Privacy Notice
How we handle the personal data you send us through this website.
LEGAL_DRAFT to false in config.php to remove this banner.
This notice applies to THE LUXURY by IOS and to this English-language website only. The Korean site at luxury.ios.co.kr is covered by its own, separate privacy policy.
Who is responsible
The data controller is IOS Co., Ltd. (주식회사 티라), a travel company registered in the Republic of Korea.
| Company | IOS Co., Ltd. (주식회사 티라) |
|---|---|
| Address | 30, Sapyeong-daero 53-gil, Seocho-gu, Seoul, Republic of Korea |
| Business registration | 124-87-57402 |
| Travel business registration | 2020-000022 |
| Privacy officer | Kwang-yong Jeon · +82 2 511 8917 · iostravel@ios.co.kr |
What we collect
We only collect what you type into the enquiry form. We do not operate accounts, take payment, or ask for passport details on this website.
| Data | Source |
|---|---|
| Name, email address, telephone number, company (optional) | Enquiry form |
| Destination, check-in and check-out dates, number of adults, children and infants | Enquiry form |
| The free-text message you write to us | Enquiry form |
| Your consent choices, and the time they were given | Enquiry form |
| Truncated IP address, pages viewed, referring site, device and browser type | Our own analytics — see below |
Why we use it, and on what basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Answering your enquiry and preparing a quotation | Steps taken at your request before entering into a contract — Art. 6(1)(b) |
| Approaching hotels and partners on your behalf | Your consent — the separate third-party checkbox on the form |
| Sending occasional offers and travel news | Your consent — the separate marketing checkbox. You may withdraw it at any time. |
| Understanding how the site is used | Our legitimate interest in maintaining and improving the site — Art. 6(1)(f) |
| Keeping records of enquiries and complaints | Compliance with Korean commercial and consumer-protection law — Art. 6(1)(c) |
Under Korean law we rely on your consent, given when you submit the form.
How long we keep it
We set these periods ourselves and enforce them automatically. Korea removed its blanket one-year rule in September 2023, so each period below is chosen for a reason rather than inherited from a statute.
| Data | Kept for | Counted from |
|---|---|---|
| IP address and browser details attached to an enquiry | 90 days | Submission |
| An enquiry that did not lead to a booking | 24 months | Our last contact with you |
| An enquiry that led to a booking | 5 years | End of travel |
| Records of a complaint or dispute | 3 years | Resolution |
| Marketing consent | Until you withdraw it | — |
Twenty-four months reflects how far ahead this kind of travel is planned — a honeymoon or anniversary enquiry often precedes the trip by a year or more, and we would otherwise lose the context of a conversation you may want to pick up again. The five- and three-year periods are the minimums required of us by Korean commercial and consumer-protection law.
If you ask us not to send marketing, we keep an encrypted one-way fingerprint of your email address after deleting the rest of your record. We cannot read it or write to you with it; it exists only so that a later enquiry cannot accidentally put you back on the list.
Who we share it with
We do not sell personal data. We share it only as set out here.
- Hotels, resorts and partner programmes — your name and stay details, so that a reservation or quotation can be arranged. This happens only if you tick the third-party consent box, and only for the property you asked about.
- Our hosting provider, Cafe24 Corp. (Republic of Korea), which operates the servers this site and its database run on.
- Public authorities, where the law requires it.
Enquiries submitted through this English site are held separately from the systems used by our Korean operations.
International transfers
Our servers are located in the Republic of Korea, so data you send us is stored there.
If you are in the European Economic Area or the United Kingdom, this is a transfer to a third country. Korea holds an adequacy decision from the European Commission, adopted in December 2021 and confirmed on review in July 2026, and adequacy regulations from the United Kingdom in force since December 2022. No additional safeguards such as Standard Contractual Clauses are therefore required for the transfer itself.
Where we approach a hotel outside Korea on your behalf, your details travel to that property's own country. We do this only with your consent, and only to the extent needed to arrange what you asked for.
Analytics and cookies
We use Matomo, installed on our own server. Your browsing data is not sent to any third-party analytics company, and we do not run advertising trackers or share data with ad networks.
Your rights
You may ask us to:
- give you a copy of the data we hold about you;
- correct anything that is wrong or incomplete;
- delete your data, where we have no continuing reason to keep it;
- restrict or object to how we use it;
- send your data to you or another provider in a portable format;
- withdraw consent you have given, at any time, without affecting what we did before.
Write to iostravel@ios.co.kr. We will respond within 30 days, or within one month where the GDPR or UK GDPR applies. There is no charge.
Security
- The site is served over HTTPS, so what you submit is encrypted in transit.
- Access to enquiry records is limited to staff who need it, each with their own account.
- Forms are protected against cross-site request forgery and automated submission.
- If a breach puts your rights at risk, we will notify you and the relevant authority without undue delay.
Complaints
Please contact our privacy officer first — most issues are resolved quickly. You may also complain to a supervisory authority:
- Korea — Personal Information Protection Commission, or the Korea Internet & Security Agency privacy centre on 118 (privacy.kisa.or.kr)
- European Economic Area — the data protection authority of the country where you live or work
- United Kingdom — the Information Commissioner's Office (ico.org.uk)