GOBOX Inc. (the "Company") operates SPOT, a luggage delivery service (https://spot24.co.kr, the "Service"). In accordance with the Personal Information Protection Act of Korea and related laws, the Company establishes and discloses this Privacy Policy to protect users' personal information and to handle related complaints promptly and smoothly.

Article 1. Purposes of Processing Personal Information

The Company processes personal information for the following purposes. It is not used for any other purpose, and if a purpose changes, the Company will take the necessary measures, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

1. Membership: confirming the intention to sign up, email verification, identification and authentication, maintaining and managing membership, social login, preventing misuse, and processing withdrawal
2. Providing the Service: receiving and carrying out luggage pickup, delivery and storage bookings, assigning drivers and handing over luggage on site, checking flight and train arrival information, and sending booking confirmations, schedule changes, delivery completion notices and similar messages
3. Payment and refunds: processing and confirming payments, refunds for cancelled bookings, issuing and applying coupons, and notifying additional charges such as waiting fees and storage fees
4. Customer support and dispute handling: answering inquiries, handling loss or damage, and proving the handover of luggage
5. Improving the Service: statistics such as counting visits from advertisements and printed promotions (processed in a form that does not identify individuals)
6. Marketing: information on events and benefits (only if you have separately agreed to receive marketing information)

Article 2. Personal Information Processed

1. When you sign up
   • Required: email address, password, name
   • Optional: mobile phone number
   • When using social login (LINE, Kakao, Google): the member identifier and name (nickname) provided by that service
2. When you book
   • Required: booker name, pickup and delivery places (location or accommodation name, address, detailed address), pickup and delivery date and time, type and number of luggage items
   • Mobile phone number: required when booking on the Korean-language site (the domestic payment processor requires it); optional otherwise
   • Optional: email address, requests for each place, additional requests, flight or train number, preferred language for notices
   • When you cancel a booking: reason for cancellation
3. When you pay: payment method, amount and currency, the transaction identifier issued by the payment processor, payment and refund date/time and result
   • Card numbers and other payment instrument details are handled directly by the payment processor and are not stored by the Company.
4. When you write a review (optional): rating, review text, photos
5. When you contact customer support: the content of the inquiry
   • When you use chat support (Channel Talk): your member identifier, name, email address, mobile phone number, and your most recent booking number and status are linked to the support system.
6. Information generated or collected while using the Service
   • Photos of luggage handover and delivery completion, and the time they were recorded
   • Booking, payment and cancellation history
   • Device type (iOS, Android, other), campaign code of the advertisement or printed promotion you came from, cookies
   • IP address: used only to check request frequency to prevent misuse; kept briefly as an encrypted value and then deleted automatically

Article 3. Processing and Retention Periods

The Company processes and retains personal information within the retention period set by law or agreed to when the information was collected. The retention periods are as follows.

1. Member information: until you withdraw from membership. On withdrawal, member information such as your name, contact details, email address, password and social login identifiers is destroyed without delay. You cannot withdraw while you have a booking in progress.
2. Booking and payment records (booker details, places, dates and times, payment and refund history, etc.): kept for the periods below as required by law
   • Records of contracts or withdrawal of offers: 5 years (Act on the Consumer Protection in Electronic Commerce)
   • Records of payment and supply of goods or services: 5 years (same Act)
   • Records of consumer complaints or dispute resolution: 3 years (same Act)
   • Records of collection, processing and use of credit information: 3 years (Credit Information Use and Protection Act)