Privacy Policy

①The Clinic collects the following items when you submit an online consultation or booking request on the website.

• Required: name, contact number
• Optional: area of interest, preferred date and time, message, consultation lookup password (stored encrypted)

②Method of collection: the website consultation/booking form and the quick consultation bar at the bottom of the page

③The following information may be recorded automatically while you use the website.

• Page paths visited, event names such as the inquiry channel clicked, referral source (search/ad medium identifier), and time of occurrence
• These records contain no personally identifiable information such as name or contact number.

④The Clinic does not collect resident registration numbers on the website and does not collect the personal information of children under 14 online.

The Clinic uses collected personal information only for the following purposes.

• Replying to consultation requests and responding to care-related inquiries
• Confirming booking requests and informing you of your visit schedule (phone/KakaoTalk notification)
• Where a consultation lookup password has been set, providing access to the reply after identity verification

It is not used for any other purpose; if the purpose changes, separate consent is obtained.

①Consultation/booking request information: destroyed without delay once the purpose of the consultation is fulfilled; even where it is kept to check consultation history, it is destroyed once 3 years have passed from the date of collection.

②Model application information: destroyed without delay once the selection process ends; even where it is kept, it is destroyed once 1 year has passed from the date of collection.

③Website usage records (the automatically collected information in Article 1 (3)): destroyed once 180 days have passed from the date of collection.

④Access records of the personal information processing system: retained for 2 years in line with the retention standard set by applicable laws, then destroyed.

⑤Information past the periods above is destroyed by an automated procedure at a set time each day. However, consultations that are still being handled and applications still in progress are destroyed on the same basis once handling is complete.

⑥Where retention is required under applicable laws, it is retained for the period specified by those laws.

⑦The fact and time of consent to the collection and use of personal information are retained for the same period as the related request information as evidence of consent.

The Clinic does not provide the personal information of data subjects to third parties. It may be provided only in cases falling under Articles 17 and 18 of the Personal Information Protection Act (separate consent of the data subject, special provisions of law, lawful requests from investigative agencies, etc.).

Within the scope needed to operate the website, the Clinic may outsource system operation tasks such as server hosting and the sending of booking notification messages (KakaoTalk notifications/SMS). Outsourcing contracts specify in writing the prohibition of processing beyond the purpose, technical and administrative safeguards, restrictions on re-outsourcing, and management and supervision of the processor, and the Clinic supervises accordingly. Changes to the outsourced tasks or processors are disclosed through this policy.

①Data subjects may at any time request access to, correction of, deletion of, or suspension of processing of their personal information.

②Rights may be exercised by phone or in writing to the privacy officer below, and the Clinic acts without delay.

③Requests may also be made through a legal representative or an authorized agent.

④Upon receiving a request for correction or deletion, the Clinic does not use or provide the personal information concerned until the action is complete.

①When personal information becomes unnecessary because the retention period has expired or the purpose of processing has been fulfilled, it is destroyed without delay.

②Personal information stored as electronic files is deleted by a method that makes recovery impossible, and personal information recorded on paper is shredded or incinerated.

The Clinic implements the following measures to prevent the loss, theft, leakage, forgery, alteration or damage of personal information.

• Administrative: minimizing handlers, establishing internal management standards and training
• Technical: managing access rights to processing systems, keeping access logs, encrypting transmission (HTTPS), one-way encrypted storage of consultation lookup passwords
• Physical: access control to storage locations

①The Clinic website does not use cookies for advertising or behavioral information collection.

②Essential cookies are used only where strictly necessary to provide the service, such as administrator login, and for the minimum values needed to identify referral sources.

③Users may refuse cookies in their web browser settings; refusal may limit the use of some functions.

The Clinic designates the following privacy officer to oversee personal information processing and to handle related inquiries, complaints and remedies. Access requests under Article 35 of the Personal Information Protection Act are also received below.

• Name: 김종명
• Position: 대표원장
• Contact: 02-542-7002
• Address: 서울특별시 강남구 강남대로 584, 7층

Data subjects may contact the following organizations for remedy or consultation regarding infringement of personal information.

• Personal Information Infringement Report Center (KISA): 118 (no area code) / privacy.kisa.or.kr
• Personal Information Dispute Mediation Committee: 1833-6972 / www.kopico.go.kr
• Supreme Prosecutors' Office Cyber Investigation Division: 1301 (no area code) / www.spo.go.kr
• National Police Agency Cyber Investigation Bureau: 182 (no area code) / ecrm.police.go.kr

This policy may be added to, deleted or amended in accordance with changes in laws, policies or the Clinic's processing, and any change is notified on the website together with its effective date.