Privacy Policy

The Privacy Policy of Air Premia Co. Ltd. (“Air Premia”) define how the personal data of the data owner is processed.

Air Premia (4th floor, 248 Gonghangdaero, Gangseo-Gu, Seoul) carries out the role of processing personal data and proactively guarantees the rights of the data owner, as well as safely protecting their personal data.

This Privacy Policy is applicable only to the services offered by Air Premia.

Notice Date : 16 January, 2026
Enforcement Date : 16 January, 2026

1. Purpose of processing personal data and legal rationale

① With the consent of the data owner,Air Premia processes personal data for marketing and development of new services.

• Includes sending event information, promotional announcements, and advertising text.

② To sign and implement contracts with the data ownerregarding provision of services and to receive payment, Air Premia processes personal data,

• including for booking, purchases, payments, ticketing, transport (check-in, boarding and baggage handling) and member management

③ To provide passenger information to immigration offices or border control, and therefore abide by its legal obligations, Air Premia processes personal data.

④ Air Premia processes personal data for significant benefits of the data owner and the legitimate pursuit of profits by Air Premia.

2. Personal data items collected(and processed) and the collection method

At the time of joining the membership or while using the services, Air Premia collects the “minimum personal data it needs for the provision of services(required items)” and “personal data to provide better services to the data owner(optional items)” as follows through its website.

① When joining the membership

• Required items : Email, mobile phone number, gender, name, date of birth, Nationality, CI, DI, information on the legal guardian of individuals under the age of 14

② When using the data saving function for more convenience at check-in

• Optional items : Passport information(passport number, expiration date, nationality)

③ When using Online Check-in services

• Required items : Name, Passport Information (Number, Issue Date, Expiration Date), Nationality, Country of birth, Date of birth, Gender, Mobile phone, US Permanent Resident (Green card) Information (Number, Expiration Date), Address in US

• Optional items : KTN(Known Traveler Number)

④ When using paid services (In-flight meal, WIFI Services, etc.)

• Required items : Card information and Card authentication information, Name, mobile phone number

⑤ When using the 1on1 live chatbot consultation service

• Required information: Name, phone number, E-mail

⑥ Payments due to excess baggage weight or quantity, seat changes or upgrades, itinerary changes, or the purchase of other items

• Required items : Card information and Card authentication information

⑦ On-site ticket purchase

• Required items : mobile phone number, gender, name, date of birth, Nationality, information on the legal guardian of individuals under the age of 14, Passport information(passport number, expiration date, nationality)

⑧ When reporting lost baggage

• Required items : mobile phone number, name, Email, Address, Flight information (flight number, Boarding date, departure /Arrival information, seat number)

⑨ When using the SNS login service

• Required items : mobile phone number, name, date of birth, Connection Information (CI)

⑩ When collecting Legal guardian information during the registration of individuals under the age of 14

• Required information: Name, phone number, E-mail

⑪ When a refund occurs

• Required items : Account number, bank name

⑫ When using paid WorldPay (International Card Only)

• Required items : Email Address, Billing Address, Shipping Address

⑬ Others

◎ Sensitive Information

• We may collect and process sensitive information with the customer's explicit consent, including:

• Health: Medical conditions, health needs (e.g., wheelchair, oxygen equipment)

• Religion: Special meal requests (e.g., halal, kosher)

◎ Special Circumstances

• Additional information may be collected with consent for services like:

• Pet transport, firearms handling, liability agreements, or damage claims

◎ When you consent to receive advertising information: your mobile phone number, your consent status, and the date of consent.

When collecting personal data, Air Premia always notifies the data owner in advance to seek their consent. The following methods are used to collect personal data.

① The data owner, when joining the membership or using the services, gives their consent to the collection of data and enters the data himself

② Personal data is received from partner organizations or services

③ Personal data is collected over the course of consultation with Reservations, through the website, email, FAX or phone

④ The data owner gives their consent to the collection of personal data to participate in online or offline events

⑤ Personal data is collected when the data subject consents and provides the information during 1on1 live chatbot consultations.

3. Policies on cookies

① What are cookies?

• They are very small text files that the server used for the operation of the website sends to the browser of the data owner. It is saved on the computer of the data owner.

② Purpose

• Cookies are used to save and recall information on the user to provide more personalized services. If the data owner visits a website, the server of the website reads the content of the cookies stored on the device to offer tailored services and maintain the user’s setting. Cookies help with access and convenient use of the website when the data owner visits the website. In addition, they are used to provide tailored information such as optimized ads based on the website visit records and usage patterns.

③ Denial of consent to cookies collection

• Personally identifiable data such as names or phone numbers are not stored in cookies. The data owner has the choice on whether to install cookies. Therefore, data owners may use the web browser setting to allow cookies, or go through confirmation whenever cookies are stored, or deny the storage of cookies. However, if the installation of cookies is rejected, you may experience inconveniences in using the web, and may be restricted from using certain services where login is required.

④ Example of how cookies are installed

▶ Allowing/Blocking Cookies on Web Browsers

• Chrome: Browser settings > Privacy and security > Clear browsing data

• Edge: Browser settings > Cookies and site permissions > Manage and delete cookies and site data

▶ Allowing/Blocking Cookies on Web Browsers

• Chrome: Mobile browser settings > Privacy and security > Clear browsing data

• Safari: Device settings > Safari > Advanced > Block all cookies

• Samsung Internet: Mobile browser settings > Browsing history > Clear browsing data

4. Items concerning the provision of personal data to third parties

At Air Premia, we process your personal data only within the scope outlined in 1. Purposes and Legal Basis of Data Processing and 2. Categories of Data Collected and Collection Methods. To provide our services and to comply with legal or contractual obligations, your personal data may be shared with selected third-party service providers or partners, following prior notice to you. All third-party data sharing is conducted on lawful grounds in accordance with applicable data protection laws (e.g., the Personal Information Protection Act of Korea, GDPR, CCPA). Full details—including the recipient, categories of data, purpose of sharing, and retention period—are provided below.

No mobile phone number information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5. Outsourced processing of personal data

Air Premia outsources the following personal data processing tasks to implement contracts and provide services.

6. Duration of the storage and use of personal data

If a member leaves the membership or the purpose for collecting and using personal data has been fulfilled, Air Premia promptly deletes the collected personal data. In line with our privacy policy, Air Premia also deletes the personal information of long-term inactive users who have not used the service for 5 years. Once their personal information is deleted, these inactive users are automatically removed from the service. Users will be notified via email at least 60 days before deletion and account removal. After the deletion and account removal, an additional email will be sent to confirm the finalization of the process within (specified time period).

Personal data that needs to be stored for a certain period under law are as follows.

7. International transfer of personal data

Air Premia transfers the following personal data processing tasks outside of Korea to implement contracts and provide more convenient services to customers.

8. Transfer of personal data to outside of EU

① Processing and transfer of personal data

• The personal data collected by Air Premia is processed within the following jurisdictions or transferred outside.

• Locations of Air Premia and its partner companies: Member countries of the European Union

• Locations of Air Premia headquarters and IT server: Republic of Korea

• Location of Air Premia’s Reservations: Republic of Korea

• Customs office and immigration authorities of the travel destination of the data owner

② Purpose of transferring personal data

• The transfer of personal data of EU residents to outside of EU is done for the following reasons

• Storage in the Air Premia server located in Seoul and additional processing of the data

• Processing of inquiries by the data owner to Air Premia’s Reservations

• Processing of travel services requested by the data owner

• Approval from the destination country’s authorities

③ Protection against the transfer of personal data

• When personal data is transferred outside of EU, Air Premia takes protective measures in accordance with the Personal Data Protection Act to take appropriate protective measures. Specific protective measures are as follows

• Based on the adequacy decision by the European Commission on transfers between Korea and EU, a decision on transfer outside of the zone

• is made when the specific agreements between the EU and a third party on the processing and transfer of personal data of passengers of an airline are honored.

• Transfers to which standard articles on personal data protection are applied

• For countries with no adequacy decision by the European Commission, Air Premia has signed an agreement with the data recipients that includes the standard articles approved by the European Commission (for the internal or external transfer of the data).

• The data owner may receive or review the content of such agreements. If you have questions, please send them to [email protected] or to “4th floor, 248 Gonghangdaero, Gangseo-Gu, Seoul, Korea.”

9. Guarantee of the rights of data owners

① Air Premia guarantees the rights of all personal data owners (or their legal guardian in the case of children under the age of 14) as follows.

• The right to deny the processing of his own data

• The right to view, edit, correct or delete his own personal data at any time and withdraw his consent to the processing of such data

• The right to request that his personal data be transferred to another administrator

• The right to file a complaint with the personal data protection authorities (for violation of the Personal Data Protection Act, if the individual resides in an EU member country or works for an employer located in an EU member country)

② The data owner may view, edit, correct or delete his own personal data at any time and withdraw his consent to the processing of such data on Air Premia’s website. After logging in, click My information > Change member information’ to view your information. You can edit the information or withdraw your membership on the page ‘change member information’ or ‘leave the membership.’ In addition, data owners who have not joined the Air Premia website may make the request through the following Reservations in writing or over the phone.

• However, the personal data may not be deleted if it is deemed necessary for the processing that is required under legal obligation, or deemed necessary for the processing of personal data for the exercising of legal claims or defense

③Data protection officer and staff member in charge of personal data protection

• Air Premia has designated a department, a data protection officer and staff member to protect user’s personal data and handle related inquiries or complaints.

• Chief Privacy Officer : Bosung Kim ([email protected])

• Department in charge of handling complaints related to personal data : Reservations

• Phone : +82) 1800-2626 , email : [email protected]

• When making an inquiry on personal data or requesting that your rights be exercised, you must also send personal identification information (such as member ID, name in English, contact information or booking number). The information you send will only be used to process the request and confirm your identity. If such information is lacking, Air Premia may send you an email requesting such information.

④ If you need to report matters concerning infringement on personal data or need assistance, please inquire at the following institutions.

• Personal Information Dispute Mediation Committee: Call 1833-6972 (No area code required) www.kopico.go.kr

• Personal Information Infringement Report Center: Call 118 (No area code required) privacy.kisa.or.kr

• Supreme Prosecutors' Office: Call 1301 (No area code required) www.spo.go.kr

• National Police Agency: Call 182 (No area code required) ecrm.cyber.go.kr

10. Measures to secure personal data

To prevent the loss, theft, leak, doctoring or damage of personal data in the course of their processing, Air Premia applies the following technological, administrative and physical measures in accordance with the Personal Data Protection Act and GDPR.

① Encryption of personal data

• Important personal data is encrypted before being stored and managed.

② Measures to safeguard against hacking

• Air Premia makes its best efforts to prevent hacking or computer viruses from leaking or corrupting customers’ personal data. In addition, unauthorized access through an intrusive system is also monitored and controlled.

③ Minimal number of employees processing personal data and their training

• Only a minimum number of employees are designated to handle the processing of personal data. They are given separate passwords which are updated regularly. Frequent training is also conducted to emphasize the observation of corporate policies on personal data processing.

④ Operation of a dedicated organization for personal data protection

• Through a dedicated organization for personal data protection inside the company, Air Premia monitors the implementation of measures to protect personal data. If any breaches are found, immediate measures are taken to correct the situation.

⑤ Personal data of children

• When children under the age of 14 requests to join the membership, Air Premia collects and uses their personal data only after seeking the consent of their legal guardian. The legal guardian may withdraw their consent to the collection and use of the child’s personal data, or request to view or correct the personal data that had been provided by the child. Air Premia will take the necessary measures immediately as soon as the individual making the request is verified to be the individual whose personal data is concerned regarding the withdrawal of consent or correction of errors.

11. Changes to this Privacy Policy

This Privayc policy may be amended to incorporate changes to the law or services. In such a case, a notice shall be made on the changes through Air Premia’s website.

Air Premia values the data of users and remains committed to making its best efforts to ensure that users can use the services without concern for their personal data.