EZPMP Co., Ltd. (hereinafter referred to as the "Company") complies with the Personal Information Protection Act and relevant laws to lawfully process and securely manage personal information regarding the 'Guide KIM' application service (hereinafter referred to as the "Service"). In accordance with Article 30 of the Personal Information Protection Act, the Company establishes and discloses this Privacy Policy.
1. Purpose of Processing Personal Information
The Company processes personal information for the following purposes:
User Management: Verifying product buyers, identification via one-time verification codes, limiting usage to one device per account, preventing unauthorized use, and delivering notices.
On-Site Travel Management & Execution: All-in-one travel schedule management, mobile QR voucher issuance and redemption, multilingual support, 1:1 inquiries, and push notification alerts.
Location-Based Services: Current location mapping, nearby attraction (POI) search, and navigation links.
AI Translation & Service Improvement: Translation of dynamic content and AI-based processing/translation of user inquiries.
2. Items of Personal Information Processed
A. Personal Information Processed with User Consent
Basic User Management (Required): Email address, Name
Optional Services (Optional): Date of birth, Contact number, Nationality, Gender, dietary restrictions, profile photo, photos attached to 1:1 inquiries
Location-Based Services (Optional): Real-time user location data (GPS coordinates)
Retention Period: Until account deletion or termination of the service contract.
B. Device Permissions
Location: Displaying maps based on current location, providing location-based places/weather and recommended courses.
Camera (Optional): QR voucher scanning, 1:1 inquiries, and profile photo capture.
Photos/Storage (Optional): File/photo uploads and saving PDFs/files on the device.
Phone (Optional): Connecting calls to major attraction contacts and emergency lines.
C. Automatically Generated Information During Service Usage
Access IP address, access logs, service usage records, and device identification details.
3. Processing Personal Information of Children Under 14
In principle, the Company does not collect or process personal information from children under 14. In unavoidable cases where a service user provides companion child details, processing occurs under the consent of the legal guardian (the user) with minimal necessary information.
4. Retention and Processing Period of Personal Information
① The Company processes and retains personal information within the period provided by law or agreed upon by the user at the time of collection.
② The respective retention periods are as follows:
User Management: Until service cancellation (account deletion)
1:1 Customer Inquiries & Support: 3 years post-completion
Statutory Retention under Relevant Laws:
Records on contracts or cancellation of subscriptions: 5 years (Act on the Consumer Protection in Electronic Commerce)
Records on consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce)
Communication confirmation data (Log files, IP addresses): 3 months (Protection of Communications Secrets Act)
5. Destruction Procedures and Methods
① Personal information is destroyed without delay when no longer needed due to expiration of retention period or achievement of processing purpose.
② Procedures: Upon account deletion request, personal information subject to destruction is selected and destroyed with the approval of the Privacy Officer.
③ Methods: Electronic files are permanently deleted using unrecoverable technical methods.
6. Provision of Personal Information to Third Parties
The Company provides personal information to third parties only with user consent or under special legal provisions. It may be provided within the minimal scope only upon lawful requests from investigative agencies under relevant laws.
7. Outsourcing of Data Processing
The Company delegates data processing tasks to ensure smooth service operations as follows:
Cloud & IT Infrastructure Provider: Server hosting and system data storage.
Message / Email / App Push Service Provider: Sending one-time verification codes, notices, and PUSH notifications.
External Community Linkage (KX Platform): Navigating to external KX community links via the home quick button is subject to the external platform's Privacy Policy.
8. Overseas Data Transfer
The Company does not collect, entrust, transfer, or store personal information overseas during service provision and AI translation processing. All system infrastructure and data processing are managed securely within domestic data centers.
9. Technical, Administrative, and Physical Safety Measures
The Company enforces the following safety measures to protect personal information:
Administrative Measures: Establishing and implementing internal management plans, regular employee training.
Technical Measures: Access permission management, installation of access control systems, encryption of key data, installation of security software.
Physical Measures: Restricting access to computer rooms and data storage rooms.
10. Processing of Anonymized Data and Retention
Upon account deletion, personally identifiable information is destroyed immediately. However, anonymized statistical data (nationality, age group, gender, location logs) will be retained continuously without destruction for service analytics and quality improvement.
11. Rejection of Automated Location Collection
The Company may collect device location data to offer location-based services. Users may reject location tracking at any time via device settings (Settings > Privacy > Location Services). However, disabling location access may restrict interactive map and location-based recommendation features.
12. Rights of Users and How to Exercise Them
① Users can view or modify their personal information at any time via [Settings] > [Edit Profile] in the app.
② Users can withdraw consent and delete their account at any time directly through [Settings] > [Delete Account] in the app.
13. Privacy Officer and Contact Department
The Company designates a Privacy Officer to oversee personal information protection and address user complaints:
Privacy Officer: Young-Oh Lee, Vice President
Contact: +82-2-3475-2647 / yolee@ezpmp.co.kr
Department in Charge: Glocal Tourism Department (+82-2-3475-2504 / product@ezpmp.co.kr)
14. Remedies for Rights Infringement
Users may contact the following agencies for reporting or consultation regarding personal information infringement:
Personal Information Dispute Mediation Committee: (Without area code) 1833-6972 (www.kopico.go.kr)
Personal Information Infringement Report Center: (Without area code) 118 (privacy.kisa.or.kr)
National Police Agency: (Without area code) 182 (ecrm.police.go.kr)
15. Effective Date
This Privacy Policy takes effect on September 1, 2026. Any modifications will be notified via in-app announcements at least 7 days prior to implementation.