1. Purpose of Processing Personal Information, Items Collected, and Retention/Use Period
The Company processes only the minimum personal information necessary to provide its services and does not use such information for purposes other than those listed below. If the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent, in accordance with applicable laws and regulations.
A. Membership Registration and Account Management
- Purpose: Member identification, confirmation of intent to register, identity verification, account management, customer support
- Items Collected (examples): Name, email address, password, mobile phone number, country, language settings
- Retention Period: Until membership withdrawal. However, if retention is required by applicable laws, it will be retained for the relevant statutory period
B. Reservations, Orders, Payments, and Contract Performance
- Purpose: Reservation receipt, order processing, payment confirmation, voucher issuance, contract performance, refund processing, dispute handling
- Items Collected (examples): Booker’s name, user’s name, contact information, email, nationality, passport information (if required for overseas travel/flights/accommodations, etc.), date of birth, payment information (payment method details, approval information), usage history
- Retention Period: Until 5 years after transaction completion or until the end of the statutory retention period under applicable laws
C. Medical, Beauty, Education, and Personalized Consultation Inquiries
- Purpose: Receiving consultation requests, partner matching, checking reservation availability, responding to inquiries
- Items Collected (examples): Name, contact information, email, country, inquiry details, preferred schedule, services of interest
- Retention Period: 1 year after the consultation is completed. However, if retention is necessary for dispute response or follow-up inquiries, it will be retained for the relevant period
D. Customer Service, Complaints, and Dispute Resolution
- Purpose: Complaint handling, fact verification, response to complaints, dispute mediation, legal response
- Items Collected (examples): Name, contact information, email, order/reservation information, inquiry details, attached materials
- Retention Period: 3 years after completion of processing or until the end of the statutory retention period under applicable laws
E. Marketing and Events (Upon Optional Consent)
- Purpose: Event notifications, provision of discount/promotion information, newsletter delivery
- Items Collected (examples): Name, email address, mobile phone number, country, categories of interest
- Retention Period: Until consent is withdrawn
3. Provision of Personal Information to Third Parties
The Company processes personal information only within the scope of the purposes described in Section 1 and provides it to third parties only where there is a legal basis under applicable laws, such as the data subject’s consent or special provisions of law.
Example of Provision
- Recipient: Reservation partners (hotels, tour operators, hospitals, clinics, educational institutions, carriers, etc.)
- Purpose: Reservation confirmation, service provision, user identification, schedule coordination, on-site assistance
- Items Provided: Name, contact information, email, reservation details, service schedule, nationality, passport information (if required)
- Retention/Use Period: Until completion of service provision and for each partner’s statutory or contractual retention period
※ If there are actual recipients, please make sure to specify the name of the recipient or the scope by recipient type in detail according to your actual business operations before publication.
4. Entrustment of Personal Information Processing
The Company may outsource personal information processing tasks to external parties in order to provide smooth services. When entering into outsourcing agreements, the Company stipulates necessary matters to ensure the safe processing of personal information in accordance with applicable laws and supervises the entrusted parties.
Examples of Outsourcing
- Payment Gateway (PG): Payment approval, payment processing, refund processing
- Cloud/Hosting: Data storage, server operation, backup
- SMS/Email Delivery: Authentication, reservation notices, alert delivery
- Customer Service Solutions: Inquiry reception and consultation support
- Analytics Tools: Service usage statistics and performance improvement
※ In actual operation, please accurately state the names of the entrusted companies (e.g., PG provider, cloud provider, email delivery provider).
5. Overseas Transfer of Personal Information
The Company may transfer personal information overseas in the course of providing services, such as reservations with overseas partners, use of global cloud services, and integration with overseas payment or reservation systems. In such cases, the Company will ensure a lawful basis for transfer under applicable laws and disclose the required information in this Privacy Policy.
Example of Overseas Transfer
- Recipient: Overseas reservation partners, overseas cloud service providers, overseas payment/reservation system operators
- Country of Transfer: [e.g., Singapore / United States / Japan / Vietnam — specify the actual country]
- Items Transferred: Name, contact information, email, reservation details, payment-related information, passport information (if required)
- Purpose of Transfer: Reservation confirmation, service provision, data storage, system operation
- Timing and Method of Transfer: At the time of reservation or during service use, via network transmission
- Retention/Use Period: Until the purpose is achieved or until the end of the retention period required by applicable laws/contracts
※ If overseas transfer actually occurs, the country of transfer, recipient, items transferred, purpose, and retention period must be specified in detail according to actual operations.