membership or bookings from children under the age of 14, we provide practical verification methods (mobile phone identity verification, credit card verification, etc.) to obtain and confirm explicit consent from the legal guardian.

A legal guardian may at any time request access, correction, deletion, or suspension of processing of the child’s personal information, and we will take necessary measures without delay.

Article 3 (Provision to Third Parties and Cross-Border Transfer of Personal Information)

We do not provide personal information to third parties or disclose it externally beyond the scope of collection without the user's prior consent. However, for the actual fulfillment of reservations for global local rental cars, driver-guides, and resort and activity distributors in Gangwon-do and the outskirts of Seoul, we provide to third parties and conduct cross-border transfers as follows.

Specifications of cross-border data transfer:

Recipient of the data: Overseas local land operators and vehicle partners providing services as specified on the booking page

Purpose of transfer: Allocation of dedicated local vehicles overseas, passenger verification for shuttles and chartered guides, and response to local emergencies

Items transferred: English name, passport number, mobile messenger ID (WhatsApp/LINE/WeChat), flight number, date of use

Method and timing of transfer: Real-time transmission over a secure network (SSL/TLS) upon completion of booking payment

Retention and use period: Destroyed immediately after service use and settlement are completed; however, if retention is mandated under applicable local tax laws overseas, such laws will be observed

Users have the right to refuse the above cross-border transfers; however, refusal may restrict reservations for overseas local products and registration/use of the platform.

Article 4 (Procedures and Methods for Destruction of Personal Information)

When personal information becomes unnecessary due to the expiration of the retention period, achievement of the processing purpose, etc., we destroy such personal information without delay (typically within 5 days).

Information in electronic file form is deleted using technical methods that render records irrecoverable (e.g., low-level format), and personal information printed on paper is destroyed by shredding or incineration.

Article 5 (Personal Information Protection Officer and Complaint Handling)

To protect users' personal information rights and handle grievances and inquiries related to personal information smoothly, we designate the following Personal Information Protection Officer.

Personal Information Protection Officer: CEO Park Un-yong

Dedicated department for complaint handling: Platform Information Security Team

Email and main phone: info@holidaykr.com | +82-32-657-8888

Article 6 (Entrustment, Re-Entrustment, and Partner Controls)

For booking fulfillment, the Company may entrust limited processing of personal information to payment processors, booking system providers, local land operators, driver-guides, vehicle companies, hotels, resorts, ticket suppliers, messaging providers, and customer-support vendors only within the scope necessary to provide the booked service.

A partner or processor may not re-entrust passenger lists, passport details, contact information, location information, or booking data to a second- or third-tier subcontractor without the Company's prior written approval. The Company may require a written data processing agreement, security checklist, training evidence, deletion confirmation, and audit cooperation from processors and re-processors.

If a processor or partner becomes aware of unauthorized access, loss, theft, disclosure, falsification, alteration, damage, or suspected leakage of personal information, it must notify the Company without delay and cooperate with investigation, user notice, regulatory reporting, remediation, and evidence preservation.

Article 7 (Security Incident Notice and User Remedies)

If the Company confirms or reasonably suspects unauthorized access, leakage, loss, theft, falsification, alteration, or damage involving personal information, the Company will take measures required by applicable law, including prompt notice to affected users and regulatory reporting where required.

Incident notices may include the categories of affected information, timing and route of occurrence, measures taken by the Company, user protective steps, contact point for inquiries, and available remedies such as damage compensation claims or personal information dispute mediation where applicable.

Operational details such as statutory thresholds, reporting forms, and authority submission procedures are maintained in the Company's internal incident-response manual and are subject to confirmation by legal/privacy counsel before external filing.

Article 8 (Automated Recommendations and Data Subject Controls)

The platform may display automated recommendations, personalized product rankings, recently viewed items, or AI-assisted suggestions based on language, currency, destination interest, booking history, viewed products, cookies, and similar service-use signals.

Users may object to or disable non-essential personalized recommendations and marketing cookies through cookie settings, browser settings, account settings, or by contacting info@holidaykr.com. Where a fully automated decision materially affects a user's rights or obligations, the Company will provide an explanation, a way to request human review, or an alternative manual process as required by applicable law.

Article 9 (Information Processed When Using the Mobile App)

When you use the HOLIDAY mobile app (the "App"), it uses the device features below only as far as needed to provide the service. You choose whether to allow each feature on the operating system's permission screen the first time you use it, and even if you choose not to allow one, you can keep using everything else in the App, such as searching for products, booking, and paying.

Article 10 (Notes on App Accounts, Stored Information, and Permissions)

The App does not currently use push notifications and does not collect device tokens for them.

If you sign in with a Google, Apple, Kakao, LINE, Facebook, or WeChat account, we use the unique identifier, email address (if provided), and name (if provided) that the provider shares with your consent to identify you and link your account. You can disconnect a linked account on the sign-in methods (linked accounts) screen of the App. Each provider handles personal information under its own policy.

For convenience, the App stores your language and currency settings, recently viewed products, your biometric authentication setting, and unsent customer support chat drafts on your device only. When you log out, recently viewed products, chat drafts, and offline voucher copies are deleted, and deleting the App removes all information stored on your device.

You can request to withdraw your membership yourself in the App under [My Page > Personal Information > Delete account]. If you signed in with Apple, we also ask Apple to revoke the Sign in with Apple connection when we process your account deletion. Once processed, your member information is made unidentifiable, and booking and payment records are kept separately for the period stated in Article 1 (5 years) under applicable laws such as the e-Commerce Act, and then destroyed. If you have an upcoming or in-progress booking, please complete or cancel it first and then proceed with withdrawal.

You can change the camera, photo library, and biometric authentication permissions at any time in your device settings (Apps > HOLIDAY). Entrustment, provision to third parties, and cross-border transfer of information processed in the App follow Articles 3 and 6, and you can contact us through the details in Article 5.