Privacy Policy
Effective from 2026-10-20 (enacted 2026-09-01, revision v1.1)
BestTurn Inc. (the "Company") establishes and discloses this Privacy Policy pursuant to Article 30 of the Personal Information Protection Act of Korea, in order to protect the personal information of data subjects and to handle related grievances promptly. This policy applies to customers of the Company's airport VIP escort service.
Article 1 (Purposes of Processing)
The Company processes personal information for the purposes below. Personal information is not used for any other purpose, and where the purpose changes the Company takes the necessary measures, including obtaining separate consent under Article 18 of the Act.
- Providing the airport VIP escort service — receiving and confirming bookings, assigning greeters, providing the service and progress updates, and quality management
- Providing the premium vehicle booking and arrangement service — requesting and arranging vehicle dispatch
- Responding to enquiries and handling complaints
- Quoting, billing and settlement of fees
- Statistical analysis for service improvement (processed in a form that does not identify individuals)
Article 2 (Items Processed and Methods of Collection)
1. Items collected
| Stage | Items |
|---|---|
| At booking request | Email address, service date, service type and option, number of passengers, vehicle selection, and details entered in Additional Requests |
| During booking confirmation | Name (including the name as shown in the passport), mobile phone number, flight number, departure/arrival date and time, terminal, pick-up and drop-off locations, number of accompanying persons |
| For special assistance | Whether a wheelchair or walking assistance is required, medical assistance requests, and the age of an unaccompanied minor with guardian contact and hand-over details |
| Collected automatically | IP address, cookies, page URL, browser information (User-Agent), service usage records, and referral parameters (UTM) |
2. Unique identifiers and sensitive information
The Company does not collect unique identifiers such as passport numbers or resident registration numbers. Health-related special-assistance requests constitute sensitive information and are processed only where separate consent, distinct from other personal information, has been obtained.
3. Methods of collection
Booking and enquiry forms on the website and advertising landing pages; transfer of booking information from partner booking platforms (OTAs); telephone, email and messenger enquiries; bookings made on behalf of corporate customers; paper forms completed on site; and automatic generation during use of the service.
4. Personal information of third parties
Where a user provides the Company with the personal information of a third party, such as an accompanying person or an employee, the user warrants that lawful consent has been obtained from that data subject.
Article 3 (Processing and Retention Periods)
1. The Company processes and retains personal information within the retention period required by law or agreed to by the data subject at the time of collection.
2. Retention periods are as follows.
| Category | Retention period |
|---|---|
| Booking and service usage records | 5 years after the service is completed |
| Special-assistance information (sensitive) | 3 months after the service is completed |
| Consent records | In accordance with the retention period required by applicable law |
3. The following records are retained for the periods prescribed by law.
| Record | Legal basis | Period |
|---|---|---|
| Records on contracts or withdrawal of subscription | Act on Consumer Protection in Electronic Commerce | 5 years |
| Records on payment and supply of goods or services | Same Act | 5 years |
| Records on consumer complaints or dispute resolution | Same Act | 3 years |
| Records on labelling and advertising | Same Act | 6 months |
| Access logs | Protection of Communications Secrets Act | 3 months |
Article 4 (Provision to Third Parties)
1. The Company processes personal information only within the scope specified in Article 1, and provides it to third parties only where the data subject has consented or where Articles 17 and 18 of the Act otherwise permit.
2. The Company provides personal information to third parties as follows.
| Recipient | Purpose | Items | Retention period |
|---|---|---|---|
| Vehicle operating partner | Vehicle dispatch and provision of transportation service | Name, mobile phone number, pick-up and drop-off locations, pick-up date and time | 3 months after the transportation service is completed |
3. The data subject may refuse this provision. If refused, the vehicle arrangement service may be restricted, while the airport VIP escort service remains available.
Article 5 (Outsourcing of Processing)
1. The Company outsources personal information processing as follows.
| Processor | Outsourced work |
|---|---|
| Escort service partners (greeters) | Performing the airport escort service on site |
| NAVER Cloud Corp. | Providing service infrastructure and data storage |
| Google LLC | Receiving and storing booking request data (Google Sheets) and statistical analysis of service usage |
2. In accordance with Article 26 of the Act, outsourcing contracts specify the prohibition of processing beyond the purpose of the outsourced work, technical and administrative safeguards, restrictions on re-outsourcing, supervision of the processor, and liability including damages. The Company supervises whether processors handle personal information safely.
3. Any change to the outsourced work or the processors will be disclosed through this Privacy Policy without delay.
Article 6 (Transfer of Personal Information Overseas)
1. The Company transfers personal information overseas for the receipt and storage of booking request data, as follows.
| Item | Details |
|---|---|
| Transferee | Google LLC |
| Contact of the transferee | https://support.google.com/policies |
| Country of transfer | United States |
| Time and method of transfer | Transmitted over the network when a booking request is submitted |
| Items transferred | The items collected at booking request and for special assistance, and the items collected automatically, as set out in Article 2.1 |
| Purpose of use by the transferee | Storage of booking request data and support of the Company’s service operations |
| Retention period of the transferee | Until the Company’s purpose is achieved (per Article 3) |
2. The data subject may refuse the overseas transfer. In that case you may book by telephone or email instead of using the booking request form on the website, without any restriction on the service. Contact details are set out in Article 11.
Article 7 (Destruction of Personal Information)
1. The Company destroys personal information without delay once it is no longer necessary, such as when the retention period has elapsed or the purpose of processing has been achieved.
2. Where personal information must continue to be retained under other laws after the agreed retention period has elapsed, it is moved to a separate database or storage location.
3. Electronic files are permanently deleted by a method that makes recovery impossible, and paper documents are shredded or incinerated.
Article 8 (Rights of Data Subjects and Legal Representatives)
1. Data subjects may at any time request access to, correction of, deletion of, or suspension of the processing of their personal information, and may withdraw consent.
2. Such requests may be made in writing or by email, and the Company will act on them without delay. Requests are received at the contact set out in Article 11.
3. Where correction or deletion is requested, the Company will not use or provide the personal information concerned until the correction or deletion is complete.
4. Rights may be exercised through a legal representative or an authorised agent, in which case a power of attorney must be submitted.
5. Where the personal information of a child under the age of 14 is processed, consent is obtained from the legal representative, who may exercise the child’s rights.
Article 9 (Security Measures)
The Company takes the following measures to ensure the security of personal information.
- Administrative measures — establishing and implementing an internal management plan, minimising the number of staff handling personal information, and regular training
- Technical measures — managing access rights to processing systems, access control, encryption in transit (HTTPS), retention and tamper-prevention of access logs, and installation and updating of security programs
- Physical measures — use of locking devices for documents and media containing personal information
Article 10 (Cookies and Analytics)
1. The Company uses cookies to analyse how the service is used and to improve it.
2. The Company uses the following third-party analytics and advertising tools, which may collect usage information through cookies and similar technologies.
| Tool | Provider | Purpose |
|---|---|---|
| Google Analytics | Google LLC | Analysis of visits and usage behaviour |
| Google Tag Manager | Google LLC | Management of analytics and advertising scripts |
| AceCounter | NHN DATA Corp. | Analysis of traffic sources and usage behaviour, ad performance measurement and invalid-click prevention |
| Meta Pixel | Meta Platforms, Inc. | Ad performance measurement and personalised advertising |
3. The Company allows the following advertising providers to collect users’ behavioural information for personalised advertising.
| Item | Details |
|---|---|
| Providers | NHN DATA Corp., Meta Platforms, Inc. |
| Information collected | Website visits, pages viewed, referral source, completion of a booking request, cookie identifiers, device and browser information |
| Method | Collected automatically when users visit the website or complete a booking request |
| Purpose | Showing advertisements relevant to users’ interests; measuring ad performance |
| Retention | According to each provider’s retention policy. The Company does not store this behavioural information itself |
※ The Company does not send the information you enter in a booking request (such as your name, contact details or flight) to these providers.
4. Users may refuse or delete cookies through their browser settings, and may opt out of personalised advertising through the advertising ID settings on their mobile device (Android: Settings → Google → Ads → Reset or delete advertising ID / iOS: Settings → Privacy & Security → Tracking). Refusing cookies may make parts of the service harder to use.
5. Enquiries or complaints about personalised advertising may be made to the Privacy Officer set out in Article 11.
Article 11 (Privacy Officer)
1. The Company designates the following privacy officer to take overall responsibility for personal information processing and to handle complaints and remedies of data subjects.
| Item | Details |
|---|---|
| Company | 주식회사 베스턴 (BestTurn Inc.) |
| Representative | Wonjin Choi |
| Business registration number | 769-88-03007 |
| Address | 2636, Terminal 1, Incheon International Airport, 272 Gonghang-ro, Jung-gu, Incheon, Republic of Korea |
| Privacy officer | BestTurn Privacy Team |
| Contact | cs@bestturnaround.com / 010-4283-3177 |
2. Data subjects may direct any enquiry, complaint or request for remedy concerning personal information arising from use of the service to the contact above.
Article 12 (Remedies for Infringement)
Data subjects may apply to the following bodies for dispute resolution or consultation regarding infringement of personal information.
| Body | Contact |
|---|---|
| Personal Information Dispute Mediation Committee | +82-1833-6972 / www.kopico.go.kr |
| Privacy Infringement Report Centre | +82-118 / privacy.kisa.or.kr |
| Cyber Investigation Division, Supreme Prosecutors’ Office | +82-1301 / www.spo.go.kr |
| National Office of Investigation, Korean National Police Agency | +82-182 / ecrm.police.go.kr |
Article 13 (Changes to this Policy)
1. This Privacy Policy applies from 2026-09-01; the current revision (v1.1) applies from 2026-10-20.
2. Where content is added, deleted or amended due to changes in law, policy or security technology, the change will be announced on the website at least 7 days before it takes effect, or at least 30 days before where it materially affects the rights of data subjects.
Revision history
- v1.0 — enacted 2026-09-01
- v1.1 — 2026-10-20: Article 10 amended — analytics and advertising tools (AceCounter, Meta Pixel) added and notice of behavioural information collection introduced
This English text is provided for convenience. In the event of any discrepancy with the Korean version, the Korean version prevails.