Privacy Notice

Coupang Privacy Notice (V.9.8)

1. Types of Personal Data Collected and Used
2. Provision of Personal Data
3. Consignment of Personal Data Processing
4. Disposal of Personal Data
5. Rights and Obligations of Customers
6. Installation/Operation of Automatic Data Collection Tool and How to Opt Out
7. The Chief Privacy Officer and Staff Responsible for Privacy Inquires
8. Obligation of Notification

 
1. Types of Personal Data Collected and Used
1.1 Coupang Members

“Coupang members” refer to Customers who sign up via the Coupang website or Coupang mobile app.

Classification Purpose of Collection and Use Items to be Collected and Used Period of Retention and Use
Information collected when using the service Member sign-up; service use and customer service; Fraud monitoring and prevention; Providing refund or recall; maintaining transaction records Name, contact information (mobile phone number), ID (email address), password Destroyed without delay upon withdrawal of membership.

Information for preventing fraud (ID, fraud history) is deleted from the withdrawn member database after six months.

IP address is retained for 3 months (Protection of Communications Secrets Act)
Shipping address, service usage history (date and time of visit, IP address, etc.), device information (type, OS version)
Additional information collected when using the service Identity and age verification Verification with mobile phone: name, date of birth, sex, mobile carrier, mobile phone number, Duplicate Information (“DI”), Connecting Information (“CI”), nationality (Korean or other citizens) Verification with  These data types are destroyed without delay upon withdrawal of membership.

In order to retain transaction records, Customer identification information (DI, CI) and payment, order cancellation, refund, and shipping information are stored for five years (Act on the Consumer Protection Electronic Commerce, Etc.)
Cancellation, refund Account holder’s name, bank name, bank account number
Shipping Recipient information (name, contact information, address)
Travel User’s and companion’s information (Korean/English name)
* Additional information (e.g., date of birth) can be collected depending on the type of service.
Gift card Recipient’s name and contact information
Traditional liquor purchasing management and report to authorities Purchaser's personal data (name, date of birth, address) These data types are deleted immediately upon withdrawal of membership after completing tax office reporting.
Customs duty processing and customs clearance Personal Customs Clearance Code (PCCC) These data types are deleted immediately upon the user’s request for deletion of his or her information or withdrawal of membership.
Foreign substances report(applicable to Coupang Eats only) Name, contact information, restaurant address Three years from the submission of the report (Act on the Consumer Protection in Electronic Commerce, Etc.)
Coupang Play user identification within the service; exposed when uploading posts (review); Customer Service Coupang Play user identification within the service; exposed when uploading posts (review); Customer Service Destroyed without delay when disqualified to use the service (termination of Wow membership)
To be displayed when using Coupang Live Chat service, user identification Nickname Destructed without delay upon membership withdrawal
Coupang Live Viewer Reporter Sign Up, Guidance and conduct of customer experience interviews Name, mobile phone number, Coupang ID Until withdrawal of Coupang Live Viewer Reporter Sign Up
Compensation payment Coupang ID Until withdrawal of Coupang Live Viewer Reporter Sign Up
Delivery service improvement (Coupang Eats only) Personal location information One year from the completion of delivery; deleted immediately upon users request for deletion

These data types are deleted immediately upon the user’s request for deletion or suspension of use of his or her information or withdrawal of membership.
Marketing and analysis Email, contact information (mobile phone number) These data types are deleted immediately upon the user’s request for deletion or suspension of use of his or her information or withdrawal of membership.
Subscription Baby information (name, age, gender) These data types are deleted immediately upon the user’s request for deletion or suspension of use of his or her information or withdrawal of membership.


※ Fraud includes illegal, abusive usage or other irregular behavior, including (i) the act of illegally or irregularly obtaining economic gains such as discount coupons and event benefits provided by Coupang, for example, repeatedly rejoining after cancelling membership or repeatedly cancelling purchases; (ii) other acts prohibited by the Terms of Use, etc.; and (iii)the act of using another person’s identity.
※ We may use Customer’s purchase information to contact withdrawn or long-term inactive members to provide a refund or recall.
※ The above information can be used for service usage statistics and analysis.   



1.2 Guests
Guests refer to Customers who are not signed up to Coupang via the website or app but are using Coupang’s service (e.g., newsletter subscription.)

Category

Method of Collection

Purpose of Collection and Use

Items to be Collected and Used

Period of Retention and Use

Apply for subscription membership

Customers enter their information directly to Coupang newsletter subscription page

Delivering newsletters

Email

Deleted immediately upon opt-out of subscription


1.3 Event Participants
Event participants refer to Customers who participate in promotional events held on Coupang’s social media pages (Facebook, Kakao Story, Twitter, Instagram, Naver/Daum Cafe, etc.) or online boards.

Category

Method of Collection

Items to be Collected and Used

Purpose of Use

Period of Retention

Event participants

Customers enter their information directly to social media pages or Coupang’s bulletin board to participate in or send via email to apply for an event

Name, social media or Coupang ID

Picking event winners

Collected information is destroyed within 30 days from the end of the promotional event.

Event winners

Event winners send their information directly to Coupang via SMS, direct message, or other messaging services, or by adding a comment to the winner announcement

Goods: name, contact information, address

Mobile gift voucher (Giftishow): name, contact information

Coupang Cash: Coupang ID (email), name, contact information

Delivering prizes


1.4 Creator Members

“Creators” refer to a Coupang member who uses the real-time video and audio streaming feature of Coupang Live, a service that allows users to sell products using real-time video streaming channel provided by Coupang, to sell products.

Purpose of Collection and Use Items to be Collected and Used Period of Retention
To check creator application of customer and notify of the result Email address, whether a creator belongs to an agency, name of agency if applicable Destroyed without delay when unsubscribing from creator status (However, the data will be retained for a statutory period under applicable laws and regulations)
Creator identification in service Email address, nickname, profile picture, coupang ID
The fee calculations & payments [Individual creator] name, contact information, address, email address, domestic and foreign population, account information (bank name, account holder name, account number), social security number
[Private business creator] account information (bank name, account holder name, account number)
To be exposed to customers and vendors Email address, nickname, profile picture
To operate Coupang Live service; and to build emergency contact network Name, mobile phone number
To check relevant indicators for service improvement Nationality (Korean or other citizens), gender

1.5 How Personal Data is Collected

A. Customers enter their personal data upon sign-up or in the process of using Coupang services, after providing consent to collection of such information.
B. Personal data is collected during customer support interactions via website, email, fax, and calls.
C. Personal data is collected when Customers participate in online and offline promotional events.
D. Data generated via log analysis programs and in cookies is collected.

1.6 Personal Data Collected and Used in Accordance with Applicable Laws

Information Retained

Retention Period

Statutory Grounds

Records of payment and supplying goods, etc.

5 years

Act on the Consumer Protection in Electronic Commerce, Etc.

Records of contract or withdrawal of subscription, etc.

5 years

Act on the Consumer Protection in Electronic Commerce, Etc.

Records of Customers’ complaint or settlement of disputes

3 years

Records of indication and advertisement

6 months

Records of electronic financial transactions

5 years

Electronic Financial Transactions Act

Location data management register

6 months

Act on the Protection, Use, etc. Of Location Information

Records of website visit

3 months

Protection of Communications Secrets Act



2. Provision of Personal Data
2.1 General User
Once an order is placed and payment made, Coupang provides Customers' personal data required for the seamless process of transactions, including customer service and shipping services, to a third party (including sellers) within the required scope. Please click on the links in the Recipient column of the table below to see the detailed information. 

Recipient

Purpose of Provision

Information Provided

Period of Retention and Use

Sellers offering coupons

Providing service, verifying purchaser identity, outbound “happy calls"

Name, mobile phone number

* Address may also be provided on a limited basis depending on the type of service.

These data types are destroyed after the purpose of the provision of goods or services is achieved.

(* These data are retained for a statutory period under applicable laws and regulations.)

Sellers of tickets (performances/exhibitions/activities) 

Providing service, verifying purchaser identity, outbound “happy calls”

Name, mobile phone number

Sellers of goods

Providing service, verifying purchaser identity, outbound “happy calls”

Name, mobile phone number, shipping address, email

* If the recipient is not the purchaser, the recipient’s information (including personal customs clearance code for cross-border shipping) may be provided.

Travel suppliers

Providing service, reservation confirmation, outbound “happy calls”

Name, mobile phone number, email

* Additional information (e.g., name(s) or other information of companion(s)) may be provided depending on the type of service.

Relevant tax office

Providing online liquor sales register to the tax office on a quarterly basis in accordance with the public notice from the National Tax Service

Purchaser's personal data (address, name, date of birth), order date, product name, quantity, order amount

Providers of products directly purchased from overseas

Coupang Global LLC (US)

Providing service, verifying purchaser identity, outbound “happy calls”, customs clearance

* Purchase details are provided when a purchase is made.

Name, mobile phone number, shipping address, personal customs clearance code

* If the recipient is not the purchaser, the recipient’s information may be provided.

Providers of products directly purchased from overseas

Coupang Shanghai Trading Co., Ltd. (CHINA)

Providing service, verifying purchaser identity, outbound “happy calls”, customs clearance

* Purchase details are provided when a purchase is made.

Name, mobile phone number, shipping address, personal customs clearance code

* If the recipient is not the purchaser, the recipient’s information may be provided.

Oliva Co., Ltd.

Confirmation of smartphone purchase in Coupang and providing reward programs

Coupang order number, name/telephone number/address of the customer who ordered, and ID of the product purchased in Coupang

Until the purpose of providing compensation program services including payment of compensation amount is achieved

※ Notice of right to refuse consent to the personal data provision
Provision of personal data to a third party is necessary for Customers to use some of Coupang’s services. Customers may choose not to provide their personal data required for the services, in which case some of those services may be restricted from those Customers. Coupang provides Customers’ personal data to a third party only when a transaction is made and notifies customers of the details of provision when they make a purchase. Rocket Delivery products are shipped directly by Coupang, and therefore do not entail the provision of personal data to third parties (including sellers).


2.2 Provision of personal credit information

Recipient Purpose of Provision Information Provided Period of Retention and Use
Korea Credit Bureau, NICE Information Service Co., Ltd. Verification of credit score, and credit information history; credit assessment; to develop credit-related model and use for (statistical) analysis; verification of statistics to provide customized service; to be used by credit bureau (to register overdue payment information, etc.); to maintain or manage the current contract and the ones signed before Name, date of birth, gender, mobile phone number, duplicate information (DI), customer number, date of sign-up, payment and overdue payment status. Retained for a statutory period under applicable laws and regulations

2.3 Creator Members

Coupang provides Creators' personal data to contracted suppliers or sellers (third-party) for product shipping within the required scope. Please click on the links in the Recipient column of the table below to see the detailed information.

Recipient Purpose of Provision Information Provided Period of Retention and Use
Supplier or seller who contracted with creator Product shipping Name, contact information, address Destroyed without delay after product is dispatched (However, the data will be retained for statutory period under applicable laws and regulations)

3. Consignment of Personal Data Processing
Coupang oversees how securely our third parties process Customers’ personal data consigned to them and ensures to have all the consigned data immediately destroyed upon the completion of consigned work.

3.1 Consignment of Personal Data within Korea

Category

Consignee

Consigned Services

Customer consultation

KSJOB, Trans Cosmos Korea Inc., U-BASE

All call center services, including the processing of customer and order information

Identity verification

Korea Mobile Certification Inc.

Identity verification

Delivery service

Hanjin Express, Cheonil Cargo Transportation, Lotte Global Logistics, CJ Logistics Corporation, Coupang Logistics Services, Independent Delivery Partners, Samsung Electronics Co., Ltd., SK Magic Co., Ltd., LG Electronics Inc., Winion Inc., Howser, Inc.

※ Products other than Rocket Delivery products are delivered by shipping companies contracted by each seller.

Delivery of goods (including foods) and prizes

GoodsFlow Corporation

Shipment tracking

LG Uplus, KT Corporation, SK Telink

“Safety Number” (one-time virtual phone number) service

Coupang Fulfillment Services

All fulfillment center works (inventory management, sorting, picking, shipping to distribution centers, etc.)

Notification messaging

LG Uplus, KT, Kakao Corp., NHN Corp, LGCNS

Sending messages (SMS, etc.)

Event/Promotion

Newearly Inc.

Marketing and prizes delivery

Settlement processing

Metanet Agile Corp.

Handling of tax and utility charges

Data storage

Amazon Web Services Inc.

Storing data

Data processing

Microsoft

Email service, document/file storage, internal communication, and collaboration tools

Save customer consultation transcripts

GS NEOTEK

Genesys system maintenance

Payment and Fees Settlement processing

NICE Payments

Informing the amount of paid and unpaid fees; debt collection and other related work.

CoupangPay. Ltd.

Payment processing & prevention of payment misappropriation, Easy Payment service provision and operation

[Re-outsourcing by CoupangPay. Ltd.] NHN KCP Corp., KG Mobilians, Korea Information Communication Corp., Danal Co., Ltd., Galaxia Communications Co.,Ltd., NICE Payments

Processing payment made by credit card, mobile phone, bank transfer, deposit without bankbook (virtual account), etc.


3.2 Consignment of Personal Data Processing Overseas
Consignee Destination Country Time and Method of Transfer Items Transferred Purpose of Use and Period of Retention and Processing
Coupang Global, LLC US Personal data is transferred over network when necessary for business purposes Personal data collected and used during customers’ use of services (sign-up, consultation, payment) Research and Development;

Destroyed without delay upon completion of work
Coupang (Shanghai) Co., Ltd.
韩领网络科技(上海)有限公司
China
Coupang (Beijing) Co., Ltd.
韩领网络科技(北京)有限公司
China
IBM Security US Personal data is transferred over network when necessary for business purposes Personal data collected and used during customers’ use of services (sign-up,consultation, payment) Operation and analytics of security control service;

Destroyed without delay upon completion of work
Zendesk, Inc. US Cloud software product supply (Support, Guide, Chat, Sunshine) Customer information (name, email, phone number, member SRL) Operation and analytics of security control service;

Destroyed without delay upon completion of work


4. Disposal of Personal Data 
The retention and use period of the personal data collected starts when the service contract is signed (i.e. Customers sign up for membership) and ends when the contract is terminated (i.e.Customers apply for membership withdrawal or their membership is disqualified). Moreover, if Customers withdraw consent, Coupang immediately disposes of all of their personal data, with the exception of some retained due to the reasons specified above for a certain period. Hard copy printouts of personal data are shredded or burned, whereas electronic files of personal data are disposed through technical or physical means that ensure the information cannot be recovered.

When the purpose of collection and use of personal data is achieved, Coupang moves the information to another database,stores it securely, and disposes it without delay after a predetermined period, in line with the internal policy and applicable laws. Coupang never uses personal data moved to a separate database outside or beyond the scope consented by Customers, unless mandated by law.

Personal data of Customers who do not have any history of using Coupang for the past one year (long-term inactive members) is also segregated from other information and managed safely. Coupang sends email notifications to inactive members at least 30 days prior to moving their information to a separate storage. If it is, however, required by the Protection of Communications Secrets Act, the Act on the Consumer Protection in Electronic Commerce, Etc. or other applicable laws, Coupang may retain the necessary personal data of customers for the prescribed time period.

5. Rights and Obligations of Customers
5.1 Rights of Customers
Customers and their legal representatives may make requests to access, correct or delete their information collected by Coupang,and have the right to withdraw consent anytime. However, Customers who withdraw consent or have information deleted may have limited access to some or all of the Coupang services. Customers can check the personal data collected by Coupang by following the instruction described below:

[How to view the personal data collected by Coupang]

• Go to the Coupang website and click “마이쿠팡” > “개인정보 확인/수정”, “주문목록”, “배송조회”
• Open the Coupang mobile app and go to “내정보관리”


Customers may check the information not directly available from the Coupang website or app by contacting the Coupang customer support center (1577-7011, help@coupang.com, 1:1 chat also available). Customers who wish to delete or stop the processing of their personal data, or withdraw consent, can make requests to the Coupang customer center (1577-7011, help@coupang.com, 1:1 chat also available). They also have the right to withdraw membership, and thereby withdraw consent, to the collection and use of their personal data at any time. Upon making such requests, however, customers’ use of some or the entire service may be restricted. Furthermore, it may be difficult to fulfill requests from customers to delete or stop the processing of their personal data, or withdraw the consent if any of the following is true:

• There are special provisions under the law, or it is absolutely necessary to fulfill an obligation under the law;
• There is a possibility of incurring damage to life, body, property and other interests of a third party;
• It is impossible to execute the contracts with data subjects, including providing the service under the contract, without processing their personal data, yet the data subjects have failed to explicitly express their intent to terminate their contracts.


Should Customers raise such requests, Coupang does not use the customers’ information or provide it to a third party until the requests are fulfilled. Moreover, if Coupang has provided incorrect personal data to a third party for reasonable grounds, Coupang promptly notifies the third party and ensures that the information is deleted and no longer processed, and the applicable consent is withdrawn.

5.2. Obligations of Customers
Customers have an obligation to protect their personal data. Coupang is not liable for issues that arise due to personal data leakage caused not by the fault of Coupang, but by any of the following:

• Negligence or acts or omissions of the customer, such as losing, letting others borrow or handing over an ID (email address), password, or medium used to access the service; or leaving PC unattended while still logged into the service;
• Methods that cannot be prevented by the security controls required by the applicable laws or hacking and other technologies that are outside the control of Coupang despite the security controls Coupang has undertaken.


It is also an obligation of Customers to keep their personal data up to date. Any issues that arise due to incorrect information entered by customers are the responsibility of customers themselves. Individuals who sign up with personal data stolen from others or make payments with stolen IDs may lose their Coupang membership and face penalties pursuant to the applicable laws. Moreover, customers are responsible for keeping their ID and password secure and confidential and may not lend them or hand them over to a third party. They are also under an obligation to cooperate with activities regularly carried out by Coupang to ensure security according to its privacy and policy.

6. Installation/Operation of Automatic Information Collection Tool and How to Opt-Out

To provide convenient, effective and personalized shopping experiences to Customers, Coupang may store (collect) data automatically generated as Customers interact with the service or device information that doesn’t lead to the identification of individuals. And Coupang informs Customers specifically which information out of the automatically generated data it collects and how Customers can opt-out from such collection.

6.1. Cookie
A cookie is a small text file sent to and stored on a user's device when the user visits a website. When the user visits the same site again, the cookie allows the site to recognize the user's device to automatically pull up his or her previous settings and history of using the site. Moreover, a cookie can be used to offer services (including advertisements) tailored to fit the interest and taste of customers by analyzing the websites visited, time and frequency of the visits and information generated or provided (entered) when using the services. It is up to customers to accept or decline cookies: they can choose to accept all cookies, check every time they receive and store a new cookie or refuse to store any cookies.

[How to change cookie settings]

in Internet Explorer
in Safari
in FireFox
in Chrome


6.2. Personalized ads
To deliver personalized ads, Coupang collects and uses cookies from the web browser and ADID from the mobile app. Cookies and ADID are used to automatically collect customers’ history of interaction with the Coupang service and forward this information to Facebook and Criteo (the information also sent to Criteo viaTune). Facebook and Criteo (Tune) then uses this information to personalize ads for customers. The cookies and ADID collected by Coupang are not linked to other personal data and are not used to identify individuals. Facebook and Criteo also, under no circumstances, leverage the information Coupang provides to identify individuals.

Customers can choose to opt-out from receiving personalized ads any time and will see general ads instead of personalized ones once opted out. 

7. The Chief Privacy Officer and Staff Responsible for Privacy Inquiries 

The Chief Privacy Officer (CPO) and the department responsible for handling privacy inquiries are designated as below to oversee all matters related to customer privacy and handle complaints and address damage from privacy-related issues. Customers may make inquiries, raise complaints or ask for damage relief regarding privacy issues through the contact points below. Coupang will promptly respond to and handle inquiries.

Chief Privacy Officer

Department Handling Privacy Complaints

Name: Max Leveson

Phone number: 1577-7011

Email address: help@coupang.com

Department: Coupang Customer Center

Phone number: 1577-7011

Email address: help@coupang.com

For Coupang Eats:

Phone number: 1670-9827

Customers who need to receive consultation on privacy matters or report a personal data breach may also contact the following authorities:

•Personal data breach reporting center: 118 (without area code), privacy.kisa.or.kr
•Cybercrime Investigation Team at the Supreme Prosecutors’ Office: 1301 (without area code), www.spo.go.kr
•Cybercrime Investigation Team at the National Police Agency: 1821301 (without area), cyberbureau.police.go.kr

8. Obligation of Notification 
Privacy notice takes effect from its effective date. Should there be grounds for a material change to customer’s right to data privacy, customers will be notified by Coupang at least 14 days before the change. Other changes will be notified to customers at least 7 days prior to their implementation.  

Note:

In the event of inconsistency or discrepancy between the English version and the Korean version of this Privacy Notice, the Korean version shall prevail.    

Version 9.8
Release date: April 23 2021 
Effective date: April 30 2021

Scroll to Top