Last updated on November 13, 2025
Last updated on November 13, 2025
Annex 1: Cross-border transfer of personal information
|
Recipient Name and Contact Info |
Purpose of the use and retention of Personal Information (PI) by the Third Party |
All specific PI items transferred |
Period of Retention by the Third Party |
Destination Country |
Date, time, and method of transmission |
Users right to refuse transfer of PI to the recipient(s) and disadvantages resulting from such refusal |
Sub-processors |
|
adjust Inc.
https://www.adjust.com/terms/privacy-policy/
|
Mobile App tracking and analytics software to analyze and optimize mobile advertising campaigns. |
IP addresses, Device IDs including Advertising IDs, HTTP Header, User Agent (country, language, local settings, (version of the) operating system) and App-version, User’s device and App/Web Activity Information, App and Event Token |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
US, DE, NL |
At the time customer engages with the mobile app |
Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
|
AU10TIX Limited
|
Identity verification, enhancements, and training of document recognition. |
Images of customer documents used for proof of identity/address (e.g. Passport, Driver’s License, etc.), Data within these images (e.g.: First Name, Last Name, Date of Birth, Address, Document Number, Social Security Number/ National ID Number, Image of Customer), Image Metadata, which may include Geolocation image was taken |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
CY |
At the time of customer identity validation over the network. |
Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
|
Daon Privacy Policy - Daon
|
Evaluating, testing, and optimizing the algorithms used in the identity authentication software products relevant to PayPal. |
Identity documents and Facial images |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
IE |
At the time of providing the service via secure link. |
Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
|
Discover Network https://www.discoverglobalnetwork.com/privacy-policy/
|
Card/Payment Network, enables processing card payments. |
Payment/ transaction details |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
US |
At the time of processing the payment via network. |
Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
|
DocuSign Inc. https://www.docusign.com/privacy
|
Electronic signature solution. |
Name, Email, Job Title |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
Globally |
At the time of signing the documents over the network. |
Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
| Dun & Bradstreet Holdings, Inc. Privacy Policy | Global information resource containing merchant data | Name, Email, Job Title | For as long as necessary to provide the services or as otherwise agreed in the service contract. | UK, US | At the time of providing service. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. | Please refer to D&B Subprocessors |
| FingerPrintJS, Inc. https://dev.fingerprint.com/docs/privacy-policy | Device intelligence platform to identify individuals on web and mobile for fraud mitigation purposes. | Device IDs, device information | For as long as necessary to provide the services or as otherwise agreed in the service contract. | US | At the time of providing service. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. | |
|
Veriff https://www.veriff.com/privacy-notice
|
Subscription software for image and documentation capture and verification. |
Personal data contained within verification documents (e.g.: Names and Contact Details, Identification Documents details, including Document Type, Photo of the document, Document Number, Date of Issue and Expiry, content of extracted fields) Photographs, Videos and Audio Recordings of end users captured by the Services; Biometric Data relating to end users; Results of the Identity Verification / Authentication process conducted through the Services; data available in external registries when applicable, End User’s devices and the Services Usage Data, including the duration of end user's use of the Services, Activity in the Services, IP-address, Domain Name, Software, and Hardware Attributes, General Geographic Location (e.g. city, state, country); Any other Personal Data that Vendor processes on behalf of PayPal during the Term in connection with PayPal's use of and access to the Services |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
EU, US |
At the time of providing the service via utilized software. |
Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
|
IDM Global Inc. (Identity Mind Global) https://www.idology.com/about-us/general-privacy-policy/
|
Customer Document Verification solutions for Hyperwallet. |
Name, Date of Birth, Age, Gender, Address, Document type, Document ID, Portrait, etc. |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
US, DE |
At the time of providing the service over the network. |
Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
| NetNumber, Inc. Privacy Policy | Global phone number intelligence and data services for fraud prevention. | Phone number | For as long as necessary to provide the services or as otherwise agreed in the service contract. | US | At the time of providing service. | Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. | |
|
Payfone (now Prove Inc.)
|
Telephony-based authentication service to validate telephone numbers, verify identity and carry out checks for the prevention and detection of crime, including fraud and/or money laundering. |
Address, Date of Birth, Name, Phone Number |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
US |
At the time of customer identity validation over the network. |
Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
Prove Identity Ltd |
|
PPRO Financial Ltd (UK) PPRO - Privacy Policy |
Payment processing and fraud checking for alternative payment methods. |
Customer and Merchant Transactional Data and Merchant account / verification information, such as: name, date of birth, address, telephone number, tax number, national personal identification number, place of birth, website, email address, registration number, beneficial owners, identification document information and any other identity information requested by PayPal for risk, compliance and credit purposes. |
For as long as necessary to provide the services or as otherwise agreed in the service contract or required by a local regulator. |
UK, DE |
When onboarding the merchant via secure API and when processing the payments. |
Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
|
Salesforce https://www.salesforce.com/company/privacy/
|
B2B Marketing automation and CRM solution. To store merchant contact information and other supporting information about the business relationship. |
Email Address, Name, Phone Number, Relationship details, First and last name, Title, Position, Employer Contact information (Company Name, Email, Phone, Physical Business Address), ID data, Professional life data, Personal life data, Localization data |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
Global |
At the time of merchant account creation over the network or manually entered into the system. |
Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
Click here |
| Teleperformance SE Privacy Policy | Customer relationship management services. | Name and account information | For as long as necessary to provide the services or as otherwise agreed in the service contract. | MY | At the time services are provided. |
Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. | |
|
Trulioo Information Services, Inc. https://www.trulioo.com/privacy
|
To verify customer identity information (individual & non-individual) based on the input by the customers. |
Full Name, Date of birth, Address, Government ID, Phone Number, Email Address |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
CA, AU, IE, US |
At the time of customer identity validation over the network. |
Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
| Zumigo, Inc. https://zumigo.com/privacy-policy/ | Telecom intelligence to detect phone risk. | Phone number | For as long as necessary to provide the services or as otherwise agreed in the service contract. | US | At the time services are provided. |
Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. | |
|
Hyperwallet Systems Inc. https://www.hyperwallet.com/privacy-policy/ |
To fulfill our legal or regulatory obligations and for our business purposes. |
PI related to registration and use, transaction and experience, participant, etc. |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
US |
At the time of transacting over the network. |
Contact us at the number and email provided in the Our Contact Info section.
|
|
|
Operadora PayPal de México, S. de R.L. de C.V. |
To fulfill our legal or regulatory obligations and for our business purposes. |
PI related to registration and use, transaction and experience, participant, etc. |
For as long as necessary to provide the services or as otherwise agreed in the service contract |
MX |
At the time of transacting over the network. |
Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
|
PayPal Data Services, Inc. |
To fulfill our legal or regulatory obligations and for our business purposes. |
PI related to registration and use, Transaction and experience, participant, etc. |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
US |
At the time of transacting over the network. |
Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
|
PayPal do Brasil Instituição de Pagamento Ltda. |
To fulfill our legal or regulatory obligations and for our business purposes. |
PI related to registration and use, transaction and experience, participant, etc. |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
BR |
At the time of transacting over the network. |
Please contact us if you want to exercise these rights. paypal@generalagent.co.kr |
|
|
PayPal Europe Services Limited |
To fulfill our legal or regulatory obligations and for our business purposes. |
PI related to registration and use, transaction and experience, participant, etc. |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
IE |
At the time of transacting over the network. |
Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
|
PayPal India Private Limited |
To fulfill our legal or regulatory obligations and for our business purposes. |
PI related to registration and use, transaction and experience, participant, etc. |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
IN |
At the time of transacting over the network. |
Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
|
PayPal International S.à r.l. |
To fulfill our legal or regulatory obligations and for our business purposes. |
PI related to registration and use, transaction and experience, participant, etc. |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
LU |
At the time of transacting over the network. |
Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
|
PayPal Israel Ltd. |
To fulfill our legal or regulatory obligations and for our business purposes. |
PI related to registration and use, transaction and experience, participant, etc. |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
IL |
At the time of transacting over the network. |
Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
|
PayPal Network Information Service (Shanghai) Co., Ltd. |
To fulfill our legal or regulatory obligations and for our business purposes. |
PI related to registration and use, transaction and experience, participant, etc. |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
CN |
At the time of transacting over the network. |
Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
|
PayPal Philippines, Inc. |
To fulfill our legal or regulatory obligations and for our business purposes. |
PI related to registration and use, transaction and experience, participant, etc. |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
PH |
At the time of transacting over the network. |
Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
|
PayPal, Inc. |
To fulfill our legal or regulatory obligations and for our business purposes. |
PI related to registration and use, transaction and experience, participant, etc. |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
US |
At the time of transacting over the network. |
Please contact us if you want to exercise these rights: paypal@generalagent.co.kr |
|
|
Soluciones BK, Sociedad Anonima |
To fulfill our legal or regulatory obligations and for our business purposes. |
PI related to registration and use, transaction and experience, participant, etc. |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
GT |
At the time of transacting over the network. |
Please contact us if you want to exercise these rights. paypal@generalagent.co.kr |
|
Annex 2: Provision to Domestic Third Parties
|
Recipient Name |
Purpose of using PI |
PI items transferred |
Period of retention and use by the recipient |
Users right to refuse transfer of PI to the recipient(s) and disadvantages resulting from such refusal |
| Bank of America | Provides top-ups and withdrawals to/from PayPal wallets. | Payment/Transaction Details | For as long as necessary to provide the services or as otherwise agreed in the service contract. |
Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
|
Paygate (Xoom service) | Provides payments by depositing money into a bank account in South Korea. |
Payment / transaction details |
For as long as necessary to provide the services or as otherwise agreed in the service contract. |
Please contact paypal@generalagent.co.kr if you would like to refuse overseas transfer. If you refuse overseas transfer, service use may be restricted. |
Annex 3: Delegation to a Domestic Contractor/Outsourcing Company (outsourcing)
|
Recipient Name |
Description of Recipient’s Function |
| Covington & Burling LLP | Provides legal advisory services for litigation, privacy, product & engineering, regulatory and compliance matters. |
|
General Agent Co. Ltd |
Serves as PayPal’s appointed local representative agent for privacy-related matters in Korea. |
| Google LLC | Provides marketing campaign tools (e.g.: Google Campaign Manager & Search Ads 360, Google Analytics 360, Display and Video 360, Google Ads / Customer Match API, Google Ads Data Hub). |
|
PayPal Korea Services LLC |
Acts on behalf of 3PL to fulfill legal or regulatory obligations and for our business purposes |