Privacy Policy

1. Personal Information We Collect

2. Purpose of Collection and Use

• - Responding to and following up on consultation inquiries
• - Matching with partner clinics and reservation agency services
• - Pre-treatment guidance (preparations, schedule, precautions)
• - Multilingual consultation and communication support
• - Customer management and service quality improvement
• - Complaint handling and dispute response

3. Retention and Use Period

Personal information is destroyed without delay once the purpose of use has been achieved. However, the following information is retained for the periods required by applicable laws.

• - Consultation inquiry records: 1 year from the date the inquiry is resolved
• - Reservation matching and treatment guidance records: 3 years from the date of reservation, matching, or treatment completion
• - Advertising and display records: 6 months (Act on Consumer Protection in Electronic Commerce)
• - Contract and subscription withdrawal records: 5 years (Act on Consumer Protection in Electronic Commerce)
• - Consumer complaint and dispute resolution records: 3 years (Act on Consumer Protection in Electronic Commerce)
• - Access logs: 3 months (Protection of Communications Secrets Act)

4. Provision to Third Parties

The Company does not provide personal information to third parties without the user's prior consent. However, to provide the Reservation Connection service, information is provided as follows.

• - Recipient: the partner clinic selected and agreed to by the user
• - Purpose: consultation, reservation confirmation, treatment guidance
• - Items provided: full name in English, contact number, email, desired treatment area, inquiry details, and health-related information provided by the user
• - Retention and use period: per the partner clinic's policy. The Company retains the information for 1 year after matching ends, then destroys it.

※ Users have the right to refuse third-party provision. Refusal may limit the use of the reservation matching service.

5. Outsourcing and Overseas Transfer of Personal Information

For the smooth provision of services, the Company outsources the processing of personal information to overseas providers as follows.

6. Rights of Data Subjects

Users may exercise the following rights at any time.

• - Request access to personal information
• - Request correction of errors
• - Request deletion
• - Request suspension of processing
• - Withdraw consent

Rights may be exercised by contacting the Privacy Officer in writing, by phone, or by email, and the Company will take action without delay. Personal information of children under the age of 14 is collected only after the consent of their legal representative.

7. Cookies and Automatic Collection

The Company uses cookies to provide services and analyze usage.

• - Purpose: storing the user's preferred language, analyzing access statistics, improving services
• - Analytics tools: not used
• - How to refuse: cookies can be blocked in browser settings (Settings > Privacy > Cookies); blocking may limit some features.

8. Destruction of Personal Information

Personal information is destroyed without delay once the retention period has elapsed or the purpose of processing has been achieved.

• - Electronic files: permanently deleted in an irrecoverable manner
• - Paper documents: shredded or incinerated

9. Security Measures

• - Management of access rights and operation of access control systems
• - Encrypted storage and transmission of personal information (HTTPS)
• - Retention of access logs and prevention of forgery or alteration
• - Minimization and training of staff who handle personal information

10. Privacy Officer

For other reports or consultations, you may contact the following organizations.

• - Personal Information Dispute Mediation Committee: 1833-6972 (kopico.go.kr)
• - Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
• - Supreme Prosecutors' Office Cyber Investigation Division: 1301 (spo.go.kr)
• - National Police Agency Cyber Bureau: 182 (ecrm.cyber.go.kr)

11. Changes to the Privacy Policy

If the contents of this Privacy Policy change, the Company will announce the changes through a site notice at least 7 days before they take effect. For significant changes affecting users' rights, the announcement will be made at least 30 days in advance.