Coupang Privacy Notice

1. Personal Information Collected, Purpose of Collection, and Retention Period

2. Provision and Consignment of Personal Information

3. Use and Provision Without User’s Consent

4. Procedures for and Methods of Destroying Personal Information

5. Rights and Obligations of Users and Legal Representatives and How to Exercise the Rights

6. Personal Information Safeguard Measures

7. Processing of Personal Location Information

8. Processing of Connecting Information (CI)

9. Teams Responsible for Personal Information Protection and Customer Complaints Handling

Coupang Corp. (hereinafter referred to as “Coupang”) establishes and discloses the following Privacy Notice, in accordance with the Personal Information Protection Act and Act on the Protection and Use of Location Information(hereinafter referred to as “Location Information Act”), to protect users’ personal information and personal location information and handle related issues in a quick and seamless manner. Any updates to this Privacy Notice will be posted on our website’s notice board, including the effective date and the details of the revision.

This Privacy Notice applies to Coupang (eCommerce), Coupang Eats, Coupang Play, Coupang Live Creator, and Coupang Partners. This does not apply to other services provided by Coupang.

Coupang will not use the collected personal information for purpose other than the originally intended purpose of collection, and if the purpose of use changes, we will take necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act. Coupang processes and retains personal information in accordance with applicable laws and within the period notified to and agreed upon by users at the time of collection. The retention period for personal information in accordance with applicable laws is as set forth in “4. Procedures for and Methods of Destroying Personal Information.”

For matters regarding the processing of personal location information in connection with location-based services, please refer to “7. Processing of Personal Location Information.” For details concerning the processing of connecting information, please refer to “8. Processing of Connecting Information.”

1. Personal Information Collected, Purpose of Collection, and Retention Period

Coupang collects the minimum personal information necessary for service use. We analyze users’ personal information, as well as their service visit, search, and usage records to understand their interests and preferences. Based on this analysis, we provide personalized services and deliver an innovative shopping experience that enables users to receive products at the time, place, and in the manner they prefer. Artificial intelligence (AI) technologies may be applied to support the provision of these services.

A. Personal Information Processed Without the Data Subject’s Consent

Coupang processes the following categories of personal information without obtaining the data subject’s consent:

Statutory Grounds	Purpose	Personal Information Items	Period of Retention and Use
Article 15(1)(4) of the Personal Information Protection Act (“to execute and perform a contract”)	Membership sign-up, user identification, and membership management	User ID (email), name, mobile phone number, password	Retained for 90 days after membership withdrawal and then destroyed
	Provision of personalized service	User ID (email), name, mobile phone number, service usage history, age, gender *
Article 15(1)(4) (“to execute and perform a contract”) and Article 15(1)(6) (“to attain the justifiable interest”) of the Personal Information Protection Act	Fraud prevention	User ID (email), name, mobile phone number, records of fraudulent activity, and CI for accounts detected for fraudulent activity	Retained for one year following membership withdrawal and then destroyed

* ‘Age and gender’ is information that is processed only for users who have verified their identity after registering as a member.

B. Personal Information Processed with the Data Subject’s Consent

Coupang processes the following categories of personal information based on the data subject’s consent:

Statutory Grounds	Purpose	Personal Information Items	Period of Retention and Use
Article 15(1)(1) of the Personal Information Protection Act (“where the consent is obtained from the data subject”)	Behavioral advertising, marketing, and promotional activities for Coupang and its affiliates based on demographic characteristics and inferred user interests and preferences; and service quality improvement	(Optional) User ID (email), mobile phone number, service usage records, age and gender, voice data*	Behavioral advertising will be discontinued upon withdrawal of consent, and the data will be destroyed upon membership withdrawal

* “Age and gender” are processed only for users who have completed identity verification after registration.
** “Voice data” may be collected where calls are required in the course of service use.

Coupang may collect additional personal information (“PI”) to provide various services.

Statutory Grounds	Purpose	Personal Information Items	Period of Retention and Use
Article 15(1)4 of the Personal Information Protection Act (“to execute and perform a contract”)	Identity and age verification	Information for identity verification (name, date of birth, gender, mobile carrier, mobile phone number, connecting information (“CI”), duplication information (“DI”), nationality (Korean/non-Korean))	Retained for 90 days following membership withdrawal and then destroyed
Customs duty processing and customs clearance when purchasing overseas direct purchase (“Jikgu”) products	PCCC, name, mobile phone number
Processing of product/service delivery or reservation, customer support and follow-up calls, customs clearance processing, and after-sales (AS) support	Name, email, mobile phone number <Required items to be additionally collected by product/service> – For purchases of products requiring delivery or in-person visits: address – When purchasing an item that requires customs clearance: PCCC (Personal Customs Clearance Code) – For accommodation reservations: Information of one of the guests (name, email, mobile phone number) – For warranty service request and processing: Name, address, and mobile phone number ※ Transferred via network at the time of purchase
E-gift Card registration	E-gift card number	Retained for 5 years in accordance with the Act on Consumer Protection in Electronic Commerce, etc. and then destroyed
Cash receipt request	Mobile phone number or cash receipt card	Retained for 5 years in accordance with the Act on Consumer Protection in Electronic Commerce, etc. and then destroyed
Finding the Right Tire for My Car	License plate number and name (of the owner)	Destroyed upon completion of the inquiry
Identity verification for intellectual property infringement reports, processing the reports and notification of results, and retention of records for dispute resolution	Name of the rights holder, name of the reporter (or representative), address, (mobile) phone number, email, copy of ID card (name, date of birth)	Retained for 3 years in accordance with the Act on Consumer Protection in Electronic Commerce, etc. and then destroyed
Delivery of products/services (standard delivery / dawn delivery)	Building entrance code	Destroyed upon deletion of the information without delay or within 90 days after membership withdrawal
Article 15(1)2 (“Where special provisions exist”), Article 15(1)4 (“to execute and perform a contract”), and Article 24(2) (Limitation to Processing of Resident Registration Numbers) of the Personal Information Protection Act and Article 21 (Other Income), Article 127 (Liability for Withholding Taxes), and Article 165 (Submission of Statement of Payment) of the Income Tax Act	Payment of taxes when giving rewards or gift certificates worth KRW 50,000 or more to Coupang Experience Group members	Name, Resident Registration Number	Retained for 5 years in accordance with the Income Tax Act and then destroyed

Statutory Grounds	Purpose	Personal Information Items	Period of Retention and Use
Article 15(1)1 (“Where consent is obtained from a data subject”) of the Personal Information Protection Act	Refunds and compensation	Name, bank name, account number	Retained for 5 years in accordance with the Framework Act on National Taxes and the Act on Consumer Protection in Electronic Commerce, Etc. and then destroyed
To show reviewer’s profile	(Optional) Name or nickname, profile picture	Deleted immediately when the user deletes the information or withdraws membership
Sending a gift	Recipient’s name and mobile phone number	Retained for 5 years in accordance with the Act on Consumer Protection in Electronic Commerce, etc. and then destroyed
Exposure on Coupang Live chat screen and user identification	(Optional) Nickname	Deleted immediately when the user deletes the information or withdraws membership
“Coupang Live” event winner confirmation, prize delivery	(Optional) Name, mobile phone number, address	Destroyed when the prize delivery is complete
Pay Later members	Handling credit evaluation and related business (Credit score verification; to provide credit-related financial information; inquire/register personal credit information from/to credit bureau or credit information collection agency)	Identification information – name, date of birth, gender, mobile phone number, CI Pay Later usage history – sign-up date and time, payment and delinquency status	Destroyed at the time of membership withdrawal
Customer consultation and complaint handling, settlement of service usage fees, customer guide	Identity verification information – name, date of birth, gender, mobile phone number, e-mail address, CI Pay Later usage history – sign-up date and time, payment and delinquency status History of using services provided by Coupang – sign-up history, number of registered delivery addresses, delivery addresses, purchase/cancellation/refund history, review history – Information on fraudulent transactions, service access logs	Destroyed at the time of membership withdrawal
Adjustment of available amounts and benefits; prevention of fraud; improve service	Identity verification information – name, date of birth, gender, mobile phone number, e-mail address, CI Pay Later usage history – sign-up date and time, payment and delinquency status History of using services provided by Coupang – sign-up history, number of registered delivery addresses, delivery addresses, purchase/cancellation/refund history, review history – Information on fraudulent transactions, service access logs	Destroyed at the time of membership withdrawal
Identity verification and contact, processing of request for certificate of proof, issuance of debt certificate , confirmation of issuance of certificate of proof	User ID (email), name, contact information, date of birth, address, outstanding payment information, overdue information	Destroyed upon discharge or extinguishment of Pay Later receivables

If a user uses any of the services provided by Coupang Eats, Coupang Play, Coupang Live Creator, or Coupang Partners, the minimum necessary personal information will be collected as needed.

Statutory Grounds	Purpose	Personal Information Items	Period of Retention and Use
Article 15(1)2 (“Where special provisions exist”) and Article 15(1)4 (“to execute and perform a contract”) of the Personal Information Protection Act and Article 46(1) (Reporting on detection of foreign substances in foods) of the Food Sanitation Act	Reporting and handling of foreign substances found in food	Name, phone number, address	Destroyed after reporting in accordance with Article 46(1) of the Food Sanitation Act
Article 15(1)4 (“to execute and perform a contract”) of the Personal Information Protection Act	User identification and membership management, provision of Coupang Eats services, and customer inquiry handling	Name, phone number, address	Retained for 90 days following membership withdrawal and then destroyed

Statutory Grounds	Purpose	Personal Information Items	Period of Retention and Use
Article 15(1)1 (“Where consent is obtained from a data subject”) of the Personal Information Protection Act	Provision of delivery restaurant listings based on the user’s location Provision of address search functionality based on the user’s location	Personal location information	Retained for 1 year following delivery completion and then destroyed
Identity verification when delivering alcoholic beverages	Signature	Retained for 5 years following delivery completion and then destroyed
Delivery-related consultation, dispute handling	Chat timestamp, chat content, personal identifier	Retained for 3 years following chat termination and then destroyed
When filing a re-objection to a request for suspension of a review (post)	Phone number, email	Retained for 30 days and then destroyed
Confirmation of event winners and prize delivery	Name, phone number, address	Retained for 30 days following the end of the event and then destroyed

Statutory Grounds	Purpose	Personal Information Items	Period of Retention and Use
Article 15(1)4 of the Personal Information Protection Act (“to execute and perform a contract”)	User identification, customer support, and complaint handling	Profile name	Destroyed upon membership withdrawal (however, sanction records related to chat usage are retained for 90 days from the date of withdrawal and then destroyed)

Statutory Grounds	Purpose	Personal Information Items	Period of Retention and Use
Article 15(1)1 (“Where consent is obtained from a data subject”) of the Personal Information Protection Act	Announcement of winners for the Coupang Play “SNL Korea” audience event and operation of the event	(Optional) Name, mobile phone number	Retained for 30 days following the end of the event and then destroyed
“Coupang Play” event winner confirmation, prize delivery	(Optional) Name, mobile phone number, address	Retained for 20 days following the end of the event and then destroyed
User identification and behavioral advertising, service marketing, and promotions based on demographic characteristics and inferred user interests and preferences	(Optional) Service usage history, age, gender*.	Behavioral advertising will be discontinued upon withdrawal of consent, and the data will be destroyed upon membership withdrawal

Statutory Grounds	Purpose	Personal Information Items	Period of Retention and Use
Article 15(1)4 (“to execute and perform a contract”) of the Personal Information Protection Act	Membership sign-up, user identification and screening, membership management	Name, nickname, mobile phone number, email, profile photo	Destroyed at the time of Creator membership withdrawal (However, information of creators not approved during the review process is retained for 6 months from the date of non-approval for inquiry handling and then destroyed)
To be exposed to customers and sellers	Email address, nickname, profile photo
Development of new services and quality improvement through analysis of service usage statistics, etc.	Service usage history
Article 15(1)2 (“Where special provisions exist”), Article 15(1)4 (“to execute and perform a contract”), and Article 24-2 (Limitation to Processing of Resident Registration Numbers) of the Personal Information Protection Act Article 21 (Other Income), Article 127 (Liability for Withholding Taxes), and Article 164 (Submission of Statement of Payment) of the Income Tax Act」 제21조(기타소득)/ 제127조(원천징수의무)/ 제164조(지급명세서의 제출)	Commission settlement and payment	[Individual creator] name, email, mobile phone number, address, nationality (Korean/non-Korean), bank account information (bank name, account holder name, account number), Resident Registration Number or Alien Registration Number [Private business creator] bank account information (name, bank name, account number)	Retained for 5 years following creator withdrawal in accordance with the Income Tax Act and then destroyed

Statutory Grounds	Purpose	Personal Information Items	Period of Retention and Use
Article 15(1)1 (“Where consent is obtained from a data subject”) of the Personal Information Protection Act	Creator identification and screening, inquiry handling	(Optional) Social media URL	Destroyed at the time of Creator membership withdrawal (However, information of creators not approved during the review process is retained for 6 months from the date of non-approval for inquiry handling and then destroyed)
User identification and screening, and membership management	(Optional) Agency name
Marketplace sign-up and use, Coupang Live broadcasting	(Required) Email address, phone number, nickname, self-introduction (Optional) Photo, social media URL	Destroyed without delay when unsubscribing from Creator service or withdrawing consent on the Live Marketplace
Recruiting interview participants, providing guide and interviewing Creators on their experience	Name, mobile phone number, email, nickname	Destroyed upon withdrawal of consent for registration of interview participation
Compensation for participation in the interview	User ID	Destroyed upon withdrawal of consent for registration of interview participation

Statutory Grounds	Purpose	Personal Information Items	Period of Retention and Use
Article 15(1)4 of the Personal Information Protection Act (“to execute and perform a contract”)	Article 15(1)4 of the Personal Information Protection Act (“to execute and perform a contract”)	Name, mobile phone number, email address, Coupang ID, date of birth, social media URL	Destroyed at the time of membership withdrawal (However, the partner’s information required for settlement will be destroyed after storing for 6 months from the date of the last settlement attempt or the date of the first settlement process.)
Article 15(1)4 (“to execute and perform a contract”) and Article 15(1)6 (“to attain the justifiable interest”) of the Personal Information Protection Act	Preventing fraudulent activities	User ID, name, email, phone number, and fraud activity and sanctions records	Retained for 1 year following membership withdrawal and then destroyed
Article 15(1)4 (“to execute and perform a contract”) and Article 15(1)6 (“to attain the justifiable interest”) of the Personal Information Protection Act	Bank account validation and payment	Bank account information (name, bank name, account number), copy of bankbook	Retained for 5 years in accordance with the Value-Added Tax Act and then destroyed
Article 15(1)2 (“Where special provisions exist”), Article 15(1)4 (“to execute and perform a contract”), and Article 24(2) (Limitation to Processing of Resident Registration Numbers) of the Personal Information Protection Act and Article 21 (Other Income), Article 127 (Liability for Withholding Taxes), and Article 165 (Submission of Statement of Payment) of the Income Tax Act	Income tax filing	Name, Resident Registration Number, bank account information (name, bank name, account number)	Retained for 5 years in accordance with the Income Tax Act and then destroyed

Statutory Grounds	Purpose	Personal Information Items	Period of Retention and Use
Article 15(1)1 (“Where consent is obtained from a data subject”) of the Personal Information Protection Act	User identification, behavioral advertising, marketing/promotions based on demographic characteristics and user’s interests and preferences	(Optional) Service usage history, age, gender, ID, name, mobile phone number, email	Behavioral advertising will be discontinued upon withdrawal of consent, and the data will be destroyed upon membership withdrawal

2. Provision and Consignment of Personal Information

Coupang provides personal information to third parties only within the scope of consent obtained from the user.

Coupang may provide personal information in accordance with the due process of law where there are special provisions in applicable laws, such as the Personal Information Protection Act, Act on Promotion of Information and Communications Network Utilization and Information Protection, Protection of Communications Secrets Act, Telecommunications Business Act, Act on the Consumer Protection in Electronic Commerce, Framework Act on National Taxes, Credit Information Use and Protection Act, Framework Act on Consumers, Act for the Prevention of Suicide and the Creation of Culture of Respect for Life, and Framework Act on the Safety of Products. In particular, Coupang may provide personal information to relevant authorities without the user’s consent in the event of emergencies such as disasters, infectious diseases, incidents or accidents posing imminent threats to life or bodily safety, or imminent loss of property.

Legal Basis	Recipient	Recipient	Recipient	Period of Retention and Use
Article 17(1)2 of the Personal Information Protection Act (Where personal information is provided in accordance with Article15(1)2) Article 254(2) (Special Customs Clearance for Electronic Commerce Goods, etc.) of the Customs Act	Korea Customs Service	Verification of PCCC	Where the purchaser and the recipient are the same: name, mobile phone number, address (postal code) Where the purchaser and the recipient are different: name, mobile phone number, address (postal code), Personal Customs Clearance Code	Destroyed after verification
Article 17(1)2 of the Personal Information Protection Act (Where personal information is provided in accordance with Article15(1)2) Article 46(1) (Reporting on detection of foreign substances in foods) of the Food Sanitation Act	Ministry of Food and Drug Safety	Reporting and handling of foreign substances	Name, phone number, address	As prescribed by the Food Sanitation Act
Article 17(1)2 of the Personal Information Protection Act (Where personal information is provided in accordance with Article15(1)2) Article 5 of the Notice on Delegation of Authority for Mail-Order Sales of Liquor issued by the National Tax Service Article 17(1)2 of the Personal Information Protection Act (Where personal information is provided in accordance with Article15(1)2) Article 21 (Other Income), Article 127 (Liability for Withholding Taxes), and Article 164 (Submission of Statement of Payment) of the Income Tax Act	National Tax Service	Provide quarterly breakdown of online liquor orders	Name, address, order information	Retention period in accordance with the public notice from the National Tax Service
Payment of taxes for Coupang Experience Group participants	Name, Resident Registration Number	Destroyed upon achieving the purpose

Statutory Grounds	Recipient	Purpose of Provision	Information Provided	Period of Retention and Use
Article 17(1)1 (“Where consent is obtained from a data subject”) of the Personal Information Protection Act	Article 17(1)1 (“Where consent is obtained from a data subject”) of the Personal Information Protection Act	Processing of product/service delivery or reservation, customer support and follow-up calls, customs clearance processing, and after-sales (AS) request/inquiry handling	Name, email, mobile phone number – For purchases of products requiring delivery or in-person visits: address – For purchases of products requiring customs clearance: PCCC, order number – For accommodation reservations: Information of one of the guests (name, email, mobile phone number) – For after-sales service (AS) requests: name, address, mobile phone number ※ Transferred via network at the time of purchase	Until the purpose of the provision of goods or services is achieved or settlement is complete
Vendors responsible for delivering the event prize (Nongshim, Kwangdong, Ildong Foodis)	Prize delivery	Name, mobile phone number, address(for prize delivery)	Destroyed upon achieving the purpose
Coupang Fulfillment Services	(Rocket Growth) Logistics and delivery	Customer management number, order number, recipient information (name, mobile phone number, delivery address, waybill ID)
Apple Korea	AppleCare+ purchase, buyer identification, provide support for the product under warranty, hardware warranty	Name, email, device serial number
Lotte Insurance	Purchasing of insurance products, purchaser identity verification, provision of service and hardware warranty during insurance policy period.	Name, email, mobile phone number, ID, order number, date of purchasing device and insurance product, device information (product line, purchase price, manufacturer, product name and serial number)
Suppliers or sellers contracted with the Creator	Product shipment for “Creator Members,” (in the case of events) winner confirmation and prize delivery	Name, contact information (mobile phone number or landline number), address
Assurant Korea	Confirmation of smartphone purchase and providing reward	Order number, name, address, phone number, serial number of the newly purchased device (applicable only when purchasing Samsung mobile devices eligible for additional trade-in compensation and applying for such compensation)
Consultation regarding the FTI (Forward Trade-in) program, and guidance on and promotion of the compensation program	Name, mobile phone number, device purchase date, device information (model name, storage capacity), installment period, order number	Destroyed within 180 days from the installment maturity date of the FTI program
Brand membership service provider (L’Oréal Korea)	Brand membership application, customer management points accumulation, customer consultation	Encrypted customer management number, order number, brand application and cancellation status, purchase and cancellation history of the requested brand product (payment date, product name, quantity and price)	Destroyed upon withdrawal from My Beauty Shop integrated membership
KB Card	For preferential screening	Coupang usage history – Number of transactions, product category ratio, amount, payment method ratio, number of transactions Coupay Money usage history – Number of transactions, ratio, amount Pay Later usage history – Usage period, amount * All usage history is aggregated and provided based on the total usage amount within the most recent one-year period, and individual usage details are not provided.	Destroyed upon membership withdrawal (however, where a different retention period is prescribed by applicable laws and regulations, such period applies)
Customer statistics and analysis, product and service R&D, providing information about and promoting products and services	CI, purchase history (product category, product name, quantity)
Coupang Pay	Provision of the Coupang Cash service	User ID (email)	Retained for 5 years in accordance with the Act on Consumer Protection in Electronic Commerce, etc. and then destroyed
(When using Coupay for the first payment) Subscription to Coupang Pay’s payment service, identity verification, member information management, verification of the authority to process payment requests and transaction requests, and response to customer inquiries	User ID (email), customer management number	Retained for up to 5 years after the termination of the commercial transaction relation (if the purpose for which the information was used is achieved before that period, the information shall be destroyed within 3 months from the achievement)
(When using Coupay for the first payment) Membership management	User ID (email), customer management number, and information for user verification (name, date of birth, gender, mobile phone number, CI, DI, Korean/non-Korean information)
(When using Coupay for the first payment) Detection and prevention of fraudulent transactions and abnormal activities	User ID (email), customer management number, transaction information (transaction date, transaction amount, recipient’s name, recipient’s phone number, shipping address), and account status
(During Coupang identity verification) Verification of Coupang Pay membership and updates to member information	User ID (email), customer management number, and information for identity verification (name, date of birth, gender, mobile phone number, CI, DI, Korean/non-Korean information)	It is destroyed after updating member’s information. However, information for identity verification shall not be provided if you are not a Coupang Pay member.
(When registering an overseas-issued card with Coupay) Subscription to Coupang Pay’s payment service, identity verification, and verification of the authority to process payment requests and transaction requests	User ID (email), customer management number, and order number	Retained for up to 5 years after the termination of the commercial transaction relation (if the purpose for which the information was used is achieved before that period, the information shall be destroyed within 3 months from the achievement)
(When registering an overseas-issued card with Coupay) Customer inquiry handling	User ID (email), customer management number, order number, name, and phone number
(When registering an overseas-issued card with Coupay) Detection and prevention of fraudulent transactions and abnormal activities	User ID (email), customer management number, phone number, name, date of birth, order information (order number, transaction date, transaction amount, recipient’s name, recipient’s phone number, and shipping address), access log, client IP address, and device information
Verification of Coupang membership to convert Coupang Cash into reward points of an affiliate company	CI	Retained during the duration of using the service (However, if retention is required by the provisions of relevant laws and regulations, the information shall be retained accordingly.)
Verification of Coupang membership to convert reward points of an affiliate company into Coupang Cash	Customer management number
To prefill Coupang Wow Card applications	Customer management number, address	Destroyed immediately upon completing card application
For preferential screening	Coupang usage history – Number of transactions, product category ratio, amount, payment method ratio, number of transactions, Coupay money usage history – Number of transactions, ratio, amount, Pay Later usage history – Usage period, amount * All usage history is aggregated and provided based on the total usage amount within the most recent one-year period, and individual usage details are not provided.	Destroyed immediately after providing the information to KB Card
Provision of the Gift Card service	Name, phone number, customer care number, purchase amount	Retained for 1 year or 5 years following membership withdrawal and then destroyed (5 years if the payment amount is KRW 10,000 or more, based on the payment date)
Korea Customs Service	(For direct purchases from the United States) Customs clearance processing	Order number, buyer and product recipient names, product recipient mobile phone number, product recipient postal code, product recipient PCCC, product information, invoice number	Retained for the retention period prescribed under Article 289 of the Enforcement Decree of the Customs Act and then destroyed
Nol Universe, NHN Link	Buyer identification	Name	Retained for 5 years and then destroyed

Statutory Grounds	Recipient	Country	Date and Method	Personal Information Items	Purpose of consignment	Period of Retention and Use
Article 28(8) (“Where consent is obtained from a data subject”) of the Personal Information Protection Act	Merchandise Sales and Delivery Providers – Vendor List	see Vendor List	Transmitted over a secure network at the time of purchase	Name, email address, mobile phone number, order number <Required items to be additionally collected by product/service> – For purchases of products requiring delivery or in-person visits: address – For purchases of products requiring customs clearance: PCCC, order number – For accommodation reservations: Information of one of the guests (name, email, mobile phone number)	Processing of product/service delivery or reservation, customer support and follow-up calls, customs clearance processing	Retained in accordance with the retention period prescribed by applicable laws and regulations of each country and then destroyed

Coupang outsources certain personal information processing tasks to ensure the smooth provision of services. In accordance with Article 26 of the Personal Information Protection Act, Coupang stipulates the following details in the consignment contract: prohibition of personal information processing for purposes other than to perform consigned tasks, technical and administrative safeguard measures, restrictions on re-consignment, management and oversight of the consignee, and the liability for damages. Coupang also manages and oversees whether the consignee processes personal information in a secure manner.

Consignee	Purpose
KS Korea Employment Information, Transcosmos Korea, UBASE, Hyosung ITX, Metaem, Ddanyo	CS counseling
Korea Mobile Certification Inc.	Identity verification
Individual delivery contractors (Flex), SDS	Delivery of goods
Coupang Logistics Services	Product delivery, installation, and after-sales service (AS)
SK Magic, Samsung Electronics, Howser, Nexen, LG Electronics, Coupang Logistics Services	Product delivery and installation
Webspread, Chai Communication, Chai Communication, Chai Communication	Announcement of event winners and delivery of prizes *Re-consignment Status (Jella Blue Korea) – Prize delivery: Coop Marketing – Handling of taxes: Parc.1
Goodsflow	Delivery and return tracking
NICE D&R	Finding the Right Tire for My Car
LG Uplus, KT Corporation, SK Broadband	“Safety Number” (one-time virtual phone number) service
Coupang Fulfillment Services	Warehouse-related tasks
LG Uplus, KT, Kakao Corp., NHN Cloud, LGCNS	Message delivery service
Metanet Global Corp. , Unipost	Settlement of taxes and statutory charges
Amazon Web Services Inc.	Data retention
GS Neotek	Customer service system maintenance
NICE AMC	Informing the amount of paid and unpaid charges Debt collection and related services Identity verification (Income Tax Act reporting)
Coupang Pay	Development and maintenance of the Pay Later system Payment processing (bank transfer, credit card, mobile payment, creation and management of virtual accounts, deposit without passbook and other payment methods, refund account verification), account verification, prevention of payment fraud Cash receipt issuance Support related to fraud operations User authentication and provision of payment methods for table order payments via Coupang POS Marketing and promotions
Coupang Eats Service, Ltd.	Processing order delivery on Coupang Eats and responding to inquiries Detection and prevention of fraud in Coupang Eats *Re-consignment Status – Customer inquiry handling for Coupang Eats: KS Korea Employment Information, Transcosmos Korea, Metaem, UBASE – Delivery services for Coupang Eats: Eats Delivery Partners (individual delivery drivers) – Return pickup: K-Drive
Hubnet	Customs clearance and domestic delivery for direct purchases from China and the U.S.
Genesys	Use of a call management system for customer service operations
LnK Solutions	Payment system maintenance
Samsung SDS	Payment processing
Tencent Cloud	Coupang Live chat service
Ssoldout	Ticketing, identity verification
Sendbird	Provision of live chat support
Startree	Improvement of delivery service

Statutory Grounds	Consignee (Information Management Officer)	Country	Date and Method	Personal Information Items	Purpose of Consignment	Period of Retention and Use
Article 28-8(1)3 of the Personal Information Protection Act (“where it is necessary to entrust the processing of personal information and to retain such personal information in order to conclude and perform a contract”)	Coupang Global LLC*	U.S.	Transmission over a secure network when personal information is required for business purposes	Personal information collected and used when using the service	System development and maintenance	Destroyed upon the termination of consignment contract
Coupang Asia Holdings Pte. Ltd.*	Singapore
CPNG India Pvt. Ltd.*	India
Zendesk ([email protected])	Japan	Name, email address, telephone/mobile phone number, customer management number; (for intellectual property infringement reports) name of the rights holder, name of the reporter (or representative), address, telephone/mobile phone number, email, copy of ID card (name, date of birth)	Use of CS management system for customer center operation
MaestroQA ([email protected])	U.S.	Call recordings, customer management number, order number, consultation history	Quality management of customer service center consultations
Qualtrics ([email protected])	Australia	Personal information collected and used when applying for participation in Coupang Research (interviews, surveys) and conducting the research	Managing Coupang Research (interviews, surveys) panels, conducting research, and analyzing results
Amazon Web Services ([email protected])	U.S.	Transmission over a secure network when personal information is required for business purposes	Information required for the provision and analysis of personalized services (e.g., service usage history)	Provision of personalized service
U.S.	Transmission over a secure network when sending emails	Email	Sending emails
U.S.	Transmitted over a secure network when ordering Jikgu products	Order number, name, email, address, mobile phone number, Personal Customs Clearance Code (PCCC)	Data processing and storage for the Jikgu service
Braze Inc ([email protected])	U.S.	Transmitted over a secure network when using Coupang Play	Coupang Play customer management number, service usage history	Coupang Play push notification service
WORKATO ([email protected])	U.S.	Transmission over a secure network when personal information is required for business purposes	Transcripts of chats/calls, customer management number, order number	Operation support and maintenance of consultation solutions

3. Use and Provision Without User’s Consent

In accordance with Articles 15(3) or 17(4) of the Personal Information Protection Act, Coupang may use or provide additional personal information without the user’s consent.

Recipient	Purpose of Provision	Information Provided	Period of Retention and Use
Coupang Eats Service, Ltd.	Delivery-related consultation, dispute handling	Chat timestamp, chat content, personal identifier	Retained for 3 years following chat termination

To ensure responsible handling of personal information without user consent, Coupang has carefully considered the following:

The purpose of provision (handling delivery-related inquiries and dispute resolution) is closely related to the original purpose of collection.
Since chat involves communication between two parties, it is reasonably foreseeable that the two companies of each party may access the information to provide support.
The information is provided solely to support delivery-related inquiries and customer dispute resolution and does not unfairly infringe upon the user’s interests.
Necessary safeguard measures, such as minimal data processing and encryption, are in place to ensure the security of personal information.

4. Procedures for and Methods of Destroying Personal Information

Coupang destroys personal information when the information is rendered unnecessary by the expiration of its retention period or by achieving the purpose of processing.

The procedure for and methods of destroying personal information are as follows:

Destruction procedures : Once the purpose of personal information has been achieved, the information is separately stored and then destroyed after retaining for a certain period of time in accordance with the internal policies and applicable laws.
Destruction methods : Once the purpose of personal information has been achieved, the information is separately stored and then destroyed after retaining for a certain period of time in accordance with the internal policies and applicable laws.

However, if it is required by other applicable laws to retain the personal information even after the expiration of personal information retention period consented by the user or after achieving the purpose of processing, the information will be separately stored and managed.

Information Retained	Retention Period	Statutory Grounds
Records of settlement and supplying goods, etc.	5 years	Act on the Consumer Protection in Electronic Commerce, Etc.
Records on contract or contract termination	5 years
Records of customer complaints or dispute settlement	3 years
Records of indication or advertisement	6 months
The data verifying the collection, use, and provision of location information	6 months	Act on the Protection and Use of Location Information
Website/app visit history	3 months	Protection of Communications Secrets Act
Information required for the payment of taxes on behalf of the user	5 years	Income Tax Law
Books and supporting documents for all transactions under tax laws	5 years (7 years for offshore transactions)	Framework Act on National Taxes, Corporate Tax Act

5. Rights and Obligations of Users and Legal Representatives and How to Exercise the Rights

Users may request access, correction, deletion, withdrawal of consent, or suspension of processing of their personal information through the methods set forth below. Information that cannot be directly accessed through the service may be requested and confirmed through “9. Teams Responsible for Personal Information Protection and Customer Complaints Handling.” The progress and results of such requests will be communicated within 10 days from the date the request is received. Legal representatives or duly authorized agents must submit a power of attorney, a certificate of family relations, or other supporting documents to verify their authority.

hidden

Methods available through the service

Coupang web: My Coupang > My Information > View/Update Personal Information
Coupang app: My Coupang (tap the profile icon at the bottom of the app – select the settings icon) > My Account > Edit info
Coupang Eats app: My Eats > Addresses, Payment, Settings
Coupang Play app: Profile > Settings > Account > My Coupang Account

However, withdrawing of consent, deleting or suspending the processing may be limited in the following cases:

Where there are special legal provisions, or it is inevitable to fulfil a legal obligation;
Where there is a possibility of causing harm to another person’s life or body or unjustly infringing on another person’s property or interests; or
Where the services agreed upon by the customer cannot be provided unless personal information is processed and the user has not clearly stated his/her intention to terminate the contract.

User IDs and passwords must not be transferred or lent to others, and Coupang shall not be held liable for any issues arising therefrom. Any infringement of another person’s information or dignity may be subject to penalties under applicable laws, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection.

5.1 Collection, Use and Provision of Behavioral Information and Refusing Consent

Coupang uses user’s online activity records to better understand our users so as to avoid meaningless and unnecessary advertisement exposure and increase the exposure of informational advertisements that reflect the products of interest to users. However, behavioral data classified as sensitive categories, such as race, religion, sexual orientation, and medical history, is not used for behavioral advertising.

Behavioral advertising based on online behavioral data uses cookies or advertising identifiers (ADID/IDFA) to identify and analyze users’ interests, preferences, tastes, and inclinations (hereinafter, “behavioral data”), such as website visit history, app usage history, and purchase and search history, and provides behavioral advertising based on such data.

Coupang provides information on its behavioral advertising practices to ensure users’ rights in accordance with the “Guidelines on the Protection of Personal Information for Online Behavioral Advertising.”

Information Collected	Service usage history
Method of Collection	Automatically collected when visiting, searching, or using the website/app
Purpose of Collection	Provision of behavioral advertising based on interests, preferences, tastes, and inclinations
Period of Retention and Use	Behavioral data used for online behavioral advertising is retained for up to 1 year and then destroyed

Recipients	Appier, Cauly, Criteo, Meta, Buzzvil, Cashslide, Google, Kakao, Branch
Information Provided	Service usage history
Purpose of Provision	Provision of behavioral advertising
Period of Retention and Use	Destroyed 180 days after the date of collection

How to Delete Cookies Stored on a Web Browser	• Chrome: Settings > Privacy and security > Clear browsing data • Edge: Settings > Privacy, search, and services > Cookies > See all cookies and site data > Remove all • Safari: Settings > Privacy > Manage Website Data > Remove
How to Block Third-Party Cookies on a Web Browser	• Chrome: Settings > Privacy and security > Third-party cookies > Block third-party cookies • Edge: 1. Settings > Privacy, search, and services > Tracking prevention > Select “Balanced” or “Strict” 2. Settings > Privacy, search, and services > Cookies > Block third-party cookies • Safari: Settings > Privacy > Block All Cookies
How to Block All Cookies in Your Web Browser	• Chrome: Settings > New Incognito Window (Shortcut: Ctrl+Shift+N) • Edge: Settings > New InPrivate Window (Shortcut: Ctrl+Shift+N) • Safari: File > New Private Window (Shortcut: Shift+Command+N)
How to Block Advertising Identifiers on Your Smartphone	• Android: Settings > Security & Privacy > Additional Privacy Settings > Ads > Reset advertising ID / Delete advertising ID • iOS: Settings > Privacy & Security > Tracking > Turn off “Allow apps to request to Track” ※ Menu options and procedures may vary depending on the mobile OS version.

Coupang Customer Service	• Phone: 1600-3733 • Email: [email protected]

5.2 Operation and Installation of an Application that Automatically Collects Personal Information and How to Opt Out

Coupang uses cookies, which store and retrieve user information, in order to provide personalized services. When a user accesses the website, the web server reads the contents of cookies stored on the user’s device to maintain user preferences and provide personalized services.

Purpose of Using Cookies

Cookies enable users to conveniently access and use websites according to their preferences when they visit a website. They are also used to provide optimized information, including behavioral advertising, based on users’ website visit history and usage patterns.

Refusal of Cookie Collection

Users have the right to choose whether to allow cookies to be installed. Accordingly, users may configure their web browser settings to allow all cookies, to receive a prompt each time a cookie is stored, or to refuse the storage of all cookies. However, if users refuse the installation of cookies, it may be inconvenient to use the website, and certain services that require login may be difficult to access.

hidden

How to Opt Out of Cookie Collection

Web browser

Chrome: Click the “⋮” icon in the top-right corner of the browser > New Incognito Window (Shortcut: Ctrl+Shift+N)
Edge: Select the “…” icon in the upper-right corner of the web browser > New InPrivate Window (Shortcut: Ctrl+Shift+N)
Safari: Top menu > “File” > New Private Window (Shortcut: Command+Shift+N) * In addition, major web browsers such as Firefox and Opera also provide functions to delete cookies. * Cookie refusal methods may vary depending on the web browser version.

Mobile browser

Chrome: On the mobile browser, tap the “…” icon in the bottom-right corner > New Incognito Tab
Edge: Select the “≡” icon in the bottom-right corner of the mobile browser > New InPrivate Tab
Safari: Tap the “Tabs” icon in the bottom-right corner of the mobile browser > Privacy tab > Done
Samsung Internet: In the mobile browser, tap the “☰” or “three dots” icon in the bottom-right corner > Settings > Sites and Downloads > Site Permissions > Cookies * Cookie refusal methods may vary depending on the mobile browser version.

6. Personal Information Safeguard Measures

Coupang has technical and administrative safeguards in place to ensure that users’ personal information is not stolen, leaked, forged or damaged while processing the information.

Technical Safeguards: Real-time monitoring and blocking of hacking attempts and data leak, implementation of access control, storage of access logs and prevention of their forgery/alteration, at-rest encryption of passwords and personal information and in-transit encryption of data
Administrative Safeguards: Operation of a dedicated privacy team, regular training for PI handlers, awareness campaigns toward employees and regular inspection for compliance
Physical Safeguards: Installation and operation of systems in areas with controlled access, and establishment and operation of secure access control procedures

7. Processing of personal location information

Coupang safely manages users’ personal location information in accordance with the Act on the Protection, Utilization, etc. of Location Information (the “Location Information Act”).

The purpose of processing and retention period of personal location information

Coupang Eats Service may retain personal location information for the minimum period necessary to achieve the purpose of use if necessary to provide location-based services in accordance with Article 7 of Terms and Conditions of Location-based Services.

hidden

Content of location-based services

Provision of delivery restaurant listings based on the user’s location
Provision of address search functionality based on the user’s location

In the case of services in which location information is stored together with posts or content written by users, personal location information may be stored during the retention period of the posts or content.

Disposal of personal location information and data confirming the collection, use, and provision of personal location information

Personal location information of users will be securely destroyed in a manner that prevents recovery or restoration once the purpose of collection and use has been achieved or when the purpose of processing personal location information has been fulfilled, such as upon membership withdrawal. The destruction procedures and methods follow those set forth in “4. Procedures for and Methods of Destroying Personal Information.” Where retention is required by applicable laws or justified for other legitimate reasons, such information shall be retained accordingly.
Data confirming the collection, use, and provision of users’ location information is retained in the location information system for 6 months in accordance with Article 16(2) of the Location Information Act.

Provision and notification of personal location information to third parties

Coupang does not provide personal location information to a third party without the users’ consent. If Coupang provides the information to a third party, It notifies users of the recipient and the purpose of provision in advance and obtain consent.
If personal location information is provided to a third party with the consent of the users, the users shall be immediately notified of the receiving party, the date of provision, and the purpose of provision each time.

Rights and obligations of guardians for children under the age of 8, etc. and how to exercise them

In accordance with Article 26(1) of the Location Information Act, if the person responsible for protection agrees to the use or provision of personal location information for the protection of the life or body of any of the following users, it shall be deemed that the user themselves consents thereto.

The person in charge of protection who wants to exercise the right must submit to Coupang a document certifying that he or she is the person responsible for protection in the written consent form.

Child under the age of 8
Adult ward
Persons with mental disabilities under Article 2(2)2 of the Act on Welfare of Persons with Disabilities, who are severely disabled under Article 2(2) of the Act on the Employment Promotion and Vocational Rehabilitation of the Persons with Disabilities (Limited to those who are registered as persons with disabilities according to Article 32 of the Act on Welfare of Persons with Disabilities)

The Location Information Manager is concurrently held by the Chief Privacy Officer (CPO), who is the head of the privacy team under “9. Teams Responsible for Personal Information Protection and Customer Complaints Handling.” For more detailed information regarding the processing of personal location information, please refer to the “Coupang Eats Services – Terms of Use for Location-Based Services.”

8. Processing of Connecting Information (CI)

Coupang securely manages users’ connecting information in accordance with the Act on Promotion of Information and Communications Network Utilization and Information Protection.

Matters Related to the Processing of Connecting Information, Including its Collection

In accordance with the “Coupang Terms and Conditions” and the “Consent to the Collection and Use of Personal Information” for Coupang services, connecting information may be retained for the minimum period necessary for user identity verification. For further details, please refer to “1. Personal Information Collected, Purpose of Collection, and Retention Period.”

hidden

Purposes of Processing Connecting Information

Prevention of fraudulent activities by users
Identity and age verification

Measures to Protect Users’ Rights Related to the Generation and Processing of Connecting Information

Coupang operates procedures through which users may request access to matters related to the processing of connecting information. For further details regarding request methods and procedures, please refer to “5. Rights and Obligations of Users and Legal Representatives and How to Exercise the Rights.”

Procedures for Receiving and Handling User Complaints Related to Connecting Information

Coupang operates a contact channel through which users can submit inquiries, complaints, or report damages related to the generation and processing of all connecting information arising from their use of the services. For more details, please refer to “9. Teams Responsible for Personal Information Protection and Customer Complaints Handling.”

Measures to Prevent Harm Related to Connecting Information and Ensure Security

Coupang implements the following safeguards to ensure the security of the generation and processing of connecting information.

Establishment of an Internal Management Plan and Employee Training Coupang operates procedures through which users may request access to matters related to the processing of connecting information. For further details regarding request methods and procedures, please refer to “5. Rights and Obligations of Users and Legal Representatives and How to Exercise the Rights.”

Establishment of an internal management plan for connecting information
Designation of a person responsible for the protection of connecting information
Conducting training on the protection of connecting information at least once per year

Encryption of Storage and Transmission

Use of encrypted communication channels when transmitting or receiving connecting information over the Internet
Encryption of connecting information using secure algorithms when storing such information

Separate Storage of Connecting Information

Separate storage of connecting information and Resident Registration Numbers to prevent both from being breached simultaneously through unauthorized access or other incidents

Access Management and Minimization

Limiting the number of personnel with access to connecting information to the minimum necessary

Security Inspections and Vulnerability Assessments

Conducting regular vulnerability assessments of systems that process connecting information
Conducting inspections of connecting information processing practices at least once per year
Continuously implementing other measures for the protection of connecting information as required under applicable laws and regulations

• The Connecting Information Manager is concurrently held by the Chief Privacy Officer (CPO), who is the head of the privacy team under “9. Teams Responsible for Personal Information Protection and Customer Complaints Handling.”

9. Teams Responsible for Personal Information Protection and Customer Complaints Handling

Coupang has designated the following teams responsible for personal information protection and customer complaint handling to address user complaints and provide remedies for damages related to the processing of personal information.

Position			Contact Point
Privacy Team			Digital Trust Privacy
Compliant Handling Team	Coupang Customer Service (Coupang, Coupang Play, Live Creator)	Contact	1660-3733
		Email	[email protected]
		Coupang Web	1:1 live chat
		Coupang App	Customer Center > Contact Us
	Coupang Eats CS Center	Contact	1660-2822
		Email	[email protected]
		Coupang Eats App	My Eats > Customer Support
	Coupang Partners CS Center	Email	[email protected]

Personal Information Dispute Mediation Committee: 1833-6972 (without area code) (www.kopico.go.kr)
Personal Information Infringement Report Center: 118 (without area code) (privacy.kisa.or.kr)
Identity Verification Support Center: (No area code required) 1433-25 (identity.kisa.or.kr)
Supreme Prosecutors’ Office(PO): 1301 (without area code) (www.spo.go.kr)
Korean National Police Agency: (No area code required) 182 (ecrm.police.go.kr)

Effective Date: 05. 22. 2026