Coupang Privacy Notice (V.9.96)
1. Types of Personal Data Collected and Used
2. Provision of Personal Data
3. Consignment of Personal Data Processing
4. Disposal of Personal Data
5. Rights and Obligations of Customers
6. Installation/Operation of Automatic Data Collection Tool and How to Opt Out
7. Actions Taken to Protect Personal Information
8. Processing of personal location information
9. The Chief Privacy Officer and Staff Responsible for Privacy Inquires
1. Types of Personal Data Collected and Used
Coupang collects and uses personal information of Coupang members, members who use Pay Later service, members who participate in events, Creator members and non-members, and the period of retention and use of such information is as below. However, if the need arises to retain such information in accordance with relevant laws, as in ‘1.7 member information collected and used in accordance with the law,’ such information is retained for the required period.
1.1 Coupang Members
“Coupang members” refer to Customers who sign up via the Coupang website or Coupang mobile app.
| Classification |
Purpose of Collection and Use |
Items to be Collected and Used | Period of Retention and Use |
| Required (collected upon membersip sign-up) |
Member sign-up, user identification, member management and communication |
ID (email address), password, name, mobile phone number | Retained for 90 days from the membership withdrawal for refund and then destroyed without delay Information for preventing fraud (ID, fraud history) is deleted from the withdrawn member database after six months. Information for retaining transaction records (e.g., ID, bank account number, shipping address) is stored for five years (Act on the Consumer Protection in Electronic Commerce) IP address is retained for 3 months (Protection of Communications Secrets Act) |
| Identity verification for purchasing and/or selling, payment for products or services, shipping of products or services, provision of customized content and services |
Shipping information (name, contact information, address) |
||
| Fraud detection, provision of customized content and services based on the assumption of users’ interest, preference, and tendency |
Service usage history, access log, cookies, IP address, payment records, device information (OS, version)Retained for 90 days from the membership withdrawal for refund and then destroyed without delay |
||
| Optional (collected upon membership sign-up) |
(Customized) advertisement and invitation to promotional events |
Service usage history, payment records, mobile phone number, email address, information for identity verification (name, date of birth, sex, mobile carrier, mobile phone number, Connecting Information (“CI”), Duplicate Information (“DI”), nationality (Korean or other citizens)), shipping information (name, contact information, address), IP address, advertising identifiers such as cookies |
Destroyed without delay upon withdrawal of consent or membership |
| Information collected additionally during service use |
Identity and age verification, provision of customized content and services |
Identity verification (name, date of birth, sex, mobile carrier, mobile phone number, Connecting Information (“CI”), Duplicate Information (“DI”), nationality (Korean or other citizens)) |
These data types are destroyed without delay upon withdrawal of membership In order to retain transaction records, Customer identification information (DI, CI) and payment, order cancellation, refund, and shipping information are retained for five years (Act on the Consumer Protection Electronic Commerce, Etc.) |
| Cancellation, refund |
Account holder’s name, bank name, bank account number |
||
| Travel |
User’s and companion’s information (Korean/English name) * Additional information (e.g., date of birth) can be collected depending on the type of service |
||
| eGift Card, gifting |
Recipient’s name and contact information |
||
| Traditional liquor purchasing management and report to authorities | Purchaser's personal information (name, date of birth, address) | These data types are deleted immediately upon withdrawal of membership after completing tax office reporting |
|
| Customs duty processing and customs clearance | Personal Customs Clearance Code (PCCC) |
These data types are deleted immediately upon the user’s request for deletion of his or her information or withdrawal of membership |
|
| Foreign substances report (applicable to Coupang Eats only) | Name, contact information, restaurant’s location | These data types are deleted immediately upon the user’s request for deletion of his or her information or withdrawal of membership. | |
| Coupang Play user identification within the service; exposed when uploading posts (review); Customer Service | Coupang Play nickname | Three years from the submission of the report (Act on the Consumer Protection in Electronic Commerce, Etc.) | |
| To be displayed when using Coupang Live Chat service, user identification | Membership nickname |
Destroyed without delay when disqualified to use the service (termination of Wow membership) | |
| Coupang Live Viewer Reporter Sign Up, Guidance and conduct of customer experience interviews | Name, mobile phone number, Coupang ID | Until withdrawal of Coupang Live Viewer Reporter Sign Up | |
| Compensation payment | Coupang ID | Until withdrawal of Coupang Live Viewer Reporter Sign Up | |
| Identity verification, selection of Beauty Lab products, confirming and analyzing vote results | Coupang ID (email address), age group, sex | Until event is over | |
| Marketing and analysis | Email, contact information (mobile phone number) | Deleted immediately upon the user’s request for deletion or suspension of use of his or her information or withdrawal of membership. | |
| Providing services customized to child’s age and gender | Name/nickname, age (expected due date/date of birth), and gender of the child | Retained for five years after the collection; deleted immediately when there is a user’s request for deletion or suspension of use of his/her information | |
| Payment for Coupang Adventurer’s taxes and public utilities’ charge (When giveaways or gift tokens worth more than KRW 50,000 are provided) | Resident registration number | Retained for 5 years after the collection (Income Tax Act) | |
| Coupang Live Event Winner Confirmation, Gift Delivery | Name, mobile phone number, address | Until the delivery is complete |
※ Fraud includes illegal, abusive usage or other irregular behavior, including (i) the act of illegally or irregularly obtaining economic gains such as discount coupons and event benefits provided by Coupang, for example, repeatedly rejoining after cancelling membership or repeatedly cancelling purchases; (ii) other acts prohibited by the Terms of Use, etc.; and (iii)the act of using another person’s identity.
※ We may use Customer’s purchase information to contact withdrawn or long-term inactive members to provide a refund or recall.
※ The above information can be used for service usage statistics and analysis.
1.2 Pay-Later service member
(1) Personal information to be Collected and Used
Coupang collects and uses personal information as follows to provide Pay-Later service.
| Purpose of Collection and Use | Items to be Collected and Used | Period of Retention and Use |
| Handling credit evaluation and related business (Credit score verification; to provide credit-related financial information; inquire/register personal credit information from/to credit bureau or credit information collection agency) | Identification information (name, date of birth, gender, mobile phone number, duplicate information (DI), customer number); Paylater usage history (date of subscription, payment/outstanding payment status) | Retained until user withdraws Coupang membership |
Customer consultation and complaint handling; Settlement of service usage fees; Customer guide | Identification information (name, date of birth, gender, mobile phone number, duplicate information (DI), customer number); Paylater usage history (date of subscription, payment/outstanding payment status); usage history of Coupang-provided services (subscription, number of registered delivery address, default delivery address, purchase/cancel/refund history, review history); information on fraudulent transaction; service access history | |
Adjustment of available amounts and benefits; prevention of fraud; improve service | Identification information (name, date of birth, gender, mobile phone number, duplicate information (DI), customer number); Paylater usage history (date of subscription, payment/outstanding payment status); usage history of Coupang-provided services (subscription, number of registered delivery address, default delivery address, purchase/cancel/refund history, review history); information on fraudulent transaction; service access history |
(2) Personal information to be checked
Coupang checks personal credit information as follows to provide Pay-Later service.
| Reference Agency | Purpose of credit information inquiry | Credit Information to inquiry | Applicable Period |
| Korea Credit Bureau Inc.; NICE Information Service Co., Ltd | Handling credit evaluation and related business (Verification of credit score, and credit information history; credit assessment; to maintain or manage the current contract and the ones signed before); to be used by credit bureau (to register overdue payment information, etc.); adjustment of available amounts and benefits; to develop credit-related model and use for (statistical) analysis | 신Information on creditworthiness (overdue payment; subrogation; payment guarantee by bank or government; status of payment guarantee; default; public information on unpaid taxes, default or bankruptcy; information on breach of financial order, etc.), Information on credit transaction (loan; surety liability; use of credit card.), Information on credit capacity (total sum of property, debt and income; record of tax payment) Information on credit rating and credit grade (credit score; work experience and career background; history of credit information change; other personal credit information used for determining an individual’s creditworthiness) | Retained until user terminates the use of service |
1.3 Guests
Guests refer to Customers who are not signed up to Coupang via the website
or app but are using Coupang’s service (e.g., newsletter subscription.)
|
Category |
Method of Collection |
Purpose of Collection and Use |
Items to be Collected and Used |
Period of Retention and Use |
|
Apply for subscription membership |
Customers enter their information directly to Coupang newsletter subscription page |
Delivering newsletters |
|
Deleted immediately upon opt-out of subscription |
1.4 Event Participants
Event participants refer to Customers who participate in promotional
events held on Coupang’s social media pages (Facebook, Kakao Story,
Twitter, Instagram, Naver/Daum Cafe, etc.) or online boards.
|
Category |
Method of Collection |
Items to be Collected and Used |
Purpose of Use |
Period of Retention |
| Event participants |
Customers enter their information directly to social media pages or Coupang’s bulletin board to participate in or send via email to apply for an event |
Name, social media or Coupang ID |
Picking event winners |
Collected information is destroyed within 30 days from the end of the promotional event. |
|
Event winners |
Event winners send their information directly to Coupang via SMS, direct message, or other messaging services, or by adding a comment to the winner announcement |
Goods: name, contact information, address Coupang Cash: Coupang ID (email), name, contact information |
Delivering prizes |
1.5 Creator Members
“Creators” refer to a Coupang member who uses the real-time video and audio streaming feature of Coupang Live, a service that allows users to sell products using real-time video streaming channel provided by Coupang, to sell products.
| Purpose of Collection and Use | Items to be Collected and Used | Period of Retention |
| To check creator application of customer and notify of the result | Email address, whether a creator belongs to an agency, name of agency if applicable | Destroyed without delay when unsubscribing from creator status |
| Creator identification in service | Email address, nickname, profile picture, coupang ID | |
| The fee calculations & payments | [Individual creator] name, contact information, address, email address, domestic and foreign population, account information (bank name, account holder name, account number), social security number [Private business creator] account information (bank name, account holder name, account number) |
|
| To be exposed to customers and vendors | Email address, nickname, profile picture | |
| To operate Coupang Live service; and to build emergency contact network | Name, mobile phone number | |
| To check relevant indicators for service improvement | Nationality (Korean or other citizens), gender | |
| Join and use the live marketplace, check and contact creators, discloser to sellers | <Required data>Profile video, mobile phone number <Additional data>Social media account |
Destroyed without delay when unsubscribing from creator status and withdrawal of Live market place |
1.6 How Personal Data is Collected A. Customers enter their personal data upon sign-up or in the process of using Coupang services, after providing consent to collection of such information.
B. Personal data is collected during customer support interactions via website, email, fax, and calls.
C. Personal data is collected when Customers participate in online and offline promotional events.
D. Data generated via log analysis programs and in cookies is collected.
1.7 Personal Data Collected and Used in Accordance with Applicable Laws
|
Information Retained |
Retention Period |
Statutory Grounds |
|
Records of payment and supplying goods, etc. |
5 years |
Act on the Consumer Protection in Electronic Commerce, Etc. Article6 |
|
Records of contract or withdrawal of subscription, etc. |
5 years |
Act on the Consumer Protection in Electronic Commerce, Etc. Article6 |
|
Records of Customers’ complaint or settlement of disputes |
3 years |
|
|
Records of indication and advertisement |
6 months |
|
|
Records of electronic financial transactions |
5 years |
Electronic Financial Transactions Act Article22 |
|
Location data management register |
6 months |
Act on the Protection, Use, etc. Of Location Information Article 16 |
|
Records of website and mobile app visit |
3 months |
Protection of Communications Secrets Act Article 15-2 |
|
Information for the payment of taxes and public utilities’ charge |
5 years |
Income Tax Act, Article 145, 164 |
|
Personal Credit Information |
5 years |
Credit Information Use and Protection Act, Article 20-2 |
2.Provision of Personal Data
2.1 General User
|
Recipient |
Purpose of Provision |
Information Provided |
Period of Retention and Use |
|
Processing shipping or reservation of products/services, CS and outbound “happy calls” |
Name, email address, mobile phone number * Additional required information - Shipping or service delivery: address |
Destroyed after the purpose of the provision of goods or services is achieved or settlement is complete (* Can be retained for a statutory period under applicable laws and regulations.) |
|
Lotte Chilsung Beverage, Yuhan Kimberly, Ltd., Nongshim |
Gift Delivery |
Name, mobile phone number, shipping address (when delivering gift) | |
Relevant tax office |
Providing online liquor sales register to the tax office on a quarterly basis in accordance with the public notice from the National Tax Service |
Purchaser's personal information (address, name, date of birth), order date, product name, quantity, order amount |
|
|
Oliva Co., Ltd. |
Confirmation of smartphone purchase in Coupang and providing reward programs |
Coupang order information |
Until the purpose of providing compensation program services including payment of compensation amount is achieved |
|
Lotte Non-Insurance Co., Ltd. |
Insurance purchase, buyer identification, provide support for the product under warranty, hardware warranty |
Name, email, phone number, Coupang ID, Coupang order number, date of purchase of the device and insurance, device information (product category, manufacturer, purchase amount, product name, serial number) |
Retained for up to 1 year after buying the insurance |
|
Apple Korea Ltd. |
AppleCare+ purchase, buyer identification, provide support for the product under warranty, hardware warranty |
Name, email address, device serial number |
Destroyed after the purpose of the provision for AppleCare+ Plan is achieved |
|
Gift delivery company of Coupang Live or Creator |
Confirmation of winners, Gift delivery |
Name, mobile phone number, shipping address |
Until delivery is complete |
|
Coupang Pay Corp. |
Provide Coupang Cash service |
Coupang ID |
Destroyed after retaining 5 years in compliance with the Act on the Consumer Protection in Electronic Commerce |
※ Notice of right to refuse consent to the personal data provision
Provision of personal data to a third party is necessary for Customers
to use some of Coupang’s services. Customers may choose not to provide
their personal data required for the services, in which case some of
those services may be restricted from those Customers. Coupang provides
Customers’ personal data to a third party only when a transaction is
made and notifies customers of the details of provision when they make a
purchase. Rocket Delivery products are shipped directly by Coupang, and
therefore do not entail the provision of personal data to third parties
(including sellers).
2.2 General User(Overseas third parties)
| Third Party (Contact of Information Manager) |
Destination | Time/Date and Method of Transfer | Personal Information Transferred | Purpose of Use | Period of Retention and Processing |
| Names and contact information of sellers of products shipped overseas | Country names | Transferred via network at the time of purchase | Name, mobile phone number, shipping address, personal customs clearance code ※ If the recipient is not the purchaser, the recipient’s information may be provided. |
Provision of service, buyer identification, outbound “Happy Calls”, customs clearance ※ Purchase details are provided when a purchase is made |
Destroyed after the purpose of the provision of goods or services is achieved.* |
| Coupang Global LLC support@USJikgu.com |
U.S. | ||||
| Coupang Shanghai Trading Co., Ltd. support@CNjikgu.com |
China | ||||
| COUPANG HONG KONG TRADING LIMITED support@hkjikgu.com |
Hongkong |
* Transaction records are destroyed after being retained for 5 years under the Act on the Consumer Protection in Electronic Commerce and the Electronic Financial Transactions Act
2.3 Provision of personal credit information
| Recipient | Purpose of Provision | Information Provided | Period of Retention and Use |
| Korea Credit Bureau, NICE Information Service Co., Ltd. | Verification of credit score, and credit information history; credit assessment; to develop credit-related model and use for (statistical) analysis; verification of statistics to provide customized service; to be used by credit bureau (to register overdue payment information, etc.); to maintain or manage the current contract and the ones signed before | Name, date of birth, gender, mobile phone number, duplicate information (DI), customer number, date of sign-up, payment and overdue payment status. | Retained for a statutory period under applicable laws and regulations |
2.4 Creator Members
Coupang provides Creators' personal data to contracted suppliers or sellers (third-party) for product shipping within the required scope. Please click on the links in the Recipient column of the table below to see the detailed information.
| Recipient | Purpose of Provision | Information Provided | Period of Retention and Use |
| Supplier or seller who contracted with creator | Product shipping | Name, contact information, address | Destroyed without delay after product is dispatched (However, the data will be retained for statutory period under applicable laws and regulations) |
3. Consignment of Personal Data Processing
Coupang oversees how securely our third parties process Customers’ personal data consigned to them and ensures to have all the consigned data immediately destroyed upon the completion of consigned work. 3.1 Consignment of Personal Data within Korea
|
Category |
Consignee |
Consigned Services |
|
Customer consultation |
KSJOB, Trans Cosmos Korea Inc., U-BASE |
All call center services, including the processing of customer and order information |
|
Identity verification |
Korea Mobile Certification Inc. |
Identity verification |
|
Delivery service |
Hanjin Express, Cheonil Cargo Transportation, Lotte Global Logistics, CJ Logistics Corporation, Coupang Logistics Services, Independent Delivery Partners, Samsung Electronics Co., Ltd., SK Magic Co., Ltd., Winion Inc., Howser, Inc. ※ Products other than Rocket Delivery products are delivered by shipping companies contracted by each seller. |
Delivery of goods (including foods) and prizes |
|
GoodsFlow Corporation |
Shipment tracking |
|
|
LG Uplus, KT Corporation, SK Telink |
“Safety Number” (one-time virtual phone number) service |
|
|
Coupang Fulfillment Services |
All fulfillment center works (inventory management, sorting, picking, shipping to distribution centers, etc.) |
|
|
Coupang Eats Service LLC |
Processing order delivery and responding to inquiries |
|
|
SKG Electronics Co., Ltd., YKG Co., Ltd., The Best Jisung Co., Ltd., Daemyung Distribution Co., Ltd., Samjung Co., Ltd., Gyeongnam Co., Ltd., Shinyoung Plus Co., Ltd., CDS Distribution Co., Ltd. |
LG Electronics product delivery and installation |
|
|
Notification messaging |
LG Uplus, KT, Kakao Corp., NHN Corp, LGCNS |
Sending messages (SMS, etc.) |
|
Settlement processing |
Metanet Global Corp. |
Handling of tax and utility charges |
|
Data Management |
Amazon Web Services Inc. |
Processing personal information in the cloud infrastructure |
|
Save customer consultation transcripts |
GS NEOTEK |
Genesys system maintenance |
|
Payment and Fees Settlement processing |
NICE Payments |
Informing the amount of paid and unpaid fees; debt collection and other related work. |
|
CoupangPay. Ltd. |
Payment processing & prevention of payment misappropriation, Easy Payment service provision and operation, Fraud monitoring and detection |
|
|
[Re-outsourcing by CoupangPay. Ltd.] NHN KCP Corp., KG Mobilians, Korea Information Communication Corp., Danal Co., Ltd., Galaxia Communications Co.,Ltd., NICE Payments |
Processing payment made by credit card, mobile phone, bank transfer, deposit without bankbook (virtual account), etc. |
Coupang consigns development and operation of its services to its affiliates (Coupang Global, LLC, Coupang (Shanghai) Co., Ltd., and Coupang (Beijing) Co., Ltd.). Coupang affiliates comply with Coupang’s security policies as specified under 7. Actions Taken to Protect Personal Information below.
| Consignee (Contact of Information Manager) | Destination Country | Time and Method of Transfer | Personal Data | Purpose of Use | Period of Retention and Processing |
| Coupang Global, LLC (help@coupang.com) | US | Personal data is transferred over secure network when necessary for business purposes | Personal data collected and used during customers’ use of services (sign-up, consultation, payment) | fraud monitoring and detection | Until the consignment agreement is terminated |
| Coupang (Shanghai) Co., Ltd. 韩领网络科技(上海)有限公司 (help@coupang.com) |
China | fraud monitoring and detection | |||
| Coupang (Beijing) Co., Ltd. 韩领网络科技(北京)有限公司 (help@coupang.com) |
China | Coupang service operation, and fraud monitoring and detection | |||
| Genesys (GSN: yakida96@gsnict.com) | Japan | Transferred over secure network | Call recordings, caller’s number | Using call management system for CS Center | Until the consignment agreement is terminated |
| Zendesk, Inc. (support@zendesk.com) | Japan | Transferred over secure network | Name, email, phone number, member SRL | Using CS software for CS Center | Until the consignment agreement is terminated |
| Amazon Web Services Inc. (aws-korea-privacy@amazon.com) |
Singapore | Transferred to remote destination over network | Data for system recovery | Remote backup for providing reliable service in case of disaster | Until the consignment agreement is terminated |
| Microsoft ((02) 531-4840) |
U.S. | Transferred over secure network when personal information is collected through MS Forms | Personal Information collected through MS Forms and used | Processing personal information in cloud infrastructure | Until the consignment agreement is terminated |
The retention and use period of the personal data collected starts when the service contract is signed (i.e. Customers sign up for membership) and ends when the contract is terminated (i.e.Customers apply for membership withdrawal or their membership is disqualified). Moreover, if Customers withdraw consent, Coupang immediately disposes of all of their personal data, with the exception of some retained due to the reasons specified above for a certain period. Hard copy printouts of personal data are shredded or burned, whereas electronic files of personal data are disposed through technical or physical means that ensure the information cannot be recovered.
When the purpose of collection and use of personal data is achieved, Coupang moves the information to another database,stores it securely, and disposes it without delay after a predetermined period, in line with the internal policy and applicable laws. Coupang never uses personal data moved to a separate database outside or beyond the scope consented by Customers, unless mandated by law.
Personal data of Customers who do not have any history of using Coupang for the past one year (long-term inactive members) is also segregated from other information and managed safely. Coupang sends email notifications to inactive members at least 30 days prior to moving their information to a separate storage. If it is, however, required by the Protection of Communications Secrets Act, the Act on the Consumer Protection in Electronic Commerce, Etc. or other applicable laws, Coupang may retain the necessary personal data of customers for the prescribed time period.
5. Rights and Obligations of Customers
5.1 Rights of Customers
Customers and their legal representatives may make requests to access, correct or delete their information collected by Coupang,and have the right to withdraw consent anytime. However, Customers who withdraw consent or have information deleted may have limited access to some or all of the Coupang services. Customers can check the personal data collected by Coupang by following the instruction described below:
[How to view the personal data collected by Coupang]
• Go to the Coupang website and
click “마이쿠팡” > “개인정보 확인/수정”, “주문목록”, “배송조회”
• Open the Coupang mobile app
and go to “내정보관리”
• Go to Coupang Eats mobile app - My 이츠 > 배달주소 관리, 결제 관리
• Go to Coupang Play mobile app - 프로필 > 설정> 계정관련
• There are special provisions
under the law, or it is absolutely necessary to fulfill an obligation
under the law;
• There is a possibility of
incurring damage to life, body, property and other interests of a third
party;
• It is impossible to execute
the contracts with data subjects, including providing the service under
the contract, without processing their personal data, yet the data
subjects have failed to explicitly express their intent to terminate
their contracts.
5.2. Obligations of Customers
Customers have an obligation to protect their personal data. Coupang is not liable for issues that arise due to personal data leakage caused not by the fault of Coupang, but by any of the following:
• Negligence or acts or
omissions of the customer, such as losing, letting others borrow or
handing over an ID (email address), password, or medium used to access
the service; or leaving PC unattended while still logged into the
service;
• Methods that cannot be
prevented by the security controls required by the applicable laws or
hacking and other technologies that are outside the control of Coupang
despite the security controls Coupang has undertaken.
6. Installation/Operation of Automatic Information Collection Tool and How to Opt-Out
To provide convenient, effective and personalized shopping experiences to Customers, Coupang may store (collect) data automatically generated as Customers interact with the service or device information that doesn’t lead to the identification of individuals. And Coupang informs Customers specifically which information out of the automatically generated data it collects and how Customers can opt-out from such collection.
6.1. Cookie
A cookie is a small text file sent to and stored on a user's device when the user visits a website. When the user visits the same site again, the cookie allows the site to recognize the user's device to automatically pull up his or her previous settings and history of using the site. Moreover, a cookie can be used to offer services (including advertisements) tailored to fit the interest and taste of customers by analyzing the websites visited, time and frequency of the visits and information generated or provided (entered) when using the services. It is up to customers to accept or decline cookies: they can choose to accept all cookies, check every time they receive and store a new cookie or refuse to store any cookies.
[How to change cookie settings]
in
Internet Explorer
in
Safari
in
FireFox
in
Chrome
To deliver personalized ads, Coupang collects and uses cookies from the web browser and ADID from the mobile app. Cookies and ADID are used to automatically collect customers’ history of interaction with the Coupang service and forward this information to Facebook and Criteo (the information also sent to Criteo viaTune). Facebook and Criteo (Tune) then uses this information to personalize ads for customers. The cookies and ADID collected by Coupang are not linked to other personal data and are not used to identify individuals. Facebook and Criteo also, under no circumstances, leverage the information Coupang provides to identify individuals.
Customers can choose to opt-out from receiving personalized ads any time and will see general ads instead of personalized ones once opted out.
7. Actions Taken to Protect Personal Information
(1) Coupang establishes a yearly plan for internal privacy management and audits the implementation thereof to ensure secure processing of personal information. Coupang has a designated Chief Privacy Officer as well as a dedicated privacy team, and personal information handlers receive privacy training.
(2) In order to prevent illegal access to personal information, Coupang keeps the number of personal information handlers to the minimum required level and has established policies for access management and passwords. Coupang’s personal information processing systems are protected with intrusion prevention and detection systems and are hosted on a segregated network to restrict access.
(3) To prevent log forgery and/or tampering, Coupang stores, backs up, reviews, and oversees the logs of access to the personal information systems.
(4) Coupang implements at-rest and in-transit encryption to sensitive information (e.g., passwords, unique identifier, financial information) to securely protect personal information.
(5) Coupang has antivirus software installed on the personal information systems as well as the devices with which personal information handlers process personal information. The security solutions are periodically reviewed and updated.
(6) Coupang protects the personal information systems with physical protection including a locking device.
8. The Chief Privacy Officer and Staff Responsible for Privacy InquiriesThe Chief Privacy Officer (CPO) and the department responsible for handling privacy inquiries are designated as below to oversee all matters related to customer privacy and handle complaints and address damage from privacy-related issues. Customers may make inquiries, raise complaints or ask for damage relief regarding privacy issues through the contact points below. Coupang will promptly respond to and handle inquiries.
|
Chief Privacy Officer |
Department Handling Privacy Complaints |
|
Name: Max Leveson Phone number: 1577-7011 Email address: help@coupang.com |
Department: Coupang Customer Center Phone number: 1577-7011 Email address: help@coupang.com Department: Coupang Eats Customer Center Phone number: 1670-9827 |
•Personal data breach
reporting center: 118 (without area code), privacy.kisa.or.kr
•Cybercrime Investigation Division at the Supreme Prosecutors’ Office: 1301 (without area code), www.spo.go.kr
•Cybercrime Investigation Bureau at the National Police Agency: 1821301 (without area), police.go.kr
9. Obligation of Notification
Privacy notice takes effect from its effective date. Should there be
grounds for a material change to customer’s right to data privacy,
customers will be notified by Coupang at least 14 days before the
change. Other changes will be notified to customers at least 7 days
prior to their implementation.
Note:
In the event of inconsistency or discrepancy between the English
version and the Korean version of this Privacy Notice, the Korean
version shall prevail.
Version 9.96
Release date: January 18 2022
Effective date: January 24 2022