Effective Date: 01.01.2025.

1. Introduction

KoreaTaskBuddy operated by Kawa Company (“Company,” “we,” “us,” or “our”) operates a freelancer marketplace that connects international buyers (“Customers”) with local Korean shopping assistants (“Assistants”). This Privacy Policy outlines how we collect, use, and protect personal information in compliance with the Personal Information Protection Act (PIPA) of South Korea and the General Data Protection Regulation (GDPR).

2. Information We Collect

We collect the following types of personal data:

  • Customers: Name, email, phone number, shipping address, order details, and payment information.
  • Assistants: Name, email, phone number, bank account details (for payouts), and order fulfillment data.
  • Website Visitors: IP address, cookies, and browsing activity.

3. Purpose of Data Collection and Use

We use collected data for the following purposes:

  • To facilitate transactions between Customers and Assistants.
  • To communicate order updates and support requests.
  • To process payments and refunds.
  • To comply with legal and regulatory obligations.
  • To improve our services and prevent fraud.
  • For marketing and promotional activities (with user consent).

4. Data Retention Period

We retain personal data as follows:

  • Customer transaction data (orders, invoices, payment records): 5 years (PIPA requirement).
  • Customer service inquiries and disputes: 3 years.
  • Website logs (IP addresses, access records): 3 months.
  • Marketing and promotional data: Until consent is withdrawn.
  • Freelancer payout and tax-related information: 5 years.

After the retention period, data is securely deleted or anonymized.

5. Data Sharing and Third-Party Transfers

We may share personal data with:

  • Assistants (limited to necessary information: email, phone number, and shipping details).
  • Payment processors to facilitate transactions.
  • Legal authorities if required by law.
  • International transfers: If personal data is transferred outside Korea, we ensure compliance with GDPR and obtain separate consent where necessary.

6. User Rights

Under PIPA and GDPR, users have the right to:

  • Access, correct, or delete their personal data.
  • Withdraw consent for data processing.
  • Request data portability (GDPR only).
  • Restrict or object to data processing.

To exercise these rights, contact us at info [at] koreataskbuddy [dot] com.

7. Data Security Measures

We implement technical and organizational measures to protect personal data, including:

  • Encryption of sensitive information.
  • Secure access controls.
  • Regular security audits.

8. Changes to This Policy

We may update this policy from time to time. Any changes will be posted with an updated effective date.

9. Contact Information

For questions or concerns about this Privacy Policy, contact us at info [at] koreataskbuddy [dot] com or on our social media channels.