Privacy policy

We collect only what you send us, or what the site needs in order to work.

• Customer account: name, email address, password (stored one-way hashed, never in clear text), phone number, country, postal address, city and postal code.
• Reservation request: name, email address, phone number, country and delivery address, needed to prepare a shipping quote and the export documents.
• Contact form and on-site messaging: name, email address, phone number where you provide one, the content of your message, and the address of the page you wrote from.
• Browsing preferences: the language, currency and destination country you choose, kept so you do not have to set them again.
• Strictly necessary technical data: a session identifier and a form security token.

We set no analytics or advertising cookies. We neither buy nor sell contact lists.

• Answering your enquiries and sending you quotes.
• Managing your account, reservations, quotes and invoices.
• Arranging export from Korea and sea freight to the port you specify.
• Keeping the site secure and preventing abuse.
• Meeting our accounting and legal obligations.

Your data is never sold, rented or passed to third parties for advertising purposes.

KoreXport publishes a daily selection of vehicles on its own social media accounts. This feature concerns KoreXport’s accounts, not yours.

• Connections are made exclusively through the platforms’ official authorisation systems (OAuth). KoreXport never asks for, receives or stores the password of a social media account.
• We store only the authorisation token issued by the platform, together with the identifier of the account or page to publish to.
• These tokens are stored encrypted in the database, are never sent to the browser, and do not appear in technical logs.
• An authorisation can be revoked at any time from the KoreXport admin area, or directly from the platform. Revoking it deletes the stored token.

• When a KoreXport administrator connects a TikTok account, they are redirected to TikTok to sign in and grant authorisation. KoreXport never sees TikTok login credentials.
• The scopes requested are limited to what is needed to publish content on behalf of the KoreXport account and to check that account’s status.
• Data received from TikTok is limited to the access token, the refresh token, their expiry, the account’s public identifier and its display name. No personal data about followers or viewers is collected.
• This data is used solely to publish KoreXport content and to show the connection status in our admin area. It is not resold, not combined with other sources, and not used for advertising.
• Tokens are deleted when the account is disconnected from our admin area, when the authorisation is withdrawn on TikTok, or when they expire without renewal.

• Published content comes from our vehicle catalogue: make, model, year, mileage, engine, vehicle price, photographs and a link to the corresponding listing on korexport.co.
• No personal data belonging to our customers or visitors appears in any post.
• We keep an internal history of every post — vehicle, platform, language, text, destination address, dates and the identifier returned by the platform — so that it can be found, corrected or removed.

• Customer accounts: kept for as long as the account exists, then deleted on request.
• Quotes, invoices and export documents: kept for the period our accounting and customs obligations require.
• Contact form and messaging content: kept for as long as it takes to handle the enquiry, then archived.
• Social platform authorisation tokens: kept while the connection is active; deleted on disconnection or expiry.
• Publication history: kept so that a post can be located and removed at the platform.

You may ask to see, correct or delete the data we hold about you, and to receive a copy of it. Write to the address below: we answer within a reasonable time, at no charge.

The site is served over HTTPS. Passwords are stored one-way hashed. Social platform authorisation tokens are encrypted in the database and never exposed to the browser. Access to the admin area is restricted and authenticated.