Privacy Notice
1. Personal data we collect
| Category | Items | How collected |
|---|---|---|
| Merchant pre-registration · required | Business name, contact number, region (province/city), business address, business category | Entered on the pre-registration form |
| Merchant pre-registration · optional | Email, other enquiries, consent to receive marketing information | |
| App member · required | Email, nickname, password (stored encrypted), gender, nationality, social channel details (channel, handle, follower count) | Entered during sign-up and use of the app (app.ojakgyo.com) |
| App member · optional | Travel preferences (preferred regions, companion type, stay type), campaign application details (preferred visit date/time, party size, companion composition, dietary restrictions) | |
| App member · recorded automatically | Consent records (time of agreement to the Terms of Service and to the collection and use of personal data, the version of the Terms agreed to, and the time of marketing consent where given) | Recorded automatically at sign-up |
We do not collect resident registration numbers or bank/payment details. Dietary restriction data is optional and is used only to prepare for your visit (shared with the merchant). For visit statistics we use cookie-free anonymous web analytics (Vercel Web Analytics), which stores no personally identifiable information.
2. Purposes of collection and use
- Consultation and contact regarding adoption of the OJAKGYO service, receipt of pre-registrations, and notice of official launch
- Understanding service readiness for merchants (launch regions and business categories)
- (Only where separate consent to marketing has been given) notices of launch benefits and news
- Evidencing consent for app members — confirming when, and to which version, a member agreed to the Terms of Service and to the collection and use of personal data (Article 13 of the Act on Consumer Protection in Electronic Commerce)
We do not use the data for any purpose beyond the above. Marketing messages are sent only to those who have opted in, and consent may be withdrawn at any time.
3. Retention and use period
- As a rule: destroyed without delay once the enquiry has been handled
- Where a registrant proceeds to a merchant agreement, we obtain separate consent and inform them again of the retention period for that purpose.
- Where retention is required by law, the data is kept for the period prescribed.
4. Outsourcing and overseas transfer
We entrust the following processing, and the servers of these processors may be located outside Korea.
| Processor | Entrusted work | Items · country |
|---|---|---|
| Google LLC | Storage of form responses (Google Forms) | Items in section 1 · United States and other countries where Google data centres are located |
| Supabase, Inc. | Storage of records (the OJAKGYO operational database) | Items in section 1 · Republic of Korea (Seoul region) — not transferred overseas |
| Vercel Inc. | Website and service hosting | Stores no personal data (request routing and page delivery) |
We do not provide data to third parties for purposes other than the entrusted work, except where required by law.
5. Right to refuse consent
You have the right to refuse consent to the collection and use of your personal data. If you do not consent to the required items, however, we cannot accept your pre-registration or contact you. (Optional items — email and other enquiries — may be left blank without restricting your registration.)
6. Your rights as a data subject
You may exercise the following rights at any time, and we will act on them without delay.
- Request access to your personal data
- Request correction of errors
- Request deletion
- Request suspension of processing
7. Destruction of personal data
Once the retention period expires or the purpose of processing is achieved, we destroy the data without delay. Data held in electronic form is permanently deleted by a method that makes recovery impossible.
8. Security measures
- Minimising the number of staff who handle personal data, and managing access rights
- Access control on processor (Google) accounts
- Encryption in transit (HTTPS)
9. Data protection officer and contact
Please direct enquiries, complaints, or requests for redress concerning personal data to the data protection officer below.
· Data protection officer: Jeon Hyeok, Representative of J-Curve Lab
· Enquiries: for now, please use the "Other enquiries" field on the pre-registration form and we will reply.
You may also report or seek advice on privacy infringement from the following bodies.
· Privacy Infringement Report Centre (privacy.kisa.or.kr / 118)
· Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
· Supreme Prosecutors' Office Cyber Investigation Division (1301) · National Police Agency Cyber Bureau (182)
10. Notice of changes
If this notice changes, we will announce the change on this page in advance.