Privacy policy

This English version is provided for convenience. If there is any difference, the Korean version prevails.

KIMFAST (the “Company”) complies with the Personal Information Protection Act and other applicable laws, and processes users’ personal information as follows. (This policy amends the policy effective June 10, 2026. The previous policy applies until the effective date.)

• At sign-up (required): email address, password, name. If you sign up with a social login (Kakao, Naver, Google, Apple), the account identifier, email and name provided by that service (the scope is shown on each service’s consent screen)
• When you request package forwarding (required): recipient name and phone number, delivery address and postal code in Korea, Personal Customs Clearance Code, tracking number and item details
• Collected automatically (web and app): IP address, cookies, service usage records (screens viewed, time spent, buttons tapped, shipping cost lookups, whether an address was copied), device and browser information. In the app: a device identifier (a random number created by the app), app version and operating system, push notification token
• Collected through analytics and advertising tools: see 4-1 below
• For 1:1 inquiries: email address and information included in your inquiry

• Providing the package forwarding service: confirming item arrival, inspection, international shipping, domestic delivery, import customs declarations
• Member management: identity verification, issuing mailbox numbers, preventing fraudulent use
• Payment and settlement, collecting unpaid amounts
• Sending notices, responding to inquiries, handling disputes
• Notifications: updates on arrival, inspection, payment and shipping status by email, KakaoTalk notification message and app push
• Improving the service and statistics: measuring which screens and features are used, identifying errors
• Measuring advertising performance: counting sign-ups, requests and payments made after seeing an ad (statistical purposes that do not identify individuals)
• Meeting legal obligations (such as keeping transaction records under the Electronic Commerce Act)

The Personal Customs Clearance Code is used only to file import customs declarations under the Customs Act, and is provided to carriers and licensed customs brokers (customs brokerage firms) for those declarations. It is not used for any other purpose.

• Provision (required to deliver the Service): international and domestic carriers (issuing waybills, delivery) and customs brokers (import declarations) — name, phone number, address, customs clearance code, item details
• Any other provision to third parties is limited to cases with the user’s separate consent or a legal basis.

Outsourcing

4-1. Analytics and advertising tools (including transfers abroad)

The Company uses the tools below to measure service usage and advertising performance. These tools send cookies, device identifiers and usage records to each provider’s servers (outside Korea). Names, email addresses and phone numbers are used for ad matching only as hashed values (irreversible encryption); the original values are never sent.

You can limit collection by blocking cookies in your browser, limiting ad tracking on your device, or changing app notification settings. How to opt out of ad tools: Google (adssettings.google.com), Meta (Account settings > Ads), Naver (ad settings).

• Member information: destroyed without delay when you delete your account
• Records of contracts, withdrawal of offers, payments and supply of goods: 5 years (Electronic Commerce Act)
• Records of consumer complaints and dispute handling: 3 years (Electronic Commerce Act)
• Access logs: 3 months (Protection of Communications Secrets Act)

When destroyed, electronic files are deleted in a way that cannot be recovered, and printed materials are shredded or incinerated.

You may request access to, correction, deletion or suspension of processing of your personal information at any time. You can edit it yourself on your account page or send a request to help@kimfast.com, and we will act without delay. We do not collect personal information from children under 14.

We use cookies and similar technologies to keep you logged in, prevent fraudulent use, improve service quality and measure advertising performance. Details are in our Cookie policy. You can refuse cookies in your browser settings; in that case, services that require login may be limited.

We take technical and administrative safeguards, including one-way encryption of stored passwords, SSL (HTTPS) encryption for all connections, minimal access rights and applying security updates.

For privacy questions, complaints or remedies, please contact help@kimfast.com. You can also report or get advice on privacy violations from the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) and the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972). If this policy changes, we will announce it through our notices starting 7 days before it takes effect. Business information, including the name of the privacy officer, will be posted on this page as soon as it is finalized.

The KIMFAST app (iOS and Android) processes the same items as the website, plus a push notification token (used to deliver notifications; deleted when you turn notifications off) and an app device identifier (a random number created by the app, used to link shipping cost lookups made before you log in to your account and to compile usage statistics). The app does not collect advertising identifiers (IDFA/GAID), and app usage records are pseudonymized on Company servers before being sent to Google Analytics and Meta.