Privacy Policy

KORELIA (operated by J&K Corporation Co., Ltd. / 주식회사 제이앤케이코퍼레이션) respects your privacy. This policy explains what information we collect and how we use it.

1. Information we collect

When you make a booking or contact us, we collect:

• Full name
• Email address
• Mobile phone number
• Preferred visit date, time, and party size
• Service or treatment category of interest
• Any specific notes or requests you share
• Payment information (processed by PortOne / the relevant payment gateway — we do not store your card details)
• LINE / WhatsApp ID (if you contact us through these channels)

2. How we use it

We use your information only to:

• Coordinate your booking with the clinic
• Communicate with you about your booking
• Process your Reservation Service Fee payment
• Send you booking-related emails
• Improve our service

We do NOT:

• Sell your information to third parties
• Use your information for advertising profiling
• Share your treatment details with anyone outside the clinic you booked with

3. Who we share it with

• The clinic you booked with (only what's needed to coordinate)
• PortOne (payment processor)
• Resend (email delivery service)
• Korean government bodies if legally required

4. Data retention

• Booking and payment records: 5 years (Act on Consumer Protection in Electronic Commerce, Korean Tax Law)
• Email communications: 3 years
• LINE / WhatsApp messages: until you request deletion

5. Your rights

You can:

• Request a copy of your data
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements above)
• Withdraw consent at any time

To exercise these rights, email contact@koreliatrip.com.

6. Cookies

Our website uses minimal cookies for:

• Session management (essential)
• Language preference (essential)
• Anonymous usage analytics (optional)

We do not use advertising tracking cookies.

7. International transfers

Our servers are operated by Vercel (USA-based) and our DNS is managed by 가비아 (Korea-based). By using our service, you consent to your data being processed in these locations.

8. Security

We use industry-standard security:

• HTTPS encryption for all data in transit
• Payment processing via PCI-DSS compliant providers
• Limited internal access to your data

9. Children

Our service is not directed at minors under 18. We do not knowingly collect information from minors.

10. Changes

We may update this policy. Significant changes will be notified via email if you have an active booking.

11. Personal Information Officer

In accordance with the Personal Information Protection Act (개인정보 보호법) of Korea:

• Officer: Kyuri Kim (김규리)
• Email: contact@koreliatrip.com
• Operating company: J&K Corporation Co., Ltd. (주식회사 제이앤케이코퍼레이션)