Privacy Policy

Last Updated: November 28, 2025.

This Privacy Policy explains how IVisitKorea (“we”, “our”, “us”) collects, uses, stores, and protects your personal information when you visit https://www.ivisitkorea.com (“Website”).
By accessing or using our Website, you agree to the practices described below.

1. Who We Are

IVisitKorea (“IVK”) is a travel information platform operated in South Korea.
Our website address is https://www.ivisitkorea.com.

If you have any questions, you may contact us at:
📧 [email protected]

---

2. What Data We Collect

We collect the following categories of personal data:

2.1 Account and Login Information

When you sign up or log in using Google, Meta (Facebook), Apple, or X (Twitter), we may receive:

• Name
• Email address
• Public profile information (e.g., profile picture)
• User ID provided by the OAuth provider
• Authentication status

We do NOT receive or store passwords from any OAuth provider.

2.2 Newsletter & Marketing Data

When you subscribe to our newsletter:

• Name (optional)
• Email address
• Marketing preferences

Your email is securely stored and managed through Brevo (Sendinblue).

2.3 Automatically Collected Data

When browsing the site, we automatically collect:

• IP address
• Browser type
• Pages visited
• Cookies and tracking data (Analytics & Advertising)
• Device information

2.4 Voluntarily Provided Information

• Comments, reviews, surveys, feedback
• Itinerary data submitted through KTP (Korea Trip Planner)

---

3. How We Collect Data

We collect data:

• When you sign up or log in using Social Login (Google, Meta, Apple, X)
• When you subscribe to newsletters
• When you use the Korea Trip Planner
• Through cookies and analytics tools
• When you voluntarily submit surveys or contact forms

---

4. How We Use Your Data

We use your data for the following purposes:

4.1 Account & Authentication

• To allow you to sign up and log in using Google / Meta / Apple / X OAuth
• To verify your identity
• To maintain your account on IVisitKorea

4.2 Email Marketing & Newsletters

If you subscribe, your email will be used to:

• Send newsletters
• Provide travel tips, updates, and promotional content
• Inform you of new services

We use Brevo (Sendinblue) to store, manage, and deliver all marketing emails.

4.3 Service Improvement

• Analyze browsing behavior
• Improve UX and personalize content
• Debug website performance

4.4 Legal Obligations

• Comply with applicable laws
• Prevent fraud and abuse

---

5. OAuth Login Data Use

We support Social Login using:

• Google Sign-In (Google Identity Services)
• Meta (Facebook) Login
• Apple Sign-In (planned)
• X (Twitter) Login (planned)

Data We Receive

Depending on your settings with each provider:

• Email address
• Name
• Profile picture
• Public profile information

How We Use OAuth Data

We use this data strictly for:

• Creating your user account
• Identifying returning users
• Providing personalized user experience
• Sending optional newsletters (only if you explicitly opt-in)

We do NOT:

• Access your contacts
• Post on your behalf
• Receive passwords
• Sell, rent, or share login data with third parties

---

6. Data Sharing and Third-Party Services

We do not sell or share your personal data with external companies.

However, we use trusted service providers that process data on our behalf:

6.1 Email Marketing

• Brevo (Sendinblue)
  Used for newsletter storage, segmentation, analytics, and delivery.

6.2 Hosting & Infrastructure

• AWS EC2 / Cloudflare
  Used for hosting and security protection.

6.3 Analytics

• Google Analytics 4 (GA4)
  Used to analyze user behavior on the site.

All processors operate under strict Data Processing Agreements (DPAs).

---

7. How We Store and Protect Your Data

Your data is stored securely on:

• AWS servers
• WordPress databases
• Brevo infrastructure (for newsletters)

We apply:

• HTTPS encryption
• Access control & authentication
• Firewall protection
• Regular security reviews

---

8. Cookies & Tracking Technologies

We use cookies for:

• Keeping you logged in
• Improving website performance
• Analytics & advertising
• Personalization

Types:

• Functional cookies
• Analytics cookies
• Advertising cookies (Google Ads, Meta Pixel, etc.)

You may disable cookies at any time in your browser.

---

9. Your Data Protection Rights

You have the right to:

• Access your personal data
• Request correction
• Request deletion
• Restrict processing
• Object to processing
• Withdraw newsletter consent
• Request data portability

---

10. Data Deletion for Social Login Users

If you used Google / Meta / Apple / X to log in, you can request complete deletion of your account and all associated OAuth data.

To request deletion, email:
📧 [email protected]
Subject: Account Deletion Request

We will delete:

• Your account
• All OAuth login data
• All personal information
• Any stored itinerary or newsletter subscription

within a reasonable time, in accordance with Meta, Google, Apple, and X policies.

---

11. Children’s Privacy

We do not knowingly collect data from children under 13.
If you believe data has been collected improperly, please contact us and we will remove it immediately.

---

12. Links to Other Websites

Our website contains links to external sites.
This policy applies only to IVisitKorea.

---

13. Changes to This Privacy Policy

We may update this policy from time to time.
The updated date will be displayed at the top of this page.

---

14. Contact Us

If you have questions regarding this Privacy Policy or your personal data:

📧 [email protected]