Privacy Notice

This notice covers the English guide and reservation service of the Seoul Robot & AI Museum (this website). The museum's official Korean website has its own privacy policy.

What we collect

When you submit a reservation request: your name, email address, country, party size, and the date and session you chose. When you look up or cancel a booking: the reservation code and email address you enter. We never ask for a phone number, payment details, or an account.

What it is used for

Only to manage your reservation: confirming your booking, sending the emails about it (confirmation, booking updates, reminder, cancellation; plus request received, waitlist and decline notices for dates handled by staff), and contacting you if something about your visit changes. We do not use your data for marketing, and we never sell it.

How long we keep it

Reservation records, including cancelled and declined requests and copies of the emails we sent you, are deleted automatically 90 days after the visit date. If a reservation is recorded as a no-show, that record is used only to apply the no-show policy and is kept for up to 365 days after the visit date.

Deletion runs automatically on the server twice a day and removes the records from the reservation database. Our hosting provider keeps encrypted daily backups of that database for 5 days, so a deleted record can remain in a backup for up to 5 more days, until that backup expires.

Visitor statistics

So that the museum can see how this guide is used, each page view is counted. What is stored is a counter only: the date, the hour (Korean time), the page path and a country code. Where possible, the country comes from information our hosting provider adds to each request; otherwise, it comes from the region setting your browser already sends with every request. Query strings are never stored, so reservation codes and email addresses in a link cannot end up in the statistics.

To count how many people visited rather than how many pages were opened, your IP address and browser identification are combined with a secret that changes every day and turned into a one-way hash. Only that hash is stored. Your IP address itself is never recorded, and because the daily secret changes, the same visitor cannot be recognised across days. These hashes are deleted after 90 days and the counters after 400 days.

There is no third-party analytics service, no advertising network, and no tracking cookie. The counting is done on this website's own server.

Who processes your data

Museum staff who handle reservations see your booking through individual staff accounts. The following service providers process the data on the museum's behalf, only for the tasks listed:

• Fly.io, Inc. (United States): hosts this website and stores the reservation database on servers in Tokyo, Japan.
• Mailplug Co., Ltd. (Republic of Korea): delivers the emails about your booking.

Apart from these providers, nobody receives your data.

Storage outside Korea

To provide online booking, your reservation data is stored outside Korea as follows (Personal Information Protection Act, Article 28-8).

Recipient	Fly.io, Inc. (privacy contact: compliance@fly.io)
Country	Japan (Tokyo data centre)
Data	Name, email address, country, party size, the date and session you chose, and your reservation code
When and how	Each time you submit, change or cancel a booking, over an encrypted (HTTPS) connection; stored on an encrypted disk
Purpose	Hosting this website and storing reservation records
Retention	As described under “How long we keep it” above

If you do not want your data stored outside Korea, please do not use the online booking form; see “Your rights” below for other ways to visit.

Cookies

This site sets strictly necessary cookies only: a form-security token (raim.csrf, expires after 8 hours) and a login session cookie used by museum staff (raim.sid). There are no analytics, advertising, or tracking cookies: the visitor statistics described above are counted without setting anything on your device.

Your rights

You can ask to see, correct or delete your data, or to stop its processing, at any time. You can check and cancel a booking yourself on the My Booking page with your reservation code and email. For anything else, email us at raim@seoulraim.com; we will reply within 10 days. Someone you authorise may also make the request for you.

You may refuse to give the consent asked for on the booking form. If you do, we cannot take an online booking for you, but you can still visit: the walk-in areas of the museum need no booking, and on weekends the permanent exhibition is registered at the on-site kiosk on the day.

How we protect it

• Every page is served only over an encrypted HTTPS connection, and the database is stored on an encrypted disk.
• Only staff who handle reservations can open the staff pages, each with an individual account. Passwords are stored only as one-way hashes, and repeated failed logins are blocked.
• Records are deleted automatically when the retention period ends.

Privacy officer

The privacy officer named in the museum's official privacy policy (in Korean) is the Head of the General Affairs Division, Seoul Science Center. Privacy enquiries: General Affairs Division, +82-2-970-4526. Questions about this booking service: raim@seoulraim.com.

Help with a complaint

You can also contact these public bodies about a privacy complaint:

• Personal Information Infringement Report Center: privacy.kisa.or.kr, call 118
• Personal Information Dispute Mediation Committee: www.kopico.go.kr, call 1833-6972
• Supreme Prosecutors' Office, cybercrime: www.spo.go.kr, call 1301
• Korean National Police Agency, cyber bureau: ecrm.police.go.kr, call 182

Contact

Seoul Robot & AI Museum
56, Madeul-ro 13-gil, Dobong-gu, Seoul, Republic of Korea
raim@seoulraim.com

Last updated: 8 October 2026