Last updated: 7 November 2026 · Effective from publication
1. Who is responsible
HANKATONG LTD is the controller for personal data processed through AllTripThings. Address: Office 10779, 182–184 High Street North, London E6 2JA, United Kingdom. Our Korea operations partner is TTEUGEOUNCHEONGCHUN Co., Ltd. Contact cs@alltripthings.com about privacy or your information.
2. Information used to provide your order
- Account identity, email, password authentication records and preferences.
- Order details, selected products and options, payment status and refund records.
- Traveller details required for a selected experience, and recipient name, contact number and address for deliveries.
- eSIM issuance, installation and activation information needed for fulfilment or troubleshooting.
- Support messages, reviews and attachments you choose to send.
- Technical records such as IP address, browser, cookies, access logs and fraud-prevention signals.
Stripe handles payment credentials. We do not directly store your full payment-card number or security code. Do not send passwords, full card details or usable eSIM QR codes in an ordinary support message.
3. Why we use it
We process information to create accounts, confirm payment, arrange tickets, issue connectivity products, deliver goods and provide order support under our contract with you. Legal obligations cover required financial and consumer records. Service security, fraud prevention and dispute handling support our legitimate interests, balanced against your rights. Where optional processing requires consent, you may withdraw it. Accepting a privacy notice is not a subscription to marketing.
4. Providers and cookies
Information necessary for your order may be shared with payment providers such as Stripe, experience and telecom suppliers, fulfilment and delivery partners, and hosting, email and support providers. Embedded maps or external services may also receive technical information when used. Cookies support login, your cart and security; browser controls let you manage them, although blocking essential cookies may affect these functions.
Order fulfilment may involve processing in the United Kingdom, South Korea and the country of a relevant provider or destination. Transfers must follow the safeguards required by applicable data-protection law. Contact us for information about the providers and safeguards relevant to your order.
5. Keeping and protecting information
We keep account information while it is needed to operate your account. Transaction, cancellation, payment, refund and fulfilment records are generally kept for five years; complaint and dispute records are generally kept for three years after resolution, subject to applicable statutory requirements. Other support and security information is retained only as needed for its purpose. A legal requirement or an active dispute may require longer retention.
Access controls, encrypted connections and restricted operational access help protect information. No online service can guarantee absolute security. Account deletion does not require us to erase records that the law requires us to retain.
6. Your choices and requests
Depending on the law that applies, you can request access, correction, deletion, restriction or portability, object to certain uses, and withdraw consent. We may need proportionate identity verification. See GDPR compliance and Delete account for the request process. We will explain any retention exception. You may also complain to the relevant data-protection authority.
Questions? Contact cs@alltripthings.com.
