Privacy Policy
Effective: 2026-10-29
Diplat Laps Co., Ltd. (the "Company") sets out this Privacy Policy under the Personal Information Protection Act of Korea and related laws to protect users’ personal information and handle related concerns promptly. It applies to Ferrynear (ferrynear.com).
This English text is a translation for convenience. If it differs from the Korean version, the Korean version prevails.
1. Personal information we process
| When | Items |
|---|---|
| Booking (required) | Lead passenger name (in English), email, mobile number |
| Booking (required on some routes) | Date of birth, nationality, place of birth, passport number, passport expiry date — asked only where the operator requires it, passed to our booking partner for the booking and not stored in our database. |
| Payment | Payment ID, payment method, card issuer, masked card number, amount and time — card details are entered directly in the Toss Payments window and are not stored by us. |
| Ticketing | The ticket files the operator issues (PDF, barcode) and passenger names and ticket numbers — kept so you can download them again from the lookup page and the confirmation email. |
| Automatically, when using the site | IP address, cookies, access logs, device and browser information |
We do not offer member accounts and do not collect personal information of children under 14.
2. Purposes
- Booking and issuing tickets and passing them to the operator
- Booking confirmation, boarding information and booking lookup (by reference and email)
- Payment, cancellation and refunds
- Customer support and dispute handling
- Usage statistics and fraud prevention
3. Retention
We delete personal information without delay once its purpose is fulfilled, except where the law requires us to keep it:
| Record | Period | Law |
|---|---|---|
| Contracts and withdrawals of offer | 5 years | Act on Consumer Protection in Electronic Commerce |
| Payments and supply of goods/services | 5 years | Act on Consumer Protection in Electronic Commerce |
| Consumer complaints and disputes | 3 years | Act on Consumer Protection in Electronic Commerce |
| Website visit records | 3 months | Protection of Communications Secrets Act |
4. Provision to third parties
We provide personal information to third parties only with your consent or where the law allows. To fulfil bookings we provide:
| Recipient | Purpose | Items | Retention |
|---|---|---|---|
| Direct Ferries Ltd (UK) | Booking and issuing tickets, passing them to the operator, booking-related support | Lead passenger name (in English), email, mobile number; where required, date of birth, nationality, place of birth, passport number, passport expiry date | After the booking is fulfilled, per the recipient’s policy and applicable law |
| The ferry operator of the booked route (as shown when booking) | Passenger identification and carriage | As above | After carriage, per the operator’s policy and applicable law |
5. Processors
We entrust the following processing to service providers and supervise them under processing agreements:
| Processor | Task |
|---|---|
| Toss Payments Co., Ltd. | Payment processing and refunds |
| Supabase Inc. | Booking database (data stored in the Seoul, Korea region) |
| Vercel Inc. | Website hosting and servers |
| Resend (Plus Five Five, Inc.) | Booking confirmation and notice emails |
| Google LLC | Website usage statistics (Google Analytics) |
6. Transfers overseas
Under Article 28-8 of the Personal Information Protection Act, we transfer personal information overseas as follows:
| Recipient (country) | Purpose | Items | When and how | Retention |
|---|---|---|---|---|
| Direct Ferries Ltd (UK) | Booking and issuing tickets | Name (in English), email, mobile number; where required, date of birth, nationality, place of birth, passport number, passport expiry date | Over the network when booking | After the booking is fulfilled, per applicable law |
| The operator of the booked route (country of operation) | Passenger identification and carriage | As above | Through the booking partner when booking | After carriage, per the operator’s policy and applicable law |
| Vercel Inc. (USA) | Website hosting and servers | Information entered when booking, access information | Over the network when using the Service | Until the processing agreement ends |
| Resend (Plus Five Five, Inc.) (USA) | Booking confirmation and notice emails | Name, email, booking details | Over the network when emails are sent | Until the processing agreement ends |
| Google LLC (USA) | Website usage statistics | Cookies, access information, device and browser information | Over the network when visiting the site | Per Google’s retention policy |
| Supabase Inc. (US company, data stored in Korea) | Booking database | Name, email, mobile number, booking and payment information | Over the network when booking | The retention periods in section 3 |
You may refuse transfers overseas; however, without the transfers needed to fulfil a booking (Direct Ferries, the operator, Vercel, Resend) the booking cannot be made. You can refuse Google Analytics with the cookie settings below.
7. Destruction
(1) We destroy personal information without delay when its retention period ends or its purpose is fulfilled. Information kept by law is stored separately and destroyed when its period ends.
(2) Electronic files are deleted by technical means that prevent recovery; printed information is shredded or incinerated.
8. Your rights
(1) You may at any time request access to, correction, deletion or suspension of processing of your personal information.
(2) Contact the Privacy Officer below by email, telephone or KakaoTalk; we will act without delay. We may ask for your booking reference and booking email to verify your identity.
(3) You may exercise these rights through a legal representative or an authorised person, who must submit a power of attorney.
(4) Information the law requires us to keep cannot be deleted, and a request to suspend processing may be refused where the law allows.
9. Security measures
- Encryption in transit (HTTPS)
- Least-privilege access to systems processing personal information, with administrator authentication
- Database access control and secure storage of server keys
- No storage of payment card details (payments are made in the provider’s window)
- Keeping the number of staff handling personal information to a minimum
10. Cookies
(1) We use Google Analytics cookies for website usage statistics.
(2) You can refuse or delete cookies in your browser settings (e.g. Chrome — Settings > Privacy and security > Third-party cookies; Safari — Settings > Privacy). You can still book with cookies refused.
11. Privacy Officer
| Privacy Officer | 김여명 |
| iam@dawn.kim | |
| Telephone | 02-3788-9137 |
| KakaoTalk channel | http://pf.kakao.com/_mYtxeb |
Please contact us for any privacy enquiry, complaint or remedy; we will respond and act without delay.
12. Remedies
For reports or advice on privacy infringements, you may contact:
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
13. Changes to this Policy
We announce additions, deletions or changes on the website at least 7 days before they take effect, or 30 days before for material changes to your rights.
This Privacy Policy takes effect on 2026-10-29.
Diplat Laps Co., Ltd. · CEO 정경준 · Business reg. no. 244-88-04002 · Mail-order reg. 2026-서울강서-2302호 · A-502, Doosan The Land Tower, 152 Magokseo-ro, Gangseo-gu, Seoul, Korea · 02-3788-9137