Privacy Policy

1. Data Controller

MUGOONG is operated by Blossom MUGOONG, Republic of Korea. We are responsible for the collection and processing of your personal information in accordance with Korea's Personal Information Protection Act (PIPA, 개인정보 보호법) and, where applicable, the EU General Data Protection Regulation (GDPR).

Contact: privacy@mugoong.com

2. Information We Collect

2.1 Information you provide directly:

• Name and email address (during account registration)
• Password (stored in encrypted form; we never see your plain-text password)
• Phone number (optional, for booking notifications)
• Booking details including date, time, party size, and special requests
• Payment information — processed by Eximbay; MUGOONG does not store card numbers
• Review content and ratings you submit

2.2 Information collected automatically:

• IP address and approximate location (country/city level)
• Browser type and operating system
• Pages visited and time spent on site
• Referring URLs and search terms used to reach MUGOONG
• Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

• To create and manage your account
• To process bookings and send booking confirmations
• To facilitate payment via Eximbay
• To send transactional emails (booking confirmation, cancellation, reminders)
• To respond to your inquiries and support requests
• To improve our platform, listings, and recommendations
• To detect fraud and ensure platform security
• To comply with legal obligations
• With your consent: to send promotional emails about new listings and offers

4. Legal Basis for Processing (GDPR)

Where GDPR applies, we process your data on the following legal bases:

• Contract performance: processing required to fulfill your booking
• Legitimate interests: fraud prevention, analytics, platform improvement
• Consent: marketing emails (you may withdraw at any time)
• Legal obligation: tax records and regulatory compliance

5. Sharing Your Information

We do not sell your personal information. We share it only with:

• Service Partners: name, contact info, and booking details shared with the Partner to fulfill your booking
• Eximbay: payment data for transaction processing
• Supabase: database and authentication infrastructure (servers in South Korea/AWS)
• Vercel: website hosting infrastructure
• Legal authorities: if required by applicable law or court order

6. Data Retention

• Account data: retained while your account is active and for 3 years after deletion
• Booking records: 5 years (required for accounting and tax purposes under Korean law)
• Marketing preferences: until you withdraw consent
• Log data: 90 days

7. Cookies

We use essential cookies to keep you logged in and maintain your session. We use analytics cookies (anonymous) to understand how visitors use the platform. We do not use advertising or third-party tracking cookies. You can disable cookies in your browser settings, but this may affect platform functionality.

8. Your Rights

You have the right to:

• Access: request a copy of your personal data
• Correction: update inaccurate or incomplete data
• Deletion: request deletion of your account and personal data
• Portability: receive your data in a machine-readable format
• Restriction: restrict processing in certain circumstances
• Objection: object to processing based on legitimate interests
• Withdraw consent: opt out of marketing at any time via the unsubscribe link

To exercise any of these rights, email us at privacy@mugoong.com. We will respond within 30 days.

9. Children's Privacy

MUGOONG is not directed at children under 14 years of age. We do not knowingly collect personal information from children under 14. If you believe we have collected such information, please contact us and we will delete it promptly.

10. Security

We use industry-standard security measures including TLS encryption for data in transit, encrypted password storage, and access controls. No system is completely secure; if you become aware of any security issue, please notify us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email of significant changes. Continued use of MUGOONG after changes are posted constitutes your acceptance.

12. Contact & Complaints

Personal Information Protection Officer (개인정보보호책임자):

Email: privacy@mugoong.com

If you are an EU resident and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.