Supplier Privacy Notice
Coupang Corp. (hereinafter referred to as “Coupang”) establishes and discloses the following Privacy Notice in accordance with the Personal Information Protection Act to protect suppliers’ personal information and handle related issues in a quick and seamless manner. Any updates to this Privacy Notice will be posted on our website’s notice board, including the effective date and the details of the revision.
This Privacy Notice applies to Coupang’s supplier services (Supplier Hub, Coupang Live, and Coupang Ads) and does not apply to any other services provided by Coupang.
1. Personal Information Collected, Purpose of Collection, and Retention Period
Coupang will not use the collected personal information for purpose other than the originally intended purpose of collection, and if the purpose of use changes, we will take necessary measures, such as obtaining separate consent from the supplier, in accordance with Article 18 of the Personal Information Protection Act. Coupang processes and retains personal information in accordance with applicable laws and within the period notified to and agreed upon by suppliers at the time of collection. The retention period for personal information in accordance with applicable laws is set forth in “4. Procedures for and Methods of Destroying Personal Information.”
Coupang collects the minimum amount of personal information necessary for suppliers’ membership sign-up or service use.
A. Personal Information Processed Without the Data Subject’s Consent
Coupang processes the following categories of personal information without obtaining the data subject’s consent:
| Statutory Grounds | Purpose | Personal Information Items | Period of Retention and Use |
|---|---|---|---|
| Article 15(1)4 of the Personal Information Protection Act (“to execute and perform a contract”) | Membership registration and user identification, membership management (provision of membership services, handling of complaints and other inquiries, delivery of notices) | User ID, name, email, mobile phone number, password | Destroyed upon termination of the contract of use |
| To verify the name of corporation or representative | Copy of bankbook | Destroyed after being retained for 14 days from collection | |
| Article 15(1)4 (“to execute and perform a contract”) and Article 15(1)6 (“to attain the justifiable interest”) of the Personal Information Protection Act | Prevention of fraudulent activities | User ID, name, email, mobile phone number, and service use history of the user detected for fraudulent activity | Destroyed after being retained for 1 year upon termination of the contract of use |
Coupang may collect additional personal information (“PI”) to provide various services.
Additional Personal Information Collected by Individual Services
The information collected on “Coupang Ads Center” and “Coupang Live” services can be found below:
Personal Information Collected on Coupang Ads Center
Personal Information Collected on Coupang Live
2. Provision and Consignment of Personal Information
Coupang provides personal information to third parties only within the scope for which prior consent has been obtained from the supplier.
However, Coupang may provide the supplier’s personal information in accordance with the due process of law where there are special provisions in applicable laws, such as the Personal Information Protection Act, Act on Promotion of Information and Communications Network Utilization and Information Protection, Protection of Communications Secrets Act, Telecommunications Business Act, Act on the Consumer Protection in Electronic Commerce, Framework Act on National Taxes, and Credit Information Use and Protection Act, among others. In particular, Coupang may provide personal information to relevant authorities without the supplier’s consent in the event of emergencies such as disasters, infectious diseases, incidents or accidents posing imminent threats to life or bodily safety, or imminent loss of property.
Coupang consigns the processing of personal information to effectively provide services. In accordance with Article 26 of the Personal Information Protection Act, Coupang stipulates the following details in the consignment contract: prohibition of personal information processing for purposes other than to perform consigned tasks, technical and administrative safeguards, restrictions on re-consignment, management and oversight of the consignee, and the liability for damages. Coupang also manages and oversees whether the consignee processes personal information.
Consignment of Personal Information Processing (Domestic)
Consignment of Personal Information Processing (Overseas)
3. Use and Provision Without Supplier’s Consent
Coupang may use or provide additional personal information without the supplier’s consent, in accordance with Articles 15(3) or 17(4) of the “Personal Information Protection Act.” In such cases, Coupang will take the following factors into consideration when using or providing additional personal information without the data subject’s consent:
- Whether it is relevant to the original purpose of collection
- Whether the additional use or provision of personal information is predictable in light of the circumstances where personal information was collected or the practice of personal information processing
- Whether the interests of the supplier are unjustly infringed
- Whether necessary security measures such as pseudonymization or encryption have been taken
Should the additional use or provision of personal information continue to happen, we will disclose the criteria for deciding the above and assess whether those criteria are being met.
4. Procedures for and Methods of Destroying Personal Information
Coupang destroys personal information when the information is rendered unnecessary by the expiration of its retention period or by achieving the purpose of processing.
The procedure for and methods of destroying personal information are as follows:
- Procedure of Destruction : Once the purpose of personal information collection and use has been achieved, the information is separately stored and then destroyed after retaining for a certain period of time in obligation with the internal policies and applicable laws.
- Methods of Destruction : Personal information in electronic form is destroyed through means that will make the data irrecoverable, whereas personal information stored in a hard copy format is destroyed using a shredder.
However, if it is required by applicable laws to retain personal information even after the expiration of personal information retention period consented by the user or after achieving the purpose of processing, Coupang separately stores and manages the information.
| Information Retained | Retention Period | Statutory Grounds |
|---|---|---|
| Records of settlement and supplying goods, etc. | 5 years | Act on the Consumer Protection in Electronic Commerce, Etc. |
| Records of contract or subscription withdrawal, etc. | 5 years | |
| Records of customer complaints or settlement of disputes | 3 years | |
| Records of indication or advertisement | 6 months | |
| Records of electronic financial transactions | 5 years | Electronic Financial Transactions Act |
| Website/app visit history | 3 months | Protection Of Communications Secrets Act |
| Evidential materials on national taxes for all transactions | 10 years | Framework Act On National Taxes |
| Tax base and tax-filing materials | 5 years | |
| Tax base for value-added tax and tax-filing materials | 5 years | Value-added Tax Act |
5. Rights and Obligations of Suppliers and Legal Representatives and How to Exercise the Rights
A supplier’s personal information can be viewed, corrected, deleted, withdrawing of consent or suspension of processing by using the following procedure: Personal information that cannot be directly accessed on the service can be accessible by making a request to the Customer Support and Compliant Handling Team specified under “7. Teams Responsible for Personal Information Protection and Customer Complaints Handling.” The progress (or the results) made on (or the results of handling) the supplier’s request will be replied within 10 days. A legal representative or a delegated representative must prove his or her legitimate representative status by submitting a power of attorney and a certificate of family relations, etc.
- SupplierHub > ID on the top right corner > My Account
- Live Vendor > Live broadcast account
- Coupang Ads Center: Coupang Ads > My Info > Manage My Info
However, withdrawing of consent or deleting or suspending the processing of personal information may be limited in the following cases:
- Where there are special legal provisions, or it is inevitable to fulfil a legal obligation;
- Where there is a possibility of causing harm to another person’s life or body or unjustly infringing on another person’s property or interests; or
- Where the services agreed upon by the customer cannot be provided unless personal information is processed and the supplier has not clearly stated his/her intention to terminate the contract.
User ID and password should not be transferred or lent to others, and Coupang is not responsible for any issues caused by such actions. Any act of inflicting damage on the information and dignity of others is punishable by the Personal Information Protection Act and the Act On Promotion Of Information And Communications Network Utilization And Information Protection.
5.1 Installation and Operation of an Application that Automatically Collects Personal Information and How to Opt Out
Coupang uses “cookies” to store and periodically retrieve usage data in order to provide personalized services to suppliers. When a supplier accesses the website, the website server reads the contents of the cookies stored on the supplier’s device to maintain the supplier’s settings and provide personalized services.
- Purpose of Using Cookies: Cookies enable users to conveniently access and use websites according to their preferences when they visit a website.
- Refusal of Cookie Collection: Suppliers have the right to choose whether to allow cookies to be installed. Accordingly, suppliers may configure their web browser settings to allow all cookies, to receive a prompt each time a cookie is stored, or to refuse the storage of all cookies.
Web browser
- Chrome: Click the ‘⋮’ icon on the top right of the web browser > New Incognito Window (Shortcut: Ctrl+Shift+N)
- Edge: Click the “…” icon in the upper-right corner of the web browser > New InPrivate Window (Shortcut: Ctrl+Shift+N)
- Safari: Click “File” in the menu on the top > New Privacy Protection Window (Shortcut: Command+Shift+N)
- * In addition, major web browsers such as Firefox and Opera also provide functions to delete cookies.
* Cookie refusal methods may vary depending on the web browser version.
Mobile browser
- Chrome: Click “…” icon on the bottom-right corner of the browser > New Incognito tab
- Edge:Click “≡” icon on the lower-right corner of the browser > New InPrivate tab
- Safari: Click “Tab” icon on the lower-right corner of the browser > Privacy Protection tab > Done
- Samsung Internet: Click “☰” or the “three dots” icon on the bottom-right corner > Settings > Sites and Downloads > Site Permissions > Cookies
- * Cookie refusal methods may vary depending on the mobile browser version.
6. Personal Information Safeguard Measures
Coupang has technical and administrative safeguards in place to ensure that suppliers’ personal information is not stolen, leaked, forged or damaged while processing the information.
- Technical Safeguards : Real-time monitoring and blocking of hacking attempts and data leak, implementation of access control, storage of access logs and prevention of their forgery/alteration, at-rest encryption of passwords and personal information and in-transit encryption of data
- Administrative Safeguards : Operation of a dedicated privacy team, regular training for PI handlers, awareness campaigns toward employees and regular inspection for compliance
- Physical Safeguards: Installation and operation of systems in areas with controlled access, and establishment and operation of secure access control procedures
7. Teams Responsible for Personal Information Protection and Customer Complaints Handling
Coupang has designated the following teams responsible for personal information protection and customer complaint handling to address supplier complaints and provide remedies for damages related to the processing of personal information.
| Category | Description | ||
|---|---|---|---|
| Privacy Team | Digital Trust Privacy | ||
| Compliant Handling Team | Supplier Call Center | Contact | 1600-9879 |
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
Effective Date: 02. 06. 2026
※ If you have questions about prior versions of the privacy notice not displayed here, please contact customer support team.