Privacy Policy
OHMYHOTEL GLOBAL PTE. LTD. (hereinafter referred to as the ‘Company’) values the personal information of its customers and complies with the personal information protection provisions under relevant laws including the ‘Act on Promotion of Information and Communications Network Utilization and Information Protection’ and the ‘Personal Information Protection Act,’ and follows this Privacy Policy.
Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes. The personal information being processed shall not be used for purposes other than the following, and if the purpose of use changes, necessary measures such as obtaining separate consent shall be taken.
1. Website Membership Registration and Management
Personal information is processed for the purposes of confirming membership registration intent, identification and authentication for providing membership services, maintaining and managing membership status, identity verification under the limited identity verification system, preventing fraudulent use of services, various notices and notifications, and handling grievances.
2. Provision of Goods or Services
Personal information is processed for the purposes of providing services, sending contracts and invoices, providing content, providing customized services, identity verification, payment and settlement of fees, and debt collection.
3. Handling Grievances
Personal information is processed for the purposes of verifying the identity of the complainant, confirming the details of the complaint, contacting and notifying for fact-finding, and reporting the results of processing.
4. Identity Verification
Required items: Name, email address, password (for email-registered members)
5. Service Usage Analysis and Statistics
Personal information is processed for the purposes of service usage trend analysis, user behavior analysis, providing customized services for users, service improvement and quality enhancement, etc.
Article 2 (Period of Processing and Retention of Personal Information)
① The Company processes and retains personal information within the period of retention and use of personal information as prescribed by law or within the period of retention and use of personal information agreed upon at the time of collection from users.
② The processing and retention periods for each type of personal information are as follows:
1. Website Membership Registration and Management: Until withdrawal from the business entity/organization website
However, in the following cases, until the end of the relevant reason:
1) If an investigation or inquiry is underway due to a violation of relevant laws, until the completion of the investigation or inquiry
2) If credit/debt relationships remain from website use, until the settlement of the relevant credit/debt relationships
2. Provision of Goods or Services: Until the completion of supply of goods/services and the completion of payment and settlement
However, in the following cases, until the end of the relevant period:
1) Records of transactions such as display/advertising, contract contents and performance under the ‘Act on Consumer Protection in Electronic Commerce’:
- Records of display/advertising: 6 months
- Records of contracts or withdrawal of offers, payment, supply of goods, etc.: 5 years
- Records of consumer complaints or dispute resolution: 3 years
2) Retention of communication confirmation data under Article 41 of the ‘Protection of Communications Secrets Act’:
- Subscriber telecommunications date/time, start/end time, counterpart subscriber number, usage count: 1 year
- Computer communication, internet log records, access point tracking data: 3 months
3) After the above retention period has elapsed, the Company may retain and utilize statistical and analytical data that has been processed in a manner that prevents personal identification. However, the exercise of rights such as viewing, correcting, or deleting may be restricted once the data has been processed to be unidentifiable.
Article 3 (Provision of Personal Information to Third Parties)
① The Company processes users’ personal information only within the scope specified, and provides personal information to third parties only in cases where the data subject has given consent or where there are special provisions under law.
② The Company provides personal information to third parties as follows:
| Recipient | Purpose of Provision | Information Provided | Retention and Use Period |
| Domestic and international hotels, resorts/accommodation providers, and intermediaries | Performance of booking service contract (service provision, user verification, usage information verification) | Booker information: name, email, phone number, gender (for certain products) Traveler information: name, gender (for certain products) | Until the purpose of personal information use is achieved (subject to relevant laws) |
Article 4 (Entrustment of Personal Information Processing)
① The Company entrusts the processing of personal information as follows for the smooth handling of personal information tasks:
| Category | Entrusted Company | Entrusted Tasks |
| Payment Processing | NICEPay | Payment processing by payment method including credit cards, mobile phones, bank transfers, and simple payments |
| Notification Delivery | OHMYHOTEL&CO Co., Ltd. | SMS/LMS/MMS/Email delivery, KakaoTalk notification delivery |
| Push Notification Delivery | FingerPush | Mobile app push notification delivery |
| Customer Service | OHMYHOTEL&CO Co., Ltd. | Customer center operation, consultation, complaint handling, dispute resolution |
| Service Usage Analysis and Data Processing | Google LLC | Service usage statistics analysis, user behavior analysis, data processing, and service improvement through Google Analytics 4 and other services provided by Google LLC |
② When entering into entrustment contracts, the Company specifies in contracts and other documents matters concerning the prohibition of processing personal information beyond the purpose of performing entrusted tasks, technical and managerial protective measures, restrictions on re-entrustment, management and supervision of the trustee, and liability for damages, in accordance with Article 25 of the Personal Information Protection Act, and supervises whether the trustee processes personal information safely.
③ If the content of entrusted tasks or the trustee changes, such changes will be disclosed without delay through this Privacy Policy.
Article 5 (Overseas Transfer of Personal Information)
The Company may transfer users’ personal information overseas for the purpose of providing services, and the current status of transfers is as follows:
| Legal Basis | Transferee | Transfer Country | Transfer Items | Transfer Purpose | Transfer Timing and Method | Retention and Use Period |
| Personal Information Protection Act Article 28-8 (1) Item 1 | Domestic and international hotels, resorts/accommodation providers, and intermediaries | Individually notified at the final booking stage | Booker information: name, email, phone number, gender (for certain products) Traveler information: name, gender (for certain products) | Performance of booking service contract | Through electronic transmission with the data subject’s consent when booking specific products | Until service provision is completed; however, until the applicable deadline if retention is required under relevant laws |
| Personal Information Protection Act Article 28-8 (1) Item 1 | OHMYHOTEL&CO Co., Ltd. (Korea) | Republic of Korea | Booking information, name, mobile phone number, email, transaction details, complaint handling records | Customer service provision, performance of entrusted tasks, complaint handling and consumer dispute resolution | As needed / Transmission via API | Until service provision is completed; however, until the applicable deadline if retention is required under relevant laws |
| Personal Information Protection Act Article 28-8 (1) Item 3 | Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA | United States | Hashed user identifier (user_id), advertising/analytics identifiers, cookies, IP address, device identification information, service usage records (page views, clicks, event information) | Statistical analysis, data processing, and service improvement through services provided by Google LLC, including Google Analytics 4 (service usage statistics and user behavior analysis), BigQuery (data warehouse and query analysis), Looker Studio (data visualization), Firebase Analytics (app usage analysis), Firebase Crashlytics (app stability analysis), and Google Tag Manager Server-Side (tag and event management) | Continuously transmitted electronically (HTTPS) at the time of service use | Up to 14 months |
The transfer to Google LLC is conducted in accordance with Article 28-8 (1) Item 3 of the 'Personal Information Protection Act' (cases where personal information processing entrustment is necessary for the conclusion and performance of a contract with the data subject) and is replaced by the public disclosure in this Privacy Policy. Users may refuse the transfer to Google LLC by the following methods, and refusal will only result in exclusion from member-level statistical analysis without restricting general service use.
① Install Google's opt-out tool (https://tools.google.com/dlpage/gaoptout) ② Withdraw membership
Article 6 (Rights and Obligations of Users and Legal Representatives, and Methods of Exercise)
① Users may exercise the following rights related to personal information protection against the Company at any time:
1. Request to view personal information
2. Request for correction in case of errors, etc.
3. Request for deletion
4. Request for suspension of processing
② The exercise of rights under Paragraph 1 may be made to the Company’s domestic representative, OHMYHOTEL&CO Co., Ltd., in writing, by telephone, by email, or by fax (FAX), and the Company will take action without delay.
③ If a user requests correction or deletion of errors in personal information, the Company shall not use or provide the relevant personal information until the correction or deletion is completed.
④ Users shall not infringe upon the personal information or privacy of themselves or others that the Company processes in violation of the Information and Communications Network Act, the Personal Information Protection Act, and other relevant laws.
Article 7 (Personal Information Items Processed)
① The Company collects only essential information required for basic service provision, and obtains separate consent for information necessary for customer support (recommendations, service improvement, etc.). Optional information does not restrict service use even if not provided.
② The Company does not collect sensitive personal information (race and ethnicity, ideology and beliefs, place of origin and registered domicile, political inclination and criminal records, health status and sex life, etc.) that may infringe upon users’ fundamental human rights. In any case, the information provided shall not be used for purposes other than those previously disclosed to users, nor shall it be disclosed externally.
③ The Company processes the following personal information items:
| Type | Category | Items Collected/Used | Purpose of Collection/Use |
| Required | Member | Email, name, password | User identification, provision of information related to service use (delivery of notices, confirmation of user intent, service-related consultation, complaint handling, etc.) |
| Required | Member | Automatically collected information: Service usage records, suspension records, termination records, IP address, cookies, hashed user identifier (user_id), advertising/analytics identifiers, device identification information (device ID, OS, model), browser information | Prevention of illegal/fraudulent use, compliance with personal information validity period system, recent search information, and other services, service usage analysis and statistics |
| Required (Product Purchase) | All Members | Nationality information (automatically extracted based on country code in phone number or browser settings) | service usage analysis and statistics |
| Required (Product Purchase) | All Members | Guest name, email, phone number | Delivery of guest information to product suppliers and accommodation facilities |
| Required (Product Purchase) | All Members | Credit card information | Payment services, refund of transaction amounts due to purchase cancellation, retention of electronic financial records |
| Optional | SNS Account Simple Registration | Facebook/KakaoTalk/Naver/Google: User ID, name, email Apple ID: Name, email | Membership registration using SNS accounts |
Article 8 (Methods of Collecting Personal Information)
1. When a user consents to the collection of personal information and directly enters information during the membership registration and service use process, such personal information is collected.
2. Personal information of users may be collected through web pages, email, fax, telephone, etc. during the consultation process through the customer center.
3. Personal information may be collected in writing during offline events.
4. Personal information may be received from external companies or organizations affiliated with the Company; in such cases, the affiliated company must obtain the user’s consent to provide personal information.
5. For members under the age of 14, consent from a legal representative is required for use.
Article 9 (Installation, Operation, and Rejection of Automatic Personal Information Collection Devices)
The Company uses ‘cookies’ that store and periodically retrieve user information in order to provide personalized and customized services to individual users.
1. Purpose of Using Cookies
Targeted marketing and personalized service provision through analysis of visit frequency and time of members and non-members, identification and tracking of user preferences and interests, and measurement of participation in various events and visit frequency.
The Company conducts service usage statistics and user behavior analysis through analytics services provided by Google LLC, including Google Analytics 4. In this process, cookies, advertising/analytics identifiers, and device identification information may be transferred to Google LLC (USA). For details, please refer to Article 5 (Overseas Transfer of Personal Information).
2. How to Refuse Cookie Settings
Users may refuse the installation of cookies. However, if the installation of cookies is refused, some services requiring login may be difficult to use. (Setting method, based on IE) Tools at the top of the web browser > Internet Options > Privacy > Block Site
3. How to Refuse Google Analytics Data Collection
Users may refuse the collection of data by Google Analytics by the following methods.
① Install Google's opt-out tool (https://tools.google.com/dlpage/gaoptout) ② Withdraw membership
Article 9-2 (Collection, Use, and Refusal of Behavioral Information)
① The Company collects and uses behavioral information to identify and analyze users' interests, inclinations, and preferences in order to improve services and provide customized content.
② The behavioral information items collected, collection methods, and retention/use periods are as follows:
| Behavioral Information Items Collected | Collection Method | Retention/Use Period |
| Page view history, search keywords, click events, booking process stages, device identification information, hashed user identifier | Automatically collected when users access and use the Company's website/app | Up to 14 months |
③ The Company uses Google Analytics 4 and other analytics services provided by Google LLC for the collection and processing of behavioral information, and the related data is transferred to Google LLC (refer to Article 5).
④ Users may refuse the collection of behavioral information through ① installing Google's opt-out tool (https://tools.google.com/dlpage/gaoptout), ② changing web browser cookie settings, or ③ withdrawing membership.
Article 10 (Destruction of Personal Information)
① The Company destroys personal information within 5 days when personal information becomes unnecessary, such as when the retention period has passed or the processing purpose has been achieved.
② If personal information must continue to be retained under other laws despite the agreed retention period having passed or the processing purpose having been achieved, the relevant personal information shall be transferred to a separate database (DB) or stored in a different location.
③ The procedures and methods for destroying personal information are as follows:
1. Destruction Procedures
The Company selects personal information for which destruction reasons have arisen and destroys the personal information with the approval of the Company’s personal information protection officer.
2. Destruction Methods
The Company destroys personal information recorded and stored in electronic file format using methods such as Low Level Format that prevent the records from being reproduced, and destroys personal information recorded and stored in paper documents by shredding or incinerating them.
Article 11 (Measures to Ensure the Safety of Personal Information)
The Company takes the following measures to ensure the safety of personal information:
1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
3. Physical measures: Access control to computer rooms, data storage rooms, etc.
Article 12 (Personal Information Protection Officer and Domestic Representative)
① The Company is responsible for overseeing the processing of personal information and designates and operates a personal information protection officer and domestic representative as follows for the purpose of handling user complaints and remedying damages related to personal information processing.
▶ Personal Information Processor
Company Name: OHMYHOTEL GLOBAL PTE. LTD.
Representative: LEE MISOON
Business Registration Number: 202543984E
Address: 3 Church St, Samsung Hub, Singapore 049483
▶ Personal Information Protection Officer
Name: CHOI YOUNGGEUN
Position: CTO, OHMYHOTEL GLOBAL PTE. LTD.
Email: cscenter@ohmyhotel.com
▶ Domestic Representative (Domestic representative pursuant to the ‘Personal Information Protection Act’ and the ‘Act on Promotion of Information and Communications Network Utilization and Information Protection’)
Company Name: OHMYHOTEL&CO Co., Ltd.
Representative: Lee Misoon
Business Registration Number: 105-87-71311
Address: 6F, GT Dongdaemun Building, 328 Jongro, Jongno-gu, Seoul (Changsin-dong 330-1)
Phone: +82-2-762-0552 (Korea weekdays 09:00 ~ 18:00, excluding weekends and public holidays)
Personal Information Management Officer: CHOI YOUNGGEUN
Email: cscenter@ohmyhotel.com
Article 13 (Methods of Remedying Rights Infringement)
Users may inquire about remedies, consultations, etc. for personal information infringement at the following organizations:
1. Personal Information Dispute Mediation Committee (www.1336.or.kr / 1336)
2. Privacy Mark Certification Committee (www.eprivacy.or.kr / 02-580-0533~4)
3. Supreme Prosecutors’ Office Internet Crime Investigation Center (http://icic.sppo.go.kr / 02-3480-3600)
4. National Police Agency Cyber Terror Response Center (www.ctrc.go.kr / 02-392-0330)
Article 14 (Changes to the Privacy Policy)
Any additions, deletions, or modifications to the current Privacy Policy due to changes in government policies or security technologies will be notified through the ‘Notice’ section of the website at least 7 days prior to the revision.
This Privacy Policy shall be effective from June 1, 2026.
© OHMYHOTEL GLOBAL PTE. LTD. All rights reserved