Legal
Privacy Policy
This policy explains what personal information Curious Korea DMC Corp. (“Curious Korea”, “we”) collects through www.curiouskorea.com, why we collect it, how long we keep it, who we share it with, and the rights you have. It is written under the Personal Information Protection Act of the Republic of Korea (PIPA) and applies to everyone who uses this website, wherever you live.
Version 1.1 · Effective 10 September 2026
1. Who is responsible
Curious Korea DMC Corp. is a licensed general travel business (Tourism Business Registration 2024-000013, Business Registration 747-88-03157) located at #C539, 5th Floor, GLITE Bldg, 88 Cheonhoyet-gil, Gangdong-gu, Seoul, 05379, Republic of Korea. We are the controller of the personal information described here.
Privacy officer: An Chang Jin, Representative — info@curiouskorea.com · +82 10-9952-2313
2. What we collect, and when
We only collect information you choose to give us through the forms on this site.
| Form | Required | Optional |
|---|---|---|
| Partner brief | Company or organisation name, organisation type, contact name, work email, country or source market, trip purpose, preferred language, travel dates, group size, age groups, destinations, interests, hotel style, guide and transfer preferences | Phone, budget band, vehicle type, draft itinerary or ideas, special requirements |
| Contact | Company or organisation name, organisation type, contact name, work email, country, message | Phone |
| Tour sign-up | Name, nationality, number of travellers, email, selected tour | — |
When you submit a form we also record the time of submission, your IP address (used only to block spam and abuse), the page on our site you came from and any campaign tags (such as utm_source) in the link you arrived by. Until you submit, this referral information lives only in your browser’s session storage and is cleared when you close the browser.
If you choose to tell us about allergies, accessibility needs, religious requirements or health matters in the free-text fields, we use that information only to plan your trip, and you can ask us to delete it at any time. Please do not enter passport numbers or payment details in web forms — if a booking goes ahead we will collect those separately through a secure channel.
3. Why we use it
- To answer your inquiry and prepare a proposal or itinerary — on the basis of your consent and the steps needed before a contract.
- To operate and support a trip you book with us — to perform the contract.
- To contact you about your request by email or phone.
- To keep our forms safe from spam and abuse (rate limiting, bot detection).
- To understand demand and improve our service — only in aggregated, de-identified form (for example, “how many inquiries per season from each country”). We do not profile individuals and we make no automated decisions about you.
- To comply with Korean law (tax, commerce and tourism regulations).
We never sell or rent your personal information, and we do not use it for third-party advertising.
4. How long we keep it
- Inquiries that do not become a booking: up to 3 years from our last exchange with you, after which the record is deleted or anonymised.
- Inquiries that become a booking: for the duration of the trip and then for the periods required by Korean law — for example, contract and payment records for 5 years and consumer complaint or dispute records for 3 years under the Act on Consumer Protection in Electronic Commerce, and accounting records for 5 years under tax law.
- Email notifications of new inquiries in our company mailbox follow the same schedule.
- Aggregated statistics contain no personal information and may be kept indefinitely.
If you withdraw your consent earlier, we delete your information without undue delay unless a law requires us to keep it.
5. Who we share it with
We share personal information only with the service providers that run this website and our communications for us, with travel partners when you book, and with authorities when the law requires it.
| Provider | What they do for us | Location | Retention |
|---|---|---|---|
| Supabase, Inc. | Database hosting for inquiries | Seoul, Republic of Korea (AWS ap-northeast-2) | As in section 4 |
| Vercel, Inc. | Website hosting, delivery and form handling | United States and global edge network | Transient server logs |
| Resend, Inc. | Delivery of the email that notifies our team of a new inquiry | Japan (AWS Tokyo region); company headquartered in the United States | Transient delivery logs |
| Mailplug Co., Ltd. | Our company email service | Republic of Korea | As in section 4 |
Because some of these providers operate outside Korea, the information listed in section 2 may be transferred to and processed in the United States for the purposes of hosting this website, and to Japan for delivering our notification emails, for the periods above. These providers are bound by contracts that require them to protect your information and to use it only on our instructions. If you would rather not have your information transferred abroad, you can contact us by email at info@curiouskorea.com instead of using the web forms.
When you book a trip, we pass the details needed to deliver it — typically names, number of travellers and special requirements — to the hotels, guides, transport and activity partners involved, and to no one else.
6. Your rights
You can ask us at any time to see the personal information we hold about you, to correct it, to delete it, to limit how we use it, or to withdraw your consent. If you live in the European Union, the United Kingdom or another jurisdiction that grants additional rights (such as data portability or the right to lodge a complaint with a supervisory authority), those rights apply too.
Send requests to info@curiouskorea.com. We may ask you to confirm your identity, and we respond within 10 business days. Withdrawing consent does not affect anything done before the withdrawal; deleting your information may mean we can no longer plan or operate your trip.
7. How we protect it
- All traffic to this site is encrypted (HTTPS).
- Our database is access-controlled: the public website can only add inquiries, not read them, and only authorised staff can view inquiry records.
- Staff access follows the principle of least privilege and is reviewed regularly.
- Forms are protected against automated abuse.
No system is perfectly secure. If a security incident affects your personal information, we will notify you and the relevant authorities as required by law.
8. Cookies and tracking
We do not currently use advertising or analytics cookies. To link an inquiry to the content you were reading, the site keeps the page you came from in your browser’s session storage, which is cleared when you close the browser. If we introduce analytics in the future, we will update this policy and ask for your consent where the law requires it.
9. Children
This website is not directed at children under 14 and we do not knowingly collect their personal information. A parent or guardian should submit inquiries on a child’s behalf.
10. Changes to this policy
The version number and effective date appear at the top of this page. Material changes are announced here before they take effect. Each inquiry we receive records the policy version that was in force when you gave your consent.
11. Contact and complaints
Curious Korea DMC Corp. · #C539, 5th Floor, GLITE Bldg, 88 Cheonhoyet-gil, Gangdong-gu, Seoul, 05379 · info@curiouskorea.com · +82 10-9952-2313
If you believe we have not handled your personal information properly, you may also contact the Korean authorities: the Personal Information Dispute Mediation Committee (kopico.go.kr, +82 1833-6972) or the KISA Privacy Infringement Report Center (privacy.kisa.or.kr, 118 within Korea).