Once an order is placed and payment made, Coupang provides Customers' personal data required for the seamless process of transactions, including customer service and shipping services, to a third party (including sellers) within the required scope. Please click on the links in the Recipient column of the table below to see the detailed information. 

Recipient	Purpose of Provision	Information Provided	Period of Retention and Use
Sellers offering coupons	Providing service, verifying purchaser identity, outbound “happy calls"	Name, mobile phone number * Address may also be provided on a limited basis depending on the type of service.	These data types are destroyed after the purpose of the provision of goods or services is achieved. (* These data are retained for a statutory period under applicable laws and regulations.)
Sellers of tickets (performances/exhibitions/activities)	Providing service, verifying purchaser identity, outbound “happy calls”	Name, mobile phone number
Sellers of goods	Providing service, customer appreciation event, verifying purchaser identity, outbound “happy calls”	Name, mobile phone number, shipping address, email * If the recipient is not the purchaser, the recipient’s information (including personal customs clearance code for cross-border shipping) may be provided.
Travel suppliers	Providing service, reservation confirmation, outbound “happy calls”	Name, mobile phone number, email * Additional information (e.g., name(s) or other information of companion(s)) may be provided depending on the type of service.
Relevant tax office	Providing online liquor sales register to the tax office on a quarterly basis in accordance with the public notice from the National Tax Service	Purchaser's personal data (address, name, date of birth), order date, product name, quantity, order amount
Providers of products directly purchased from overseas Coupang Global LLC (US)	Providing service, verifying purchaser identity, outbound “happy calls”, customs clearance * Purchase details are provided when a purchase is made.	Name, mobile phone number, shipping address, personal customs clearance code * If the recipient is not the purchaser, the recipient’s information may be provided.

※ Notice of right to refuse consent to the personal data provision
Provision of personal data to a third party is necessary for Customers to use some of Coupang’s services. Customers may choose not to provide their personal data required for the services, in which case some of those services may be restricted from those Customers. Coupang provides Customers’ personal data to a third party only when a transaction is made and notifies customers of the details of provision when they make a purchase. Rocket Delivery products are shipped directly by Coupang, and therefore do not entail the provision of personal data to third parties (including sellers).

2.2 CouPay User
When an order is placed, and payment made by CouPay, Coupang’s payment service, Coupang provides Customers’ personal data required for transaction processing to the respective third party within the required scope.

Recipients	Banks where Customers’ bank account is opened, including Kookmin Bank,Woori Bank, Shinhan Bank, NH Nonghyup, Kyongnam Bank, Kwangju Bank, Industrial Bank of Korea, Daegu Bank, BusanBank, Korea Development Bank, Korean Federation of Community Credit Cooperatives, Suhyup Bank, National Credit Union Federation of Korea, Citi Bank, Korea Post, Jeonbuk Bank, Jeju Bank, SC Bank, KEB Hana Bank, and others; credit card companies, including KB Card, BC Card, Lotte Card, Samsung Card, NH Card, Hyundai Card, Shinhan Card, Hana Card, and others; NHN KCP Corp.; and Nice I&T, Korea Financial Telecommunications & Clearings Institute
Purpose of provision	Payment processing and cancellation, payment account registration, account holder verification, identification and name verification for provision of service, payment method validation, prevention of payment fraud, view or conversion of reward points
Information provided	Name, date of birth, bank account number, credit card company name, credit card number, expiration date, CVC, CI, mobile carrier, mobile phone number
Period of retention and use	Customers’ account and credit card information registered for CouPay is deleted immediately upon the withdrawal of CouPay service. However, the information of account and credit card used to make a transaction is stored for five years to retain the transaction record pursuant to the Act on the consumer protection in Electronic Commerce, Etc.

※ Coupang provides customers’ personal data only to the financial institution(s) that customers use with CouPay.
※ Customers may refuse the provision of personal data to a third party described above by not consenting to or not stating their personal data. In such a case, however, customers’ use of some of the services may be restricted.

3. Consignment of Personal Data Processing
Coupang oversees how securely our third parties process Customers’ personal data consigned to them and ensures to have all the consigned data immediately destroyed upon the completion of consigned work.

3.1 Consignment of Personal Data within Korea

Category	Consignee	Consigned Services
Customer consultation	KTCS, KBSJOB, Trans Cosmos Korea Inc.	All call center services, including the processing of customer and order information
Identity verification	Korea Mobile Certification Inc., NHN KCP Corp., Korea Credit Bureau, KGMobilians	Identity verification
	Inbiznet, ThinkAT	ARS authentication for obtaining consent to debit transfer
Delivery service	Hanjin Express, Cheonil Cargo Transportation, Lotte Global Logistics, Coupang Logistics Services, independent delivery partners, Samsung Electronics Co., Ltd., SK Magic Co., Ltd. ※ Products other than Rocket Delivery products are delivered by shipping companies contracted by each seller.	Delivery of goods (including foods) and prizes
	GoodsFlow Corporation	Shipment tracking
	LG Uplus, KT Corporation, SK Telink	“Safety Number” (one-time virtual phone number) service
	Coupang Fulfillment Services	All fulfillment center works (inventory management, sorting, picking, shipping to distribution centers, etc.)
Payment processing	NHN KCP Corp., KG Mobilians, Korea Information Communication Corp.,Settlebank, Danal Co., Ltd., Galaxia Communications Co.,Ltd., NICE Payments	Processing payment made by credit card, mobile phone, bank transfer, deposit without bankbook (virtual account), etc.
Notification messaging	LG Uplus, KT, Kakao Corp., NHN Corp	Sending messages (SMS, etc.)
Data storage	Amazon Web Services Inc.	Storing data
Data processing	Microsoft	Email service, document/file storage, internal communication, and collaboration tools

3.2 Consignment of Personal Data Processing Overseas

Consignee	Destination Country	Time and Method of Transfer	Items Transferred	Purpose of Use and Period of Retention and Processing
Coupang Global, LLC	US	Personal data is transferred over network when necessary for business purposes	Personal data collected and used during customers’ use of services (sign-up, consultation, payment)	Research and Development; Destroyed without delay upon completion of work
Coupang (Shanghai) Co., Ltd. 韩领网络科技(上海)有限公司	China
Coupang (Beijing) Co., Ltd. 韩领网络科技(北京)有限公司	China
IBM Security	US	Personal data is transferred over network when necessary for business purposes	Personal data collected and used during customers’ use of services (sign-up,consultation, payment)	Operation and analytics of security control service; Destroyed without delay upon completion of work

4. Disposal of Personal Data 
The retention and use period of the personal data collected starts when the service contract is signed (i.e. Customers sign up for membership) and ends when the contract is terminated (i.e.Customers apply for membership withdrawal or their membership is disqualified). Moreover, if Customers withdraw consent, Coupang immediately disposes of all of their personal data, with the exception of some retained due to the reasons specified above for a certain period. Hard copy printouts of personal data are shredded or burned, whereas electronic files of personal data are disposed through technical or physical means that ensure the information cannot be recovered.

When the purpose of collection and use of personal data is achieved, Coupang moves the information to another database,stores it securely, and disposes it without delay after a predetermined period, in line with the internal policy and applicable laws. Coupang never uses personal data moved to a separate database outside or beyond the scope consented by Customers, unless mandated by law.

Personal data of Customers who do not have any history of using Coupang for the past one year (long-term inactive members) is also segregated from other information and managed safely. Coupang sends email notifications to inactive members at least 30 days prior to moving their information to a separate storage. If it is, however, required by the Protection of Communications Secrets Act, the Act on the Consumer Protection in Electronic Commerce, Etc. or other applicable laws, Coupang may retain the necessary personal data of customers for the prescribed time period.

5. Rights and Obligations of Customers
5.1 Rights of Customers
Customers and their legal representatives may make requests to access, correct or delete their information collected by Coupang,and have the right to withdraw consent anytime. However, Customers who withdraw consent or have information deleted may have limited access to some or all of the Coupang services. Customers can check the personal data collected by Coupang by following the instruction described below:

[How to view the personal data collected by Coupang]

• Go to the Coupang website and click “마이쿠팡” > “개인정보 확인/수정”, “주문목록”, “배송조회”
• Open the Coupang mobile app and go to “내정보관리”

Customers may check the information not directly available from the Coupang website or app by contacting the Coupang customer support center (1577-7011, help@coupang.com, 1:1 chat also available). Customers who wish to delete or stop the processing of their personal data, or withdraw consent, can make requests to the Coupang customer center (1577-7011, help@coupang.com, 1:1 chat also available). They also have the right to withdraw membership, and thereby withdraw consent, to the collection and use of their personal data at any time. Upon making such requests, however, customers’ use of some or the entire service may be restricted. Furthermore, it may be difficult to fulfill requests from customers to delete or stop the processing of their personal data, or withdraw the consent if any of the following is true:

• There are special provisions under the law, or it is absolutely necessary to fulfill an obligation under the law;
• There is a possibility of incurring damage to life, body, property and other interests of a third party;
• It is impossible to execute the contracts with data subjects, including providing the service under the contract, without processing their personal data, yet the data subjects have failed to explicitly express their intent to terminate their contracts.

Should Customers raise such requests, Coupang does not use the customers’ information or provide it to a third party until the requests are fulfilled. Moreover, if Coupang has provided incorrect personal data to a third party for reasonable grounds, Coupang promptly notifies the third party and ensures that the information is deleted and no longer processed, and the applicable consent is withdrawn.

5.2. Obligations of Customers
Customers have an obligation to protect their personal data. Coupang is not liable for issues that arise due to personal data leakage caused not by the fault of Coupang, but by any of the following:

• Negligence or acts or omissions of the customer, such as losing, letting others borrow or handing over an ID (email address), password, or medium used to access the service; or leaving PC unattended while still logged into the service;
• Methods that cannot be prevented by the security controls required by the applicable laws or hacking and other technologies that are outside the control of Coupang despite the security controls Coupang has undertaken.

It is also an obligation of Customers to keep their personal data up to date. Any issues that arise due to incorrect information entered by customers are the responsibility of customers themselves. Individuals who sign up with personal data stolen from others or make payments with stolen IDs may lose their Coupang membership and face penalties pursuant to the applicable laws. Moreover, customers are responsible for keeping their ID and password secure and confidential and may not lend them or hand them over to a third party. They are also under an obligation to cooperate with activities regularly carried out by Coupang to ensure security according to its privacy and policy.

6. Installation/Operation of Automatic Information Collection Tool and How to Opt-Out

To provide convenient, effective and personalized shopping experiences to Customers, Coupang may store (collect) data automatically generated as Customers interact with the service or device information that doesn’t lead to the identification of individuals. And Coupang informs Customers specifically which information out of the automatically generated data it collects and how Customers can opt-out from such collection.

6.1. Cookie
A cookie is a small text file sent to and stored on a user's device when the user visits a website. When the user visits the same site again, the cookie allows the site to recognize the user's device to automatically pull up his or her previous settings and history of using the site. Moreover, a cookie can be used to offer services (including advertisements) tailored to fit the interest and taste of customers by analyzing the websites visited, time and frequency of the visits and information generated or provided (entered) when using the services. It is up to customers to accept or decline cookies: they can choose to accept all cookies, check every time they receive and store a new cookie or refuse to store any cookies.

[How to change cookie settings]

in Internet Explorer
in Safari
in FireFox
in Chrome

6.2. Personalized ads
To deliver personalized ads, Coupang collects and uses cookies from the web browser and ADID from the mobile app. Cookies and ADID are used to automatically collect customers’ history of interaction with the Coupang service and forward this information to Facebook and Criteo (the information also sent to Criteo viaTune). Facebook and Criteo (Tune) then uses this information to personalize ads for customers. The cookies and ADID collected by Coupang are not linked to other personal data and are not used to identify individuals. Facebook and Criteo also, under no circumstances, leverage the information Coupang provides to identify individuals.

Customers can choose to opt-out from receiving personalized ads any time and will see general ads instead of personalized ones once opted out. 

7. The Chief Privacy Officer and Staff Responsible for Privacy Inquiries 

The Chief Privacy Officer (CPO) and the department responsible for handling privacy inquiries are designated as below to oversee all matters related to customer privacy and handle complaints and address damage from privacy-related issues. Customers may make inquiries, raise complaints or ask for damage relief regarding privacy issues through the contact points below. Coupang will promptly respond to and handle inquiries.

Chief Information Security Officer	Department Handling Privacy Complaints
Name: Ben Gerber Phone number: 1577-7011 Email address: help@coupang.com	Department: Coupang Customer Center Phone number: 1577-7011 Email address: help@coupang.com For Coupang Eats: Phone number: 1670-9827

Customers who need to receive consultation on privacy matters or report a personal data breach may also contact the following authorities:

•Personal data breach reporting center: 118 (without area code), privacy.kisa.or.kr
•Cybercrime Investigation Team at the Supreme Prosecutors’ Office: 1301 (without area code), www.spo.go.kr
•Cybercrime Investigation Team at the National Police Agency: 1821301 (without area), cyberbureau.police.go.kr

8. Obligation of Notification 
Privacy notice takes effect from its effective date. Should there be grounds for a material change to customer’s right to data privacy, customers will be notified by Coupang at least 14 days before the change. Other changes will be notified to customers at least 7 days prior to their implementation.

Note:

In the event of inconsistency or discrepancy between the English version and the Korean version of this Privacy Notice, the Korean version shall prevail.    </i>

Version 8.2
Release date: January 20 2020
Effective date: January 31 2020