Privacy Policy

Effective Date: September 10, 2026

1. Business Information

2. Personal Information We Collect

Depending on the service you use, KoreaUSIM may collect the following categories of personal information.

A. General Order and Customer Information

• Name, email address, and contact information
• Billing information and payment / transaction information
• Shipping or Korean domestic delivery address (where applicable)
• Order details, product and plan information, carrier selection, and pickup selection
• Customer support communications

B. Prepaid SIM / Mobile Activation

For customers purchasing a Korea prepaid SIM or requiring mobile activation and identity verification, the following information may also be collected:

• Full name, date of birth, and nationality
• Passport number and passport scan / copy
• ARC / Residence Card number and ARC / Residence Card information (where applicable)
• Scanned identification information
• Prepaid SIM application form (including handwritten name and handwritten signature)
• Korean address (where required by the applicable carrier)
• Carrier / plan selection
• Other information required by the applicable telecommunications carrier for activation

C. Certain LG U+ Prepaid eSIM Conversion Orders

For certain LG U+ Prepaid eSIM Conversion orders — not all eSIM customers — the following device information may be required:

• Device model, device name, and storage capacity
• EID, IMEI1, and IMEI2
• Device information screenshots

This information is collected only where required for the applicable service and is not collected from all customers.

D. Payment Information

Payments are processed through Shopify or external payment providers. KoreaUSIM does not generally store complete card numbers or full card authentication credentials directly. KoreaUSIM may retain the following transaction-related information:

• Payment status, transaction reference, amount, currency, and payment method
• Refund information

E. Automatically Collected Information

When you visit our website, the following technical information may be collected automatically:

• IP address, browser type, device information, and operating system
• Access logs, pages viewed, and referring pages
• Cookies and similar technologies (see Section 9)

3. Purposes of Processing Personal Information

KoreaUSIM processes personal information for the following purposes:

• Order processing and management
• Prepaid SIM service and eSIM service provision
• Identity verification and mobile carrier activation
• SIM pickup reservation and airport pickup arrangement
• Korean domestic delivery (where applicable)
• eSIM QR code and service information delivery
• Complimentary data service related to prepaid SIM orders
• Prepaid SIM recharge service
• Sending the activated Korean mobile number and activation / installation / usage instructions
• Customer support, cancellation, refund, exchange, and dispute resolution
• Fraud prevention and security
• Legal, regulatory, and carrier compliance
• Website and backend operation

Passport, ARC / Residence Card, handwritten signatures, and device information (including EID and IMEI) are used solely for purposes directly related to service provision, activation, identity verification, and regulatory compliance. This information is not used for advertising or unrelated marketing purposes.

4. Provision of Personal Information to Third Parties

KoreaUSIM does not provide personal information to third parties except in the following circumstances.

For prepaid mobile activation, necessary personal information may be provided to the applicable telecommunications carrier for the purposes of identity verification, mobile activation, service provisioning, account administration, and telecommunications regulatory compliance. Only the information required for these purposes is provided. Currently applicable carriers include:

• SK Telecom (SKT)
• LG U+

KoreaUSIM may also disclose personal information where required by applicable law, court order, or government authority, or in connection with fraud prevention and security.

5. Service Providers and Processing Contractors

KoreaUSIM engages the following service providers to support our operations. Each provider processes personal information only to the extent necessary for the services they perform.

Service Provider	Purpose
Shopify	Online store, checkout, order management, and website hosting
PayPal	Payment processing, refunds, and transaction management
KOMOJU	Payment processing, payment authentication, and transaction management
Supabase	Database, order and operational data storage, and backend functionality
Railway	Backend hosting, API services, and order processing system
NAVER	Email communication and customer support communication

These providers are distinct from telecommunications carriers to whom personal information may be provided as described in Section 4.

6. International Transfer and Processing

Some of the service providers listed above — including Shopify, Supabase, Railway, and payment processors — may use infrastructure located outside the Republic of Korea. The specific countries or regions where data may be stored or processed have not been fully confirmed for all providers.

KoreaUSIM is committed to complying with applicable Korean privacy law with respect to any required disclosures, notifications, or consent procedures relating to international transfers of personal information. This section will be updated as additional information regarding hosting and database regions is confirmed.

7. Retention of Personal Information

KoreaUSIM retains personal information for the period necessary to fulfill the purposes described in this Privacy Policy, subject to the following:

Korean statutory retention periods (Act on Consumer Protection in Electronic Commerce):

• Records relating to advertisements: 6 months
• Records relating to contracts or cancellation of orders: 5 years
• Records relating to payment and supply of goods or services: 5 years
• Records relating to consumer complaints or dispute resolution: 3 years

Activation-related personal information (including passport, ARC / Residence Card, application form, and signatures) is retained only for the period necessary for activation, identity verification, carrier processing, regulatory compliance, and related service support, unless a longer period is required by applicable law or carrier requirements.

When the purpose of processing has been fulfilled and any applicable legal retention period has expired, personal information will be securely deleted or destroyed.

8. Deletion and Destruction of Personal Information

When personal information is no longer required, KoreaUSIM will take appropriate steps to securely delete or destroy the information. Electronic records will be deleted so that they cannot be recovered or reproduced. Physical records will be shredded or incinerated where applicable.

Note that information subject to a statutory retention obligation may not be immediately deleted until the applicable retention period has expired.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to support website functionality, analyze usage, and provide a better browsing experience. Cookies are small data files stored on your device.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. For further information on cookies used by Shopify in connection with our store, please refer to the Shopify Privacy Policy.

10. Security of Personal Information

KoreaUSIM implements reasonable technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security of your personal information.

We recommend that you do not transmit sensitive information through unsecured channels.

11. Rights of Customers

In accordance with applicable Korean law, customers have the right to request:

• Access to personal information held about them
• Correction of inaccurate personal information
• Deletion of personal information
• Suspension of processing of personal information
• Withdrawal of consent where processing is based on consent

To exercise any of these rights, please contact us using the details in Section 14.

Please note that where personal information is subject to a statutory retention obligation or is required for carrier compliance, it may not be immediately deleted upon request.

12. Information Relating to Minors

Our services are intended for adults. KoreaUSIM does not knowingly collect personal information from children under the applicable age of majority. If you believe that a minor has provided personal information to us without appropriate authorization, please contact us so that we can take appropriate steps.

13. Third-Party Websites and Services

Our website may contain links to third-party websites or services. KoreaUSIM is not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party websites you visit.

14. Privacy Inquiries

For any questions, requests, or complaints regarding this Privacy Policy or the processing of your personal information, please contact:

15. Changes to This Privacy Policy

KoreaUSIM may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or business operations. When we make material changes, we will update the Effective Date at the top of this page. We encourage you to review this Privacy Policy periodically.