Privacy Notice

Coupang Privacy Notice

Coupang Corp. (hereinafter referred to as “Coupang”) establishes and discloses the following Privacy Notice to protect users’ personal information (and personal location information) in accordance with the Personal Information Protection Act and Act on the Protection and Use of Location Information(hereinafter referred to as “Location Information Act”) and handle related issues in a quick and seamless manner. Any updates to this Privacy Notice will be posted on our website’s notice board, including the effective date and the details of the revision.

This Privacy Notice applies to Coupang (eCommerce), Coupang Eats, Coupang Play, Coupang Live Creator, and Coupang Partners. This does not apply to other services provided by Coupang.

Coupang will not use the collected personal information for purpose other than the original intended purpose of collection, and if the purpose of use changes, we will take necessary measures such as obtaining separate consent under Article 18 of the Personal Information Protection Act. Coupang processes and retains personal information within the period of retention of it in accordance with the applicable laws and within the period notified and agreed upon when collecting personal information from users. The period of processing and retaining personal information under the applicable laws can be found under 4. Procedure for and Methods of Destroying Personal Information.

Also, you can find the information about the processing of personal location information relevant to location-based services under “7. Processing of Personal Location Information”.

1. Personal Information Collected, Purpose of Collection, and Retention Period

Coupang collects the minimum amount of personal information necessary from the users. We use the users’ personal information, service visit, search, and usage records to analyze their interests and preferences to provide personalized service and an innovative shopping experience that will let the users receive products when, where and how they want.

Type Purpose of Collection Information Collected Period of Retention and Use
Required Membership sign-up, user identification, and member management User ID (email), name, mobile number, password Retained for 90 days from the membership withdrawal and then destroyed
Personalized service User ID (email), name, mobile number, service use records, age, and gender *
Fraud prevention User ID (email), name, mobile number, and service use records detected as a fraud, CI Retained for 6 month from the membership withdrawal and then destroyed
Optional Marketing and promotion of services using Coupang ID User ID (email), mobile number Destroyed at the time of membership withdrawal
Personalized advertisement using demographic traits and estimated interests and tendencies of a user
Service use records, age, and gender *
Personalized advertisement blocked when consent is withdrawn

, Destroyed at the time of membership withdrawal

* This information is processed only for users who have verified their identity after signing up as a member.

Coupang may collect additional personal information (Abbreviation: ‘PI’)  after obtaining consent from users to provide various services.

‘PI’ additionally collected by separate services

When a user uses services of Coupang Eats, Coupang Play, Coupang Live Creator, or Coupang Partners, Coupang collects minimal personal information after obtaining consent from the user.

'PI' collected when using Coupang Eats
'PI' collected when using Coupang Play
'PI' collected when using Coupang Live Creator
'PI' collected when using Coupang Partners

2. Provision and Consignment of Personal Information

Coupang provides personal information to third parties only within the scope of consent obtained from the user.

However, if there are special provisions in other laws such as Personal Information Protection Act, Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc., Communication Secret Protection Act, Telecommunication Business Act, Act on Consumer Protection in Electronic Commerce, etc., Framework Act on National Taxes, Act on the Use and Protection of Credit Information, Basic Consumer Act, Act for Suicide Prevention and Creation of a Culture of Respect for Life, Framework Act On The Safety Of Products, Coupang may provision users’ personal information to third parties in accordance with the lawful procedures stipulated by those Acts. In particular Coupang can provision personal information to related authorities without the consent of the user in the event of an emergency such as a disaster, infectious disease, event, or accident that causes imminent threat to life or health, or imminent loss of property.
The provision of 'PI' to third parties(Domestic)
The provision of 'PI' to third parties(International)
Coupang consigns the processing of personal information to effectively provide services. In accordance with Article 26 of the Personal Information Protection Act, Coupang stipulates the following details in the consignment contract: prohibition of personal information processing for purposes other than to perform consigned tasks, technical and administrative safeguard measures, restrictions on re-consignment, management and oversight of the consignee, and the liability for damages. Coupang also manages and oversees whether the consignee processes personal information in a secure manner.
The consignment of 'PI' to third parties(Domestic)
The consignment of 'PI' to third parties(International)

3. Use and Provision Without User’s Consent

Coupang processes and provides personal information only within the scope of consent obtained from the user. However, pursuant to Articles 15(3) and 17(4) of the Personal Information Protection Act, the personal information may be additionally used or provided without the user’s consent. Coupang will take into account the following details when additionally using or providing personal information without the consent of the data subject:
  • Whether it is relevant to the purpose of the original collection
  • Whether the additional use or provision of personal information is predictable in light of the circumstances where personal information was collected or the practice of personal information processing
  • Whether the interests of the user are unjustly infringed
  • Whether necessary security measures such as pseudonymization or encryption have been taken
  • Should the additional use or provision of personal information continue to happen, we will disclose the criteria for deciding the above and assess whether those criteria are being met.

    4. Procedure for and Methods of Destroying Personal Information

    Coupang destroys personal information when the information is rendered unnecessary by the expiration of its retention period or by achieving the purpose of processing. However, in accordance with the internal policy pursuant to Article 15(1)6 of the Personal Information Protection Act, the records of actions taken against fraudulent activities are separately stored and then destroyed after retaining for 5 years.

    The procedure for and methods of destroying personal information are as follows:
    • Procedure of Destruction : Once the purpose of personal information collection and use has been achieved, the information is separately stored and then destroyed after retaining for a certain period of time in obligation with the internal policies and applicable laws

    • Methods of Destruction : Personal information in electronic form is destroyed through means that will make the data irrecoverable, whereas personal information stored in a hard copy format is destroyed using a shredder.

    However, if it is required by applicable laws to retain personal information even after the expiration of personal information retention period consented by the user or after achieving the purpose of processing, Coupang separately stores and manages to retain the necessary personal information.

    Information RetainedRetention PeriodStatutory Grounds
    Records of settlement and supplying goods, etc.5 yearsAct On the Consumer Protection In Electronic Commerce
    Records of contract or subscription withdrawal, etc.5 years
    Records of customer complaints or settlement of disputes3 years
    Records of indication or advertisement6 months
    Records of electronic financial transactions5 yearsElectronic Financial Transactions Act
    Data of confirmation on collection, use and provision of location information of location data subject
    6 monthsAct on the Protection and Use of Location Information
    Website/app visit history3 monthsProtection Of Communications Secrets Act
    Information for the payment of taxes and public utilities’ charge5 yearsIncome Tax Law
    Records on the collection, processing, and use of credit information
    3 years
    Act on the Use and Protection of Credit Information
    Personal credit information5 years
    Act on the Use and Protection of Credit Information

    5. Rights and Obligations of Users and Legal Representatives and How to Exercise the Rights

    A user’s personal information can be viewed, corrected, deleted, withdrawing of consent or suspension of processing by using the following procedure: Personal information that cannot be directly accessed on the service can be accessible by making a request to the Customer Support and Compliant Handling Team specified under “9. Chief Privacy Officer and Customer Support Team.” The progress (or the results) made on the user’s request will be replied within 10 days. A legal representative or a delegated representative must prove his or her legitimate representative status by submitting a power of attorney and a certificate of family relations, etc.
    • Coupang web: “마이쿠팡” (My Coupang) > “My 정보” (My Information) > “개인정보 확인 수정” (View/Update Personal Information)
    • Coupang app: “마이쿠팡” (My Coupang)  > “내정보 관리” (Manage My Information) > “회원정보 수정” (Update Member Information)
    • Coupang Eats app: – “My 이츠” (My Eats) > “주소관리” (Manage Addresses), “결제관리” (Manage Payment)
    • Coupang Play app: – “프로필” (Profile) > “설정” (Settings) > “계정 설정” (Account Settings)
    However, withdrawing of consent or deleting or suspending the processing of personal information may be limited in the following cases:
  • Where there are special legal provisions, or it is inevitable to fulfil a legal obligation;
  • Where there is a possibility of causing harm to another person’s life or body or unjustly infringing on another person’s property or interests; or
  • Where the services agreed upon by the user cannot be provided unless personal information is processed and the user has not clearly stated his/her intention to terminate the contract.
  • User ID and password should not be transferred or lent to others, and Coupang is not responsible for any issues caused by such actions. Any act of inflicting damage on the information and dignity of others is punishable by the Personal Information Protection Act and the Act On Promotion Of Information And Communications Network Utilization And Information Protection.

    5.1 Collection, Use and Provision of Behavioral Information and Refusing Consent

    Coupang uses user’s service use records thru online to better understand our users in order to avoid meaningless and unnecessary advertisement exposure and increase the exposure of informative advertisements reflecting interest of users to products. However, Coupang does not use behavioral information classified as sensitive such as race, religion, sexual orientation, and medical history information for the Personalized advertisement.

    Personalized advertisements based on online behavioral information are provided by utilizing service user records such as website browsing history, app usage history, purchase and search history, and others (hereinafter “behavioral information”) that can be used to identify and analyze user’s interests, attention, preferences, and tendencies based on ‘Cookies’ or ‘Advertising Identifiers (ADID/IDFA)’

    Coupang disclosure on the contents of Coupang Personalized advertisements to assure users’ rights in accordance with the Guidelines for Personal Information Protection of Online Personalized advertisements.

    The Coupang Personalized advertisements
    5.2 Installation of an Applications Automatically Collecting PI and its Operation, and Refusing Consent

    Coupang uses “cookies” that constantly store and load usage data to provide personalized services to our users. When a user accesses a website, the server reads the cookies stored in the user’s device to maintain the user’s environmental configurations and provide personalized services.

    Purpose of using cookies

    When a user accesses a website, cookies let them access according to their own settings and use it easily. They are also used to provide optimized or Personalized advertisement through browsing history and use tendencies.

    Blocking cookies
    It is up to the user to allow or decline cookies. In other words, users can choose to accept all cookies, check every time they receive and store a new cookie or refuse to store any cookies. However, rejecting cookies may cause inconveniences as you use the web and you may be experience difficulties when using services that require signing in.

    Web browser

    • Chrome: Web browser settings > Privacy and security > Clear browsing data
    • Edge: Web browser settings > Cookies and site permissions > Manage and delete cookies and site data
    • Safari: Preferences > “Prevent cross-site tracking” and “Block all cookies”.
      * Other major internet web browsers such as Firefox and Opera also offer cookie deletion features.
      * Depending on the version of web browser, the way to refuse cookie collection may differ.

    Mobile

    • Android: Settings > Security & privacy > Privacy > Other privacy settings > Ads > Reset or delete ad IDs
    • iOS: Settings > Privacy & Security > Tracking > Do Not Allow App Tracking
      *  Menu and methods may vary depending on mobile OS version.

    6. Personal Information Safeguard Measures

    Coupang has technical and administrative safeguard measures in place to ensure that users’ personal information is not stolen, leaked, forged or damaged while processing the information.
    • Technical Safeguards: real-time monitoring and blocking of hacking attempts and data leak, enhanced access control on personal information processing systems, storage of access logs and prevention of their forgery/alteration, at-rest encryption of passwords and critical information, and in-transit encryption of data
    • Administrative Safeguards: Operation of a dedicated privacy team, regular training for PI handlers, awareness-raising activities toward employees, and regular inspection for compliance
    • Physical Safeguards: Install and operate the system in an area with controlled access from the outside, and establish and operate secure access control procedures.

    7. Processing of personal location information

    Coupang safely manages users’ personal location information in accordance with the Act on the Protection, Utilization, etc. of Location Information (the “Location Information Act”).
    The purpose of processing and retention period of personal location information

    Coupang Eats Service may retain personal location information for the minimum necessary period to achieve the purpose of use if necessary to provide location-based services in accordance with ‘Article 8 of Terms and Conditions of Location-based Services.’

  • User location-based delivery service
  • User location-based address finding service
  • In the case of services in which location information is stored together with posts or content written by users, personal location information may be stored during the retention period of the posts or content.
    Data of confirmation on collection, use, and provision of personal information and personal location information
    • When the purpose of processing personal location information is achieved, such as the achievement of the purpose of collection and use of users’ location information or withdrawal of membership, the information is safely destroyed so that it cannot be irrecoverable or reproducible. If there is a justifiable reason, such as data to be retained in accordance with other laws, it shall be followed.
    • Data of confirmation on collection, use, and provision of users’ location information is retained in the location information system for 6 months in accordance with Article 16 (2) of the Location Information Act.
    Provision of personal location information to third parties and its notification
  • Coupang does not provide personal location information to a third party without the users’ consent. If Coupang provides the information to a third party, we notify users of the recipient and the purpose of provision in advance and obtain consent.
  • If personal location information is provided to a third party with the consent of the users, the users shall be notified of the receiving party, the date of provision, and the purpose of provision each time.
  • Rights and obligations of guardians for children under the age of 8, etc. and How to Exercise the Rights

    In accordance with Article 26 (1) of the Location Information Act, if the person in charge of protection agrees to the use or provision of personal location information for the protection of the life or body of any of the following users, it shall be deemed that the user themselves consents thereto.

    The person in charge of protection who wants to exercise the right must submit to the company a document and the certificate of family relations, etc. certifying that he or she has an equivalent right of whom protected in accordance with terms and conditions of location based service.

    • Child under the age of 8
    • Adult ward
    • Persons with mental disabilities under Article 2(2)-2 of the Act on Welfare of Persons with Disabilities, who are severely disabled under Article 2-2 of the Act on the Employment Promotion and Vocational Rehabilitation of the Persons with Disabilities (Limited to those who are registered as persons with disabilities according to Article 32 of the Act on Welfare of Persons with Disabilities)

    The chief privacy officer (CPO) in the ‘8. the chief privacy officer and the department handling privacy complaints’ also holds the position of the chief location information manager. For other details related to the processing of personal location information, please refer to ‘Coupang Eats Service – Terms and Conditions of Location-based Services’

    8. Chief Privacy Officer and Customer Support Team

    Coupang designates a Chief Privacy Officer in charge of personal information protection as below to take responsibility for the processing of personal information, and to handle complaints and damage relief from users related to personal information processing.  

    Category Description
    Privacy Team Privacy Compliance
    Customer Support and Compliant Handling Team
    Coupang(Live Creator) CS Contact 1577-7011
    Email [email protected]
    Coupang Web 1:1 live chat
    Coupang App Customer Center > Contact Us
    Coupang Eats CS Contact 1670-9827
    Email [email protected]
    Coupang Eats App My Eats > Customer Support
    Coupang Play CS Contact 1600-9800
    Coupang Partners CS Email [email protected]
  • Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
  • Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
  • Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
  • Korean National Police Agency: 182 (ecrm.cyber.go.kr)
  • Effective Date: 6. 28. 2024

    Scroll to Top