Effective Date: April 2, 2026
EXIMBAY Inc. (hereinafter "the Company") operates the EXIMPay+ mobile application (hereinafter "the Service"). The Company values the personal information of its users and complies with the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Electronic Financial Transactions Act, and other applicable laws to safely protect personal information.
| Category | Items Collected |
|---|---|
| Member Information | Email address, mobile phone number, password |
| Payment Information | Card information (cardholder name, expiration date) |
| Passport Information | Name, passport number, date of birth |
| Device Information | Smart device information (OS, language, region) |
| Usage Data | Access IP, service usage records, access time |
| Purpose | Details |
|---|---|
| Member management and identity verification | Registration, identity verification and authentication, prevention of unauthorized use |
| Electronic financial transaction services | Payment authorization and processing, payment result notification, refund and settlement processing |
| Customer support and complaint handling | Transaction history verification, complaint response, dispute resolution |
| Service improvement | Service usage analysis, detection and resolution of technical issues |
Personal information of users is destroyed without delay once the purpose of collection and use has been achieved. However, where retention is required by applicable laws, the information shall be retained for the period prescribed by such laws.
| Category | Retention Period | Legal Basis |
|---|---|---|
| Member information (member management and complaint handling) | Until membership withdrawal | - |
| Electronic financial transaction records | 5 years | Enforcement Decree of the Electronic Financial Transactions Act, Article 12 |
| Tax invoices and accounting records | 5 years | Framework Act on National Taxes / Value-Added Tax Act |
The Company provides personal information to third parties only with the consent of the data subject or where specifically required by applicable laws, in accordance with Articles 17 and 18 of the Personal Information Protection Act.
| Recipient | Purpose | Items Provided | Retention Period |
|---|---|---|---|
| Hyundai Duty Free | Identity verification for duty-free purchases | Passport information (name, passport number, date of birth), mobile phone number | Until the purpose of provision is fulfilled |
The Company does not currently entrust the processing of personal information to any external parties for the provision of the Service.
Should any entrustment occur in the future, the details and the entrusted party will be disclosed through this policy.
The Company destroys personal information without delay when the retention period has expired or the purpose of processing has been achieved. However, information that must be retained pursuant to applicable laws shall be securely stored for the required period before destruction.
Data subjects may exercise the following rights with respect to the Company at any time:
The above rights may be exercised by mail or email, and the Company will take action without delay.
If a data subject requests correction of an error in personal information, the Company will not use or provide the relevant personal information to third parties until the correction is completed.
Rights may also be exercised through a legal representative or an authorized agent, in which case a power of attorney must be submitted.
The Company implements the following protective measures to prevent loss, theft, leakage, alteration, or damage of personal information:
The Company has designated the following Privacy Officer to oversee personal information processing and handle inquiries and complaints:
For reports or consultations regarding personal information infringement, please contact the following organizations:
This Privacy Policy may be updated due to changes in laws, policies, or security technologies. Any changes will be notified through the Service.
Announcement Date: April 2, 2026
Effective Date: April 2, 2026