Privacy Policy

Article 1 Purposes of Processing Personal Information

The Clinic processes personal information for the following purposes. Personal information is not used for any purpose other than those below, and if the purpose of use changes, the Clinic takes the necessary measures, such as obtaining separate consent.

• Medical treatment and appointments, consultation guidance, billing and payment of medical fees
• Replies to online and KakaoTalk consultations and booking contact
• Creation and retention of medical records as required by the Medical Service Act and other applicable laws
• Handling of complaints and grievances

Article 2 Items of Personal Information Processed

The Clinic processes the following items of personal information.

• Online consultation: name, phone, email, consultation area and details, preferred visit date, contact method (required: name, phone, consultation details)
• Medical treatment: name, resident registration number (for medical records under the Medical Service Act), address, phone, medical information, photographs (with consent)
• Automatically collected: IP address, date and time of access, browser information (service usage records and security)

Article 3 Processing and Retention Period of Personal Information

The Clinic processes and retains personal information within the retention and use period required by law, or within the retention and use period agreed to by the data subject at the time of collection.

• Online consultation information: 1 year after the consultation is completed
• Medical records: the periods set by Article 15 of the Enforcement Rules of the Medical Service Act (medical records 10 years, prescriptions 2 years, surgical records 10 years, etc.)
• CCTV footage: within 30 days of recording (operating-room CCTV footage is kept for at least 30 days in accordance with the Enforcement Rules of the Medical Service Act)

Article 4 Provision of Personal Information to Third Parties

The Clinic processes the data subject's personal information within the scope specified in Article 1, and provides personal information to third parties in the cases set out in Articles 17 and 18 of the Personal Information Protection Act, such as with the data subject's consent or under special provisions of law.

Article 5 Outsourcing of Personal Information Processing

To handle personal information smoothly, the Clinic may outsource tasks such as the operation of the website and consultation system and the sending of text messages and notifications. When outsourcing, the Clinic specifies and supervises the matters necessary to ensure that personal information is managed securely in accordance with applicable laws.

Article 6 Rights and Obligations of Data Subjects and How to Exercise Them

Data subjects may at any time exercise their rights against the Clinic, including requesting access to, correction or deletion of, or suspension of the processing of their personal information. These rights may be exercised in writing, by phone or by email, and the Clinic acts on such requests without delay.

Article 7 Destruction of Personal Information

When personal information is no longer needed, such as when the retention period has expired or the purpose of processing has been achieved, the Clinic destroys it without delay. Information in electronic file form is deleted in a way that prevents recovery, and paper documents are shredded or incinerated.

Article 8 Measures to Ensure the Security of Personal Information

To ensure the security of personal information, the Clinic establishes and implements an internal management plan, manages access rights, installs access control systems, encrypts personal information, installs security software, secures documents and controls entry by unauthorized persons.

Article 9 Installation, Operation and Management of CCTV

The Clinic installs and operates CCTV for facility safety, fire prevention and patient safety in the operating room. Cameras are installed at the entrances, in the waiting area and in the operating room, and cover the entire area of each location. Operating-room footage is recorded at the request of the patient or guardian in accordance with Article 38-2 of the Medical Service Act, and access to or provision of the footage is limited to the cases prescribed by law.

Article 10 Personal Information Protection Officer

The Clinic designates the following Personal Information Protection Officer, who has overall responsibility for personal information processing and handles data subjects' complaints and remedies related to personal information processing.

• Personal Information Protection Officer: Dr. Juyoung Go, Director
• Contact: 02-533-1888

Article 11 Remedies for Infringement of Rights

Data subjects who need to report or seek advice on a personal information infringement may contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), the Cyber Investigation Division of the Supreme Prosecutors' Office (spo.go.kr, 1301), or the Cyber Bureau of the Korean National Police Agency (ecrm.police.go.kr, 182).

This privacy policy is effective from 9 September 2026.