Coupang Privacy Notice (V.9.8)
1. Types of Personal Data Collected and Used
2. Provision of Personal Data
3. Consignment of Personal Data Processing
4. Disposal of Personal Data
5. Rights and Obligations of Customers
6. Installation/Operation of Automatic Data Collection
Tool and How to Opt Out
7. The Chief Privacy Officer and Staff Responsible for
Privacy Inquires
8. Obligation of Notification
1. Types of Personal Data Collected and Used
1.1 Coupang Members
“Coupang members” refer to Customers who sign up via the Coupang website or Coupang mobile app.
Classification | Purpose of Collection and Use | Items to be Collected and Used | Period of Retention and Use |
Information collected when using the service | Member sign-up; service use and customer service; Fraud monitoring and prevention; Providing refund or recall; maintaining transaction records | Name, contact information (mobile phone number), ID (email address), password | Destroyed without delay upon withdrawal of membership. Information for preventing fraud (ID, fraud history) is deleted from the withdrawn member database after six months. IP address is retained for 3 months (Protection of Communications Secrets Act) |
Shipping address, service usage history (date and time of visit, IP address, etc.), device information (type, OS version) | |||
Additional information collected when using the service | Identity and age verification | Verification with mobile phone: name, date of birth, sex, mobile carrier, mobile phone number, Duplicate Information (“DI”), Connecting Information (“CI”), nationality (Korean or other citizens) Verification with | These data types are destroyed without delay upon withdrawal of membership. In order to retain transaction records, Customer identification information (DI, CI) and payment, order cancellation, refund, and shipping information are stored for five years (Act on the Consumer Protection Electronic Commerce, Etc.) |
Cancellation, refund | Account holder’s name, bank name, bank account number | ||
Shipping | Recipient information (name, contact information, address) | ||
Travel | User’s and companion’s information (Korean/English name) * Additional information (e.g., date of birth) can be collected depending on the type of service. |
||
Gift card | Recipient’s name and contact information | ||
Traditional liquor purchasing management and report to authorities | Purchaser's personal data (name, date of birth, address) | These data types are deleted immediately upon withdrawal of membership after completing tax office reporting. | |
Customs duty processing and customs clearance | Personal Customs Clearance Code (PCCC) | These data types are deleted immediately upon the user’s request for deletion of his or her information or withdrawal of membership. | |
Foreign substances report(applicable to Coupang Eats only) | Name, contact information, restaurant address | Three years from the submission of the report (Act on the Consumer Protection in Electronic Commerce, Etc.) | |
Coupang Play user identification within the service; exposed when uploading posts (review); Customer Service | Coupang Play user identification within the service; exposed when uploading posts (review); Customer Service | Destroyed without delay when disqualified to use the service (termination of Wow membership) | |
To be displayed when using Coupang Live Chat service, user identification | Nickname | Destructed without delay upon membership withdrawal | |
Coupang Live Viewer Reporter Sign Up, Guidance and conduct of customer experience interviews | Name, mobile phone number, Coupang ID | Until withdrawal of Coupang Live Viewer Reporter Sign Up | |
Compensation payment | Coupang ID | Until withdrawal of Coupang Live Viewer Reporter Sign Up | |
Delivery service improvement (Coupang Eats only) | Personal location information | One year from the completion of delivery; deleted immediately upon users request for deletion These data types are deleted immediately upon the user’s request for deletion or suspension of use of his or her information or withdrawal of membership. |
|
Marketing and analysis | Email, contact information (mobile phone number) | These data types are deleted immediately upon the user’s request for deletion or suspension of use of his or her information or withdrawal of membership. | |
Subscription | Baby information (name, age, gender) | These data types are deleted immediately upon the user’s request for deletion or suspension of use of his or her information or withdrawal of membership. |
※ Fraud includes illegal, abusive usage or other irregular behavior, including (i) the act of illegally or irregularly obtaining economic gains such as discount coupons and event benefits provided by Coupang, for example, repeatedly rejoining after cancelling membership or repeatedly cancelling purchases; (ii) other acts prohibited by the Terms of Use, etc.; and (iii)the act of using another person’s identity.
※ We may use Customer’s purchase information to contact withdrawn or long-term inactive members to provide a refund or recall.
※ The above information can be used for service usage statistics and analysis.
1.2 Guests
Guests refer to Customers who are not signed up to Coupang via the website
or app but are using Coupang’s service (e.g., newsletter subscription.)
Category |
Method of Collection |
Purpose of Collection and Use |
Items to be Collected and Used |
Period of Retention and Use |
Apply for subscription membership |
Customers enter their information directly to Coupang newsletter subscription page |
Delivering newsletters |
|
Deleted immediately upon opt-out of subscription |
1.3 Event Participants
Event participants refer to Customers who participate in promotional
events held on Coupang’s social media pages (Facebook, Kakao Story,
Twitter, Instagram, Naver/Daum Cafe, etc.) or online boards.
Category |
Method of Collection |
Items to be Collected and Used |
Purpose of Use |
Period of Retention |
Event participants |
Customers enter their information directly to social media pages or Coupang’s bulletin board to participate in or send via email to apply for an event |
Name, social media or Coupang ID |
Picking event winners |
Collected information is destroyed within 30 days from the end of the promotional event. |
Event winners |
Event winners send their information directly to Coupang via SMS, direct message, or other messaging services, or by adding a comment to the winner announcement |
Goods: name, contact information, address Mobile gift voucher (Giftishow): name, contact information Coupang Cash: Coupang ID (email), name, contact information |
Delivering prizes |
1.4 Creator Members
“Creators” refer to a Coupang member who uses the real-time video and audio streaming feature of Coupang Live, a service that allows users to sell products using real-time video streaming channel provided by Coupang, to sell products.
Purpose of Collection and Use | Items to be Collected and Used | Period of Retention |
To check creator application of customer and notify of the result | Email address, whether a creator belongs to an agency, name of agency if applicable | Destroyed without delay when unsubscribing from creator status (However, the data will be retained for a statutory period under applicable laws and regulations) |
Creator identification in service | Email address, nickname, profile picture, coupang ID | |
The fee calculations & payments | [Individual creator] name, contact information, address, email address, domestic and foreign population, account information (bank name, account holder name, account number), social security number [Private business creator] account information (bank name, account holder name, account number) |
|
To be exposed to customers and vendors | Email address, nickname, profile picture | |
To operate Coupang Live service; and to build emergency contact network | Name, mobile phone number | |
To check relevant indicators for service improvement | Nationality (Korean or other citizens), gender |
1.5 How Personal Data is Collected A. Customers enter their personal data upon sign-up or in the process of using Coupang services, after providing consent to collection of such information.
B. Personal data is collected during customer support interactions via website, email, fax, and calls.
C. Personal data is collected when Customers participate in online and offline promotional events.
D. Data generated via log analysis programs and in cookies is collected.
1.6 Personal Data Collected and Used in Accordance with Applicable Laws
Information Retained |
Retention Period |
Statutory Grounds |
Records of payment and supplying goods, etc. |
5 years |
Act on the Consumer Protection in Electronic Commerce, Etc. |
Records of contract or withdrawal of subscription, etc. |
5 years |
Act on the Consumer Protection in Electronic Commerce, Etc. |
Records of Customers’ complaint or settlement of disputes |
3 years |
|
Records of indication and advertisement |
6 months |
|
Records of electronic financial transactions |
5 years |
Electronic Financial Transactions Act |
Location data management register |
6 months |
Act on the Protection, Use, etc. Of Location Information |
Records of website visit |
3 months |
Protection of Communications Secrets Act |
2. Provision of Personal Data
2.1 General User
Recipient |
Purpose of Provision |
Information Provided |
Period of Retention and Use |
Providing service, verifying purchaser identity, outbound “happy calls" |
Name, mobile phone number * Address may also be provided on a limited basis depending on the type of service. |
These data types are destroyed after the purpose of the provision of goods or services is achieved. (* These data are retained for a statutory period under applicable laws and regulations.) |
|
Sellers of tickets (performances/exhibitions/activities) |
Providing service, verifying purchaser identity, outbound “happy calls” |
Name, mobile phone number |
|
Providing service, verifying purchaser identity, outbound “happy calls” |
Name, mobile phone number, shipping address, email * If the recipient is not the purchaser, the recipient’s information (including personal customs clearance code for cross-border shipping) may be provided. |
||
Providing service, reservation confirmation, outbound “happy calls” |
Name, mobile phone number, email * Additional information (e.g., name(s) or other information of companion(s)) may be provided depending on the type of service. |
||
Relevant tax office |
Providing online liquor sales register to the tax office on a quarterly basis in accordance with the public notice from the National Tax Service |
Purchaser's personal data (address, name, date of birth), order date, product name, quantity, order amount |
|
Providers of products directly purchased from overseas Coupang Global LLC (US) |
Providing service, verifying purchaser identity, outbound “happy calls”, customs clearance * Purchase details are provided when a purchase is made. |
Name, mobile phone number, shipping address, personal customs clearance code * If the recipient is not the purchaser, the recipient’s information may be provided. |
|
Providers of products directly purchased from overseas Coupang Shanghai Trading Co., Ltd. (CHINA) |
Providing service, verifying purchaser identity, outbound “happy calls”, customs clearance * Purchase details are provided when a purchase is made. |
Name, mobile phone number, shipping address, personal customs clearance code * If the recipient is not the purchaser, the recipient’s information may be provided. |
|
Oliva Co., Ltd. |
Confirmation of smartphone purchase in Coupang and providing reward programs |
Coupang order number, name/telephone number/address of the customer who ordered, and ID of the product purchased in Coupang |
Until the purpose of providing compensation program services including payment of compensation amount is achieved |
※ Notice of right to refuse consent to the personal data provision
Provision of personal data to a third party is necessary for Customers
to use some of Coupang’s services. Customers may choose not to provide
their personal data required for the services, in which case some of
those services may be restricted from those Customers. Coupang provides
Customers’ personal data to a third party only when a transaction is
made and notifies customers of the details of provision when they make a
purchase. Rocket Delivery products are shipped directly by Coupang, and
therefore do not entail the provision of personal data to third parties
(including sellers).
2.2 Provision of personal credit information
Recipient | Purpose of Provision | Information Provided | Period of Retention and Use |
Korea Credit Bureau, NICE Information Service Co., Ltd. | Verification of credit score, and credit information history; credit assessment; to develop credit-related model and use for (statistical) analysis; verification of statistics to provide customized service; to be used by credit bureau (to register overdue payment information, etc.); to maintain or manage the current contract and the ones signed before | Name, date of birth, gender, mobile phone number, duplicate information (DI), customer number, date of sign-up, payment and overdue payment status. | Retained for a statutory period under applicable laws and regulations |
2.3 Creator Members
Coupang provides Creators' personal data to contracted suppliers or sellers (third-party) for product shipping within the required scope. Please click on the links in the Recipient column of the table below to see the detailed information.
Recipient | Purpose of Provision | Information Provided | Period of Retention and Use |
Supplier or seller who contracted with creator | Product shipping | Name, contact information, address | Destroyed without delay after product is dispatched (However, the data will be retained for statutory period under applicable laws and regulations) |
3. Consignment of Personal Data Processing
Coupang oversees how securely our third parties process Customers’ personal data consigned to them and ensures to have all the consigned data immediately destroyed upon the completion of consigned work. 3.1 Consignment of Personal Data within Korea
Category |
Consignee |
Consigned Services |
Customer consultation |
KSJOB, Trans Cosmos Korea Inc., U-BASE |
All call center services, including the processing of customer and order information |
Identity verification |
Korea Mobile Certification Inc. |
Identity verification |
Delivery service |
Hanjin Express, Cheonil Cargo Transportation, Lotte Global Logistics, CJ Logistics Corporation, Coupang Logistics Services, Independent Delivery Partners, Samsung Electronics Co., Ltd., SK Magic Co., Ltd., LG Electronics Inc., Winion Inc., Howser, Inc. ※ Products other than Rocket Delivery products are delivered by shipping companies contracted by each seller. |
Delivery of goods (including foods) and prizes |
GoodsFlow Corporation |
Shipment tracking |
|
LG Uplus, KT Corporation, SK Telink |
“Safety Number” (one-time virtual phone number) service |
|
Coupang Fulfillment Services |
All fulfillment center works (inventory management, sorting, picking, shipping to distribution centers, etc.) |
|
Notification messaging |
LG Uplus, KT, Kakao Corp., NHN Corp, LGCNS |
Sending messages (SMS, etc.) |
Event/Promotion |
Newearly Inc. |
Marketing and prizes delivery |
Settlement processing |
Metanet Agile Corp. |
Handling of tax and utility charges |
Data storage |
Amazon Web Services Inc. |
Storing data |
Data processing |
Microsoft |
Email service, document/file storage, internal communication, and collaboration tools |
Save customer consultation transcripts |
GS NEOTEK |
Genesys system maintenance |
Payment and Fees Settlement processing |
NICE Payments |
Informing the amount of paid and unpaid fees; debt collection and other related work. |
CoupangPay. Ltd. |
Payment processing & prevention of payment misappropriation, Easy Payment service provision and operation |
|
[Re-outsourcing by CoupangPay. Ltd.] NHN KCP Corp., KG Mobilians, Korea Information Communication Corp., Danal Co., Ltd., Galaxia Communications Co.,Ltd., NICE Payments |
Processing payment made by credit card, mobile phone, bank transfer, deposit without bankbook (virtual account), etc. |
Consignee | Destination Country | Time and Method of Transfer | Items Transferred | Purpose of Use and Period of Retention and Processing |
Coupang Global, LLC | US | Personal data is transferred over network when necessary for business purposes | Personal data collected and used during customers’ use of services (sign-up, consultation, payment) | Research and Development; Destroyed without delay upon completion of work |
Coupang (Shanghai) Co., Ltd. 韩领网络科技(上海)有限公司 |
China | |||
Coupang (Beijing) Co., Ltd. 韩领网络科技(北京)有限公司 |
China | |||
IBM Security | US | Personal data is transferred over network when necessary for business purposes | Personal data collected and used during customers’ use of services (sign-up,consultation, payment) | Operation and analytics of security control service; Destroyed without delay upon completion of work |
Zendesk, Inc. | US | Cloud software product supply (Support, Guide, Chat, Sunshine) | Customer information (name, email, phone number, member SRL) | Operation and analytics of security control service; Destroyed without delay upon completion of work |
4. Disposal of Personal Data
The retention and use period of the personal data collected starts when the service contract is signed (i.e. Customers sign up for membership) and ends when the contract is terminated (i.e.Customers apply for membership withdrawal or their membership is disqualified). Moreover, if Customers withdraw consent, Coupang immediately disposes of all of their personal data, with the exception of some retained due to the reasons specified above for a certain period. Hard copy printouts of personal data are shredded or burned, whereas electronic files of personal data are disposed through technical or physical means that ensure the information cannot be recovered.
When the purpose of collection and use of personal data is achieved, Coupang moves the information to another database,stores it securely, and disposes it without delay after a predetermined period, in line with the internal policy and applicable laws. Coupang never uses personal data moved to a separate database outside or beyond the scope consented by Customers, unless mandated by law.
Personal data of Customers who do not have any history of using Coupang for the past one year (long-term inactive members) is also segregated from other information and managed safely. Coupang sends email notifications to inactive members at least 30 days prior to moving their information to a separate storage. If it is, however, required by the Protection of Communications Secrets Act, the Act on the Consumer Protection in Electronic Commerce, Etc. or other applicable laws, Coupang may retain the necessary personal data of customers for the prescribed time period.
5. Rights and Obligations of Customers
5.1 Rights of Customers
Customers and their legal representatives may make requests to access, correct or delete their information collected by Coupang,and have the right to withdraw consent anytime. However, Customers who withdraw consent or have information deleted may have limited access to some or all of the Coupang services. Customers can check the personal data collected by Coupang by following the instruction described below:
[How to view the personal data collected by Coupang]
• Go to the Coupang website and
click “마이쿠팡” > “개인정보 확인/수정”, “주문목록”, “배송조회”
• Open the Coupang mobile app
and go to “내정보관리”
Customers may check the information not directly available from the Coupang website or app by contacting the Coupang customer support center (1577-7011, help@coupang.com, 1:1 chat also available). Customers who wish to delete or stop the processing of their personal data, or withdraw consent, can make requests to the Coupang customer center (1577-7011, help@coupang.com, 1:1 chat also available). They also have the right to withdraw membership, and thereby withdraw consent, to the collection and use of their personal data at any time. Upon making such requests, however, customers’ use of some or the entire service may be restricted. Furthermore, it may be difficult to fulfill requests from customers to delete or stop the processing of their personal data, or withdraw the consent if any of the following is true:
• There are special provisions
under the law, or it is absolutely necessary to fulfill an obligation
under the law;
• There is a possibility of
incurring damage to life, body, property and other interests of a third
party;
• It is impossible to execute
the contracts with data subjects, including providing the service under
the contract, without processing their personal data, yet the data
subjects have failed to explicitly express their intent to terminate
their contracts.
Should Customers raise such requests, Coupang does not use the customers’ information or provide it to a third party until the requests are fulfilled. Moreover, if Coupang has provided incorrect personal data to a third party for reasonable grounds, Coupang promptly notifies the third party and ensures that the information is deleted and no longer processed, and the applicable consent is withdrawn.
5.2. Obligations of Customers
Customers have an obligation to protect their personal data. Coupang is not liable for issues that arise due to personal data leakage caused not by the fault of Coupang, but by any of the following:
• Negligence or acts or
omissions of the customer, such as losing, letting others borrow or
handing over an ID (email address), password, or medium used to access
the service; or leaving PC unattended while still logged into the
service;
• Methods that cannot be
prevented by the security controls required by the applicable laws or
hacking and other technologies that are outside the control of Coupang
despite the security controls Coupang has undertaken.
It is also an obligation of Customers to keep their personal data up to date. Any issues that arise due to incorrect information entered by customers are the responsibility of customers themselves. Individuals who sign up with personal data stolen from others or make payments with stolen IDs may lose their Coupang membership and face penalties pursuant to the applicable laws. Moreover, customers are responsible for keeping their ID and password secure and confidential and may not lend them or hand them over to a third party. They are also under an obligation to cooperate with activities regularly carried out by Coupang to ensure security according to its privacy and policy.
6. Installation/Operation of Automatic Information Collection Tool and How to Opt-Out
To provide convenient, effective and personalized shopping experiences to Customers, Coupang may store (collect) data automatically generated as Customers interact with the service or device information that doesn’t lead to the identification of individuals. And Coupang informs Customers specifically which information out of the automatically generated data it collects and how Customers can opt-out from such collection.
6.1. Cookie
A cookie is a small text file sent to and stored on a user's device when the user visits a website. When the user visits the same site again, the cookie allows the site to recognize the user's device to automatically pull up his or her previous settings and history of using the site. Moreover, a cookie can be used to offer services (including advertisements) tailored to fit the interest and taste of customers by analyzing the websites visited, time and frequency of the visits and information generated or provided (entered) when using the services. It is up to customers to accept or decline cookies: they can choose to accept all cookies, check every time they receive and store a new cookie or refuse to store any cookies.
[How to change cookie settings]
in
Internet Explorer
in
Safari
in
FireFox
in
Chrome
6.2. Personalized ads
To deliver personalized ads, Coupang collects and uses cookies from the web browser and ADID from the mobile app. Cookies and ADID are used to automatically collect customers’ history of interaction with the Coupang service and forward this information to Facebook and Criteo (the information also sent to Criteo viaTune). Facebook and Criteo (Tune) then uses this information to personalize ads for customers. The cookies and ADID collected by Coupang are not linked to other personal data and are not used to identify individuals. Facebook and Criteo also, under no circumstances, leverage the information Coupang provides to identify individuals.
Customers can choose to opt-out from receiving personalized ads any time and will see general ads instead of personalized ones once opted out.
7. The Chief Privacy Officer and Staff Responsible for Privacy Inquiries
The Chief Privacy Officer (CPO) and the department responsible for handling privacy inquiries are designated as below to oversee all matters related to customer privacy and handle complaints and address damage from privacy-related issues. Customers may make inquiries, raise complaints or ask for damage relief regarding privacy issues through the contact points below. Coupang will promptly respond to and handle inquiries.
Chief Privacy Officer |
Department Handling Privacy Complaints |
Name: Max Leveson Phone number: 1577-7011 Email address: help@coupang.com |
Department: Coupang Customer Center Phone number: 1577-7011 Email address: help@coupang.com For Coupang Eats: Phone number: 1670-9827 |
•Personal data breach
reporting center: 118 (without area code), privacy.kisa.or.kr
•Cybercrime Investigation Team
at the Supreme Prosecutors’ Office: 1301 (without area code), www.spo.go.kr
•Cybercrime Investigation Team
at the National Police Agency: 1821301 (without area), cyberbureau.police.go.kr
8. Obligation of Notification
Privacy notice takes effect from its effective date. Should there be
grounds for a material change to customer’s right to data privacy,
customers will be notified by Coupang at least 14 days before the
change. Other changes will be notified to customers at least 7 days
prior to their implementation.
Note:
In the event of inconsistency or discrepancy between the English
version and the Korean version of this Privacy Notice, the Korean
version shall prevail.
Version 9.8
Release date: April 23 2021
Effective date: April 30 2021