Last Updated: June 23, 2026
This Privacy Policy explains how IVisitKorea (“we”, “our”, “us”) collects, uses, stores, shares, and protects your personal information when you visit https://www.ivisitkorea.com (the “Website”).
By accessing or using our Website, you agree to the practices described below.
1. Who We Are
IVisitKorea (“IVK”) is a travel information platform operated in South Korea as a sole proprietorship by Jiwook Han, who acts as the data controller responsible for the personal information described in this policy.
Our website address is https://www.ivisitkorea.com.
If you have any questions, you may contact us at: [email protected]
2. What Data We Collect
2.1 Account and Login Information
When you sign up or log in using a social login provider (Google, Meta (Facebook), Apple, or X), we may receive:
- Name
- Email address
- Public profile information (for example, profile picture)
- The user ID provided by the login provider
- Authentication status
We do not receive or store passwords from any social login provider.
2.2 Newsletter and Marketing Data
When you choose to subscribe to our newsletter:
- Name (optional)
- Email address
- Marketing preferences
Newsletter subscription is optional and opt-in. Your email is stored and managed through Brevo (Sendinblue) for this purpose.
2.3 Automatically Collected Data
When you browse the Website, we automatically collect:
- IP address
- Browser type
- Pages visited
- Device information
- Cookies and similar tracking data
2.4 Information You Provide Voluntarily
- Comments, reviews, surveys, and feedback
- Itinerary data submitted through the Korea Trip Planner (KTP)
3. How We Collect Data
We collect data:
- When you sign up or log in using social login (Google, Meta, Apple, X)
- When you subscribe to our newsletter
- When you use the Korea Trip Planner
- Through cookies and analytics tools
- When you voluntarily submit surveys, comments, or contact forms
4. How We Use Your Data
4.1 Account and Authentication
- To let you sign up and log in using social login
- To verify your identity
- To create and maintain your account on IVisitKorea
4.2 Email Marketing and Newsletters
If, and only if, you opt in, we use your email address to:
- Send newsletters
- Provide travel tips, updates, and promotional content
- Inform you of new services
You can withdraw your consent and unsubscribe at any time using the link in any email or by contacting us. We use Brevo (Sendinblue) to store, manage, and deliver these emails.
4.3 Service Improvement
- Analyze browsing behavior in aggregate
- Improve usability and personalize content
- Diagnose and resolve website performance issues
4.4 Legal and Security Purposes
- Comply with applicable laws
- Prevent fraud and abuse
- Respond to lawful requests as described in Section 11
5. Social Login (OAuth) Data Use
We support social login using:
- Google Sign-In
- Meta (Facebook) Login
- Apple Sign-In (planned)
- X (Twitter) Login (planned)
Data We Receive
Depending on your settings with each provider, we may receive your email address, name, profile picture, and public profile information.
How We Use This Data
We use social login data strictly to:
- Create your user account
- Identify returning users
- Provide a personalized experience
- Send newsletters only if you have explicitly opted in
What We Do Not Do
We do not:
- Access your contacts
- Post on your behalf
- Receive your passwords
- Sell, rent, or share your login data with third parties for their own purposes
6. Data Sharing and Service Providers
We do not sell your personal data, and we do not share it with external companies for their own independent use.
We do use trusted service providers (processors) that handle data on our behalf, under data processing agreements:
- Brevo (Sendinblue) (located in the European Union): newsletter storage, segmentation, analytics, and delivery.
- Amazon Web Services, Inc. (data hosted in South Korea): hosting of our website and databases, where account and profile information is stored.
- Cloudflare, Inc. (United States): content delivery, performance, and security protection.
We also use Google Analytics 4 (GA4) to understand how visitors use the Website. Our GA4 configuration does not receive your social login user ID or email address, and is not used to identify you individually.
7. How We Store and Protect Your Data
Your data is stored on:
- Amazon Web Services (AWS) servers
- Our WordPress databases
- Brevo infrastructure (for newsletter subscribers only)
We apply:
- HTTPS encryption in transit
- Access controls and authentication
- Firewall and network protection
- Regular security reviews
No method of storage or transmission is completely secure, but we take reasonable measures to protect your data.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Keep you logged in
- Improve website performance
- Analyze usage and trends
- Personalize content
Categories of cookies we may use include functional cookies, analytics cookies, and, where applicable, advertising cookies. You can disable or manage cookies at any time through your browser settings.
9. Your Data Protection Rights
Subject to applicable law, including for users in the European Economic Area (EEA), you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Withdraw newsletter consent at any time
- Request data portability
To exercise any of these rights, contact us at [email protected].
10. Data Deletion for Social Login Users
If you signed up or logged in using Google, Meta, Apple, or X, you can request complete deletion of your account and all associated login data.
To request deletion, email [email protected] with the subject line “Account Deletion Request”.
We will delete:
- Your account
- All social login data received from the provider
- Your personal information
- Any stored itinerary data and newsletter subscription
We will complete deletion within a reasonable time and in accordance with the applicable policies of Meta, Google, Apple, and X.
11. Requests from Public Authorities
We may receive requests from public authorities (such as government agencies or law enforcement) for access to user data. When we receive such a request, we have the following practices in place:
- Review of legality. We assess the legality and validity of each request before responding.
- Challenging improper requests. Where a request appears unlawful, overly broad, or otherwise improper, we may challenge or push back on it.
- Data minimization. We disclose only the minimum amount of data necessary to comply with a valid legal obligation.
- Documentation. We document such requests, including the details of the request, our response, the legal basis, and the parties involved, in order to maintain transparency and accountability.
12. Children’s Privacy
We do not knowingly collect personal data from children under 13 years of age. If you believe a child’s data has been collected without appropriate consent, please contact us and we will remove it promptly.
13. Links to Other Websites
Our Website contains links to external sites. This Privacy Policy applies only to IVisitKorea. We are not responsible for the privacy practices of other websites, and we encourage you to review their policies.
14. International Data Transfers
IVisitKorea is operated from South Korea, and some of our service providers process data in other regions (for example, the European Union and the United States). Where personal data is transferred across borders, we rely on our service providers’ contractual and legal safeguards to protect that data.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this page reflects the most recent revision. Continued use of the Website after an update constitutes acceptance of the revised policy.
16. Contact Us
If you have questions about this Privacy Policy or your personal data, contact us at [email protected].