Privacy Policy
Effective: October 7, 2026
온웨이 (Onway, operating Find to Send; the "Company") processes users' personal information as described below in accordance with the Korean Personal Information Protection Act.
This English version is provided for convenience. If it differs from the Korean version, the Korean version prevails.
1. Purposes of processing
- Providing the lost-item search, pickup and international shipping service (requests, quotes, payment, shipping, progress updates and support)
- Providing travel assistance services (airport pickup, luggage connection, local communication support)
- Managing member accounts (if you sign up) and sending marketing information (if you opt in)
- Keeping records of contract performance, handling disputes and meeting legal obligations
2. Personal information we process
| When | Information |
|---|---|
| Lost-item request (required) | Name, email, WhatsApp number, nationality, where the item was lost and stay details, item details and photos, delivery address (recipient, address, postal code) |
| Signing the payment agreement (required) | Signature image, signer's name, item value, time of signing, IP address, browser information |
| Payment (required) | Payment approval records (card details are handled directly by the payment provider and are not stored by the Company) |
| Travel assistance request (required) | Name, email, contact details, request details (dates, places, etc.) |
| Sign-up | Required: email, password, name / Optional: mobile number |
| Using our chat support | Your messages |
| Collected automatically | IP address, cookies, visit records |
3. Retention period
We destroy personal information without delay once the purpose of processing has been achieved. Member information is kept until you close your account. The following records are kept for the periods required by law.
- Records of contracts or withdrawal of orders (including payment agreement signature records), and records of payment and supply of services: 5 years (Act on the Consumer Protection in Electronic Commerce)
- Records of consumer complaints or dispute handling: 3 years (same Act)
- Website access logs: 3 months (Protection of Communications Secrets Act)
4. How information is destroyed
Personal information is destroyed without delay when its retention period ends or its purpose has been achieved. Electronic files are deleted so they cannot be recovered, and paper documents are shredded. Information retained under law is stored separately from other personal information.
5. Provision to third parties
We do not provide your personal information to third parties, except as follows with your separate consent given in the payment agreement for delivery purposes, or where required by law.
| Recipient | Purpose | Information | Retention |
|---|---|---|---|
| International carriers actually used (EMS, DHL, FedEx, UPS, etc.) and destination customs authorities | International transport, customs clearance and delivery contact | Recipient's name, address and contact number; item names, quantities and values | As required by each party's laws and policies after delivery |
6. Outsourced processing
We outsource the processing of personal information to the following companies to run the service.
| Processor | Task |
|---|---|
| KG Inicis Co., Ltd., PortOne | Korean card payments |
| PayPal Pte. Ltd. | International payments |
| Supabase Inc. | Data storage |
| Vercel Inc. | Website operation |
| Plus Five Five, Inc. (Resend) | Sending emails |
| Anthropic PBC | Assistance with item photo checks and support replies |
| Google LLC | Visit statistics (only with cookie consent) |
7. International transfers
Personal information is transferred to the overseas processors in Section 6 over encrypted networks when you use the service, as follows. In every case it is retained until the outsourcing contract ends or the retention period in Section 3 expires.
| Recipient (contact) | Country | Information | Purpose |
|---|---|---|---|
| Supabase Inc. (privacy@supabase.com) | Japan | All information in Section 2 | Data storage |
| Vercel Inc. (privacy@vercel.com) | USA, Japan | Information sent while using the site, IP address | Website operation |
| Plus Five Five, Inc. (support@resend.com) | USA | Name, email, case number | Sending emails |
| Anthropic PBC (privacy@anthropic.com) | USA | Item photos and descriptions, your messages, request details | Assistance with item photo checks and support replies |
| PayPal Pte. Ltd. (skrprivacy@paypal.com) | Singapore | Payment amount, order details | International payments |
| Google LLC (policies.google.com/privacy) | USA | Cookie identifiers, visit records | Visit statistics (only with cookie consent) |
If you do not want your information transferred overseas, contact us using the details in Section 12. Transfers other than visit statistics are necessary to provide the service, so if you refuse them you will not be able to use it. You can refuse visit statistics in the cookie banner.
8. Your rights
You can ask at any time to access, correct, delete or suspend processing of your personal information, or to withdraw consent. Email us at the address in Section 12 and we will act without delay; you may also make a request through a representative. Information we must keep by law may not be deletable.
9. Security measures
- Administrative: access to personal information is limited to the minimum staff who need it
- Technical: access controls, encryption in transit (HTTPS), encrypted password storage
- Physical: use of security-certified cloud data centres
11. Remedies
For advice or mediation regarding a privacy infringement, you can contact the following Korean bodies.
- Personal Information Dispute Mediation Committee: +82-1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
12. Privacy officer
- Officer
- Youngseok Park (Representative)
- info@findtosend.com
- +82 10-7234-9291
13. Changes to this policy
This policy applies from October 7, 2026. If it changes, we will post a notice on the website at least 7 days before the change takes effect.
Revision history: October 7, 2026 — reorganised around the legally required items and added payment agreement signature information. October 3, 2026 — added details on outsourced processing and international transfers. (First effective August 7, 2026)