Privacy Policy

1. What we collect and why

Booking: name, mobile number, email (optional), resident or visitor status, session and party size. Used to confirm your booking, send confirmations, changes, and cancellations, check you in, and answer questions.

Payment: payment ID, amount, and payment and refund times. Card details are handled by Stripe, our payment processor; we never receive them.

Automatically logged: access logs and IP address, used to prevent abuse and fix errors.

2. How long we keep it

We delete data once it is no longer needed, except where Korean law requires us to keep it:

Contract, payment, and delivery records: 5 years

Consumer complaint and dispute records: 3 years

Access logs: 3 months

3. Service providers

Stripe, Inc. and affiliates: card payments and refunds

Google LLC (Google Cloud, Seoul region; Google Workspace): hosting, data storage, and booking emails

If we start sending text messages, we will add that provider here.

4. Transfers outside Korea

To process payment, payment details (amount, booking code, email) are sent to Stripe's servers abroad (including the United States) at checkout and kept under Stripe's privacy policy and applicable law.

Booking emails are sent through Google's mail servers, which may be located outside Korea.

5. Sharing

We do not share your personal data with third parties without your consent or a legal basis.

6. Your rights

You can ask at any time to see, correct, delete, or stop the use of your data. Contact the privacy officer below.

Bookings for children under 14 must be made by a parent or guardian.

7. Security

We use HTTPS, two-step sign-in and access controls for staff accounts, access logging, and restricted database access.

8. Cookies

The booking pages use browser storage only as needed to complete a booking. We do not use advertising or tracking cookies.

9. Privacy officer

Sam Jin, +82 70-4125-0588, contact@waa-gallery.com

10. Changes

We will post changes on this site at least 7 days before they take effect.