Privacy
Privacy Policy
Last updated: September 2026
This is prototype placeholder text. Final policies are confirmed after legal review, before PG screening.
Data Collected
We collect email, along with name, phone number, date of birth, and gender received automatically through mobile identity verification (gender is used for statistics and service improvement). CI is stored encrypted solely for adult verification, and only email and name are collected from foreign users.
Service-Generated Data
Check-in/check-out records are processed for occupancy management and visit-streak features, and reservation and payment history is retained. Card numbers are not stored; only PG tokens are kept.
Outsourcing and Third-Party Provision
Payment processing is entrusted to Toss Payments, KakaoTalk notifications to Solapi, and identity verification to PortOne; the cloud infrastructure storage region is disclosed. Whether cross-border transfer applies is under review.
Retention Period
Contract and payment records are retained per statutory e-commerce retention periods (e.g., 5 years). They are destroyed without delay upon membership withdrawal.
Marketing Consent
Marketing consent is collected separately. The method of withdrawal is stated.
CCTV Operation
If CCTV is operated in the facility, signage will be posted and this policy will be updated accordingly (operational confirmation pending).
Privacy Contact
Questions about how we process personal data can be sent to hello@batubathhouse.kr.