Home

Terms and conditions & managerial guidelines

Customer Service

FAQ
1:1 Inquiry
- Submit an Inquiry
- My Inquiry History
Membership guide
- Membership levels
- H.oney guide
Duty free guide
Announcements
- Announcements
- Announcement of winners
Terms and conditions & managerial guidelines
Exchange rate search
Tenant/partner inquiries

Terms and conditions & managerial guidelines

Important personal information(Data labeling)

Collection of general personal information

Customer management : name, date of birth, mobile phone number, gender, email address, passport information, etc.
Product purchase : departure information, payment information (credit card number, expiration date), etc.
Customer inquiries : mobile phone number, voice recording-related information, etc.
Event : name, mobile phone number, home address, etc.

Purpose of personal information processing

Customer management : identity confirmation, making of announcements, processing of customer inquiries/complaints, etc.
Product purchase : carrying out of purchase contract and adherence to relevant legal regulations.
Customer inquiries : identification of customer submitting the inquiry/complaint, processing of customer complaints, notification of consultation outcomes, etc.
Event : shipping of event giveaways, sending of mobile event-related items (e.g. gifticons)

Retention period for personal information

Customer management : until membership withdrawal or achievement of the purpose for which the customer’s personal information was collected/used
Product purchase : until membership withdrawal or achievement of the purpose for which the customer’s personal information was collected/used
Customer inquiries : Customer inquiries: until membership withdrawal or achievement of the purpose for which the customer’s personal information was collected/used
Event : for a predetermined period of time (communicated to customers who agree to collection of personal information) after shipment of giveaway item

Consignment of personal information processing

Development and maintenance of computer system : Hyundai FUTURENET
Customer consultation (operation of Customer Service) : Hyosung ITX
Management of stores’ video footage information : S-TEC System

Provision of personal information

Hyundai Department Store : information required for accumulating and using H.Points (name, date of birth, gender, mobile phone number, email address, purchase-related data, etc.)
Korea Customs Service : information required by Customs Act (name, nationality, date of birth, passport number, departure information, pick-up information, etc.)

Change of personal information and withdrawal of membership

Computer : Click the person-shaped icon at the upper right after logging in → My Hyundai page information menu → Click “Basic Information Management”→ Enter password → “Edit member information (or withdraw membership)”
App : Click the person-shaped icon at the lower right after logging in → Information tab at the bottom of the screen → Go to “Basic Information Management” (fourth from bottom) → Enter password → “Edit member information (or withdraw membership)”

※ You can check the details by holding the mouse pointer over the symbol. For more information, please see the Personal Information Processing Guideline below.

Hyundai Duty Free Privacy Policy

Hyundai DF Co., Ltd. (hereinafter "Hyundai Duty Free") establishes and discloses this Privacy Policy at the bottom of its homepage to inform customers of measures taken to protect their personal information, enabling easy access and review at any time. This Privacy Policy may be revised due to changes in laws, regulations, or company policy; any changes will be announced via notices, pop-up windows, etc.

Article 1. Methods for Obtaining Consent to Collection and Use of Personal Information

Hyundai Duty Free obtains customer consent through one of the following methods:

• Posting consent content on the internet homepage and having the customer indicate their agreement

• Delivering a written form (membership application) with consent content directly to the customer, or by mail or fax, and having the customer sign and return it

• Sending an email with consent content and receiving a reply email from the customer indicating consent

• Informing the customer of the consent content by telephone and obtaining consent, or providing information on how to confirm consent (e.g., internet address) and obtaining consent by phone again

• Provision from affiliated companies

• Collection of generated information during PC or mobile use

Article 2. Purposes of Processing and Items of Personal Information Collected

■ Purposes of collection and use of personal information

Hyundai Duty Free collects and uses personal information necessary to provide product purchases and various services to customers as follows:

Category	Purpose of Use
Membership Management	• Identity verification for membership services • Prevention of fraudulent and unauthorized use • Preservation of records for customer consultation, complaints, and dispute resolution • Delivery of notices and age verification (under 14) • Settlement of payments for goods transactions

Service Provision	• User identification and identity verification • Content provision, event/prize notification, product delivery, inquiry response • Contract conclusion and fulfillment (purchase, payment, refund, product delivery) • Points and discount benefits, information management compliance
Marketing & Advertising	• New service and event information • Data for personalized services and marketing • Service provision and advertising based on statistical characteristics • Website visit frequency tracking, service usage statistics • Periodical distribution, new product/service announcements • Customer surveys, service and product guidance

※ Fraudulent use refers to: repeated membership withdrawal and re-registration; repeated purchase and cancellation to obtain economic benefits through event benefits, discount coupons, etc.; acts prohibited under the Terms of Use; identity theft; and other illegal or unfair acts

■ Personal information processed without the consent of the data subject

Legal Basis	Category	Items Collected	Purpose of Collection and Processing	Retention Period
Personal Information Protection Act Art. 15(1)(4) (Contract Performance); Bonded Store License and Operation Notice Art. 27 (Operator's Obligations)	Product Purchase	Name, email, mobile phone number, date of birth, gender, English name, nationality, passport expiry date, departure information (departure date, origin, flight number, direct/transit), payment information (card number, card company, validity period, installment months, approval date); (for online non-members) order password	User identification, notice delivery, customer consultation, contract performance, and legal compliance	5 years (for members: upon withdrawal)
Personal Information Protection Act Art. 15(1)(4) (Contract Performance)	Cancellation Power of Attorney (Foreigners)	[Delegator] Name, DOB, passport number, passport expiry [Agent] ID copy (photo, name, DOB)	Identity verification and processing, contract performance and legal compliance	5 years

■ Personal information processed with the consent of the data subject

Legal Basis	Category	Items Collected	Purpose	Retention Period
Personal Information Protection Act Art. 15(1)(1) (Consent of Data Subject)	Online Membership Registration	[H.Point Integrated Member] ID, name, password, DOB, gender, mobile number, email, CI, nationality, passport no., English name, passport expiry, customer number (CI not collected for foreigners) [Offline Member → Online Integration] ID, name, password, DOB, gender, mobile number, email, CI, nationality, passport no., English name, passport expiry [AIRSTAR Hyundai DF Member] ID, name, password, DOB, gender, mobile number, email, nationality, English name, passport expiry	Member service provision, identity verification, notice delivery	Until membership withdrawal (or as required by law)
	Offline Membership Registration	Name, nationality, gender, DOB, passport no., passport expiry, mobile number, purchase info (items, date/time, amount, payment method)	Identity verification for membership services, communication for guidance, service improvement, incident investigation, complaint handling, customer satisfaction survey, contract performance, legal compliance	Until withdrawal or purpose achieved (or as required by law)
	Product Purchase	Passport number	User identification, notice delivery, contract performance, legal compliance	5 years (members: upon withdrawal)
	Korean Diaspora Verification	Passport info (photo, English name, DOB, passport no., expiry)	Identity verification and processing, contract performance and legal compliance	Upon exclusion request
	Non-bank Transfer Refund	Account info (account holder, bank, refund account number)	Payment (deposit) refund processing	Upon membership withdrawal
	Partner Membership	SkyPass membership number	Korean Air mileage accumulation	Upon membership withdrawal
	Customer Service Inquiry	Name, purchase store, email, contact (mobile/phone), inquiry content, call recording	Customer identification, response, result notification	3 years


	Passport Information Change Inquiry	Passport number, passport copy (photo, English name, nationality, DOB, gender, passport no., expiry)	Passport information change processing	Until membership withdrawal (or as required by law)
	Wedding Shop Event	Spouse info (name, ID), expected departure date, wedding date, invitation	Points and coupon issuance	Until membership withdrawal (invitation image destroyed immediately after approval)
	Member Events (review, purchase, comment)	ID, name, contact, email, address (for physical prizes) (※ see prize announcement page for details)	Winner notification and prize delivery	Until membership withdrawal
	Marketing & Advertising	Name, email, mobile number, nationality, gender, DOB, purchase info	Duty free service provision, event/product information, marketing research and product development	Until withdrawal or purpose achieved (or as required by law)
	Partnership/Affiliation Inquiry	Name, mobile number, email	Inquiry reception and response	3 years
Income Tax Act Art. 21 (Other Income), Art. 164 (Submission of Payment Statement)	Tax Processing	Resident registration number	Processing of withholding tax on event prize income	5 years

■ Personal information generated during service or business processing

• Service usage records, access logs, access information, cookies, access IP information

• (Mobile app) Device identification number, device OS info, device model name, PUSH reception status

■ Personal information collected from sources other than the data subject

Legal Basis	Category	Items Collected	Purpose	Retention Period
Personal Information Protection Act Art. 15(1)(4) (Contract Performance)	Simple Login	[Naver] Serial number and email transmitted from SNS [Kakao] Serial number and email transmitted from SNS	Naver/Kakao simple login service provision	Until withdrawal or simple login setting maintained
	AIRSTAR Membership	CI, email, passport no., name, DOB, mobile number	Membership verification	Destroyed immediately after verification
		AIRSTAR ID, name, mobile number, email, passport no., country/region, passport name, DOB, gender code, passport expiry, departure date, airline, flight number, departure airport, arrival airport, terminal, stopover, ordered products	Order processing for duty free products	Service period (or as stipulated by law/prior consent)
		Card number, expiry, first 2 digits of PIN, DOB	Simple payment for duty free products	5 years (members: upon withdrawal)

※ Pursuant to Article 37 of the Personal Information Protection Act, customers may request suspension of processing or withdraw consent for processing of their personal information.

■ Actions for false information submission

Customers must ensure the accuracy, truthfulness, and legality of their personal information. If false information is entered (e.g., using another person's identity or fictional information), Hyundai Duty Free may report the customer under applicable law and may restrict service use, including forced membership termination.

Article 3. Entrustment of Personal Information Processing for Service Provision

Hyundai Duty Free entrusts some tasks to external parties for contract performance and service improvement. The entrusted tasks and trustees are as follows:

Trustee (Sub-trustee)	Entrusted Task
Hyosung ITX	Customer consultation and customer center operations
Humuson (Kakao, Daou Technology)	SMS, MMS, app push notification, identity verification
Dream Security	Age and identity verification services
KICC	Credit card payment processing
KRP	Payment gateway (PG) services
KSNET	Credit card payment processing
KG Mobilians (MetaM)	Mobile micropayment
LG CNS (e-Commerce Tech, Hansung MS)	Simple payment services
Hyundai Futurenet (SK Corp.)	IT system maintenance and development
Hyundai Department Store (Hyundai Futurenet)	Integrated membership registration operations
GS MBiz (LG U+, GS ITM)	Event prize mobile coupon distribution
Capstec, Proscom	Store and logistics center access security and CCTV operations
Unies	Store warehouse operations
eSystem	Integrated logistics center warehouse operations
MARS30	SNS operations and event prize delivery
Platieer (NHN)	Marketing service solution maintenance
Joeun System, eBridge	Store sales
Korea Duty Free Association (Will&With, eSystem, Yongjin T&S)	Store delivery counter operations

• Information shared with trustees is limited to the minimum necessary for the purpose, and personal information is selectively provided to relevant companies based on customer service requests.

• Entrustment contracts clearly specify the purpose and scope of entrusted tasks, prohibition of processing personal information for other purposes, access restrictions, security measures, sub-entrustment restrictions, and oversight. Such contracts are maintained in written or electronic form.

• Changes to trustees or entrusted tasks will be announced on the homepage's Privacy Policy page.

The following cases allow provision of personal information without customer consent under applicable law:

• Providing minimum necessary user information (name, address, phone number) to delivery companies for delivery purposes

• When necessary for settlement of payments for goods transactions

• When identity verification is required to prevent fraud

Article 4. Provision of Personal Information to Third Parties

• Hyundai Duty Free processes personal information within the scope notified in 'Purposes of Collection and Use,' and provides personal information to third parties only with the customer's consent or when specifically required by law.

Legal Basis	Recipient	Items Provided	Purpose	Recipient Retention Period
Customs Act Art. 12, 196; Enforcement Decree Art. 3, 213	Korea Customs Service	Name, nationality, DOB, passport no., departure info, delivery info	Customs reporting (Customs Act Enforcement Decree Art. 289, etc.)	Semi-permanent
Personal Information Protection Act Art. 17(1) (Consent of Data Subject)	Hyundai Department Store	CI, ID, password, name, customer number, DOB, gender, mobile number, email, domestic/foreign distinction, purchase info, payment info (H.Point accumulation items only)	H.Point membership registration, website login, H.Point accumulation and use, other H.Point membership services	Until withdrawal or purpose achieved (or as required by law)
	Korean Air	SkyPass membership number, English name	Korean Air mileage accumulation	Until SkyPass membership withdrawal
Personal Information Protection Act Art. 17(4) (Additional Use/Provision)	AIRSTAR DF	AIRSTAR membership number, membership grade	AIRSTAR membership linkage, service provision, membership grade management	Until AIRSTAR membership withdrawal

• When providing or sharing customer information through affiliations, Hyundai Duty Free notifies customers in advance of: the recipient, items provided/shared, purpose, retention period, the right to refuse consent, and any disadvantages from refusal, and obtains consent. Changes or terminations in affiliations will be announced promptly via the homepage and individually via email at least once if necessary.

• If personal information transfer becomes necessary due to sale, merger, or business transfer, Hyundai Duty Free will notify customers in advance in accordance with the Personal Information Protection Act and grant members the right to withdraw consent.

Article 5. Retention and Use Period of Personal Information

• Hyundai Duty Free destroys personal information without delay when the purpose of collection and use is achieved, when the customer withdraws membership, or when consent is withdrawn. (However, personal information of expelled members due to fraudulent use is retained for 6 months before destruction.)

• When retention is legally required, information is stored separately in a separate DB or table as follows:

Legal Basis	Category	Retention Period
Act on Consumer Protection in Electronic Commerce, Art. 6	Records of contracts or subscription withdrawal	5 years
	Records of payment and supply of goods	5 years
	Records of consumer complaints or dispute resolution	3 years
	Records of advertising	6 months
Commercial Act, Art. 33	Important business documents such as contracts, applications, invoices	10 years
Protection of Communications Secrets Act, Art. 15-2	Website visit records (logs), access tracking data	3 months
Customs Act Art. 12; Enforcement Decree Art. 3; Bonded Store Operation Notice Art. 30	Purchase records	2 years
	Delivery records	3 years

Article 6. Procedures and Methods for Destruction of Personal Information

Hyundai Duty Free destroys personal information without delay after the processing purpose is achieved or the retention period expires. The specific procedures and methods are as follows:

■ Destruction Procedure

• Information entered by members for registration is stored for a certain period in accordance with internal policies and applicable laws (see Retention Period) before destruction.

• Personal information is not used for any purpose other than the legally required retention purpose.

■ Destruction Method

• Personal information printed on paper is destroyed by shredding or incineration.

• Personal information stored in electronic file form is deleted using technical methods that make recovery impossible.

Article 7. Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them

• Customers may access, correct, delete, or suspend the processing of their registered personal information at any time. Customers may directly access, correct, or delete information via the 'Basic Information Management' section on the homepage, or contact the Privacy Officer or person in charge by mail, phone, or email for prompt action.

PC (Homepage): Log in → Person icon (top right) → Info tab → 'Basic Information Management' → Enter password → 'Edit Member Info & Withdrawal'

Mobile (App): Log in → Person icon (bottom right) → Info tab (bottom) → Fourth from bottom 'Basic Information Management' → Enter password → 'Edit Member Info & Withdrawal'

• Rights of children under 14 must be exercised by a legal representative. Minors aged 14 or older may exercise rights personally or through a legal representative.

• If a customer requests correction of errors in personal information, the information will not be used or provided to third parties until correction is completed. If erroneous personal information has already been provided to a third party, correction will be promptly notified.

• Even if a customer using the Hyundai Duty Free app deletes the app from their mobile device, a separate request such as membership withdrawal is required if information remains with Hyundai Duty Free.

• Customers may exercise rights through a legal representative or delegated agent. In this case, a power of attorney pursuant to [Annex 11] of the 'Notice on Methods of Personal Information Processing' must be submitted.

• Customers should enter accurate and up-to-date personal information to prevent accidents. Customers are responsible for accidents caused by inaccurate information they enter, and membership may be revoked for false information or identity theft.

• Customers have both the right to protection of their personal information and the obligation to protect themselves and not infringe on others' information. Please be careful to prevent leakage of passwords and other personal information, and do not damage others' personal information including posts.

• Failure to fulfill such responsibilities and damage to others' information or dignity may result in punishment under the Personal Information Protection Act.

• The right to request access and suspension of processing of personal information may be restricted pursuant to Articles 35(4) and 37(2) of the Personal Information Protection Act.

• If personal information is specified as a collection target by other laws, deletion cannot be requested.

• Hyundai Duty Free verifies that the person exercising rights is the data subject or a legitimate representative.

• Hyundai Duty Free guarantees the right to personal information self-determination and strives to provide consultation and remediation for personal information infringement. Please contact the customer consultation center for reporting or consultation regarding personal information infringement.

Department: Information Security

Phone: 1811-6688

Email: privacy_hddfs@hddfs.com

Article 8. Installation and Operation of Automatic Data Collection Devices and the Right to Refuse

• Hyundai Duty Free installs and operates cookies*, and users may refuse them.

• Cookies are temporary files automatically created when accessing a website — small text files sent by the server to the user's browser and stored on the user's computer hard disk.

• Users have a choice regarding cookies, and may set their web browser options to allow all cookies, confirm each time cookies are saved, or block all cookies. Note that refusing cookie storage may restrict some services requiring login.

Methods for specifying cookie installation permission:

[WEB]

Browser	Method
Edge	Browser settings (top right) → [Settings] > [Cookies and site permissions] > Manage and delete cookies and site data
Chrome	Browser settings (top right) → [Settings] > [Privacy and security] > Manage and delete third-party cookies

[APP]

Platform	Method
Android	[Home] > [Settings] > [Google] > [Ads] > Opt out of Ads Personalization
iPhone	[Home] > [Settings] > [Privacy & Security] > [Tracking] > Turn off Allow Apps to Request to Track

• Hyundai Duty Free reads cookies in users' browsers and can provide services without re-entering information such as names by retrieving additional user information from the user's computer.

• Hyundai Duty Free analyzes users' interests, hobbies, preferences, and tendencies based on advertising identifiers. Details are as follows:

Category	Details
Items Collected	Service usage records and access logs (clicks, search history, etc.)
Collection Method	Automatic collection during service use
Purpose	Analyze user interests and hobbies to provide personalized services
Retention Period	Retained for 15 months then destroyed
How to Exercise Control	- Edge: Browser settings (top right) → [Settings] > [Cookies and site permissions] > Manage and delete - Chrome: [Settings] > [Privacy and security] > Manage and delete third-party cookies - Android: [Home] > [Settings] > [Google] > [Ads] > Opt out of Ads Personalization - iPhone: [Home] > [Settings] > [Privacy & Security] > [Tracking] > Turn off
Remedy Method	- Customer center: 1811-6688 - Homepage: Customer Center > 1:1 Inquiry

Article 9. Collection, Use, and Opt-Out of Behavioral Information

• Hyundai Duty Free collects and uses behavioral information in identifiable form using cookies to provide optimized personalized services, benefits, and online targeted advertising.

• Hyundai Duty Free analyzes users' interests, hobbies, preferences, and tendencies based on advertising identifiers. Details are as follows:

Category	Details
Items Collected	Mobile App/Homepage service usage (website visit history/app installation history/app usage history), access logs, advertising identifiers (ADID, IDFA)
Collection Method	Automatic log collection of key user actions when visiting or using website/app
Purpose	Product/service development, statistics, user analysis, behavioral information-based targeted advertising
Retention Period	15 months
Remedy Method	- Customer center: 1811-6688 - Homepage: Customer Center > 1:1 Inquiry

Methods for blocking/allowing targeted advertising are as follows. Note that changing cookie settings may restrict some services such as automatic website login.

Browser/Platform	Method
Chrome	Settings > Privacy and security > Clear browsing data; Settings > Privacy and security > Third-party cookies > Block third-party cookies
Safari	Settings > Safari > Advanced > Block All Cookies
Edge	Settings > Privacy, search, and services > Tracking prevention > Choose tracking prevention level; Always use 'Strict' tracking prevention when browsing InPrivate
Android (Mobile)	Settings > Security and privacy > Privacy > More privacy settings > Ads > Reset or delete Advertising ID
iPhone (Mobile)	Settings > Privacy & Security > Tracking > Turn off Allow Apps to Request to Track ※ Menu and method may vary by mobile OS version
Google Analytics	Install opt-out browser add-on (tools.google.com/dlpage/gaoptout)

■ Information on Provision of Behavioral Information

Users' behavioral information is provided to analytics companies and affiliate advertising businesses in non-identifiable form, as follows:

① Recipient: Platieer, Google Analytics

② Behavioral information items provided: Advertising identifiers targeted to specific interest groups

③ Recipient's purpose of retention and use: Provision of interest-based targeted advertising

• When providing targeted advertising to children known to be under 14, prior consent of a legal representative is obtained; otherwise, behavioral information of children is not collected or used for targeted advertising.

• Only the minimum behavioral information necessary for optimized personalized services, benefits, and online targeted advertising is collected. Sensitive behavioral information that may infringe on personal rights, interests, or privacy (e.g., thoughts, beliefs, academic or medical history) is not collected.

Article 10. Technical and Administrative Measures for Personal Information Protection

Hyundai Duty Free takes the following technical, administrative, and physical measures to ensure safety pursuant to Article 29 of the Personal Information Protection Act, to prevent loss, theft, leakage, forgery, alteration, or damage of personal information.

• Minimization and training of personal information processing staff: The number of employees processing personal information is minimized, and regular training is conducted for safe processing.

• Regular internal audits: Regular internal audits are conducted to ensure safety in personal information processing.

• Trustee management and training: Regular management and training of trustees handling personal information processing tasks.

• Establishment and implementation of internal management plans: Internal management plans are established and implemented for safe personal information processing.

• Encryption of personal information: Unique identifiers (passport numbers) and passwords are encrypted for storage and management. Important data uses additional security functions such as encryption or transmission channel encryption.

• Technical measures against hacking: Security programs are installed and regularly updated/checked. Systems are placed in access-controlled areas and technically/physically monitored and blocked to prevent leakage, infringement, or damage due to hacking or computer viruses.

• Access restrictions to personal information: Access rights to databases processing personal information are recorded and managed. Intrusion prevention systems are used to control unauthorized external access.

• Preservation and protection of access records: Access records to personal information processing systems are retained for at least 2 years, with security measures to prevent forgery, theft, or loss of access records.

• Use of document security locks: Documents and auxiliary storage media containing personal information are stored in safe locations with locks.

• Access control for unauthorized persons: Separate physical storage locations are established for personal information, with access control procedures in place.

Article 11. Linked Sites

Hyundai Duty Free may provide links to other companies' websites or materials. In such cases, Hyundai Duty Free has no control over external sites or materials and cannot be responsible for or guarantee the usefulness of services or materials provided from them. When navigating to another site via a link included on Hyundai Duty Free, please review the privacy policy of the new site, as it is independent from Hyundai Duty Free's policy.

Article 12. Management and Responsibility for Posts

• Hyundai Duty Free values customers' posts and takes every effort to protect them from alteration, damage, or deletion. However, posts may be deleted after explicit or individual warning in the following cases:

Posts that defame others by spreading false information

Unauthorized disclosure of others' personal information, infringement of Hyundai Duty Free's or third parties' copyrights, or posts unrelated to the board topic

Spam posts (e.g., advertisements for specific sites or products)

Posts that may violate laws

• Fundamentally, all rights and responsibilities related to posts belong to the individual author. Information voluntarily disclosed through posts is difficult to protect, so please consider carefully before disclosure.

Article 13. Personal Information Protection Department

Hyundai Duty Free has designated the following department and Privacy Officer to protect customer personal information and handle opinions and complaints:

- Privacy Officer: Ban Hyeong-cheol

- Department: Information Security

- Position: CPO

- Phone: 1811-6688

- Email: privacy_hddfs@hddfs.com

Article 14. Methods for Remedying Rights Violations

Customers may apply for dispute resolution or consultation to remedy rights violations due to personal information infringement. Please contact the following agencies:

- Personal Information Infringement Report Center: 118 (no area code) (https://privacy.kisa.or.kr)

- Personal Information Dispute Mediation Committee: 1833-6972 (https://www.kopico.go.kr)

- Supreme Prosecutors' Office Cybercrime Investigation Division: 1301 (no area code) (https://www.spo.go.kr)

- Cybercrime Report System: 182 (no area code) (ecrm.police.go.kr)

Article 15. Protection of Personal Information of Children Under 14

Hyundai Duty Free does not, in principle, collect personal information of children under 14. However, if collection is necessary, consent from a legal representative will be obtained and other legally required standards will be observed.

Article 16. Collection and Protection of Personal Information of Non-Member Customers

• Non-member customers may also purchase products or services. Hyundai Duty Free collects only the minimum personal information strictly necessary for payment and product delivery for non-member orders.

• For non-member purchases, payer and recipient information entered by the non-member is not used for any purpose other than payment and product delivery.

• Non-members' personal information is protected in the same manner as members'.

Article 17. Restrictions on Transmission of Advertising Information

• Hyundai Duty Free does not, in principle, transmit commercial advertising information without prior customer consent (or upon opt-out/withdrawal of consent).

• If the customer has consented to receive marketing information such as event information and newsletters, the following measures apply:

Email subject line: Must include '(Advertisement)' in the subject

Email body: Must state the sender's name, contact, email address, and physical address, and provide an easy method for the customer to opt out or withdraw consent

• However, prior consent is not required in the following case: When a person who directly collected contact information from a recipient through a commercial transaction wishes to transmit commercial advertising information for the same type of goods or services within 6 months from the end date of that transaction.

Article 18. Obligation to Notify Privacy Policy

• If additions, deletions, or modifications to this Privacy Policy are made due to government or company policy, the changes will be announced via the 'Notice' section of the homepage.

• This Privacy Policy is effective from June 8, 2026.

Collection of personal information
HDDFS collects only the minimum amount of personal information required for the given task!
- 1. What is “personal information”?
  “Personal information” refers to any information that identifies you. Examples include name, date of birth, phone number, and email address.
- 2. What items of personal information does HDDFS collect?
  Upon membership registration, the applicant’s name, date of birth, passport number, gender, email address, and other items of information are collected to confirm his/her identity. For duty free purchases, the only information collected is that required by Korea’s Customs Act and necessary to undertake the purchase contract (e.g. passport number, departure information, payment details, etc.).
- 3. Is personal information collected for HDDFS events?
  Personal information is collected for events hosted by HDDFS Online or for social media for customers who were informed of and consented to the items of personal information to be collected.
- 4. How is personal information collected?
  Before personal information is collected, an announcement is made of the items of information for which consent will be received. Personal information is collected after the customer has expressed his/her consent by checking the “I consent” box or submitting his/her signature.

Use of personal information
HDDFS uses personal information only for the purposes consented to by the customer!
- 1. How is personal information used?
  The personal information of HDDFS members is used for customer management purposes (e.g. identity confirmation, customer consultation) and to enable the provision/management of services. For duty free purchases, personal information is used for identity confirmation and to maintain compliance with relevant laws.
- 2. Are for-profit advertisements sent to registered members in the form of text messages or emails?
  For-profit advertisements are sent only to members who consented to receiving marketing-related information. HDDFS does not send for-profit advertisements without the customer’s consent. Even if the customer has consented, such information is sent according to a detailed set of guidelines (e.g. including the word “Advertisement” in the email’s title).
- 3. Is personal information used indiscriminately?
  To ensure the protection of customers’ personal information, HDDFS has implemented a number of technical and supervisory measures, including: provision of employee training, conducting of regular self-administered audits, drawing up of in-house management plans, encryption of personal information, creation of hacking policy, restriction of access (offline and online), and storage of access records.

Disclosure of personal information
HDDFS provides personal information to consigned third parties only after obtaining customers’ consent!
- 1. When is personal information disclosed?
  To provide high-quality services to our customers, HDDFS consigns some tasks to third parties (business consignment). Personal information may also be disclosed to utilize the services of HDDFS' partners. Please note that personal information is consigned only after obtaining the consent of the customer!
- 2. What does “business consignment” mean?
  For example, HDDFS consigns the tasks involved in customer consultation (responding to customers’ requests or inquiries) and product sales to external contractors. When consigning such tasks, HDDFS does its best to protect customers’ personal information through such means as regular checks of whether the contractor is abiding by relevant laws and training for the contractor’s employees.
- 3. What does “disclosure to a third party” mean?
  For example, personal information may be disclosed to provide H.Point services, including point accrual and use. Of course, all disclosure is done only after obtaining the customer’s consent! If, however, such disclosure is for a purpose that is required by law, personal information may be disclosed to a third party without the customer’s consent.

Deletion of personal information
HDDFS deletes customers’ personal information, when deemed necessary, promptly and in a secure manner!
- 1. When is personal information deleted?
  HDDFS promptly deletes personal information when: 1) the customer withdraws his/her membership or 2) the retention period to which the customer consented regarding the storage and use of his/her personal information has ended. If, however, the customer has a purchase record, his/her personal information is stored separately for the period of time that is required by Korean law.
- 2. What is a dormant member?
  If a customer does not log in to HDDFS’ website for a certain period of time (one year or three years), his/her personal information is stored separately. In this case, his/her personal information is not used at all!
- 3. How is personal information deleted?
  Personal information that is saved on a computer in electronic format is deleted in such a manner that such information cannot be restored. Personal information in paper format is incinerated or shred very finely so that it is illegible.

Guarantee of rights
HDDFS does its utmost to guarantee the rights of the customer regarding personal information!
- 1. What does it mean to “guarantee the rights of the customer”?
  HDDFS does its best to adequately guarantee the customer’s rights. Whenever the customer requests the editing, deletion, or granting of permission to view one’s personal information, HDDFS complies with such request in a timely manner (after completing the relevant confirmation procedure).
- 2. How can I edit my personal information or withdraw membership?
  Please refer to the following regarding the editing of personal information or withdrawal of membership via our website or mobile app!
  - Computer (website): Click the person-shaped icon (My Hyundai) at the upper right after logging in → Follow the downward arrow next to “Cash points/gift card cash points” at the lower right of the order details box → Click “Basic Information Management” at the lower left → Enter password → Edit personal information (or withdraw membership)
  - Mobile app: Click the person-shaped icon at the lower right after logging in → Click the upside-down triangle next to “Orders” at the top of the screen → Go to “Basic Information Management” (fourth from bottom) → Enter password → Edit personal information (or withdraw membership)

※ For more information on how HDDFS handles personal information, feel free to read the “ Personal Information Processing Guideline ” (link can be found at the bottom of HDDFS’ website)!
Go to HDDFS’ Personal Information Processing Guideline >