Privacy Policy

Article 1 (Purposes of Processing Personal Information)

The Clinic processes personal information for the following purposes. The Clinic will not use the personal information it processes for any purpose other than the following, and if a purpose changes, the Clinic will obtain separate consent pursuant to Article 18 of the Personal Information Protection Act.

• ·1. Medical care: diagnosis and treatment, and administrative tasks such as billing, collection, and refund of medical fees
• ·2. Member management: confirmation of intent to register, identity verification, provision of member services, and prevention of fraudulent use
• ·3. Consultation: receiving and responding to online consultations, cost inquiries, self-assessments, and before-and-after photo requests, and reviewing previous consultation history when you consult again or visit the Clinic
• ·4. Notices: post-treatment care instructions and delivery of announcements
• ·5. Marketing (only if you have consented): information about Clinic news and events

Article 2 (Items of Personal Information Processed)

[Membership Registration]

• ·Required: user ID, password, name, mobile phone number
• ·Optional: whether you consent to receive advertising information

[Online Consultation, Cost Inquiry, Self-Assessment, and Before-and-After Photo Requests]

• ·Required: mobile phone number, area of interest, consultation details
• ·Optional: whether you consent to receive advertising information

[In-Person Medical Care]

• ·Name, resident registration number, address, contact information, medical records

Personal information arising in the course of medical care is processed under Korea's Medical Service Act and other applicable laws.

[Information Automatically Generated While Using the Services]

• ·Access IP address, access logs, service usage records, information stored in the browser

Article 3 (Processing of Sensitive Information)

① The Clinic processes health-related information that users write and submit through online consultations, self-assessments, and similar services. This information constitutes sensitive information (health and medical information) under Article 23 of the Personal Information Protection Act.

② The Clinic processes sensitive information separately from other personal information, after obtaining separate consent.

③ Health-related information arising in the course of medical care is processed under the Medical Service Act and other applicable laws.

Article 4 (Processing and Retention Periods of Personal Information)

The Clinic processes and retains personal information within the retention period prescribed by law or the retention period consented to at the time of collection.

• ·1. Member information: until membership withdrawal
• ·2. Consultation information (mobile phone number, consultation details, etc.): 5 years from the date of consultation or request (the same for members and non-members)
• ·3. Consent to receive advertising information: until consent is withdrawn. Pursuant to Korea's Act on Promotion of Information and Communications Network Utilization and Information Protection, the Clinic notifies you of your consent status every 2 years.
• ·4. Medical records: the periods prescribed in Article 15 of the Enforcement Rule of Korea's Medical Service Act (e.g., 10 years for medical charts)
• ·5. Access logs: 3 months pursuant to Korea's Protection of Communications Secrets Act

Article 5 (Provision of Personal Information to Third Parties)

① The Clinic provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as when the data subject has consented or when a statute specifically so provides.

② The Clinic provides personal information as required by law in the following cases:

• ·When provided to the Health Insurance Review and Assessment Service or the National Health Insurance Service for claims for medical care benefit costs, etc., pursuant to Korea's National Health Insurance Act
• ·When requested by investigative agencies or other authorities in accordance with the procedures and methods prescribed by law

Article 6 (Outsourcing of Personal Information Processing)

① To ensure smooth operations, the Clinic outsources personal information processing tasks to the following service provider (outsourcee).

[Service Provider: (주)유지엠씨]

• ·Outsourced tasks: website operation and maintenance, member management, management of consultation requests, sending of advertising information
• ·Outsourcing period: until the outsourcing contract ends

② When entering into an outsourcing contract, the Clinic specifies in the contract, pursuant to Article 26 of the Personal Information Protection Act, matters concerning the prohibition of processing for purposes other than performing the outsourced tasks, technical and administrative safeguards, restrictions on subcontracting, management and supervision of the service provider, and liability such as compensation for damages, and supervises whether the service provider processes personal information securely.

③ If the outsourced tasks or the service provider change, the Clinic will disclose the change in this Policy without delay.

Article 7 (Procedures and Methods for Destruction of Personal Information)

① The Clinic destroys personal information without delay when it is no longer needed, such as when the retention period has expired or the purpose of processing has been achieved.

② If personal information must continue to be retained under other laws, the Clinic transfers it to a separate database or stores it in a separate location.

③ Electronic files are deleted using methods that make recovery impossible, and personal information printed on paper is destroyed by shredding or incineration.

Article 8 (Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them)

① You may at any time exercise your rights against the Clinic, such as requesting access to, correction or deletion of, or suspension of processing of your personal information.

② You may exercise these rights in writing, by telephone, by email, or by other means, and the Clinic will take action without delay.

③ You may also exercise these rights through a representative, such as a legal representative or a person you have authorized.

④ Members may directly edit their member information or withdraw their membership on the website.

⑤ You may not request deletion of personal information that other laws require to be retained (such as medical records).

⑥ You have the right to refuse consent to the collection and use of personal information. However, if you do not consent to the required items, you cannot register as a member or submit a consultation request. Refusing consent to receive advertising information does not restrict your use of other services.

Article 9 (Personal Information of Children Under 14)

When consent is required to process the personal information of a child under the age of 14, the Clinic obtains the consent of the child's legal representative.

Article 10 (Measures to Ensure the Security of Personal Information)

Pursuant to Article 29 of the Personal Information Protection Act, the Clinic takes the following measures necessary to ensure security.

• ·1. Administrative measures: establishment and implementation of an internal management plan, minimizing the number of staff who handle personal information, and regular training
• ·2. Technical measures: management of access rights to personal information processing systems, encryption of important information such as passwords, and installation of security programs
• ·3. Physical measures: access control over materials containing personal information and their storage locations

Article 11 (Installation, Operation, and Refusal of Tools That Automatically Collect Personal Information)

① For users' convenience, the Clinic uses technologies that store usage information in the browser (cookies and browser storage). For example, they are used to keep a pop-up from reappearing after you select "Don't show again today" and to keep you logged in.

② You may allow or refuse such storage in your browser settings. If you refuse, some features, such as staying logged in, may be difficult to use.

③ The Clinic currently has not installed any tools on the website for visitor analytics or advertising tracking.

Article 12 (Chief Privacy Officer)

The Clinic has designated the following Chief Privacy Officer to oversee tasks related to personal information processing and to handle related complaints and remedy damages. You may also submit requests for access to personal information to the contact below.

[Chief Privacy Officer]

• ·Name: 황문숙
• ·Position: CEO
• ·Affiliation: (주)유지엠씨
• ·Phone: 02-511-0353
• ·Email: moonh33@naver.com

Article 13 (Remedies for Infringement of Rights)

To obtain remedies for infringement of personal information, you may apply to the following organizations for dispute resolution or consultation.

• ·Personal Information Dispute Mediation Committee: (within Korea, no area code) 1833-6972 (www.kopico.go.kr)
• ·Personal Information Infringement Report Center: (within Korea, no area code) 118 (privacy.kisa.or.kr)
• ·Supreme Prosecutors' Office: (within Korea, no area code) 1301 (www.spo.go.kr)
• ·Korean National Police Agency: (within Korea, no area code) 182 (ecrm.police.go.kr)

Article 14 (Changes to This Privacy Policy)

① This Policy takes effect on the date the website is launched.

② If the Clinic changes this Policy, it will post a notice on the website at least 7 days before the change takes effect. If a change materially affects users' rights, the notice will be posted at least 30 days before it takes effect.