“Personal information” means information about a living individual who can be identified by the information, such as a name or national identification number, including information that can identify an individual when combined with other information.

Most services can be used without separate registration. However, the Company collects personal information to provide higher-quality and customized services to members. The Company does not disclose personal information without the user’s prior consent except as permitted by this Privacy Policy or applicable law. Collected information is used as follows.

• Name, ID, and password: Used to identify members and provide member services
• Email address and phone number: Used for notices, complaints, and other communications
• Bank account and credit card information: Used to process payments for services and additional services
• Other optional information: Used to provide personalized services
• IP address: Used to prevent fraudulent use and unauthorized access

• One-ID login (SSO) process management services for Monkeytravel and its affiliates
• Management of membership services for Monkeytravel member companies
• Management of member tiers and customer rewards
• Customer support services
• Provision of members’ personal information when requested by relevant institutions under applicable law

• ① Required information: ID, password, name (Korean/English), email address, nickname, phone number, gender, and date of birth

• 1. Google

• ① Required information: Email address and name

  ② Optional information: None

• 2. Apple

• ① Required information: None

  ② Optional information: Email address and name

• 3. Kakao

• ① Required information: Name, phone number (Kakao account), gender, date of birth, email address (Kakao account), and nickname

  ② Optional information: Kakao channel subscription status and history, and Kakao message delivery history

• 4. Naver

• ① Required information: Name, phone number, gender, date of birth, and email address

  ② Optional information: Profile picture

• 1. Flight reservation

• ① Required information: Name (Korean/English), date of birth, email address, and phone number

  ② Optional information: None

• 2. Accommodation, golf, tour, ticket, vehicle reservation

• ① Required information: Email address, name (Korean/English), and phone number

  ② Optional information: Passport number, KakaoTalk ID, LINE ID, address in Korea, emergency contact name, departure date, flight number, pickup/drop-off location, date of birth, and gender

• 3. Payment

• ① Credit card: Card issuer, card number, expiration date, and other card details

  ② Refund account: Bank name, account number, and account holder’s name

The Company retains and uses members’ personal information while they use the Company’s services.

However, in accordance with the procedures described in “6. User and legal representative rights and how to exercise them,” information deleted or modified by a member, or information for which membership withdrawal has been requested, will be permanently deleted using a non-recoverable method and will no longer be accessible.

As described in “3. Types and methods of collecting personal information,” personal information collected for temporary purposes—such as surveys, events, or identity verification—will be destroyed in the same non-recoverable manner once the purpose has been fulfilled.

In principle, personal information is destroyed once the purpose of collection or provision has been fulfilled. However, to prevent repeated unlawful use by fraudulent members, the Company may retain such a member’s national identification number for one year after termination of the service agreement.

The Company may also retain member information for the periods required by applicable laws, including the Commercial Act and the Consumer Protection Act in Electronic Commerce.

• Records of contracts or cancellation of contracts: 5 years
• Records of payments for goods and services: 5 years
• Records of consumer complaints or dispute resolution: 3 years

• Personal information printed on paper is shredded or incinerated.
• Personal information stored electronically is deleted using a method that prevents recovery.

• The user has given prior consent to the disclosure;
• Disclosure is necessary to provide the service or settle service fees;
• The user has violated the service terms, other member-service terms, or operating principles posted on the homepage;
• Disclosure is necessary to take legal action against someone for physical or financial harm caused by use of the Company’s services;
• Disclosure is required by law, such as when a government or investigative agency makes a request under applicable law;
• Information is provided to advertisers, partner companies, research institutions, or similar organizations in a form that does not identify a specific individual for statistical, academic, or market research;
• Information is provided to a specialist company operating the customer center to process service-related inquiries or complaints.

Users and legal representatives may view or correct their own personal information, or the personal information of a child under 14, at any time and may request withdrawal of membership.

To view or correct personal information, select “Edit Member Information” in the member-information section. To withdraw, select “Withdraw Membership” and complete the identity-verification process.

You may also contact the privacy officer by mail, phone, or email. We will respond promptly.

If you request a correction, the relevant personal information will not be used or provided until the correction is complete.

If the information has already been provided to a third party, we will promptly notify that party of the correction.

Information deleted at the request of a user or legal representative will be processed in accordance with the Company’s retention and use policy.

The Company collects and uses behavioral information through cookies and similar automated technologies to improve user convenience, analyze services, recommend products, and provide advertising.

Users may accept or reject cookies and may delete stored cookies at any time. The Company does not provide personalized advertising to children under 14.

The Company collects users’ behavioral information through cookies and similar technologies for the following purposes.
1. Improving service quality and analyzing errors
2. Recommending personalized products based on user interests
3. Optimizing ad delivery and improving advertising effectiveness
4. Analyzing traffic sources and improving conversion rates

The Company automatically collects the following types of behavioral information when you use the Website or App.

• Search terms, click patterns, and scroll depth
• Favorite product ID, price, and category
• Add-to-cart and favorites history
• Visited page URLs and visit history
• Ad clicks and conversion information, such as booking completion
• Traffic source, such as ads, search, and social media
• Device information, such as browser type, operating system, and model
• Partial IP address, processed in anonymized form

The Company collects behavioral information using the following automated technologies or scripts.

• Internal server logs
• Cookie
• Google Analytics (GA4)
• Naver Ad Conversion Script
• Meta Pixel (Facebook/Instagram ads)
• Web Beacon

Behavioral information is retained and then deleted according to the following periods.

• Self-hosted server-log data: 1 year
• Cookie-based behavioral information: up to 1 year
• GA4 analytics data: 14 months
• Naver conversion data: 90 days, subject to Naver’s policy
• Meta Pixel data: approximately 90 days, subject to Meta’s policy

The Company provides behavioral information to third parties to analyze and deliver personalized advertising and services, as described below.

Users may opt out of personalized advertising or cookie-based behavioral-data collection using the settings below.

Blocking Cookies in Web Browsers

• Chrome: Settings → Personal Information and Security → Cookies and Site Data → Block Cookies
• Edge: Settings → Cookies and Site Permissions → Cookies and Site Data
• Safari (iOS): Settings → Safari → enable “Block All Cookies” or “Prevent Cross-Site Tracking”
• Private Browsing/InPrivate mode: Restricts cookie storage

Blocking personalized advertising in advertising-platform settings

• Google Advertising Settings: https://adssettings.google.com
• Google Analytics Opt-out: https://tools.google.com/dlpage/gaoptout
• Naver Customized Advertising Settings: https://privacy.naver.com/ads
• Meta Advertising Settings (Facebook/Instagram): https://www.facebook.com/ads/preferences

Site Settings

The Company provides a personalized-advertising opt-out function through the “My Information Management > Personal Information Settings” screen. (The exact screen name may vary.)
※ Opting out of personalized advertising may limit personalized ads, but it does not affect basic service use.

The Company processes behavioral information in a form that does not identify a specific individual and applies safeguards such as firewalls, least-privilege access, encryption, and regular security checks.

The Company also allows non-members to purchase goods and services.

From non-members, the Company requests only the personal information necessary to process payment and deliver goods.

Personal information entered by a non-member during a purchase is used only for payment and delivery-related purposes.

To improve its services, the Company may entrust the collection, handling, and management of personal information to third parties in compliance with applicable legal requirements, including obtaining consent where required.

For each entrusted processing activity, the Company sets requirements to ensure that personal information is securely managed in accordance with applicable law. The information shared is limited to what is necessary for the stated purpose.

• Entrusted parties: KAZINIS Co., Ltd., NHN Korea Cyber Payment Co., Ltd., Naver Co., Ltd., Kakao Co., Ltd., eBay Korea Co., Ltd., and NHN Payco Co., Ltd.
• Entrusted services: Credit-card payments and real-time bank transfers

• Entrusted parties: Kakao Co., Ltd., LG CNS, Ltd., and Bada Information
• Entrusted services: SMS and Kakao message delivery

• Entrusted party: Hummus-on Co., Ltd.
• Entrusted service: Bulk email delivery

• Entrusted party: Dream Security
• Entrusted service: Mobile-phone identity verification

• When the user has given prior consent, or when disclosure is requested by an investigative agency under the procedures prescribed by law;
• When personal information is processed or provided to an entrusted party, the entrusted party, scope of the assignment, and scope of shared information will be notified in advance by mail, email, phone, or the homepage.

• When a government or investigative agency requests personal information under applicable laws, including the Criminal Procedure Act, Financial Transaction Reports Act, Credit Information Act, Local Tax Act, Consumer Protection Act, or Bank of Korea Act;
• When disclosure is necessary to settle fees for services provided.

• Data subjects have the right to refuse consent to the provision of personal information to third parties.
• Users may refuse an international transfer of personal information by contacting the Company’s privacy officer or the responsible department.
• If you refuse consent, the Company may be unable to provide the relevant product service, and you may be unable to make a product booking.

The Company collects only the minimum information necessary to provide travel products and booking services. Unless otherwise agreed, it will not use personal information for any other purpose. Personal information is provided only to companies directly involved in providing the relevant service, under the limited conditions described below.

• Information transferred: All information required for a product booking, including name and contact information
• Recipient country: The country where the booked product or supplier is located
• Transfer method: Booking data sent over a network or by email
• Purpose of use: Providing services and communications, protecting Monkeytravel or the rights, property, or safety of others, and other purposes permitted by applicable law
• Retention and use period: Until membership withdrawal, except where applicable law requires longer retention

• When a relevant agency requests it under applicable laws, including the Criminal Procedure Act, Financial Transaction Reports Act, Credit Information Act, Local Tax Act, Consumer Protection Act, or Bank of Korea Act;
• When disclosure is necessary to settle fees for services provided.

• Data subjects have the right to refuse consent to the provision of personal information to third parties.
• Users may refuse an international transfer of personal information by contacting the Company’s privacy officer or the responsible department.
• If you refuse consent, the Company may be unable to provide the relevant product service, and you may be unable to make a product booking.

We collect users’ opinions regarding personal-information protection and maintain procedures for handling complaints.

Users may submit complaints by phone or email using the contact information for the privacy officer in section 13 below. We will respond promptly.

We do our best to protect your personal information and help you use our services safely.

If an incident violates the personal-information protections described in this Privacy Policy, the privacy officer is responsible for responding to it.

• Users are responsible for keeping passwords related to their personal information secure.
• The Company will never ask users to disclose their passwords. Please do not share them with anyone.
• Take particular care when accessing the service from a public computer or network.
• The Company has appointed a privacy officer and a person responsible for handling personal-information complaints. Their contact information is below.

Thailand/World (Worldwide Hotel)

Affiliation/position: Han Hyun Ok / President

Email: [email protected]

Phone: 070-4353-4729

Vietnam

Affiliation/position: Nam Juyeon / President

Email:

Phone: 070-8648-0241

Philippines/Taiwan

Affiliation/position: Hwang Yong / President

Email:

Phone:

Guam/Saipan

Affiliation/position: Seol Hanho / President

Email:

Phone:

The Company takes the following measures to protect personal information in accordance with Article 30 of the Enforcement Regulations of the Personal Information Protection Act.

• Regular self-audits

  We conduct quarterly self-audits to review the security of personal-information handling.

• Limiting and training personnel

  We limit access to personal information to designated personnel and provide the necessary training.

• Technical measures against hacking

  We install, regularly update, and inspect security programs, and monitor and block unauthorized access using physical and technical safeguards.

• Encryption of personal information

  Passwords are encrypted and stored securely. Important data is protected with additional security measures, including encryption of files and transmission data and file-lock functions.

• Preserving access logs and preventing tampering

  We retain access logs for the personal-information processing system for at least six months and use security measures to prevent their falsification, theft, or loss.

• Restricting access to personal information

  We control access by managing the granting, modification, and revocation of access rights to personal-information systems, and block unauthorized external access with an intrusion-prevention system.

When this Privacy Policy is added to, deleted from, or amended due to changes in government policy, applicable law, or security technology, the updated contents will be announced in the “Notice” section of the homepage.