Privacy Policy

1. What we collect and why

Booking: name, mobile number, email (optional), resident or visitor status, session and party size. Used to confirm your booking, send confirmations, changes, and cancellations, check you in, and answer questions.

Payment: payment ID, amount, and payment and refund times. Card details are handled by Stripe, our payment processor; we never receive them.

Automatically logged: access logs and IP address, used to prevent abuse and fix errors. We also record which ad or site brought you here, without your IP address or device details.

Reviews (optional): text and photos you post after attending. They are shown publicly on the booking page right away, with only your first initial (for example, K**) and no contact details. Location and other photo metadata are removed before upload.

2. How long we keep it

We delete data once it is no longer needed, except where Korean law requires us to keep it:

Reviews and photos: until you delete them. You can delete your review on your booking page at any time, and its photos are deleted with it.

Contract, payment, and delivery records: 5 years

Consumer complaint and dispute records: 3 years

Access logs: 3 months

3. Service providers

Stripe, Inc. and affiliates: card payments and refunds

Google LLC (Google Cloud, Seoul region; Google Workspace; Google Analytics): hosting, data storage, booking emails, and visit statistics

If we start sending text messages, we will add that provider here.

4. Transfers outside Korea

To process payment, payment details (amount, booking code, email) are sent to Stripe's servers abroad (including the United States) at checkout and kept under Stripe's privacy policy and applicable law.

Booking emails are sent through Google's mail servers, which may be located outside Korea.

Visit statistics (Google Analytics): visit data and cookie identifiers are sent to Google's servers abroad (including the United States) when you visit, and kept for 14 months.

5. Sharing

We do not share your personal data with third parties without your consent or a legal basis.

6. Your rights

You can ask at any time to see, correct, delete, or stop the use of your data. Contact the privacy officer below.

Bookings for children under 14 must be made by a parent or guardian.

7. Security

We use HTTPS, two-step sign-in and access controls for staff accounts, access logging, and restricted database access.

8. Cookies

The booking pages use browser storage only as needed to complete a booking. We also set one first-party cookie, kept for 30 days, to link that referral to your booking.

We use Google Analytics cookies for visit statistics. The pages you view, time spent, device, and approximate location are sent to Google, but never your name or contact details. You can block cookies in your browser or opt out with the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout). We do not use advertising cookies.

9. Privacy officer

Sam Jin, +82 70-4125-0588, contact@cuz-art.com

10. Changes

We will post changes on this site at least 7 days before they take effect.