Coupang Privacy Notice (V.9.95)

• 
  

Once an order is placed and payment made, Coupang provides Customers' personal data required for the seamless process of transactions, including customer service and shipping services, to a third party (including sellers) within the required scope. Please click on the links in the Recipient column of the table below to see the detailed information. 

Recipient	Purpose of Provision	Information Provided	Period of Retention and Use
Sellers offering coupons	Providing service, verifying purchaser identity, outbound “happy calls"	Name, mobile phone number * Address may also be provided on a limited basis depending on the type of service.	These data types are destroyed after the purpose of the provision of goods or services is achieved. (* These data are retained for a statutory period under applicable laws and regulations.)
Sellers of tickets (performances/exhibitions/activities)	Providing service, verifying purchaser identity, outbound “happy calls”	Name, mobile phone number
Sellers of goods	Providing service, verifying purchaser identity, outbound “happy calls”	Name, mobile phone number, shipping address, email * If the recipient is not the purchaser, the recipient’s information (including personal customs clearance code for cross-border shipping) may be provided.
Travel suppliers	Providing service, reservation confirmation, outbound “happy calls”	Name, mobile phone number, email * Additional information (e.g., name(s) or other information of companion(s)) may be provided depending on the type of service.
Lotte Chilsung Beverage, Yuhan Kimberly, Ltd., Nongshim	Gift Delivery	Name, mobile phone number, shipping address (when delivering gift)
Relevant tax office	Providing online liquor sales register to the tax office on a quarterly basis in accordance with the public notice from the National Tax Service	Purchaser's personal data (address, name, date of birth), order date, product name, quantity, order amount
Providers of products directly purchased from overseas Coupang Global LLC (US)	Providing service, verifying purchaser identity, outbound “happy calls”, customs clearance * Purchase details are provided when a purchase is made.	Name, mobile phone number, shipping address, personal customs clearance code * If the recipient is not the purchaser, the recipient’s information may be provided.
Providers of products directly purchased from overseas Coupang Shanghai Trading Co., Ltd. (CHINA)	Providing service, verifying purchaser identity, outbound “happy calls”, customs clearance * Purchase details are provided when a purchase is made.	Name, mobile phone number, shipping address, personal customs clearance code * If the recipient is not the purchaser, the recipient’s information may be provided.
Oliva Co., Ltd.	Confirmation of smartphone purchase in Coupang and providing reward programs	Coupang order information	Until the purpose of providing compensation program services including payment of compensation amount is achieved
Lotte Insurance	Insurance purchase, buyer identification, provide support for the product under warranty, hardware warranty	Name, email, phone number, Coupang ID, Coupang order number, date of purchase of the device and insurance, device information (product category, manufacturer, purchase amount, product name, serial number)	Retained for up to 1 year after buying the insurance
Gift delivery company of Coupang Live or Creator	Confirmation of winners, Gift delivery	Name, mobile phone number, shipping address	Until delivery is complete

※ Notice of right to refuse consent to the personal data provision
Provision of personal data to a third party is necessary for Customers to use some of Coupang’s services. Customers may choose not to provide their personal data required for the services, in which case some of those services may be restricted from those Customers. Coupang provides Customers’ personal data to a third party only when a transaction is made and notifies customers of the details of provision when they make a purchase. Rocket Delivery products are shipped directly by Coupang, and therefore do not entail the provision of personal data to third parties (including sellers).

2.2 Provision of personal credit information

Recipient	Purpose of Provision	Information Provided	Period of Retention and Use
Korea Credit Bureau, NICE Information Service Co., Ltd.	Verification of credit score, and credit information history; credit assessment; to develop credit-related model and use for (statistical) analysis; verification of statistics to provide customized service; to be used by credit bureau (to register overdue payment information, etc.); to maintain or manage the current contract and the ones signed before	Name, date of birth, gender, mobile phone number, duplicate information (DI), customer number, date of sign-up, payment and overdue payment status.	Retained for a statutory period under applicable laws and regulations

2.3 Creator Members

Coupang provides Creators' personal data to contracted suppliers or sellers (third-party) for product shipping within the required scope. Please click on the links in the Recipient column of the table below to see the detailed information.

Recipient	Purpose of Provision	Information Provided	Period of Retention and Use
Supplier or seller who contracted with creator	Product shipping	Name, contact information, address	Destroyed without delay after product is dispatched (However, the data will be retained for statutory period under applicable laws and regulations)

3. Consignment of Personal Data Processing
Coupang oversees how securely our third parties process Customers’ personal data consigned to them and ensures to have all the consigned data immediately destroyed upon the completion of consigned work.

3.1 Consignment of Personal Data within Korea

Category	Consignee	Consigned Services
Customer consultation	KSJOB, Trans Cosmos Korea Inc., U-BASE	All call center services, including the processing of customer and order information
Identity verification	Korea Mobile Certification Inc.	Identity verification
Delivery service	Hanjin Express, Cheonil Cargo Transportation, Lotte Global Logistics, CJ Logistics Corporation, Coupang Logistics Services, Independent Delivery Partners, Samsung Electronics Co., Ltd., SK Magic Co., Ltd., Winion Inc., Howser, Inc. ※ Products other than Rocket Delivery products are delivered by shipping companies contracted by each seller.	Delivery of goods (including foods) and prizes
	GoodsFlow Corporation	Shipment tracking
	LG Uplus, KT Corporation, SK Telink	“Safety Number” (one-time virtual phone number) service
	Coupang Fulfillment Services	All fulfillment center works (inventory management, sorting, picking, shipping to distribution centers, etc.)
	Coupang Eats Service LLC	Processing order delivery and responding to inquiries
	SKG Electronics Co., Ltd., YKG Co., Ltd., The Best Jisung Co., Ltd., Daemyung Distribution Co., Ltd., Samjung Co., Ltd., Gyeongnam Co., Ltd., Shinyoung Plus Co., Ltd., CDS Distribution Co., Ltd.	LG Electronics product delivery and installation
Notification messaging	LG Uplus, KT, Kakao Corp., NHN Corp, LGCNS	Sending messages (SMS, etc.)
Settlement processing	Metanet Global Corp.	Handling of tax and utility charges
Save customer consultation transcripts	GS NEOTEK	Genesys system maintenance
Payment and Fees Settlement processing	NICE Payments	Informing the amount of paid and unpaid fees; debt collection and other related work.
	CoupangPay. Ltd.	Payment processing & prevention of payment misappropriation, Easy Payment service provision and operation, Fraud monitoring and detection
	[Re-outsourcing by CoupangPay. Ltd.] NHN KCP Corp., KG Mobilians, Korea Information Communication Corp., Danal Co., Ltd., Galaxia Communications Co.,Ltd., NICE Payments	Processing payment made by credit card, mobile phone, bank transfer, deposit without bankbook (virtual account), etc.

3.2 Consignment of Personal Data Processing Overseas
Coupang consigns development and operation of its services to its affiliates (Coupang Global, LLC, Coupang (Shanghai) Co., Ltd., and Coupang (Beijing) Co., Ltd.). Coupang affiliates comply with Coupang’s security policies as specified under 7. Actions Taken to Protect Personal Information below.

Consignee (Contact of Information Manager)	Destination Country	Time and Method of Transfer	Personal Data	Purpose of Use	Period of Retention and Processing
Coupang Global, LLC (help@coupang.com)	US	Personal data is transferred over secure network when necessary for business purposes	Personal data collected and used during customers’ use of services (sign-up, consultation, payment)	fraud monitoring and detection	Destroyed without delay upon completion of work
Coupang (Shanghai) Co., Ltd. 韩领网络科技(上海)有限公司 (help@coupang.com)	China			fraud monitoring and detection
Coupang (Beijing) Co., Ltd. 韩领网络科技(北京)有限公司 (help@coupang.com)	China			Coupang service operation, and fraud monitoring and detection
Genesys (GSN: yakida96@gsnict.com)	Japan	Transferred over secure network	Call recordings, caller’s number	Using call management system for CS Center	Until user withdraws Coupang membership or consignment agreement is terminated
Zendesk, Inc. (support@zendesk.com)	Japan	Transferred over secure network	Name, email, phone number, member SRL	Using CS software for CS Center	Until user withdraws Coupang membership or consignment agreement is terminated

4. Disposal of Personal Data
The retention and use period of the personal data collected starts when the service contract is signed (i.e. Customers sign up for membership) and ends when the contract is terminated (i.e.Customers apply for membership withdrawal or their membership is disqualified). Moreover, if Customers withdraw consent, Coupang immediately disposes of all of their personal data, with the exception of some retained due to the reasons specified above for a certain period. Hard copy printouts of personal data are shredded or burned, whereas electronic files of personal data are disposed through technical or physical means that ensure the information cannot be recovered.

When the purpose of collection and use of personal data is achieved, Coupang moves the information to another database,stores it securely, and disposes it without delay after a predetermined period, in line with the internal policy and applicable laws. Coupang never uses personal data moved to a separate database outside or beyond the scope consented by Customers, unless mandated by law.

Personal data of Customers who do not have any history of using Coupang for the past one year (long-term inactive members) is also segregated from other information and managed safely. Coupang sends email notifications to inactive members at least 30 days prior to moving their information to a separate storage. If it is, however, required by the Protection of Communications Secrets Act, the Act on the Consumer Protection in Electronic Commerce, Etc. or other applicable laws, Coupang may retain the necessary personal data of customers for the prescribed time period.

5. Rights and Obligations of Customers
5.1 Rights of Customers
Customers and their legal representatives may make requests to access, correct or delete their information collected by Coupang,and have the right to withdraw consent anytime. However, Customers who withdraw consent or have information deleted may have limited access to some or all of the Coupang services. Customers can check the personal data collected by Coupang by following the instruction described below:

[How to view the personal data collected by Coupang]

• Go to the Coupang website and click “마이쿠팡” > “개인정보 확인/수정”, “주문목록”, “배송조회”
• Open the Coupang mobile app and go to “내정보관리”
• Go to Coupang Eats mobile app - My 이츠 > 배달주소 관리, 결제 관리
• Go to Coupang Play mobile app - 프로필 > 설정> 계정관련

Customers may check the information not directly available from the Coupang website or app by contacting the Coupang customer support center (1577-7011, help@coupang.com, 1:1 chat also available) or customer request handling team under '8. CPO and privacy protection owner'. Customers who wish to delete or stop the processing of their personal data, or withdraw consent, can make requests to the Coupang customer center (1577-7011, help@coupang.com, 1:1 chat also available) or customer request handling team under '8. CPO and privacy protection owner'. They also have the right to withdraw membership, and thereby withdraw consent, to the collection and use of their personal data at any time. Upon making such requests, however, customers’ use of some or the entire service may be restricted. Furthermore, it may be difficult to fulfill requests from customers to delete or stop the processing of their personal data, or withdraw the consent if any of the following is true:

• There are special provisions under the law, or it is absolutely necessary to fulfill an obligation under the law;
• There is a possibility of incurring damage to life, body, property and other interests of a third party;
• It is impossible to execute the contracts with data subjects, including providing the service under the contract, without processing their personal data, yet the data subjects have failed to explicitly express their intent to terminate their contracts.

Should Customers raise such requests, Coupang does not use the customers’ information or provide it to a third party until the requests are fulfilled. Moreover, if Coupang has provided incorrect personal data to a third party for reasonable grounds, Coupang promptly notifies the third party and ensures that the information is deleted and no longer processed, and the applicable consent is withdrawn.

5.2. Obligations of Customers
Customers have an obligation to protect their personal data. Coupang is not liable for issues that arise due to personal data leakage caused not by the fault of Coupang, but by any of the following:

• Negligence or acts or omissions of the customer, such as losing, letting others borrow or handing over an ID (email address), password, or medium used to access the service; or leaving PC unattended while still logged into the service;
• Methods that cannot be prevented by the security controls required by the applicable laws or hacking and other technologies that are outside the control of Coupang despite the security controls Coupang has undertaken.

It is also an obligation of Customers to keep their personal data up to date. Any issues that arise due to incorrect information entered by customers are the responsibility of customers themselves. Individuals who sign up with personal data stolen from others or make payments with stolen IDs may lose their Coupang membership and face penalties pursuant to the applicable laws. Moreover, customers are responsible for keeping their ID and password secure and confidential and may not lend them or hand them over to a third party. They are also under an obligation to cooperate with activities regularly carried out by Coupang to ensure security according to its privacy and policy.

6. Installation/Operation of Automatic Information Collection Tool and How to Opt-Out

To provide convenient, effective and personalized shopping experiences to Customers, Coupang may store (collect) data automatically generated as Customers interact with the service or device information that doesn’t lead to the identification of individuals. And Coupang informs Customers specifically which information out of the automatically generated data it collects and how Customers can opt-out from such collection.

6.1. Cookie
A cookie is a small text file sent to and stored on a user's device when the user visits a website. When the user visits the same site again, the cookie allows the site to recognize the user's device to automatically pull up his or her previous settings and history of using the site. Moreover, a cookie can be used to offer services (including advertisements) tailored to fit the interest and taste of customers by analyzing the websites visited, time and frequency of the visits and information generated or provided (entered) when using the services. It is up to customers to accept or decline cookies: they can choose to accept all cookies, check every time they receive and store a new cookie or refuse to store any cookies.

[How to change cookie settings]

in Internet Explorer
in Safari
in FireFox
in Chrome

6.2. Personalized ads
To deliver personalized ads, Coupang collects and uses cookies from the web browser and ADID from the mobile app. Cookies and ADID are used to automatically collect customers’ history of interaction with the Coupang service and forward this information to Facebook and Criteo (the information also sent to Criteo viaTune). Facebook and Criteo (Tune) then uses this information to personalize ads for customers. The cookies and ADID collected by Coupang are not linked to other personal data and are not used to identify individuals. Facebook and Criteo also, under no circumstances, leverage the information Coupang provides to identify individuals.

Customers can choose to opt-out from receiving personalized ads any time and will see general ads instead of personalized ones once opted out. 

7. Actions Taken to Protect Personal Information

(1) Coupang establishes a yearly plan for internal privacy management and audits the implementation thereof to ensure secure processing of personal information. Coupang has a designated Chief Privacy Officer as well as a dedicated privacy team, and personal information handlers receive privacy training.

(2) In order to prevent illegal access to personal information, Coupang keeps the number of personal information handlers to the minimum required level and has established policies for access management and passwords. Coupang’s personal information processing systems are protected with intrusion prevention and detection systems and are hosted on a segregated network to restrict access.

(3) To prevent log forgery and/or tampering, Coupang stores, backs up, reviews, and oversees the logs of access to the personal information systems.

(4) Coupang implements at-rest and in-transit encryption to sensitive information (e.g., passwords, unique identifier, financial information) to securely protect personal information.

(5) Coupang has antivirus software installed on the personal information systems as well as the devices with which personal information handlers process personal information. The security solutions are periodically reviewed and updated.

(6) Coupang protects the personal information systems with physical protection including a locking device.

8. The Chief Privacy Officer and Staff Responsible for Privacy Inquiries 
The Chief Privacy Officer (CPO) and the department responsible for handling privacy inquiries are designated as below to oversee all matters related to customer privacy and handle complaints and address damage from privacy-related issues. Customers may make inquiries, raise complaints or ask for damage relief regarding privacy issues through the contact points below. Coupang will promptly respond to and handle inquiries.

Chief Privacy Officer	Department Handling Privacy Complaints
Name: Max Leveson Phone number: 1577-7011 Email address: help@coupang.com	Department: Coupang Customer Center Phone number: 1577-7011 Email address: help@coupang.com Department: Coupang Eats Customer Center Phone number: 1670-9827 Department: Coupang Play Customer Center Phone number: 1600-9800

Customers who need to receive consultation on privacy matters or report a personal data breach may also contact the following authorities:

•Personal data breach reporting center: 118 (without area code), privacy.kisa.or.kr
•Cybercrime Investigation Team at the Supreme Prosecutors’ Office: 1301 (without area code), www.spo.go.kr
•Cybercrime Investigation Team at the National Police Agency: 1821301 (without area), cyberbureau.police.go.kr

9. Obligation of Notification 
Privacy notice takes effect from its effective date. Should there be grounds for a material change to customer’s right to data privacy, customers will be notified by Coupang at least 14 days before the change. Other changes will be notified to customers at least 7 days prior to their implementation.  

Note:

In the event of inconsistency or discrepancy between the English version and the Korean version of this Privacy Notice, the Korean version shall prevail.    

Version 9.95
Release date: August 30 2021 
Effective date: September 06 2021