Privacy Policy
FTNH Co., Ltd. (hereinafter referred to as the “Company”) processes personal information lawfully and manages it securely in compliance with the Personal Information Protection Act and other applicable laws and regulations in order to protect the freedoms and rights of data subjects. Accordingly, pursuant to Article 30 of the Personal Information Protection Act, the Company establishes and discloses this Privacy Policy as follows to inform data subjects of the procedures and standards for processing personal information and to ensure that grievances relating thereto can be handled promptly and smoothly.
Article 1 (Purposes of Collection and Use of Personal Information)
The Company collects personal information for the following purposes. The Company does not use personal information for purposes other than those specified below, except where a member has given consent or where such use is permitted under laws and regulations.
- Identification of individuals and verification of identity
- Provision of brokerage services for taxi calls and dispatches (including reservations) and related services
- Verification of Service usage history, and billing and settlement of dispatching fees
- Development and provision of new or linked services for taxi brokerage services (including mobile Apps), and improvement of existing services
- Provision of App push notifications and SMS/MMS notices in connection with use of the Service
- Prevention of improper use of the Service; verification of violations of dispatch and driving standards; and preservation of records for dispute resolution
- Receipt of members’ complaints and consultation concerning the Service
Article 2 (Categories of Personal Information Collected)
The Company collects the following personal information:
| Information Provider | Categories of Information Collected | Purpose | Retention Period |
|---|---|---|---|
| Passenger | (Required) Name, mobile phone number, device information (model name, OS, device identification number), email address | Provision of membership registration and identity verification | Immediately deleted upon membership withdrawal. (provided that, where retention is required pursuant to applicable laws and regulations, the information shall be retained for the required period) |
| Passenger | (Required) Name, mobile phone number, location information | Provision of a service connecting transportation service providers (Drivers) and passengers | Immediately deleted upon membership withdrawal. (provided that, where retention is required pursuant to applicable laws and regulations, the information shall be retained for the required period) |
| Passenger | (Required) Name, mobile phone number, reservation information (transportation number (including flight and train numbers)/boarding date and time/ETA/number of passengers/boarding and alighting building numbers or addresses/room number/types and quantities of baggage) | Reservation service (provision of a service connecting transportation service providers (Drivers) and passengers) | Immediately deleted upon membership withdrawal. (provided that, where retention is required pursuant to applicable laws and regulations, the information shall be retained for the required period) |
| Passenger | (Required) IP address, network access information, device information at the time of Service use (device model, mobile carrier information, OS type and version), application installation, login and Service usage history, pickup location | Automatically collected during use of the Service | Immediately deleted upon membership withdrawal. (provided that, where retention is required pursuant to applicable laws and regulations, the information shall be retained for the required period) |
| Driver | (Required) Name, mobile phone number, name of affiliated company or organization, user identification number, taxi license plate number, vehicle color, vehicle model, business registration number | Identity verification and membership registration | Immediately deleted upon membership withdrawal. (provided that, where retention is required pursuant to applicable laws and regulations, the information shall be retained for the required period) |
| Driver | (Required) Name, mobile phone number, customer identification number, name of affiliated company or organization, location information, name of operating area | Provision of a service connecting transportation service providers (Drivers) and passengers / dispatching fee settlement and refunds | Immediately deleted upon membership withdrawal. (provided that, where retention is required pursuant to applicable laws and regulations, the information shall be retained for the required period) |
| Driver | (Required) IP address, network access information, device information at the time of Service use (device model, mobile carrier information, OS type and version), application installation, login and Service usage history, location information | Automatically collected during use of the Service | Immediately deleted upon membership withdrawal. (provided that, where retention is required pursuant to applicable laws and regulations, the information shall be retained for the required period) |
Article 3 (Methods of Collecting Personal Information)
The Company collects members’ personal information and location information by the following methods:
- Where a member consents to the collection of personal information and directly enters information for membership registration, identity verification, or the like
- Where a member voluntarily provides information while using the Service
- Where information is collected automatically during use of the Service
- Where information is received from the corporation or organization to which the member belongs
- Where personal information is collected through email or telephone consultation in the course of receiving and handling complaints
Article 4 (Provision of Personal Information to Third Parties)
The Company processes members’ personal information within the scope notified in Article 1, “Purposes of Collection and Use of Personal Information,” and does not use such information beyond the notified scope or provide it to any third party without the prior consent of the data subject.
| Information Provider | Recipient | Purpose of Provision | Information Provided | Retention Period |
|---|---|---|---|---|
| Passenger | Assigned Driver and affiliated company | Taxi dispatch brokerage service / Provision of passenger pickup location / Contact for boarding / Identification of passengers | Mobile phone number, location information | Mobile phone number: until 14 days after dispatch (or until cancellation if the taxi request is canceled). / Location information: until the passenger boards the taxi (or, if the taxi request is canceled after dispatch, until cancellation). |
| Passenger | Assigned Driver and affiliated company | Reservation service | name, mobile phone number, and reservation details, including flight or train number, pick-up date and time, estimated time of arrival (ETA), number of passengers, pick-up and drop-off building numbers or addresses, room number, and types and quantities of luggage. | Up to 30 days after dispatch |
| Passenger | Assigned Driver and affiliated company | To handle follow-up matters related to lost items, vehicle contamination or damage. | Mobile phone number, ride history | Up to 14 days after dispatch |
| Passenger | United States Forces Korea (USFK) and The Exchange | To provide assistance in response to requests from the respective organizations in connection with their duties. | Name, mobile phone number, pickup location, destination, boarding date and time, taxi license plate number | Until completion of the work for which the information was provided. However, such information may be retained for the period required by applicable laws. |
| Driver | Assigned passenger | Taxi dispatch brokerage service / Contact for boarding / Vehicle identification and performance of transportation | Mobile phone number, license plate number (four digits), vehicle color, location information | Mobile phone number, license plate number, and vehicle color: Up to 14 days after dispatch (provided that, if a call is canceled, until cancellation) / Location information: Until the passenger boards (provided that, if the taxi call is canceled after dispatch, until cancellation) |
| Driver | Assigned passenger | Reservation service | Name, mobile phone number, license plate number (four digits), vehicle color, vehicle type | Up to 30 days after dispatch |
| Driver | Assigned passenger | To handle follow-up matters related to lost items, vehicle contamination or damage. | Mobile phone number, license plate number (four digits), vehicle color, name of affiliated company or organization, and administrator’s email address | Up to 14 days after dispatch |
| Driver | Nearby Drivers | Sharing of dispatch status among Drivers to identify assigned passengers | Location information, license plate number (four digits), pickup location | Up to one 1 hour after dispatch |
| Driver | United States Forces Korea (USFK) and The Exchange | To provide assistance in response to requests from the respective organizations in connection with their duties. | Name, mobile phone number, license plate number (four digits), vehicle color, vehicle type, trip history, name of affiliated company or organization | Until completion of the work for which the information was provided. However, such information may be retained for the period required by applicable laws. |
However, the following cases shall constitute exceptions:
- Where necessary for the settlement of charges arising from provision of the Service
- Where necessary for statistical compilation, academic research, or market research and the information is processed into a form in which a specific individual cannot be identified and is provided in that form
- Where an imminent risk to a member’s life or safety has been identified and it is necessary to eliminate that risk
- Where provision is required by laws and regulations, or where investigative agencies or supervisory authorities make a request for investigative purposes in accordance with the procedures and methods prescribed by laws and regulations
Article 5 (Entrustment of Personal Information Processing)
The Company entrusts the processing of personal information to external companies as set forth below in order to provide the Service and manages and supervises such entrusted companies to ensure that they process personal information securely in accordance with applicable laws and regulations. The entrusted companies may process personal information until termination of the entrustment agreements.
Where personal information processing is entrusted to domestic companies for use of the Service
| Entrusted Company | Entrusted Processing Activities |
|---|---|
| AMAZON (Amazon Web Services) | Operation of DB servers, system servers, App servers, and system infrastructure; security solutions and integrated system backup |
| Majun Soft Corp. | Operation of DB servers, system servers, App servers, and system infrastructure; security solutions and integrated system backup |
| Allim People Inc. | Web-based text messaging service (SMS, MMS, LMS) |
| KT | Website servers, telephone systems, and text message receiving and sending services (SMS, MMS, LMS) |
Where personal information processing is entrusted to overseas companies for use of the Service
| Entrusted Company | Purpose of Use | Country of Transfer | Time and Method of Transfer | Information Transferred | Period of Use |
|---|---|---|---|---|---|
| Google LLC | Mobile phone number verification | United States | Transmitted over the network upon a request to use the Service | Mobile phone number | Temporarily used for mobile phone number verification and prevention of improper use, and immediately destroyed thereafter |
| Google LLC | Translation and voice conversion of chat messages during trips | United States | Transmitted over the network upon a request to use the Service | Trip chat messages (where translation or voice conversion is used) | Temporarily processed in memory for text conversion and immediately destroyed thereafter |
If a member refuses the overseas transfer of personal information through the Company’s Personal Information Protection Officer or responsible department, membership registration shall be restricted and the member shall not be able to use the Service.
Article 6 (Period of Use and Retention of Personal Information)
The Company uses and retains members’ personal information in accordance with the following standards:
- Where a retention period has been notified in advance and separate consent has been obtained, the information shall be retained until the end of that retention period. However, location information shall be retained for six (6) months from the date of use of the Service.
- Retention of information pursuant to applicable laws and regulations
| Records to Be Retained | Governing Laws and Regulations | Retention Period |
|---|---|---|
| Records related to resolution of consumer complaints or disputes | Article 6 of the Act on the Consumer Protection in Electronic Commerce, Etc., and Article 6 of the Enforcement Decree thereof | 3 years |
| Records related to cancellation of contracts or subscriptions, etc | Article 6 of the Act on the Consumer Protection in Electronic Commerce, Etc., and Article 6 of the Enforcement Decree thereof | 5 years |
| Records concerning payment and the supply of goods, etc. | Article 6 of the Act on the Consumer Protection in Electronic Commerce, Etc., and Article 6 of the Enforcement Decree thereof | 5 years |
| Records related to marks and advertisements | Article 6 of the Act on the Consumer Protection in Electronic Commerce, Etc., and Article 6 of the Enforcement Decree thereof | 6 months |
| Service login records | Article 15-2 of the Protection of Communications Secrets Act and Article 41 of the Enforcement Decree thereof | 3 months |
Article 7 (Procedures and Methods for Destruction of Personal Information)
(1) In principle, the Company shall destroy personal information without delay after the purposes of its collection and use have been achieved. However, where another law or regulation requires such information to be retained for a certain period, it shall be securely retained for that period and destroyed immediately thereafter.
(2) The procedures and methods for destruction are as follows:
- Destruction procedure
Information entered by members for membership registration or the like, information generated and collected in the course of use of the Service or business processing, backup files, and the like shall, after the relevant purpose has been achieved, be stored for a certain period and subsequently destroyed pursuant to internal policies or other grounds for information protection under applicable laws and regulations (see Retention and Use Period). - Destruction method
Personal information printed on paper shall be destroyed by shredding or incineration, and personal information stored in the form of electronic files shall be deleted using technical methods that make it impossible to recover or reproduce the records.
Article 8 (Rights of Members and Legal Representatives and Methods of Exercising Them)
Members and their legal representatives may exercise the following rights against the Company:
- Requests for access to, provision of, and correction of personal information
Members and their legal representatives may exercise their rights directly through the functions provided within the Service with respect to personal information collected by the Company, or may request access to or provision of any of the following matters through the Customer Service Center and request correction of any errors. However, where correction of an error in personal information has been requested, that personal information shall not be used or provided until the correction is completed.
- Personal information of the member held by the Company
- Details of personal information used by the Company or provided to third parties
- Details of the member’s consents to the collection, use, and provision of personal information
- Requests for deletion and withdrawal of consent
- Members and their legal representatives may request that the Company delete personal information. However, this shall not apply where applicable laws and regulations expressly designate the relevant information as information to be collected.
- Members and their legal representatives may refuse consent to, or request withdrawal of consent to, the Company’s processing of personal information. However, refusal or withdrawal of consent or a request for deletion may result in restrictions on the use of all or part of the Service.
- Requests for suspension of processing
Members and their legal representatives may request suspension of the processing of personal information through the Service. However, the Company may refuse a request for suspension of processing in any of the following cases:
- Where a special provision exists under applicable laws and regulations, or where processing of the relevant information is unavoidable in order for the Company to comply with its legal obligations
- Where suspending the processing of the relevant information may endanger the life or physical safety of another person or unjustly infringe another person’s property or other interests
- Where provision of the Service is impossible without processing the personal information and the member or legal representative has not clearly expressed an intention to terminate the agreement
- Where exercising rights through the Company’s Service is impossible or difficult, members and their legal representatives may submit requests concerning the processing of personal information to the Company’s department responsible for personal information protection by using the telephone number or email address provided.
- The Company does not collect personal information of Users under fourteen (14) years of age.
Article 9 (Measures to Ensure the Security of Personal Information)
The Company takes the following technical and administrative measures to protect members’ personal information securely and makes its best efforts to protect members’ personal information through continuous improvements.
- Administrative protection measures
The Company conducts systematic management activities to process personal information securely.
- The Company establishes an internal management plan for the protection of personal information and continuously manages and implements that plan.
- The Company restricts access to personal information to the minimum necessary number of personnel and systematically manages access privileges, including the creation and modification of passwords for servers and systems that store and process personal information.
- The Company provides regular training to all officers and employees who process personal information to strengthen their obligations concerning personal information protection and their security awareness.
- Technical protection measures
The Company implements technical measures to prevent personal information from being lost, stolen, leaked, forged, altered, or damaged.
- Members’ personal information is encrypted, stored, and managed in accordance with laws and regulations, and personal information is securely transmitted and received over networks through encrypted communications (SSL), etc.
- The Company installs intrusion prevention systems and intrusion detection systems and operates continuous 24-hour monitoring to block unauthorized access from external parties.
- The Company protects and manages its systems against malicious code, viruses, and the like through Amazon Web Service.
- The Company retains and manages records of access to its personal information processing systems.
- The Company regularly inspects its personal information processing systems for vulnerabilities and immediately takes remedial measures in respect of any vulnerabilities identified.
Article 10 (Contact Information of the Personal Information Protection Officer and Responsible Department)
The Company has designated the following Personal Information Protection Officer and responsible department to protect members’ personal information and to handle inquiries, complaints, and other matters concerning personal information:
- Person in Charge: Kim Seon-min
- Responsible Department: Technical Team
- Telephone Number: 1544-9080
Members may direct any complaints concerning personal information protection arising in the course of using the Company’s Service to the Personal Information Protection Officer or the Customer Service Center. The Company shall promptly respond to and handle members’ inquiries.
Article 11 (Remedies for Infringement of Personal Information Rights and Interests)
If you need to report or seek consultation concerning any other infringement of personal information, you may contact the following organizations:
| Personal Information Infringement Call Center | Website | http://privacy.kisa.or.kr |
|---|---|---|
| Personal Information Infringement Call Center | Telephone | 118 (without area code) |
| Personal Information Dispute Mediation Committee | Website | www.kopico.go.kr |
| Personal Information Dispute Mediation Committee | Telephone | 1833-6972 |
| Supreme Prosecutors’ Office | Website | (www.spo.go.kr) |
| Supreme Prosecutors’ Office | Telephone | 1301 (without area code) |
| National Police Agency | Website | http://ecrm.police.go.kr |
| National Police Agency | Telephone | 182 (without area code) |
Article 12 (Amendments to the Privacy Policy)
If this Privacy Policy is amended, the Company shall give notice through its website or mobile application. However, where there is a material change to members’ rights, such as changes to the collection and use of personal information or its provision to third parties, this Privacy Policy shall be amended immediately.
Addendum
This Privacy Policy shall take effect on October 15, 2026.