隐私政策

LIT (Life is Travel, hereinafter "the Business"), operated by sole proprietor LIT-LIFEISTRAVEL, values users' personal information and complies with relevant laws including the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and the Act on the Protection and Use of Location Information. Through this Privacy Policy, the Business informs users of how their personal information is used and what measures are taken to protect personal information.

Article 1 (Personal Information Items Collected and Collection Methods)

The Company collects the following personal information to provide luggage storage brokerage services.

1. Membership Registration and Service Use (Required)

• Email, password, name or nickname
• Phone number (for identity verification and notifications)
• For social login: identifier, email, nickname, profile image provided by the respective service

2. Non-member Reservations

• Name, phone number, email (optional)

3. Use of Reservation/Storage Services

• Reservation information (store, date and time, storage quantity and size)
• Luggage drop-off and pickup records, store QR scan history
• Inquiries and dispute details between users and stores

4. Payment

• Payment method information (card issuer name, masked card number, etc., received from the payment gateway)
• Payment history, refund history

※ Sensitive payment information such as card numbers and CVCs is not stored directly by the Business, and is processed safely by the payment gateway (Toss Payments) in accordance with relevant laws.

5. Location Information (Optional)

• Current location for nearby store search (GPS, Wi-Fi, base station-based)
• Collected only with user consent. Refusal restricts the corresponding feature.

6. Information Automatically Collected During Service Use

• Access IP, access logs, service usage records, device information (OS, device model, advertising identifier)
• Cookies, app sessions, push tokens

7. Collection Methods

• User direct input (app/website registration, reservation, inquiries, etc.)
• External service integration (social login, payment gateway)
• Automatic collection through devices/apps (cookies, logs)
• Collection during customer support consultations

Article 2 (Purpose of Personal Information Collection and Use)

• Membership registration, identity verification, and provision of membership services
• Provision of services such as luggage storage reservation, payment, pickup, and return
• Payment processing, settlement, and receipt issuance
• Customer consultation, complaint handling, and dispute mediation
• Sending announcements and safety-related notifications
• Providing event and marketing information (with separate consent)
• Service usage statistical analysis and service improvement
• Prevention of fraudulent use and response to legal violations

Article 3 (Personal Information Retention and Use Period)

The Company destroys users' personal information immediately when the purpose of collection and use is achieved. However, the following information is retained for the periods specified by relevant laws.

Member Information Retention Period

• Until member withdrawal (immediately destroyed after withdrawal)
• Information needed to prevent fraudulent use: 6 months after withdrawal

Retention by Relevant Laws

Article 4 (Provision of Personal Information to Third Parties)

As a rule, the Business does not provide users' personal information to external parties. However, the following exceptions apply:

• When the user has consented in advance
• When required by law, or when investigative agencies request information for investigation purposes in accordance with procedures prescribed by law
• For the performance of luggage storage services, the following information is provided to the reserved store partner:
  • Recipient: The store partner reserved by the user
  • Items provided: User's name, phone number, reservation number, date/time, and quantity
  • Purpose: Luggage storage acceptance, pickup, and customer service
  • Retention/use period: Destroyed within 3 days after service completion (or until termination if disputes occur)

Article 5 (Outsourcing of Personal Information Processing)

The Company outsources personal information processing as follows for smooth service provision, and takes measures for safe management of personal information when concluding outsourcing contracts in accordance with relevant laws.

※ Outsourcing companies and tasks may change as the service evolves, and changes will be announced through this policy.

Article 6 (International Transfer of Personal Information)

Some outsourced tasks (cloud hosting, push notifications, etc.) may use facilities operated by overseas businesses. The Company prioritizes the use of Korea region servers by such outsourcing companies, but transfer or storage abroad may occur due to technical reasons. In such cases, protection measures equivalent to or exceeding the level required by the Personal Information Protection Act are guaranteed.

Article 7 (Personal Information Destruction Procedures and Methods)

The Company destroys personal information without delay when the retention period has elapsed or the processing purpose has been achieved.

• Electronic files: Permanently deleted in a manner that prevents recovery or reproduction
• Paper documents: Shredded or incinerated

Article 8 (Rights and Obligations of Information Subjects and Methods of Exercise)

Users may exercise the following rights at any time:

• Request to view personal information
• Request to correct or delete personal information
• Request to suspend personal information processing
• Withdraw consent to personal information collection, use, and provision

The above rights can be requested through the "My Information" menu in the app, the website, or the contact information at the bottom, and the Business will take action without delay (within 10 days of the request). However, information that is required to be retained by relevant laws cannot be deleted upon request, and the reason will be communicated in such cases.

Article 9 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)

The Company uses cookies, app sessions, advertising identifiers, etc. for service provision. Users can refuse collection in browser settings or device settings, but some services may be restricted.

• Browser: Settings → Privacy → Cookie allow/block settings
• iOS: Settings → Privacy → Turn off allow tracking
• Android: Settings → Privacy → Ads → Opt out of personalized advertising

Article 10 (Measures to Ensure Personal Information Safety)

The Company takes the following measures to ensure the safety of personal information:

• Administrative measures: Establishment and implementation of internal management plans, regular employee training
• Technical measures: Access permission management, access control system installation, encrypted communications (HTTPS), one-way password encryption
• Physical measures: Access control to server rooms and document storage rooms
• Minimizing personnel handling personal information and providing periodic training

Article 11 (Protection of Personal Information of Children Under 14)

As a rule, the Business does not collect personal information from children under 14. If a user is confirmed to be under 14 when using the Service, personal information will not be collected or used without the consent of a legal guardian, and use may be restricted.

Article 12 (Personal Information Protection Officer and Contact)

The Company designates a Personal Information Protection Officer as follows to protect users' personal information and handle complaints related to personal information.

Users may contact the Personal Information Protection Officer regarding all personal information protection inquiries, complaint handling, and damage relief that arise during the use of the Business's services. The Company will respond to and handle user inquiries without delay.

Article 13 (Methods of Remedying Rights Violations)

If you need to report or consult about personal information infringement, you may contact the following organizations:

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
• Cybercrime Investigation Department, Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
• National Police Agency Cyber Investigation Bureau: 182 (ecrm.police.go.kr)

Article 14 (Changes to the Privacy Policy)

This Privacy Policy may be added to, deleted, or modified according to changes in laws, policies, or security technologies. Important changes will be announced through the app or website 7 days before implementation, and changes unfavorable to users will be announced 30 days in advance.

Supplementary Provisions

This Privacy Policy takes effect on May 1, 2026.