Effective Date: 27 October 2026
Version: 7.1
KKday is committed to protecting privacy and security of your personal information. This Privacy Policy (hereinafter referred to as this "Policy") illustrates how we collect, process, use and protect personal information.
Please note that:
"KKday" or "us" referred to in this Policy shall be subject to Article 1.2 of the Terms and Conditions.
This Policy complements and should be read together with the Terms and Conditions, as well as any documents or information notices referring to this Policy.
If any term hereunder requires a legal effective declaration, you agree that such declaration may be made by electronic means.
When you provide us with information of any third party (such as a traveler, contact person or recipient), you represent and warrant that the third party has authorized you to provide his/her personal information to us, and you shall ensure that the third party has acknowledged the contents hereunder and agreed that we may collect, process and use his/her personal information in accordance with this Policy.
Please read this Policy carefully. If you do not agree to the processing of your personal information as described in this Policy, please do not register as a KKday member or submit any personal information to us. If you are not an adult in accordance with the laws of your country, please make sure that your parent or legal guardian has read this Policy and that you register as a KKday member or submit your personal information to us with their consent.
If you have any questions, comments or would like to exercise your rights with respect to this Policy, please feel free to contact us at [email protected] or contract our Data Protection Officer (DPO) at [email protected].
1.1 This Policy applies to all the personal information of KKday members, potential customers (such as customers who request product information, participants who attend the marketing activities, etc.) or partners (such as participants who join the affiliate program, bloggers, photographers, YouTubers, content creators, etc.) and the personal information that is collected by us through the KKday website (kkday.com) and KKday mobile device application (app) (personal information means data related to any identified or identifiable natural person).
1.2 Please note that if you link to any other domain or app that is not part of the KKday website or app, we may not be able to continue to maintain the security of your personal information. You are advised to read the privacy policy of that domain or app before linking to any other domain or app.
1.3 If you purchase products listed and sold by the merchants on the KKday Marketplace, or if you directly provide your personal information to the supplier or merchant of the purchased product, the collection, processing, and use of your order-related personal information by such suppliers or merchants will be governed by their respective privacy policies, which are not fully controlled or governed by KKday. To protect your personal information rights, we recommend that you carefully review and understand the content of the supplier’s or merchant’s privacy policy before placing your order.
2.1 Personal information provided by you
We will obtain personal information that you have entered on the KKday website or app, or provide through telephone, letter, email, communication software or other means, including:
2.1.1 Membership
Membership data is your and your frequent traveler’s personal information including identification information, characteristics, account number and password. You can choose whether to update the membership data. If you do not choose to update your basic data and frequently used traveler data, we will not be able to automatically enter your order and traveler data into the system when you place orders. However, we recommend that you update your password regularly to protect the security of your account.
2.1.2 Order
Customer/recipient/traveler/contact data
When you place an order, depending on the type of products you purchase, you may need to provide the personal information of different individuals, including identification and characteristics, etc. (for example, you may need to provide your passport name and passport number in both Chinese and English when purchasing foreign tour products, or the recipient's name and address when you purchase pre-mailed physical tickets). You may also choose whether to update the data to the membership data. In certain cases, we may require you to provide sensitive personal information, such as information related to religion or health, in order to fulfill special requirements for specific orders (e.g., selecting dietary preferences for certain tours, or providing vision prescription details for diving activities). The collection and processing of such sensitive personal information will be conducted in accordance with the provisions of this Policy.
Payment and financial data
Credit card information (card number, expiry date and security code) and other payment method information.
Refund supporting data
Depending on the reason for your cancellation/refund, supporting documents such asmedical and health records, certificates of diagnosis, or proof of family relationship may be required.
2.1.3 Business partners (such as data of participants who join the affiliate program, bloggers, photographers, YouTubers, content-creators, etc.)
If you are interested in becoming our business partner, we need to obtain your personal information, including:
Basic data and contact information such as identification information, characteristics and employment information
Supporting data for qualification review
Financial account data for payment
2.1.4 Tour-planning
When you request us to help with your tour planning, we need to obtain basic data and contact information such as identification information.
2.1.5 Participants in activities
When you participate in various activities held by us (such as filling in questionnaires, competitions, psychological tests, lucky draws and other surveys or marketing activities), we need to obtain your personal information, such as identification information and characteristics, depending on the contents of the activities.
2.1.6 Customer service
When you make inquiries, feedback or submit complaints to us through various contact methods, we need to obtain your basic data and contact data such as identification information and characteristics. When we communicate over the phone, we may record the whole conversation.
2.1.7 Reviewer Information
When you submit a review for products purchased through the KKday website or app, we may collect relevant personal information included in your review, such as your name and any travel photos you provide.
2.1.8 AI Virtual Travel Assistant Conversation Data
When you use our AI virtual travel assistant feature, we will collect the conversation content you enter within the feature, as well as other relevant data necessary to provide the feature (such as your member identification information).
2.2 Obtained from a third-party service provider
2.2.1 When you register as a member of a third-party service provider (e.g., Facebook, LINE, Google), we will obtain your data(such as name, photo, email address and any information you choose to provide) and UID according to your settings at the third-party service provider.
2.2.2 We will also obtain relevant data from third-party service providers about your interactions with KKday on their websites or apps(such as your likes or comments on KKday's Facebook page).
2.3 Automatic collection via online behaviors
When you use the KKday website or app, we will use cookies or similar technologies to obtain your personal information and record your online behaviors, such as:
2.3.1 IP address, device type, unique device identifiers, MAC addresses, and other relevant technical information.
2.3.2 Your stay, browsing or clicking on the KKday website or app page.
2.3.3 Traffic data.
2.3.4 The webpage you visited before linking to the KKday website.
2.3.5 Location data inferred from your IP address, telecom operator, country selected to use our website, and other geolocation data.
See the Cookie Policy for more information.
2.4 Provided by business partners
If you participate in marketing activities jointly organized by us and our third-party business partners, we may obtain your personal information (such as prize winners' data) from the business partners to the extent necessary.
2.5 Obtained through affiliates
We may also obtain your personal information from our affiliates in your location and add the data to our database to the extent necessary.
3.1 Membership management
When you register as a member of KKday, we will create a membership profile for you so that we can manage all membership data. The relevant collection, processing and use of personal information may be based on the necessity to perform your contract (the Terms and Conditions) with us. You can do the following in the “Account Settings”:
3.1.1 Update basic data and frequently used traveler data to help you automatically populate the required information when placing orders.
3.1.2 Update the password to maintain the security of your account.
3.2 Order management (fulfillment/termination)
3.2.1 After you place an order, we will collect the personal information of the customer/recipient/traveler/contact person depending on the products you purchase in order for us to process and fulfill your order, such as:
booking your tour.
sending the products you purchase (such as tickets, SIM cards, WIFI devices, etc.).
processing your payment.
providing you with information about the products you ordered (such as confirmation letter, pre-departure notice or satisfaction survey) or contacting you or the contact person for products you ordered.
3.2.2 If you wish to cancel an order or request a refund, we may require additional personal information to process the request and verify eligibility. For example, in cases of force majeure, you may be asked to contact customer service through the order message and provide supporting documents, such as a medical certificate or proof of family relationship. Such personal information may also be shared with the supplier or merchant as necessary for processing.
3.2.3 The collection, processing and use of personal information for the aforementioned purposes may be based on:
the necessity for the performance of your contract with us (e.g., the Terms and Conditions and your order),
the necessity to take steps at your request prior to entering into a contract with us,
our legitimate interest to operate and improve our services and products, and/or
your consent.
3.3 Business partner management
On the basis of the necessity to enter into/perform our business partner contracts, and/or on the basis of our legitimate interest to improve and market our services and products, we collect, process and use personal information of our business partners (such as participants who join the affiliate program, bloggers, photographers, YouTubers, content-creators) in the following manner:
3.3.1 We will review the supporting data provided by you, and after the contractual relationship is established, we will contact you regarding necessary business matters and payments. We may also provide you with information about suitable products.
3.3.2 We may also use your personal information to order products for you (such as tours, tickets, etc.) and/or provide your personal information to the supplier or merchants, depending on the contents of the products.
3.4 Tour-planning and management
When you request us to help with your tour planning, we will use the data you provide to us to design a suitable package for you and contact you. We will also recommend our products to you from time to time. The relevant collection, processing and use of personal information may be based on:
the necessity for performance of your contract with us (e.g., the Terms and Conditions and your order),
the necessity to take steps at your request prior to entering into a contract with us,
our legitimate interest to market our services and products, and/or
your consent.
3.5 Activity management
3.5.1 When you participate in any of our activities (such as questionnaires, competitions, psychological tests, lucky draws, etc.), we may contact you to communicate information about the activities or disclose your data to the extent necessary (such as the accounts of prize winners).
3.5.2 When you win the prize, if necessary, we will send the prize to you via your email address or physical address.
3.5.3 If the amount of prize reaches the legal threshold, we will also need to obtain the necessary personal information from you for reporting purposes in accordance with the law.
3.5.4 We will also recommend our products to you from time to time.
3.5.5 The collection, processing and use of personal information for the aforementioned purposes may be based on:
the necessity for the performance of your contract with us (e.g., the Terms and Conditions and the terms of the specific activity),
the necessity to take steps at your request prior to entering into a contract with us,
our legitimate interest to operate and market our services and products,
your consent, and/or
our obligation to comply with the applicable law.
3.6 Customer service
When you make inquiries, provide feedback or submit complaints to us, we will use your contact information to keep you updated of the status or provide your data to our supplier, merchant or business partner (such as payment service provider or logistics provider) based upon the specific needs in order to assist with handling the matter. If any dispute arises or is likely to arise, we will also use the communication records between the parties (such as emails or telephone recordings) as evidence. The relevant collection, processing and use of personal information may be based on:
the necessity for the performance of your contract with us (e.g., the Terms and Conditions),
the necessity to take steps at your request prior to entering into a contract with us, and/or
our legitimate interest to operate and improve our services and products, and to exercise and protect our rights.
3.7 Marketing
If you are a member of KKday or our business partner, have ordered any products from us, participated in our activities, or inquired about product information (as a potential customer), we will use your contact information to recommend the latest itineraries, discount information, other newsletters or product information you may be interested in, or deliver advertisement to you on third-party platforms (such as Facebook). The collection, processing and use of personal information may be based on your consent, our legitimate interest to market our services and products, and/or your contract with us. Moreover, to the extent required by applicable data protection laws, we will not use personal data for direct marketing purposes unless we have obtained your consent.
3.8 Survey, statistics and analysis
3.8.1 We will conduct surveys of your comments on our products from time to time.
3.8.2 We will analyze users’ behaviors on the KKday website and app to optimize our performance and services and improve our product planning.
3.8.3 We will analyze the data you provide through your online activities (such as the products you search and browsing or clicking behaviors, etc.) or your participation in various activities (such as questionnaires you fill out and competitions, quizzes or lucky draws you participate, etc.) to evaluate the products you may be interested in.
3.8.4 We will collect statistics and analyze the collected data to evaluate customers’ willingness to purchase products and the items that customers are interested in, develop marketing strategies, improve service quality, predict the future trend of best-selling products, or recommend suitable products.
3.8.5 The collection, processing and use of personal information for the aforementioned purposes may be based on:
our legitimate interest to monitor and improve our services,
your consent, and/or
your contract with us.
3.9 Exercise of rights/fulfillment of statutory obligations
3.9.1 In the event of any consumer disputes, non-performance of contract, infringement or criminal acts, we will use personal information to the extent necessary to make a legal claim or defense, such as providing the data to the competent authority or judicial authority. The relevant collection, processing and use of personal information may be based on our legitimate interest to exercise and protect our rights, the necessity to protect the vital interests of you or of another natural person, and/or public interest.
3.9.2 If required by law, KKday will also provide your personal information to the competent authority or judicial authority in order to fulfill our legal obligations.
3.10 We may also use your personal information for other purposes, relying on your consent or other legal bases permitted under the applicable data protection law.
3.11 Use of Artificial Intelligence
We use algorithms and machine learning (including predictive analytics and generative AI) to enhance our services. These tools may process your information to improve your experience, such as enabling interactions through our chatbot or virtual travel assistant, personalizing searches, and providing recommendations. In particular, the conversational responses provided by the virtual travel assistant feature, in addition to being processed by KKday's internal systems, may be generated with the assistance of large language model technology provided by external artificial intelligence service providers engaged by us (such as OpenAI, Google, etc.; the actual providers may change due to adjustments in our technical architecture). The conversation content you enter within the feature will be provided to such providers in the manner described in Sections 4.9 and 5.4 of this Policy, and may be transferred to and processed in countries or regions outside Taiwan. The scope of the virtual travel assistant feature is limited to general pre-travel inquiries (such as itinerary suggestions and common travel information queries) and does not involve order creation, payment, or any other decisions with legal effect. To reduce the risk of your personal information being disclosed, we remind you to avoid entering personally identifiable or sensitive information, such as passport numbers, credit card numbers or health conditions, into AI tools such as the virtual travel assistant, and we recommend that you limit the information you enter to what is strictly necessary. We do not engage in automated decision-making that results in legal or similarly significant effects based solely on automated processing of personal data. We comply with applicable laws and other relevant considerations when deploying these tools. For the purpose of monitoring the performance of the virtual travel assistant (for example, for quality assurance), we may review your conversation threads and make improvements accordingly.
Your use of this feature is also subject to the KKday AI Virtual Travel Assistant Terms of Service. Please read the Terms of Service before using this feature.
Within the following scope, to the extent necessary, personal information may be obtained by or transferred to third parties:
4.1 Where we use cloud service providers to store personal information in cloud storage.
4.2 In order to contact you, we use communication software or systems as a means of communication, your personal information will be processed, used or stored within such communication software or systems.
4.3 In order to complete a transaction, the payment service provider (for processing the payment) or the logistics provider (for sending or receiving products, such as collecting your passport to arrange a tour) with which we cooperate may obtain your personal information.
4.4 In order to enhance operational efficiency and service quality, the customer service support providers with which we collaborate may obtain your personal information while delivering their services.
4.5 In order to create, fulfill, or cancel your order, we may share the necessary personal information required for the order with the supplier or merchant.
4.5.1 Order Creation or Fulfillment: Based on the specific requirements of the product you purchased, we may provide the supplier or merchant with the necessary personal information required for the order. Please note that the supplier or merchant receiving the data may, if necessary, contact you or the contact person to collect additional personal information needed for the products or to communicate with you about the products; the supplier or merchant may also provide your order data to others in order to complete your purchase. Please also read the supplier or merchant's privacy policy.
4.5.2 Order Cancellation: If you request to cancel your order or apply for a refund due to force majeure, KKday may share your sensitive personal information (e.g., medical certificates or proof of family relationship) with the supplier for the purpose of processing the refund and verifying your eligibility.
4.6 Where we provide the order data to KKday's affiliates in your location.
4.7 If you participate in marketing activities jointly organized by us and our third-party business partner, we may provide your personal information (such as information about prize winners ) to the business partner to the extent necessary for the business partner to provide prizes, discounts or rewards to you.
4.8 In order to enhance the effectiveness of our advertising and improve the accuracy of our analytics, we may share your cookies or other tracking information (including one-way hashed information) with data analytics or advertising platforms. These platforms may combine such information with other identifiers they possess to conduct advertising performance analysis.
4.9 In order to provide generative AI features such as the virtual travel assistant, we may provide the conversation content you enter within such features and other relevant data necessary for providing such features to external artificial intelligence service providers that assist in processing such data, will process the data in a cloud environment and return the results.
5.1 KKday uses the cloud storage services of a trusted cloud storage service provider to store your personal information, and according to your order requirements, we may transfer your data to the following KKday affiliates located in other countries and regions. In addition, we may transfer your data to other recipients depending on where the goods and services are provided (such as where suppliers of local tours or tickets are located)
| Data Recipient | Located Country/Region |
|---|---|
| Taiwanmania.com International Travel Service Co., Ltd. | Taiwan |
| KKday.com International Company Limited (Taiwan) | Taiwan |
| Kkday Japan Co., Ltd. | Japan |
| Kkday Co., Ltd. | Republic of Korea |
| KKday Singapore Pte. Ltd. | Singapore |
| KKday Services Malaysia Sdn. Bhd. | Malaysia |
| KKday Vietnam Company Ltd. | Vietnam |
| KKday (Thailand) Co., Ltd. | Thailand |
| KKday.com International Company Philippines | Philippines |
| KKday Australia Pty Ltd | Australia |
| Well C Travel Limited | Hong Kong |
5.2 The personal information protection laws of the data recipient’s jurisdiction may differ from those of your jurisdiction, but we will do our best to take reasonable measures to ensure that your personal information are effectively secured.
5.3 Cross-Border Transfer of Personal Information
If we collect personal information under the General Data Protection Regulation (GDPR), such information may be transferred to countries or regions outside the European Economic Area (EEA) or your country of residence, including countries or regions where our affiliated companies listed in Section 5.1 are located. These cross-border transfers are necessary for us to provide services to you and to fulfill the purposes described in this Policy. If the data protection laws of those countries or regions are not deemed to provide a level of protection equivalent to that of the EEA or your jurisdiction, we will implement reasonable and appropriate safeguards to ensure your personal information is adequately protected. Such safeguards may include entering into the Standard Contractual Clauses (SCCs) adopted by the European Commission or other data protection mechanisms recognized under applicable laws. We will also ensure that all data recipients handle and protect your personal information in compliance with applicable data protection laws.
5.4 Cross-Border Transfer by AI Service Providers
As described in Sections 3.11 and 4.9 of this Policy, the data processing servers of the external artificial intelligence service providers we use may be located in countries or regions outside Taiwan (such as the United States, Singapore, Japan, etc.; the actual locations may change due to adjustments in the providers' technical architecture). We will require such providers to adopt reasonable data protection measures in accordance with applicable laws to ensure that the personal information you provide through features such as the virtual travel assistant is appropriately protected during cross-border transfer.
KKday will continue to retain and/or use your personal information while the aforementioned collection purpose still exists. If you cease using our website or app, or if your authorization to access our website or app is terminated or withdrawn, we will use industry-standard methods to ensure that your data is no longer retained in a manner that identifies you, while continuing to retain such information in a non-identifiable form, unless otherwise required by law.
7.1 KKday is committed to protecting the security of your personal information. We take appropriate administrative and technical measures to ensure the legality of our collection, processing and use of personal information, and to prevent personal information from being tampered with, damaged, lost, leaked or otherwise infringed.
7.2 We will take reasonable steps with our suppliers or merchants to ensure the security of your personal information in order to maintain the confidentiality, integrity and availability of personal information.
7.3 We will also carefully select the business partners we instruct to collect, process or use personal information, and supervise the security of personal information by contractual and other reasonable means.
7.4 We take reasonable security measures to protect your personal information from unauthorized access, use, disclosure, or modification. However, please note that no security measures for information transmitted over the internet or stored electronically can be guaranteed to be 100% secure, so we cannot guarantee the absolute security of your personal information.
7.5 KKday website or app may include links to third-party websites or applications to offer services. These third-party websites or applications operate independently with their own privacy policies and data protection practices, which we do not control. You are responsible for reviewing the relevant privacy policies and deciding whether to access or use such websites or applications. We are not responsible for and do not endorse any features, content, products, or other materials available on such websites or applications. You shall evaluate such websites or applications independently and assume all associated risks.
To the extent provided by the applicable laws, you may exercise the following rights with respect to your personal information by submitting a request to KKday:
8.1 The right of access: You have the right to access your personal information, including the right to make an inquiry about, request to review or obtain a copy of your personal information.
8.2 The right to rectification: You have the right to supplement or correct your personal information. Depending on the situation, you may be required to provide appropriate supporting information or explanations.
8.3 The right to objection, restriction of processing, and erasure: You have the right, under certain conditions, to object to or request the restriction of our collection, processing or use of your personal information, or to request deletion of your personal information. For example, where we use your personal information for directing marketing purposes, you may object to such use by contacting us at [email protected].
8.4 The right to withdraw consent: Where we collect, process or use your personal information on the basis of your consent, you may withdraw such consent at any time. Please note withdrawing of consent does not impact the lawfulness of processing carried out prior to such withdrawal, and that we may rely on other legal bases to process such personal information after your withdrawal.
8.5 The right to personal information portability: You may request us to make your personal information available to you in a structured, machine-readable, universally used electronic format, or transfer it to a third party to the extent technically feasible, under certain conditions.
8.6 The right not to be subject to automated decision-making: You have the right to not be subject to a decision based solely on automated decision making (including profiling) with your personal data, where the decision would have a legal effect on you or produce a similarly significant effect.
8.7 The method for Right Exercise: You may login to your account access, supplement and correct your personal information, or contact KKday customer service mailbox at [email protected] to exercise the abovementioned rights; if you are a KKday partner, please contact [email protected]. You may also file a complaint about the dispute concerning your personal information with the competent authority in the jurisdiction where KKday is located.
We use cookies to collect the personal information of website visitors and app users. Please refer to the Cookie Policy for information on our use of cookies.
10.1 We do not directly provide services to minors as defined under applicable laws. As a parent or legal guardian, please do not allow a minor under your care to submit any personal information to KKday without your supervision. If you are not an adult in accordance with the laws of your location, please have your parent or legal guardian read and accept this Policy, and have consented to your registration as our member or your submission of personal information to us.
10.2 If the data you provide when placing an order contains the personal information of a minor, you represent and warrant that minor’s parent or legal guardian has consented to you providing such personal information to us.
11.1 KKday may update this Policy from time to time . You are advised to review the latest version of this Policy. In the event of a material update, we will proactively notify you in an appropriate manner (such as by email, pop-up notification or in-app notification, etc.).
11.2Where you do not agree to the updated terms governing our collection, processing and use of your personal information, please contact us at [email protected].
