Eland Park Ltd., Hotel Leisure Business Division (hereinafter referred to as the “Company”), highly values the personal information of its customers and has established and complies with this Privacy Policy to actively protect personal information.
This Privacy Policy may be amended in accordance with changes in relevant laws or the Company’s internal policies. Any amendments will be announced in accordance with applicable laws and regulations, including by posting the revised policy on the Company’s website.
The Company complies with the personal information protection provisions of the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., as well as their respective Enforcement Decrees.
Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes. Personal information shall not be used for purposes other than those listed below. If the purpose of use is changed, the Company will obtain separate consent or take other necessary measures in accordance with Article 18 of the Personal Information Protection Act.
1. Performance of Contracts and Settlement of Payments
o Provision of content
o Delivery of goods (products or prizes)
o Sending invoices
o Identity verification for financial transactions
o Purchase and payment processing
o Mileage and point accumulation
o Fee collection
o Notification of new services, products, or events
2. Member Management
o Identity verification for membership services
o Personal identification
o Prevention of fraudulent use and unauthorized access
o Confirmation of intent to join
o Limitation of repeated sign-ups
o Verification of legal guardian consent and identity
o Record retention for dispute resolution
o Handling complaints and inquiries
o Delivery of notices
3. Provision of Customized Services
o Development and customization of new services and products
o Provision of services and advertisements based on demographic characteristics
o Analysis of access frequency and service usage
o Compilation of statistical data
o Provision of promotional information, events, and marketing materials
4. Other Purposes
o Provision of information regarding Company services and events
o Promotion of Company-hosted or affiliated events
o Telemarketing, direct mail (DM), email marketing (EM)
o Surveys, consultations, and customer communications
Article 2 (Retention and Processing Period)
1. The Company processes and retains personal information for the period prescribed by law or agreed upon by the data subject at the time of collection.
2. Retention periods by category are as follows:
1) Membership Registration and Management
• Until membership withdrawal
• However, if any of the following applies, until the relevant matter is resolved:
o Ongoing investigation or inquiry related to legal violations
o Outstanding claims or obligations arising from service use
2) Provision of Goods or Services
• Until service completion and payment settlement
• However, the following retention periods apply pursuant to relevant laws:
o Records related to labeling and advertising: 6 months
o Records related to contracts, withdrawal, payment, and supply: 5 years
o Records related to consumer complaints or dispute resolution: 3 years
3) Communication Records (Communications Secrecy Protection Act)
• Call records and base station location data: 1 year
• Internet log records and access location data: 3 months
4) Identity Verification Records
• 6 months after termination of bulletin board posting
Article 3 (Provision of Personal Information to Third Parties)
1. The Company processes personal information only within the scope specified in Article 1 and provides personal information to third parties only in accordance with Articles 17 and 18 of the Personal Information Protection Act.
2. Personal information is provided to third parties only with the customer’s consent.
| Recipient |
Items Provided |
Purpose |
Retention Period |
| Kensington World Co., Ltd. |
Online membership information |
Marketing, promotional events, advertising |
As required by law or consented period |
| Eland Retail Co., Ltd. |
ID, E-Point |
E-Point accumulation and usage |
As required by law |
| Namwon Yechon |
ID, name, DOB, contact info, card authorization |
Point services, marketing |
As required by law |
| E-Land Next Co., Ltd. |
Reservation information |
Event benefits for specific packages |
Within 3 months after check-out |
3. Customers may refuse consent; however, refusal may restrict point benefits or certain services.
Article 4 (Cross-Border Transfer of Personal Information)
1. The Company transfers personal information overseas to provide services.
Overseas Recipients
• Micronesia Resort, Inc. (Kensington Hotel Saipan)
• Suwaso Corporation (Coral Ocean Resort Saipan)
• Inter Pacific Resorts (Saipan) Corp. (Pacific Islands Club Saipan)
Transferred Items:
Name, Date of Birth, Contact Information, Email Address, Address, Card Authorization Number (varies by facility)
Country:
Saipan, Northern Mariana Islands, United States
Transfer Method:
Network transmission at the time of reservation and service use
Purpose:
Reservation management, customer service, payment settlement, marketing activities
Retention Period:
As required by law or consented period
2. The Company implements security, complaint handling, and dispute resolution measures for cross-border transfers.
3. Customers may refuse consent; refusal may limit service use.
Article 5 (Entrustment of Personal Information Processing)
The Company entrusts personal information processing to the following service providers:
| Recipient |
Purpose |
Shared Information |
| Eland Inno-P Co., Ltd. |
System maintenance |
All registration information |
| Kensington World Co., Ltd. |
Membership & marketing management |
Name, contact info |
| Namwon Yechon |
Point services, marketing |
Name, contact info |
| iGini Co., Ltd. |
Website operation |
Reservation info |
The Company supervises entrusted parties in accordance with Article 25 of the Personal Information Protection Act.
Article 6 (Rights of Data Subjects)
Customers may request:
1. Access to personal information
2. Correction of errors
3. Deletion
4. Suspension of processing
Requests may be made via website, store, phone, or email.
Article 7 (Personal Information Items Processed)
The Company processes personal information for:
• Membership registration
• Service usage
• Reservations and payments
• Mobile app usage
• SNS-based login services
Sensitive personal information is not collected.
Article 8 (Cookies)
The Company uses cookies to improve service quality. Customers may refuse cookies through browser settings.
Article 9 (Destruction of Personal Information)
Personal information is destroyed without delay once the retention period expires or processing purpose is achieved, using secure methods.
Article 10 (Security Measures)
The Company applies encryption, access controls, intrusion detection systems, and internal training to protect personal information.
Article 11 (Personal Information Protection Officer)
• Name: Kwon Soon-beom / Yoon Jong-hyun
• Position: Head of Operations / Head of IT Team
• Phone: +82-2-6670-3898
• Email: Yoon_Jonghyun@eland.co.kr
Article 12 (Access Requests)
Customers may request access to personal information pursuant to Article 35 of the Personal Information Protection Act.
Article 13 (Remedies)
Customers may contact external authorities for dispute resolution:
• Personal Information Dispute Mediation Committee (118)
• Supreme Prosecutors’ Office Cyber Crime Unit
• National Police Agency Cyber Bureau
Article 14 (Amendment of Privacy Policy)
This Privacy Policy is effective March 23rd , 2026.