FedEx Express South Korea – Privacy Notice

Your trust matters to us. That is why we protect your information and use it responsibly, while continuing to deliver the excellent services you expect from FedEx and its operating groups, subsidiaries and divisions (hereafter “FedEx”). At FedEx, we are committed to protecting your privacy and the security of a variety of information related to an identified or identifiable natural person that is recorded electronically or otherwise, excluding anonymized information (hereafter “Personal Data”). FedEx has created this privacy notice (hereafter “Privacy Notice”) to explain how FedEx collects and uses Personal Data.

This Privacy Policy is supplementary to, and to be read together with, the FedEx Global Privacy Policy. 

This Privacy Notice applies to the processing of personal data by FedEx in APAC and MEISA. Where personal data is processed in specific countries/territories, additional local privacy policies / notices may apply. For personal data processed in Korea, please refer to the Korea Privacy Policy set out below.

This Privacy Notice is not a contract and does not create any legal rights or obligations.

Last update: April 2026

When this Privacy Notice mentions “FedEx”, “we”, “us”, or “our”, FedEx is referring to the FedEx entity specified in the paragraph below that is deciding on the purposes and means of the handling of your Personal Data under this Privacy Notice.

When you are using our services in South Korea ("Korea"), your Personal Data is handled by Federal Express Korea LLC and its affiliates. When you are using our services globally, your Personal Data is handled by FedEx Corporation, having its headquarters in Memphis, Tennessee, and/or its affiliates.

Contact Information:

Federal Express Korea LLC

5-6F Hapjeong Office Bldg, 19, Yanghwa-ro, Mapo-gu, Seoul, Korea
Business Registration No. : 101-81-49187
Service Registration No. : 2020-Mapo,Seoul-2891

FedEx Corporation

Attn: Legal Department - Compliance
1000 Ridgeway Loop Road, Ste 500
Memphis, TN 38120
United States of America

For requests about your Personal Data please request via www.fedex.com/dsar. Please note that we may not act on or respond to non-privacy related queries/matters, as determined by us in our discretion. For non-privacy related queries/matters, please contact our Customer Support team.

Overview

This Privacy Notice answers the following questions:

1. Does this Privacy Notice apply to you?

2. What Personal Data does FedEx collect and why?

3. Does FedEx use cookies?

4. Who has access to your Personal Data?

5. How long will FedEx handle your Personal Data?

6. What measures does FedEx take to protect your Personal Data?

7. Where does FedEx store or transfer your Personal Data?

8. What rights can you exercise in relation to your Personal Data?

9. Third-Party Messaging Applications

10. What if you have other questions or complaints?

11. Will there be updates to this Privacy Notice?

1. Does this Privacy Notice apply to you?

This Privacy Notice applies to you if you are a customer of FedEx, a recipient of a package delivered by FedEx, a supplier of FedEx, or if you contact FedEx, for instance, by visiting www.fedex.com including any (sub)pages and mobile apps (hereafter “Websites”), using social media or if you receive emails from FedEx.

Our Websites are for a general audience and not aimed at children. In principle, we do not collect Personal Data from children under the age 14. If you are under the age of 14 and you want to use our services, please rely on a parent or guardian to assist you.

If a child under the age of 14 may have disclosed Personal Data to us, the parent or guardian can contact FedEx via AMEAprivacy@fedex.com, and we will remove Personal Data, if required:

2. What Personal Data does FedEx collect and why?

In the course of its business activities and providing the services, FedEx will need to handle Personal Data. FedEx collects Personal Data when it is provided by the shipper or account holder or by a visitor to our website. If you are the shipper or account holder, then we receive your Personal Data directly from you. Without your Personal Data, we will not be able to provide you with the requested services.

Legal basis for the handling of Personal Data

Please be fully aware that we may rely on the following legal basis to collect and handle your Personal Data. The legal basis may vary depending on the type of information, the intended business activities and services, and/or as otherwise required or permitted by applicable laws.

To the maximum extent permissible under applicable laws, we will rely on the following legal basis where your consent is not required for such handling:

Where handling of Personal Data is necessary for the conclusion or performance of a contract to which the relevant individual is a party; Where the handling of Personal Data is necessary for the performance of statutory duties or obligations;
Where the handling of Personal Data is necessary to respond to public health emergencies, or to protect the life, health and property safety of natural persons in an emergency;
Where Personal Data are processed within a reasonable scope for the purposes of news reporting, public opinion supervision and other acts conducted in public interests;
Where Personal Data voluntarily disclosed by an individual or other Personal Data that have been lawfully disclosed are processed within a reasonable scope in accordance with this Law;
Where there are any other circumstances stipulated by laws or administrative regulations.

Where your consent is required for such us to collect and handle your Personal Data, we will rely on your consent, as may be directly or indirectly provided to us in any manner or form, to the maximum extent permitted by applicable laws. This consent provides us with a legal basis to collect and handle your Personal Data, and you have the right to withdraw your consent at any time. FedEx will stop the further handling of your Personal Data as soon as possible after you notify to us the withdrawal of your consent. However, this does not affect the lawfulness of the handling before consent was withdrawn.

Personal data that you provide to us voluntarily for purpose of using our service

Purpose of Processing	Types of Personal Information	Legal Basis for Processing
Website Registration	Name, email address, phone number, address, postal code, and other necessary information displayed on the registration page	Enter into or perform a contract/consent
Open a FedEx Account	Name, address, payment card information/other payment information, and account information	Enter into or perform a contract/consent
Sign Shipping Agreements and Dispatching Shipments	Name, address, phone number, financial information (including bank account and payment details), order information (including origin, destination, postal code, and shipment details)	Enter into or perform a contract/consent
Fulfill Legal Obligations for Shipment Verification and Security	Identity information (including photos and numbers of ID cards/passports)	Fulfill legal obligations/permitted by applicable law/consent
Register for FedEx Shipping/Clearance Tools	Name, address, email address, and other necessary information displayed on the registration page	Enter into or perform a contract/consent
Track Package Status	Email address and phone number	Enter into or perform a contract/consent
Assist with International Shipping Issues	Email address and related communication records	Enter into or perform a contract/consent
Subscribe to Marketing Communications or Voluntarily Providing Preference Information	Name, email address, phone number, postal code, company, and other necessary information	Consent
Develop and Improve FedEx Products and/or Services, Research and Development (e.g., analyze shipment and service-related information to improve services; analyze personal information for statistical and scientific purposes; provide advertisements, communications, and content on our website and third-party websites that better match your interests)	Preference information, complaints, communication records, and other interaction information	Enter into or perform a contract/consent

Information that we collect indirectly

Purpose of Processing	Types of Personal Information	Legal Basis for Processing
When you are the recipient of a shipment, we collect your relevant information from the shipper/account holder to deliver the shipment to you or issue a commercial invoice.	Name, phone number, email address, address, and postal code	Fulfill legal obligations/permitted by applicable law/consent
When you are the designated recipient of tracking notifications by the shipper/account holder, we collect your relevant information from the shipper/account holder to send you our tracking notifications.	Email address and phone number	Fulfill legal obligations/permitted by applicable law/consent
When you place an order with an online retailer, we collect and process your relevant information from the online retailer to deliver the package to the specified address.	Name, phone number, and address	Fulfill legal obligations/permitted by applicable law/consent
When you are an individual (not an organization), we collect your relevant information to issue a commercial invoice.	Name, phone number, address, and email (if you need an electronic invoice)	Fulfill legal obligations/permitted by applicable law/consent

When FedEx receives Personal Data indirectly, we rely on the provider of the Personal Data for the accuracy of the information and that the provider has the authority to provide that information to FedEx.

Information that we collect automatically （This information may be collected using cookies and similar tracking technology, as explained further under the heading “Does FedEx use cookies” below.）

Purpose of Processing	Types of Personal Information	Legal Basis for Processing
When visiting our website, we may automatically collect certain information from your device to: • Better understand visitors to our website, where they come from, and what content on our website interests them. • Conduct internal analysis to improve the quality and relevance of our website for visitors. • Retain logs to record our website's network activities in accordance with Chinese laws and regulations.	• IP address • Unique device or user identification number • System and browser type • Date and timestamp • Referring website address • Content and pages you access on our website or mobile application • Date, time, and location of the activity • Websites you visit (if you connect to our in-store wireless service) • Clickstream information and device location (if you enable this feature in the mobile application)	• Our legitimate interests in providing a secure, on-demand website • Fulfill legal obligations/permitted by applicable law/consent

Purpose of Processing

Types of Personal Information

Legal Basis for Processing

When visiting our website, we may automatically collect certain information from your device to:

• Better understand visitors to our website, where they come from, and what content on our website interests them.

• Conduct internal analysis to improve the quality and relevance of our website for visitors.

• Retain logs to record our website's network activities in accordance with Chinese laws and regulations.

• IP address

• Unique device or user identification number

• System and browser type

• Date and timestamp

• Referring website address

• Content and pages you access on our website or mobile application

• Date, time, and location of the activity

• Websites you visit (if you connect to our in-store wireless service)

• Clickstream information and device location (if you enable this feature in the mobile application)

• Our legitimate interests in providing a secure, on-demand website

• Fulfill legal obligations/permitted by applicable law/consent

The Sensitive Personal Information that we collect

Types of Sensitive Personal Information	Purpose of Processing	Legal Basis for Processing
Financial information of individual customers, such as payment card information and bank account numbers	• Open a FedEx account • Sign shipping agreements and dispatching shipments	Enter into or perform a contract/consent
Scanned copies of identification documents (including document photos), such as ID cards/passports	Fulfill shipment verification and security obligations	Fulfill legal obligations/permitted by applicable law/consent

Types of Sensitive Personal Information

Purpose of Processing

Legal Basis for Processing

Financial information of individual customers, such as payment card information and bank account numbers

• Open a FedEx account

• Sign shipping agreements and dispatching shipments

Enter into or perform a contract/consent

Scanned copies of identification documents (including document photos), such as ID cards/passports

Fulfill shipment verification and security obligations

Fulfill legal obligations/permitted by applicable law/consent

We will make sure that the handling of your sensitive Personal Data is directly necessary to achieve the specific purposes as described in this Privacy Notice, and our handling of your sensitive Personal Data will be equipped with strict security measures and be conducted in a manner of having the least impact on your personal rights and interests.

3. Does FedEx use cookies?

Yes, FedEx uses cookies and similar technologies on its Websites. Through these cookies, FedEx automatically obtains Personal Data as listed above when you visit our Websites. To learn more about the cookies and similar technologies, please consult our Privacy Policy.

4. Who has access to your Personal Data?

FedEx shares your Personal Data with third parties in the following circumstances:

With its affiliates, operating groups, subsidiaries and divisions, or with third parties if such is necessary for the purposes as listed above. If appropriate, FedEx will require third parties to conduct activities in a manner consistent with FedEx policies and guidelines in relation to data protection.
With third-party data processors, i.e., parties such as vendors or service providers handling Personal Data on our behalf. In such cases, these third parties only use your Personal Data for the purposes described above and only in accordance with our instructions. FedEx will only use processors which provide sufficient guarantees to implement appropriate technical and organizational measures and ensure the protection of the rights of data subjects.
With its employees if and to the extent necessary for the performance of their tasks. In such a case, access will be granted only if and to the extent necessary for the purposes described above and only if the employee is bound by confidentiality.
If and when required to do so or where permissible by law, court order, or other legal process, for example, with law enforcement agencies or other governmental agencies, to establish or exercise our legal rights (including regarding collection of unpaid debts, credit reporting and rating functions, and/or protecting the business interests of FedEx, its business partners and/or customers), and/or in connection with a corporate transaction, such as a divesture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.
With a buyer (and its agents and advisers) in connection with any purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your Personal Data only for the purposes disclosed in this Privacy Notice.
In the event of a merger, reorganization, transfer of assets, or any other change of control involving FedEx, FedEx will provide prior notice in accordance with applicable laws. Under such circumstances, all or part of the Personal Data collected may be transferred to the relevant successor entity as permitted by law.

5. How long will FedEx process your Personal Data?

We will retain your Personal Data no longer than necessary for the purpose(s) for which we process your Personal Data or until your Personal Data is deleted (see more below on how to request). After the retention period we will delete or anonymize your Personal Data, unless we need to retain certain of your Personal Data for another purpose. We will only do so if we have a legal ground to retain your Personal Data. We will also ensure that Personal Data are only accessible for that other purpose.

For example, we need your Personal Data to perform the customs clearance process. Customs laws dictate that we have to retain/store - certain of - those Personal Data. Generally, this period may be 3 years, depending on the applicable laws and regulations. In those cases, we will only store the Personal Data necessary to meet our legal obligations.

Please contact us using the contact details above if you have questions about specific retention periods.

6. What measures does FedEx take to protect your Personal Data?

FedEx maintains appropriate technical and organizational measures to protect your Personal Data against accidental or unlawful handling, including protecting your Personal Data against unauthorized access, maintaining the confidentiality, integrity and availability of your Personal data, and training personnel on information security requirements.

However, no security measure can guarantee against compromise. You also have an important role in protecting your Personal Data. You should not share your username and password with anyone, and you should not re-use passwords across more than one website. If you have a reason to believe that your Personal Data has been compromised, please contact us as detailed above.

7. Where does FedEx store or transfer your Personal Data?

Depending on the services you use, your Personal Data may be stored or transferred within Korea or to other countries.

We will only transfer your Personal Data overseas for the purposes of fulfilling our contract with you or for other legitimate processing reasons (see below for more information on the types of data that will be transferred overseas), and we will do so in accordance with the applicable laws and regulations.

Due to the nature of international express service, FedEx need to transfer your Personal Data (including name, shipping address, your country, cell phone number, shipment information, clearance information, waybill information, fee information and delivery information) to the system of FedEx Corporation Ltd. located in Memphis, the U.S. (the contact information is shown above), and then transfer the information to its affiliates, operating groups, subsidiaries and divisions located outside of Korea and may need to provide the relevant offshore colleagues with your email address and communication record to perform the agreement with you or for the purposes specified under "what Personal Data does FedEx collect and why". Prior to cross-border transfer, we will complete the appropriate procedures in accordance with the requirements of the relevant data protection laws and regulations. In any case where we transfer Personal Data, in accordance with applicable laws, we will ensure that your Personal Data is protected to the same degree that is adequate within the jurisdiction. If you have any concerns or complaints regarding how FedEx handles personal information, please send an email to: AMEAprivacy@fedex.com.

8. What rights can you exercise in relation to your Personal Data?

In accordance with the Personal Information Protection Act, you are entitled to exercise the following rights in respect of your Personal Data. Note that in some cases we are not required to completely comply with your request, as such rights may be conditional under applicable law:

Right of access and copies

You are entitled to a copy of the Personal Data we hold about you and to learn details about how we use it. Your Personal Data will usually be provided to you digitally. You are also entitled to request the provision of copies of your Personal Data. We may require you to prove your identity before providing the requested information.

Right to rectification

We take reasonable steps to ensure that the information we hold about you is accurate and complete. However, if you believe this is not the case, you have the right to request that any incomplete or inaccurate Personal Data that we process about you is amended.

Right to deletion

You have the right to ask us to delete your Personal Data, for example where the Personal Data we collected is no longer necessary for the original purpose, where Personal Data has become obsolete or where you withdraw your consent (if we are handling your Personal Data based on consent).

Right to restriction of handling

You may be entitled to ask us to (temporarily) stop the collection, processing or use of your Personal Data, for example where you think that the Personal Data we hold about you may be inaccurate or where you think that we no longer need to use your Personal Data.

Right to data transferability

You may have the right to ask that we transfer Personal Data that you have provided to us to a third party of your choice. This right can only be exercised when you have provided the Personal Data to us, and when we are handling that data by automated means on the basis of your consent or in order to perform our obligations under a contract with you.

Right to object

You may have the right to object to handling which is based on our legitimate interests. In case of the handling of Personal Data for marketing purposes, you have the right to object at any time. When you notify us to stop using your Personal Data for marketing purposes, FedEx will immediately cease to use your Personal Data.

For other purposes based on our legitimate interests, we will no longer process the Personal Data on that basis when you file an objection based on your grounds relating to your particular situation, unless we have a compelling legitimate ground for the handling. Note, however, that we may not be able to provide certain services or benefits if we are unable to process the necessary Personal Data for that purpose.

Rights relating to automated decision-making

You may have the right not to be subjected to automated decision-making, including profiling, which produces legal effect for you or has a similar significant effect. If you believe you have been subject to an automated decision and do not agree with the outcome, you can contact us using the details below and ask us to review the decision.

Right to withdraw consent

We may ask for your consent to process your Personal Data in specific cases. When we do this, you have the right to withdraw your consent at any time. FedEx will stop the further handling as soon as possible after the withdrawal of your consent. However, this does not affect the lawfulness of the handling before consent was withdrawn.

If you wish to exercise any of the rights described above, you may contact us using the contact details provided to submit your request. We will assist you and respond within the time period required by applicable law. Please note that if you request the deletion of your Personal Data, we may no longer be able to provide you with certain services, features, or support that rely on such data, and your access to or use of the relevant services may be restricted or terminated as a result.

To submit your requests, please visit www.fedex.com/dsar. Please note that we may not act on or respond to non-privacy related queries/matters, as determined by us in our discretion. For non-privacy related queries/matters, please contact our Customer Support team.

Additionally, if you need to deregister your FedEx account, please contact our Customer Support team: https://www.fedex.com/en-kr/customer-support.html

We would not be able to respond to your request in the following circumstances:

If the information requested is related to our performance of legal obligations;

If the information requested is directly related to public interest, public health and safety;

If the information requested is directly related to criminal investigation, prosecution, trial and execution of judgment;

If we have reasonable evidence to prove that you have malicious intent or intends to abuse your data subject’s rights;

Response to the data subject request will lead to the infringement of lawful right and interest of the data subject or other individuals, organizations; and/or

If the information requested is related to trade secret.

You can manage your accounts with FedEx through the following.

Emails: For your email preferences, visit the Email Preference Center.

Cookies and other technologies: To exercise choices you have for certain cookies, you can generally review your Internet browser settings, typically under the sections "Help" or "Internet Options". If you disable or delete certain cookies in your Internet browser settings, you might not be able to access or use important functions or features of the Websites, and you may be required to re-enter your log-in details.

9. Third-Party Messaging Applications

FedEx may utilize third-party messaging applications (“Messaging Applications”) in accordance with applicable laws. The availability of these Messaging Applications and their features or functionalities vary by country/territory. Certain Messaging Applications may require additional enrollments or agreements and may be subject to additional terms and conditions.

FedEx does not monitor nor have any direct control over any and all third-party Messaging Applications or their activities and accordingly any access to any and all third-party Messaging Applications is provided on an 'as is' basis and without any warranties, representations or conditions of any kind. Your use of any and all third-party Messaging Applications is at your own risk and subject to the applicable terms and conditions and privacy policies of the third-party Messaging Applications. You should ensure you are familiar with, and approve, the terms on which such services are provided by the Messaging Applications.

For certain LINE-specific information, please refer to: https://www.fedex.com/en-kr/terms-of-use/line-app-notification.html.

10. What if you have other questions or complaints?

Questions or complaints regarding the handling of your Personal Data can be directed to FedEx by using the contact information as provided at the top of this Privacy Notice.

11. Will there be updates to this Privacy Notice?

FedEx may update this Privacy Notice from time to time. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make.

You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.

For Personal Data processed in Korea, please refer to the Korea Privacy Policy below.

Korea Privacy Policy

(Concerning Customers’ Personal Information)

1. General provisions
2. Principles and methods of collecting personal information
3. Collection items and processing purposes of personal information
4. Personal information processing and retention period
5. Destruction of personal information
6. Provision of personal information to third parties (domestic)
7. Delegation status of personal information processing (domestic)
8. Overseas transfer of collected personal information (delegation of personal information processing to a foreign third party)

9. Customer rights and obligations and how to exercise them
10. Measures to ensure the safety of personal information
11. Links to other websites
12. Installation, Operation, and Refusal of Devices Automatically Collecting Personal Information
13. Matters Regarding the Collection, Use, and Refusal of Behavioral Information
14. Additional Use and Provision
15. Remedies for infringement of rights
16. Personal information protection and customer complaint handling department
17. Policy on the Operation and Management of Fixed Video Information Processing Devices
18. Amendments to this Privacy Policy

1. General provisions

Federal Express Korea LLC (Federal Express Korea Limited) (the “Company”) actively protect the personal information of customers (“Customers”) and comply with all relevant laws, including the Personal Information Protection Act etc. The Company's Privacy Policy contains the following information.

2. Principles and methods of collecting personal information

(1) In order to provide services, the Company collects personal information necessary only for the following purposes and only to the extent permitted by law, through the website, phone, fax, email, written form, consultation, face-to-face application, or receipt from delegation companies. The items of personal information collected and the purpose of collection and use are set forth in Section 3 below:

(2) In the event the purpose of processing personal information changes, we will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

(3) You have the right to refuse consent to the collection and use of personal information, and there is no disadvantage if you refuse the consent. However, if you refuse the consent to the mandatory consent items, you may not be able to use the service, or there may be restrictions on the provision of services that the Company offers, depending on the purpose of service use.

3. Collection items and processing purposes of personal information

The items of personal information collected by the Company and the purpose of use are as follows:

(1) Provision of Service

A. Customer registration

Items to be collected - Individual Customers
- [Mandatory]: contact person name (Korean, English), email, phone number (home/company, mobile phone), address (city, province, country, zip code)(“address”) (Korean, English), postal code, credit card information (card company name, card type, card number, expiration date), FedEx.com, TNT.com User ID (“User ID”), Customer account number
- [Optional]: Company fax number

Items to be collected – Corporate Customers
- [Mandatory]: name of the person in charge (Korean, English), company email, company name (Korean, English), business registration number, phone number (company, mobile phone), CEO name, company address (Korean, English), postal code, credit card information (card company name, card type, card number, expiration date);(for those business customers who pay for the service with credit card), User ID, Customer account number
- [Optional]: Company fax number
Purpose of collection and use: user identification, age verification, Customer account number and User ID creation, service provision, notice related to shipment delivery and transportation tracking information, proof of delivery, etc.

B. Express shipment delivery/reservation

Items to be collected - Individual Customers
- [Mandatory]: Customer account number, Air Waybill number, name (sender, recipient), phone number (home/company, mobile phone) address, email, destination country
Items to be collected – Corporate Customers
- [Mandatory]: Customer number, Air Waybill number, name (sender, recipient), phone number (company, mobile phone) email, address, destination country
Purpose of collection and use: user identification, cargo delivery, provision of additional services, payment and settlement of charges, billing, debt collection, notice related to shipment delivery /transportation tracking information, proof of delivery .

C. Shipping and transportation information

Items to be collected - Individual Customers
- [Mandatory]: Customer account number, Air Waybill number, name (consultation client), name (sender, recipient), bill number, phone number (home/company, mobile phone), email, address
Items to be collected – Corporate Customers
- [Mandatory]: Customer account number, company name, Air Waybill number, name (consultation client), name (sender, recipient), bill number, phone number (company, mobile phone), email, address
Purpose of collection and use: user identification, express shipment (import/export) reservation and notice related to delivery, transportation and delivery of express shipment, quotes, costs (fare, customs duty, tax, customs clearance fee), delivery of settlement notices

D. Additional transportation (quick) service (when requested by the user)

Items to be collected [Mandatory]: Air Waybill number, name (recipient), phone number (home/company, mobile phone) address
Purpose of collection and use: user identification, provision of shipment transportation service (by quick service), delivery of notices.

E. Customs clearance (import customs clearance)

Items to be collected - Individual Customers
- [Mandatory]: Personal customs clearance code or unique identification information (passport number or foreigner registration number) or date of birth (list clearance), name (recipient), address, mobile phone number, email, bank account information for a tax refund in case of cancellation (account holder, bank, account number)
Items to be collected – Corporate Customers
- [Mandatory]: busine customs clearance code, business registration number, name (recipient), address, mobile phone number, email, bank account information for a tax refund in case of cancellation (account holder, bank, account number)
Purpose of collection and use: user identification, import shipment customs clearance, shipment delivery, customs payment, tax refund processing in case of refund or cancellation, delivery of notices.

F. Customs clearance (export customs clearance)

Items to be collected [Mandatory]: name (sender, recipient), phone number (home/company, mobile phone), address, email, recipient passport number or tax number (if necessary for local customs import clearance procedures)
Purpose of collection and use: customer identification, export shipment customs clearance, cargo delivery, cargo accident handling and compensation, delivery of notices

G. Transportation charge, additional service charge

Items to be collected [Mandatory]: name (sender), Customer account number, Air Waybill number, address, email, phone number(home/company, mobile phone), account information for payment/cancellation/refund (credit card information, bank account information)
Purpose of collection and use: customer identification, information and notification for fare and fee payment/cancellation/refund, issuance of bills, cash receipts, and tax invoices, credit information inquiry (inquiry of Customer default information to credit inquiry companies or credit information collection agencies in relation to maintaining the establishment of commercial transactions according to service provision)

H. Cash receipts

Items to be collected [Mandatory]: Customer account number, Air Waybill number, name or company name, email, mobile phone, business registration number
Items to be collected [Optional]: phone number(home/company)
Purpose of collection and use: issuance of transaction evidence

I. Tax bill

Items to be collected - Individual Customers
- [Mandatory]: Customer account number, Air Waybill number or invoice number, email, national registration number (the national registration number is collected as mandated by Section 32(1) of Value-Added Tax Act)
- [Optional]: name, address, phone number (home/company, mobile phone)
Items to be collected – Corporate Customers
- [Mandatory]: Customer Account number, company name, business registration number, Air Waybill number or invoice number, email
- [Optional]: company name, name of CEO, name of a person in charge, phone number (company, mobile phone), address, business category and item
Purpose of collection and use: Imposition, reduction and collection of various taxes (such as value-added tax) and issuance of transaction evidence.

J. Accident handling

Items to be collected [Mandatory]: Customer account number, name (consultation client), Air Waybill number, name (sender, recipient), phone number (home/company, mobile phone), email, address, bank account information (account holder, bank name, bank account number)
Purpose of collection and use: user identification, shipment claim handling, checking transaction and delivery information, contact for fact-checking, fee payment/cancellation/refund processing, information on processing details

K. Customer inquiry (general consultation)

Items to be collected - Individual Customers
- [Mandatory]: name (Customer), mobile phone number
- [Optional]: Customer account number, phone number (home/company), address, email, country (shipment destination)
Items to be collected – Corporate Customers
- [Mandatory]: company name, name (sender, recipient), phone number (company, mobile phone), address, email, country (shipment destination)
Purpose of collection and use: user identification, shipment tracking information, guidance on processing quotes and consultations.

L. FedEx Customer Voice

Items to be collected
- [Mandatory]: name, email, phone number (home/company, mobile phone), country, company name, postal code, Air Waybill number type and content of inquiry
Purpose of collection and use: identification of the Customer Voice user, handling of complaints, information on processing details

(2) Other

A. Participation in seminars and events

Items to be collected
- [Mandatory]: name, email, mobile phone number
- [Optional]: Customer account number, address, business registration number, phone number (home/office), fax number
Purpose of collection and use: invitations to seminars and events, My FedEx Rewards (MFR) promotion

B. Sending FedEx newsletters

Items to be collected
- [Mandatory]: email
- [Optional]: mobile phone number
Purpose of collection and use: notice and announcement related to service information, reception of advertisements for commercial purposes, provision of company news

C. Sending and managing rewards

Items to be collected [Mandatory]: Customer account number, name (customer), mobile phone number, email, address
Purpose of collection and use: event reward delivery.

D. Records automatically created during service use

Items to be collected
- [Mandatory]: service use time, service use record, fraudulent use record, login information (IP address)
- [Optional]: cookies
Purpose of collection and use: preservation of service use records, website analysis, statistical uses, usage information analysis, marketing, marketing research.

E. Items to be collected: Items stated in paragraph 1, paragraphs (2)(A), (2)(B), and 2(C) above

Purpose of collection and use: Various events using phone, SMS, email, and mail, provision of product information, provision of service-related information and company news, invitations or ticket issuance related to events organized or sponsored by the company, provision of information on other useful services, conducting marketing-related events, market research, and consulting.

4. Personal information processing and retention period

(1) Unless the Company has an obligation to preserve your personal information in accordance with relevant laws and regulations, each collected item in paragraphs 3.-(1) and 3.-(2) will be retained until you choose to withdraw your membership. However, information related to reservations and inquiries will be kept for a period of 3 years from the completion of the reservation or the processing of the inquiry, while automatically generated records will be retained and used for 2 years from their date of collection.

(2) On the other hand, if it is necessary to preserve personal information in accordance with relevant laws and regulations, such as the Customs Act, Framework Act on National Taxes, Commercial Act, Protection of Communications Secrets Act, the Act on Consumer Protection in Electronic Commerce, etc., and the Credit Information Use and Protection Act, the Company retains customer information for the period set by the relevant laws and regulations, in principle. In this case, the Company uses the information only for the purpose of preservation. The grounds for preservation, the items to be preserved, and the preservation period are as follows:

Grounds for preservation	Items to be preserved	Preservation period
Commercial Act Article 33	Commercial ledgers and material documents and slips related to business	10 years – material documents / 5 years - slips
Framework Act on National taxes Article 85-3(1) , Corporate Tax Act Article 112, Value- Added Tax Act Article 71(3).	Ledgers, tax invoices or receipts, and supporting documents related to transactions	5 years
Customs Act Article 12, Enforcement Decree Article 3	Import declaration certificate, contracts related to import transactions or equivalent documents, documents concerning the determination of the price of imported goods, and contracts or equivalent documents related to transactions involving intellectual property rights as referred to in any subparagraph of Article 235(1) of the Customs Act — applicable to express import/export clearance	5 years
	Export declaration certificate, return declaration certificate, documents concerning the determination of the price of export or returned goods, and contracts or equivalent documents related to export or return transactions;	3 years
	documents related to bonded cargo entry/exit, documents concerning the cargo manifest, and documents related to bonded transportation.	2 years
Act on Consumer Protection in Electronic Commerce Article 6. Enforcement Decree Article 6,	Records on contract or subscription withdrawal, etc.	5 years
	Records on payment and supply of goods, etc.	5 years
	Records on consumer complaints or dispute handling	3 years
	Records on display or advertising	6 months
Credit Information Use and Protection Act Articles 20(2) and 37	Records on the collection/processing and use of credit information	3 years
Protection of Communications Secrets Act Article 15(2)	Service use records, login information (IP address)	3 months
Act on Promotion of Information and Communications Network Utilization and Information Protection Article 50 and Enforcement Decree 62-3	The fact of consent to receive advertisements for commercial purposes and the date of consent	When membership is withdrawn or consent is withdrawn

5. Destruction of personal information

(1) The Company shall destroy the personal information without delay when the personal information becomes unnecessary, such as the expiration of the personal information retention period and the achievement of the purpose of processing.

(2) When destroying personal information, the company shall take measures to prevent it from being restored or reproduced, through economically reasonable and technically feasible methods, as follows:

Electronic files in which personal information is recorded must be permanently deleted using irreversible technical methods.
In addition, in the case of records, printed materials, written materials, and other recording media, they should be shredded or incinerated.

(3) The Company selects the personal information that requires destruction and destroys the personal information with the approval of the company’s personal information protection manager. If the processing/retention period of personal information has expired, but personal information is kept for reasons such as those in Paragraph 4, Subparagraph 1 above, the personal information and personal information files should be stored and managed separately from other personal information to the extent technically possible.

6. Provision of personal information to third parties (domestic)

The Company may provide all or part of the following customer information to third parties in the course of transactions with the Customer. 

In such cases, personal information may be provided only with the data subject’s consent pursuant to Articles 17 and 18 of the Personal Information Protection Act or when otherwise specifically permitted by applicable laws.

However, where the provision of personal information to a third party is permitted without the data subject’s consent under applicable laws (e.g., for tax assessment or investigative purposes), such information may be provided in accordance with the procedures and methods prescribed by law. For details regarding the provision of personal information to third parties located overseas, please refer to Article 8.

Relevant law

Recipient
(contact information)

Purpose of using the personal information of the recipient

Items of personal information provided

Personal information retention and use period of the recipient

Article 17(1)(ii) of the Personal Information Protection Act, Article 32(1) of the Value-Added Tax Act, Article 85-3 of the Framework Act on National Taxes, and Article 121 of the Corporate Tax Act

National Tax Service (126)

Imposition, reduction, and collection of various taxes, such as value-added tax

(For both corporate customers and individual customers) the tracking number or shipment bill number, name, e-mail address, phone number (home/company, mobile phone)

(Individual customer) Resident registration number (The resident registration number is collected and used only when necessary pursuant to the law. Value-added Tax Act Article 32 Paragraph 1))

(Corporate customers) Name of representative or business, business registration number, business type, category, item

Until the legal retention period

Article 17(1)(ii) of the Personal Information Protection Act and Article 241 of the Customs Act

Korea Customs Service (1577-8577)

Customs charge and collection, and cargo management

Personal or corporate customs clearance code (however, if there is no customs clearance or it has not been submitted, an alien registration number or passport number is provided in lieu pursuant to paragraph 4), date of birth, name (recipient), address, phone number(home/company, mobile phone), e-mail, bank account information in case of a duty drawback when there is a breach of contract (account holder name, bank name, account number)

Same as above

7. Delegation status of personal information processing (domestic)

In order to provide smooth and efficient service, personal information processing tasks are delegated as follows: The current delegation status of the processing of personal information for persons located abroad is as in Paragraph 8.

(1) Delegation of processing of general personal information

Scope of Entrusted Processing	Entrusted Service Provider (Processor)	Entrustment Period	Sub-processor	Scope of Sub-processing
Customs clearance services	Star Joint Customs Brokers	Until termination of the entrustment agreement	Ready Korea; Login Networks	Maintenance of import/export declaration program
Cargo transportation services	Wooil Joint Customs Brokers	Until termination of the entrustment agreement	Ready Korea; Login Networks	Maintenance of import/export declaration program
	J&L Logistics	Until termination of the entrustment agreement	Not applicable	Not applicable
	H Logistics	Until termination of the entrustment agreement	Move Logistics Co., Ltd.	Import/export cargo transportation
	Transam	Until termination of the entrustment agreement	Gongdan Joint Freight; Yes Quick Service; Nationwide 24-Hour Call Freight	Import/export cargo transportation
	Lotte Global Logistics	Until termination of the entrustment agreement	World Hub Logistics Co., Ltd.	Import/export cargo transportation
	GoGoVan Korea	Until termination of the entrustment agreement	Not applicable	Not applicable
	Deoksu Enterprise	Until termination of the entrustment agreement	Not applicable	Not applicable
	Shina Air	Until termination of the entrustment agreement	Not applicable	Not applicable
Wooden packaging	Hyundai Export Packaging	Until termination of the entrustment agreement	Not applicable	Not applicable
Wooden packaging	Century Export Packaging	Until termination of the entrustment agreement	Not applicable	Not applicable

(2) Delegation for marketing purposes

Scope of Entrusted Processing	Entrusted Service Provider (Processor)	Entrustment Period	Sub-processor	Scope of Sub-processing
Direct mail (DM)/email DM management	Anyffice Ltd.	Until the end of the delegation contract	Not applicable	Not applicable
Marketing-related event management	Humming IMC Co., Ltd., KODMA Inc.	Until the end of the delegation contract	Not applicable	Not applicable
Mobile message delivery service	SureM, Happy Talk	Until the end of the delegation contract	Not applicable	Not applicable

(3) Management and supervision of trustee

In accordance with Article 26 of the Personal Information Protection Act, when concluding a delegation contract, the Company specifies the prohibition of the processing of personal information for purposes other than for delegated services, technical and administrative protection measures, restrictions on re-delegation, management and supervision of the trustee, and matters related to liability such as compensation for damages, etc. in a document such as a contract, and supervises whether the trustee handles personal information safely. When concluding the delegation contract with the trustee, the Company will make reasonable efforts to ensure that the trustee complies with laws and regulations related to personal information protection in the contract.

8. Overseas transfer of collected personal information (delegation of personal information processing to a foreign third party)

The Company provides and entrusts the processing of personal information collected from customers to overseas recipients as set forth below, in accordance with Article 28-8(1)(i) (data subject’s consent) and (iii) (outsourcing for contract performance and storage) of the Personal Information Protection Act.

In addition, pursuant to Article 28-8(2) of the Personal Information Protection Act, the following information is provided regarding such overseas transfer.

The Company may provide personal information to overseas third parties as described in Paragraph (1) below only when necessary, such as overseas delivery and customer management.

In addition, the Company may delegate the processing of the Customer's personal information to an external professional company as described in Paragraph (2) below only when necessary, such as providing company services, and promotion and marketing. The trustee entrusted with the processing of personal information shall manage the information according to the purpose of delegation. If the contents of the delegated works or the trustee are changed, the change will be notified in a timely manner through this Privacy Policy or individually notified by email, written notice, telephone, SMS, etc.

(1) Provision of personal information to third parties (overseas)

Recipient (contact information): Federal Express Corporation headquarters and affiliates in each country (https://www.fedex.com/en-us/trust-center.html) (dataprivacy@fedex.com)

Country where the recipient is located: US ( 942 South Shady Grove Road, Memphis, Tennessee 38120,US) For affiliates in other countries and contact point, please check ((https://www.fedex.com/global/choose-location.html?location=home for a list of recipients, countries, and contact information)

Purpose of using the personal information of recipients: overseas delivery and customer management

Items of personal information to be transferred: name (Korean, English), company name, phone number (home/company, mobile phone), fax number, address, Customer account number, business registration number, invoice/Air Waybill number (including related information), email, credit card information (card company name, card type, card number, expiry date, installment information), bank account number, User ID, name of CEO, (Korean, English)

Timing and method of transfer of personal information: if necessary, from time to time through an information and communication network

Retention and use period of personal information of recipients: Up to 3 years from the last use of the service (when delivery is completed in the case of delivery information)

(2) Delegation of the processing of personal information (overseas)

The Company re-entrusts the following personal information processing tasks to external third-party companies through the Federal Express Corporation headquarters and affiliates in each country. If there are changes to the subcontracted trustee or the details of the re-entrusted work, we will notify you through this processing policy.

All or part of the personal information collected by the Company may be transferred to overseas affiliates or overseas trustee listed below for delegation management in order to provide services and enhance customer convenience. In accordance with Article 26 of the Personal Information Protection Act, when concluding the delegation contract, the Company specifies the prohibition of the processing of personal information for purposes other than for delegated works, technical and administrative protection measures, restrictions on re-delegation, management, and supervision of the trustees, and matters related to liability, such as compensation for damages, etc. in a document such as a contract, and supervises whether the trustee manages the personal information safely. When concluding the delegation contract with the trustees, the Company will make reasonable efforts to ensure that the trustees complies with laws and regulations related to personal information protection in the contract.

Trustee (contact information): Federal Express Corporation headquarters and affiliates in each country (https://www.fedex.com/en-us/trust-center.html) (dataprivacy@fedex.com)

Country where the trustee is located: US (942 South Shady Grove Road, Memphis, Tennessee 38120,US). For affiliates in other countries and contact point, please check ((https://www.fedex.com/global/choose-location.html?location=home for a list of recipients, countries, and contact information)

Purpose of using the personal information: Complaint handling, inquiry handling, fee payment (including invoices and bills), and processing of customer numbers (for accounting and billing purposes), management of marketing and related events, and market research

Timing and method of transfer of personal information: if necessary, from time to time through an information and communication network

Retention and use period of personal information of recipients: until termination of delegation contract

Subcontracted trustee (Contact): CapGemini (dpocapgemini.global@capgemini.com)

Countries where the subcontracted trustee is located:

China (28F, SML Center, No. 610, Xujiahui Road, Shanghai 200025, China)
India (No. 14, Rajiv Gandhi Infotech Park, Hinjawadi Phase-III, MIDC-SEZ, Village Man, Taluka Mulshi, Pune-411 057, Maharashtra, India)

Delegated works: complaint handling, inquiry handling, fee payment (including invoices and bills)

Purpose of use by the person to whom personal information is transferred: performance of delegated works

Items of personal information to be transferred: name (Korean, English), company name, phone number (home/company, mobile phone), fax number, address, postal code, Customer account number, business registration number, invoice/Air Waybill number(including related information),, email address, card information (payment amount, credit card company, credit card type, credit card number, expiry date, installment information).

Timing and method of transfer of personal information: if necessary, from time to time through an information and communication network

Retention and use period of personal information of transferee: until termination of redelegation contract

Subcontracted trustee (contact): Accenture (dataprivacyofficer@accenture.com)

Countries where the subcontracted trustee is located:

China (21F West Tower, World Financial Center, No.1 East 3rd Ring Middle Road, Chaoyang District, Beijing, 100020, China)
India (Prestige Technopolis, 1/8, Dr.MH Maregowda Road, Audugodi, Bengaluru, Karnataka, 560029, India)

Delegated works: processing of Customer numbers (for accounting and billing purposes)

Purpose of use by the person to whom personal information is transferred: performance of delegated works

Items of personal information to be transferred: name (Korean, English), company name, phone number (home/company, mobile phone), fax number (company, home), address, bank account number, User ID, Customer account number, business registration number, name of CEO, name of a person in charge (Korean, English), fax number, email address

Timing and method of transfer of personal information: if necessary, from time to time through an information and communication network

Retention and use period of personal information of transferee: until termination of redelegation contract

Subcontracted trustee (contact): Epsilon Data Management, LLC (https://www.epsilon.com/us/consumer-information)

Countries where the subcontracted trustee is located: US (4401 Regent Boulevard, Irving, Texas 75063-2404, US)

Delegated work: management of marketing-related events

Purpose of use by the person to whom personal information is transferred: performance of delegated works

Items of personal information to be transferred: Name(Korean, English), company name, phone number(home/company, mobile phone), address, email address, Customer account number

Timing and method of transfer of personal information: if necessary, from time to time through an information and communication network

Retention and use period of personal information of transferee: until termination of redelegation contract

Subcontracted trustee (contact): Salesforce.com Inc. (dszola@salesforce.com)

Countries where the subcontracted trustee is located: US (Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, US)

Delegated work: management of marketing-related events and CE customer consultation management

Purpose of use by the person to whom personal information is transferred: performance of delegated works

Items of personal information to be transferred: Name(Korean, English), company name, phone number(home/company, mobile phone), address, email address, Customer account number

Timing and method of transfer of personal information: if necessary, from time to time through an information and communication network

Retention and use period of personal information of transferee: until termination of redelegation contract

Subcontracted trustee (contact): Carlton One Engagement Corporation (privacy@carltonone.com)

Countries where the subcontracted trustee is located: Canada (60 Columbia Way, 9th Floor, Markham, ON L3R 0C9, Canada))

Delegated work: management of marketing-related events

Purpose of use by the person to whom personal information is transferred: performance of delegated works

Items of personal information to be transferred: Name(Korean, English), company name, phone number(home/company, mobile phone), address, email address, Customer account number

Timing and method of transfer of personal information: if necessary, from time to time through an information and communication network

Retention and use period of personal information of transferee: until termination of redelegation contract

Subcontracted trustee (contact): Publicis Worldwide (Hong Kong) Limited trading as Epsilon Hong Kong (DPOfficer@epsilon.com)

Countries where the subcontracted trustee is located: Hong Kong (Suites 3301-4, 33rd Floor, AIA Kowloon Tower, 100 How Ming Street, Kwun Tong, Kowloon, Hong Kong SAR China)

Delegated work: management of marketing-related events

Purpose of use by the person to whom personal information is transferred: performance of delegated works

Items of personal information to be transferred: Name(Korean, English), company name, phone number(home/company, mobile phone), address, email address, Customer account number

Timing and method of transfer of personal information: if necessary, from time to time through an information and communication network

Retention and use period of personal information of transferee: until termination of redelegation contract

You may refuse the provision of general personal information as stated above to oversee third party. In case you refuse to agree, you may contact our customer service center (02-3496-7777). However, in case you refuge to agree, we may not be able to conclude or maintain a contract and receive the benefits provided by the Company.

9. Customer rights and obligations and how to exercise them

(1) As a subject of information, a Customer may request (i) access to their personal information, (ii) correction or deletion of their personal information, and (iii) suspension of processing of their personal information. The legal representative of a child under the age of 14 may make the above request on behalf of the child.

(2) The exercise of rights can be done by a Customer in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, through written communication, email, facsimile (FAX), and the company will promptly take action on this.

(3) The exercise of rights can also be carried out through a legal representative of a Customer or a delegated person. In this case, you must submit a power of attorney in accordance with the format in Attachment 11 of the Enforcement Rule on the Methods of Personal Information Processing.

(4) Requests for viewing personal information and requesting a halt to processing may be limited in accordance with Article 35, Paragraph 4 and Article 37, Paragraph 2 of the Personal Information Protection Act.

(5) Requests for correction and deletion of personal information may not be possible when such information is specified as subject to collection by other laws.

(6) When receiving the above requests, the Company verifies whether the request was made by the Customer themselves or their legitimate representative. The Company may reject the request if there is a reason prescribed by law or a legitimate reason equivalent thereto.

10. Measures to ensure the safety of personal information

(1) Administrative measures to protect personal information

(a) The Company appoints a Chief Privacy Officer (CPO) for the lawful processing of personal information, and establishes and implements an internal management plan for this purpose.

(b) The Company establishes and implements a personal information protection training plan for its employees and trustees who directly process personal information.

(c) The Company conducts regular self-audits to check the protection of personal information according to the internal management plan.

(2) Technical measures to protect personal information

(a) The Company controls access to personal information, and restricts and manages access rights.

(b) The Company records the management of access rights to personal information and keeps the records for a certain period of time.

(c) The Company installs and operates an intrusion prevention system to block unauthorized access to personal information. In addition, it applies secure access methods such as virtual private networks (VPNs) to control external access.

(d) The Company establishes and applies password creation rules so that Customers can set and use safe passwords. If the Customer has set a password to access certain parts of the Company's website, the Customer is responsible for keeping the password confidential and not disclosing it to others.

(e) The Company takes encryption measures required by relevant laws and regulations when sending, receiving and storing personal information, including sensitive information and unique identification information.

(f) The Company installs programs for fixing security vulnerabilities of software, such as operating systems, and periodically updates them.

(g) The Company keeps the access records of the personal information processing system safe for a period of time.

(3) Physical measures to protect personal information

The Company implements measures to prevent physical access, such as access control and locking devices, for the safe storage of personal information in the form of documents.

11. Links to other websites

The Company may provide links to other websites that are not controlled by the Company. The Company assumes no responsibility for such websites. If the Customer leaves the company website, the Company is not responsible for the protection and privacy of the information provided by the Customer. The Customer should carefully review the privacy regulations applicable to those websites. When a link is provided, we will make every reasonable effort to inform the Customer that they are going from our website to another site.

12. Installation, Operation, and Refusal of Devices Automatically Collecting Personal Information

(1) The Company uses cookies for certain websites of the Company, including but not limited to session cookies, persistent cookies, and web beacons. Cookies are files that store information about a Customer visiting the Company's website on the computer used by them, and inform the Company of the information. Cookies allow the Company to better understand the Customer's website preferences, tailor the website to their preferences, and measure website usage.

(2) When a Customer accesses the Company website, the Company analyzes the frequency of access or visit time, tracks the Customer's traces, identifies event participation information and the number of visits, and uses cookies to provide targeted marketing or personalized services.

(3) Customers have the option to allow cookies or not. Customers can adjust their browser settings to accept all cookies, receive notifications when cookies are downloaded, or refuse all cookies. However, if a Customer refuses to allow cookies, there may be difficulties in using services.

(4) Examples of allowing/rejecting cookies

- Internet Explorer (in the case of Internet Explorer 11 for Windows 10): In Internet Explorer, select the Tools button, then select Internet Options. Select the Personal Information tab, select Advanced under Settings, then select Block or Allow Cookies

- Chrome: In Chrome, click the ⋮ button (Chrome customization and control) in the upper right corner, then click Settings. - Click Show Advanced Settings at the bottom of the Settings page and click Content Settings in the Personal Information section. - In the Cookies section, select the check box for blocking third-party cookies and site data

13. Matters Regarding the Collection, Use, and Refusal of Behavioral Information

(1) The Company collects and uses behavioral information to provide customers with optimized personalized services, benefits, online personalized advertisements, and the like during the service usage process.

(2) The Company collects behavioral information as follows:

Items of collected behavioral information	Method of collecting behavioral information	Purpose of collecting behavioral information	Retention, use period, and subsequent information processing method
User's service usage timestamp, service usage records, records of improper use, login information (IP address).	Automatically collected when users visit/run the website and app.	Preservation of service usage records, website performance analysis, statistical analysis of user usage, usage information analysis, marketing research.	Destruction after 2 years from the date of collection.

14. Additional Use and Provision

(1) In accordance with Article 15, Paragraph 3, and Article 17, Paragraph 4 of the Personal Information Protection Act, the Company may use and provide personal information without the Customer's consent, considering the matters specified in Article 14-2 of the Enforcement Decree of the Personal Information Protection Act.

(2) Accordingly, the Company has considered the following matters in order to use and provide personal information without the Customer's consent:

Whether the additional use or provision of personal information is relevant to the original collection purpose.
Whether there is predictability in the additional use or provision of personal information, based on the circumstances of collection or processing practices of personal information.
Whether the additional use or provision of personal information unduly infringes upon the customer's interests.
Whether measures necessary for ensuring security, such as pseudonymization or encryption, have been taken.

15. Remedies for infringement of rights

Customers can apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee and the Korea Internet & Security Agency in order to receive relief from personal information infringement.

In addition, for reporting and consultation of other personal information infringement, contact the Personal Information Dispute Mediation Committee, Information Protection Mark Certification Committee, Advanced Crime Investigation Division of the Supreme Prosecutors' Office, or Cyber Terror Response Center of the National Police Agency.

(1) Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)

(2) Personal Information Infringement Report Center: (without area code) 118 (privacy.kisa.or.kr)

(3) Supreme Prosecutors' Office: (without area code) 1301 (www.spo.go.kr)

(4) National Police Agency: (without area code) 182 (ecrm.cyber.go.kr)

16. Personal information protection and customer complaint handling department

The Company's customer service department listens to Customers' opinions on personal information protection and handles complaints related to personal information. The national manager of the customer service department is designated as the responsible person. Customers can report all complaints related to personal information protection that occur while using the Company's services to the person in charge of handling inquiries and complaints related to customer personal information below or to the customer service department.

Personal Information Protection Officer (Privacy Officer)

Name: Jee-Hwan Ko

Manager, APAC IT Tech Planning

Phone: 02-3496-7777

Email: krcsl@fedex.com

Personal Information Protection Manager (Privacy Manager)

Privacy Manager, Korea Customer Service Team

Phone: 02-3496-7777

Email: krcsl@fedex.com

Customers may contact the Company’s Personal Information Protection Officer and the relevant department for any inquiries, complaints, or requests for relief related to the protection of personal information arising from the use of the Company’s services (or business). The Company will respond to and handle such inquiries without delay.

Customers may also submit a request to access their personal information pursuant to Article 35 of the Personal Information Protection Act by contacting the department in charge of personal information protection as noted above. The Company will make every effort to ensure that such requests are processed promptly.

17. Policy on the Operation and Management of Fixed Video Information Processing Devices

The Company hereby informs customers, through this Policy on the Operation and Management of Fixed Video Information Processing Devices, of the purposes and methods by which video information processed by the Company is used and managed.

(1) Legal Basis and Purpose of Installation of Fixed Video Information Processing Devices

The Company installs and operates fixed video information processing devices pursuant to Article 25(1) of the Personal Information Protection Act for the following purposes:

Safety and management of facilities and fire prevention
Crime prevention
Prevention of safety accidents within business premises and verification of facts in the event of an accident
Prevention of theft or loss of goods and protection of assets

(2) Number of Devices Installed, Installation Locations, and Recording Scope

Number of Devices	Installation Locations and Recording Scope
650	Inside and outside major facilities operated and managed by the Company, including building lobbies, entrances, emergency exits, and similar areas

(3) Responsible Manager and Authorized Personnel

In order to protect customers’ personal video information and to address complaints related to such information, the Company designates a Personal Video Information Manager and authorized personnel/handlers as set forth below.

Access to personal video information is limited to the minimum number of personnel necessary for the performance of their duties, including designated personnel from the Security Team and the facility operations manager of each business site.

The Company manages the granting, modification, and revocation of access rights and implements necessary measures for the secure management of personal video information, including maintaining relevant records.

Business Site	Responsible Manager	Department	Contact	Authorized Personnel / Handler	Department	Contact
Hapjeong Headquarters	Security Team Director	Security	010-3227-0113	Security Team Director	Security	010-3227-0113
Sangam Office	Office Manager	Ground Operations	010-3224-4502	Office Manager	Ground Operations	010-3224-4502
Busan Office	Office Team Leader	Ground Operations	010-9170-2533	Office Team Leader	Ground Operations	010-9170-2533
Gyeongin Office	Office Manager	Ground Operations	010-4307-0426	Office Manager	Ground Operations	010-4307-0429
Suwon Office	Office Manager	Ground Operations	010-9880-8378	Office Manager	Ground Operations	010-4307-8783
Gangnam Office	Office Manager	Ground Operations	010-7302-4728	Office Manager	Ground Operations	010-7302-4728
Gwangju (Gyeonggi) Office	Office Manager	Ground Operations	010-9938-4913	Office Manager	Ground Operations	010-9938-4913
Daegu Office	Office Team Leader	Ground Operations	010-2565-6676	Office Team Leader	Ground Operations	010-2565-6676
Ilsan Office	Office Manager	Ground Operations	010-2825-0376	Office Manager	Ground Operations	010-2825-0376
Ulsan Office	Office Team Leader	Ground Operations	010-5489-4823	Office Team Leader	Ground Operations	010-5489-4823
Daejeon Office	Office Team Leader	Ground Operations	010-5252-8368	Office Team Leader	Ground Operations	010-5252-8368
Cheonan Office	Office Manager	Ground Operations	010-7724-6712	Office Manager	Ground Operations	010-7724-6712
Gunpo Office	Office Team Leader	Ground Operations	010-4663-7727	Office Team Leader	Ground Operations	010-4663-7727
Yangjae Office	Office Manager	Ground Operations	010-9569-4172	Office Manager	Ground Operations	010-9569-4172
Myeongdong Office	Office Team Leader	Ground Operations	010-3512-7704	Office Team Leader	Ground Operations	010-3512-7704
Gyeongnam Office	Office Team Leader	Ground Operations	010-4702-5709	Office Team Leader	Ground Operations	010-4702-5709
Gwangju (Jeolla) Office	Office Manager	Ground Operations	010-2967-7492	Office Manager	Ground Operations	010-2967-7492
Incheon Airport Office	Office Manager	Security	010-3227-0113	Assistant Manager	Security	010-3192-9800
Gimpo Office	Office Manager	Ground Operations	010-2550-3026	Office Manager	Ground Operations	010-2550-3026
Namyangju Office	Office Manager	Ground Operations	010-7282-1792	Office Manager	Ground Operations	010-2916-4670
Gimpo Healthcare	Site Manager	KR LSC	010-2620-7210	Site Assistant Manager	KR LSC	010-9671-0588
Gimpo Cisco	Site Team Leader	Ground Operations	010-5243-3047	Site Team Leader	Ground Operations	010-5243-3047

(4) Recording Time, Retention Period, Storage Location, and Processing Method of Video Information

Recording Time: 24 hours
Retention Period: Considering the nature of the Company's business, personal video information is retained for a period not exceeding 90 days from the date of recording, within the minimum scope necessary to achieve the purpose of retention. However, where applicable laws prescribe a different retention period, such laws shall prevail.
Storage Location: Access-controlled areas designated at each business site
Processing Method: Matters concerning use for purposes other than the intended purpose, provision to third parties, destruction, and requests for access are recorded and managed. Upon expiration of the retention period, the information is permanently deleted using methods that make recovery impossible (or shredded/incinerated in the case of printed materials).

(5) Method and Location for Accessing Personal Video Information

Method: Request to the designated responsible manager at each business site
Location: The relevant business site

(6) Requests by Data Subjects for Access to Personal Video Information

Customers may request access, confirmation of existence, or deletion of their personal video information from the operator of the fixed video information processing devices at any time. However, such requests are limited to personal video information in which the requesting individual appears.

Customers who wish to verify personal video information should contact the Customer Service Department below in advance and visit the relevant site after consultation with the responsible department.

Telephone: +82-2-3496-7777
Email: krcsl@fedex.com

Where a request for access, confirmation of existence, or deletion is made, the Company will take necessary measures without delay. In such cases, the Company will verify whether the requesting party is the individual concerned or a duly authorized representative.

Required documents are as follows:

Individual request: Identification card and the Company’s request form for access to personal video information
Request by representative: Identification cards of both the data subject and the representative, a power of attorney, and the Company’s request form
Public authorities (e.g., prosecutors, police, customs, National Tax Service): Official request letter or warrant
Courts: Court order for submission of documents

(7) Grounds for Restricting or Refusing Requests

The Company may restrict or refuse requests for access, confirmation of existence, or deletion of personal video information only in the following cases. In such cases, the Company will notify the customer within 10 days from the date of the request in writing (including electronic documents), clearly stating the reasons for such refusal or restriction.

Where access is prohibited or restricted by laws or administrative guidelines issued pursuant to laws, or where access is restricted under the Company's security or operational policies established in accordance with such laws or guidelines
Where disclosure is likely to harm the life or physical safety of another person or unjustly infringe upon another person's property or other rights and interests
Where disclosure is likely to seriously interfere with criminal investigations, prosecution, court proceedings, or similar processes
Where the relevant personal video information has already been destroyed due to expiration of the retention period

(8) Measures to Ensure the Security of Personal Video Information

Video information processed by the Company is securely managed through measures such as encryption.

In addition, the Company implements administrative safeguards, including differentiated access rights to personal video information. To prevent falsification or alteration of personal video information, the Company records and manages information such as the date and time of creation, the purpose of access, the identity of the person accessing the information, and the date and time of access.

Furthermore, physical safeguards such as locking devices are installed to ensure secure storage of personal video information.

(9) Changes to the Policy on the Operation and Management of Fixed Video Information Processing Devices

This Policy on the Operation and Management of Fixed Video Information Processing Devices became effective on the date specified below. If any additions, deletions, or modifications are made due to changes in relevant laws, policies, or security technologies, the Company will notify customers through its website at least seven (7) days prior to the implementation of such changes.

18. Amendments to this Privacy Policy

If the Company revises this Privacy Policy, it will notify the contents of the revision and the time of enforcement through this website in a timely manner.