Article 1 (Purpose)

This Policy explains the purposes for which personal information is collected and used, the items collected, retention periods, destruction procedures and the rights of users, in connection with Upper Collection (www.uppercollection.com, the “Service”), an online hotel reservation intermediary service operated by the Company.

Article 2 (How Personal Information Is Collected and Consent)

① The Company provides a consent procedure when a user registers as a member or makes a reservation, and collects personal information only where the user selects “I agree”.

② The Company collects personal information in the following ways.

  1. Entered directly by the user during membership registration or the reservation process (including email sign-up and Google social sign-in)
  2. Provided by the user through email, messenger or similar channels during customer support
  3. Generated and collected automatically while the Service is used (access logs, device information and the like)

③ The Company obtains mandatory consent and optional consent separately. A user who does not consent to optional items is not restricted from registering as a member or using the reservation service.

④ The Company may collect and use personal information without consent in the following cases.

  1. Where there is a special provision in a statute or it is unavoidable in order to comply with a legal obligation
  2. Where it is unavoidably necessary to perform a contract concluded with the data subject
  3. Where the data subject or their legal representative is unable to express intention, or prior consent cannot be obtained because of an unknown address or similar reason, and collection is clearly necessary for the urgent benefit of the life, body or property of the data subject or a third party

Article 3 (Items Collected and Purposes of Use)

1. On membership registration

Type Item Purpose of use Retention and use period
Required Email address Member identification, sign-in, reservation confirmation and delivery of notices Until withdrawal of membership
Required Password (stored encrypted) Identity verification Until withdrawal of membership
Required Given name and surname in Latin characters Transmission of booker information to the hotel, identification Until withdrawal of membership
Required Country code and mobile number Reservation-related contact, identity verification Until withdrawal of membership
Optional Preferred contact channel (WhatsApp and the like) Choice of reservation-related contact method Until withdrawal of membership
Optional Consent to receive marketing information, and the time of consent Information on new hotels, promotions and member-only benefits Until consent is withdrawn or membership is withdrawn

Where a user signs up through Google social sign-in, the Company receives the user’s email address from Google.

2. On making a reservation

Type Item Purpose of use Retention and use period
Required Guest name in Latin characters Creation of the hotel reservation and identification at check-in 5 years under the Act on the Consumer Protection in Electronic Commerce, Etc.
Required Email address, mobile number Sending the reservation confirmation, reservation-related contact 5 years
Required Credit card details (card number, expiry date, CVC, cardholder name) Transmitted to the hotel reservation system for the purpose of guaranteeing the reservation Destroyed immediately upon transmission. Not stored on the Company’s servers
Optional Hotel loyalty membership number Transmitted to the hotel so that points and tier benefits are applied 5 years
Optional Special requests Transmitted to the hotel 5 years