Privacy Policy

1. Data controller

HANKATONG LTD (Company number 16087577)
Office 10779, 182-184 High Street North, East Ham, London, E6 2JA, United Kingdom
cs@hankatong.app

Korea operations are supported by TTEUGEOUNCHEONGCHUN CO., LTD (㈜뜨거운청춘). HANKATONG LTD remains the contracting, payment and data-controller entity.

2. Data we process

• Account and contact data, including name, email, telephone number, country and authentication records.
• Trip, destination, travel dates, device compatibility and product preference data.
• Order, payment status, currency, refund, eSIM or physical SIM delivery and activation records. Full card numbers and security codes are handled by payment processors and are not stored by us.
• Support enquiries, reviews, attachments and communications.
• Technical and security data such as device, operating system, IP address, language, logs, consent and fraud signals.
• Location data only when you grant permission and use a feature that needs it.

3. Why and on what basis

• To create and secure accounts, provide recommendations, fulfil orders, process payments and refunds, and provide support: performance of a contract.
• To prevent fraud, maintain service security, improve reliability and resolve disputes: legitimate interests.
• To meet tax, accounting, consumer, payment and legal duties: legal obligation.
• For optional precise location, marketing or other optional features: consent, which you may withdraw.

4. Device permissions

Camera, photo, notification and location permissions are requested only when a related feature is used. You can change them in device settings. Denial may limit that feature but does not prevent unrelated service use.

5. Recipients and international transfers

Data may be shared only as needed with cloud hosting, payment, communications, analytics, customer-support and SIM fulfilment providers, professional advisers and authorities. This may involve processing in the United Kingdom, Republic of Korea, United States, Japan or other supplier locations. We use contracts, adequacy decisions or other lawful safeguards where required.

6. Retention

• Account data: until account deletion, then deleted or anonymised unless retention is legally required.
• Contract, payment, refund and supply records: generally 5 years after the transaction.
• Consumer complaint and dispute records: generally 3 years after resolution.
• Security logs and support records: only for the period reasonably necessary for security, support and legal claims.

Different mandatory periods may apply under local law. Retained data is separated and used only for the retention purpose.

7. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent. You may also complain to the UK Information Commissioner’s Office or your local supervisory authority. Use the account deletion page or contact us.

8. Children and security

The service is not directed to children who cannot lawfully enter the relevant transaction. We use access controls, encryption in transit, monitoring, backups and limited staff access, while no internet service can guarantee absolute security.

9. Changes and contact

Material changes will be announced in the service or by an appropriate notice before they take effect. Privacy questions and rights requests: cs@hankatong.app.