Personal Information Processing Policy

1. Information we collect

When you submit an online consultation request, we collect:

• Required: name, phone number, subject, password (for viewing your private post — stored only as a one-way hash)
• Optional: your message
• Sensitive information (separate consent): health and sexual-life information that may be included in the consultation subject or message
• Consultation/consent/reply administration data: internal and public identifiers, general/sensitive-information consent status and time, policy version, status and reply, and creation/reply/notification times

Access logs and browser information may be generated automatically during use. To prevent abuse when consultations are submitted or private posts are opened, we automatically collect a SHA-256 hash of a network identifier (not the original IP address), consultation-submission/password attempt counts, and attempt/lock timestamps. When an administrator views, updates, or deletes consultations, we collect an access record containing actor email/ID, action, consultation ID, row count, and occurrence time.

2. Purpose of collection and use

General personal information and separately consented sensitive health and sexual-life information are used only to receive and respond to consultation requests and to guide booking and care. Network-identifier hashes and attempt/lock records are used only to prevent abuse of consultation submission and private-post access; administrator access records are used only for access control, security review, and incident response. Information is not used for any other purpose.

3. Retention period and destruction

Original consultation records, including sensitive information, are destroyed without delay once their purpose is fulfilled and are automatically deleted each day once one year has passed since collection. An encrypted backup created before deletion may retain a copy for up to 30 additional days, after which it is automatically deleted. Network-identifier hashes and attempt/lock records used to prevent abuse of consultation submission and private-post access are automatically deleted each day once one day has passed since the last attempt; administrator access records are automatically deleted each day once two years have passed since occurrence. If an online consultation leads to actual treatment, the medical chart created in the clinic's electronic medical record system is retained for 10 years under Article 15 of the Enforcement Rule of the Korean Medical Service Act. Other treatment-related records and information subject to statutory retention are kept for the respective periods required by Korean law. Method of destruction: electronic files are permanently deleted by unrecoverable means; any printed materials are shredded or incinerated.

4. Provision to third parties

We do not provide your information to third parties, except where required by law or by a lawful request from authorities. For processing entrusted to service providers, see section 5.

5. Entrusted processing

We entrust the following tasks to operate this service:

• Supabase Inc. — storage of consultation data and database operation
• Vercel Inc. — website hosting and access log processing
• Channel Corporation (Channel Talk) — operation of the live chat on this website
• GitHub, Inc. — temporary processing of consultation dumps on GitHub-hosted Actions runners and storage of AES-256-encrypted backup artifacts

Our agreements require these providers to handle personal information securely. We will announce any change of provider through this policy.

6. Transfer of personal information overseas

Personal information is transferred overseas in the course of the entrusted processing above. The legal basis is Article 28-8(1)(3)(a) of the Korean Personal Information Protection Act: the processing and storage are necessary to perform the online consultation service contract, and the required details are disclosed in this policy.

• Recipient and contact: Supabase Inc. (privacy@supabase.com) / Country: Japan (Tokyo) / Items: name, phone number, consultation subject and message (including any health/sexual-life sensitive information), one-way password hash, consultation/consent/reply administration data (internal and public identifiers, general/sensitive-information consent status and time, policy version, status and reply, and creation/reply/notification times), an abuse-prevention SHA-256 hash of a network identifier (not the original IP address), consultation-submission/password attempt counts and attempt/lock timestamps, and administrator access records (actor email/ID, action, consultation ID, row count, and occurrence time) / Time and method: transmitted over the network when a consultation is submitted, processed, or opened / Purpose: storage and operation of consultation data, abuse prevention, access control, security review, and incident response / Period: consultation originals follow section 3; abuse-prevention auxiliary records are retained for one day from the last attempt; administrator access records are retained for two years from occurrence
• Recipient and contact: Vercel Inc. (privacy@vercel.com) / Country: United States / Items: access logs (including IP address, request path and time, browser/device information, and response status) / Time and method: transmitted over the network when you visit the site / Purpose: website hosting, security, and incident analysis / Period: up to one day under the current plan's runtime-log retention
• Recipient and contact: GitHub, Inc. (dpo@github.com) / Country: United States / Items: every column of the consultations table containing the consultation data listed above (abuse-prevention auxiliary records, administrator access records, and all other tables are excluded) / Time and method: once a day, a GitHub-hosted Actions runner temporarily processes a consultation dump received over an encrypted connection, encrypts it with AES-256 within the runner, stores it as an artifact, and deletes plaintext temporary files before the job ends / Purpose: disaster-recovery backup against data loss / Period: 30 days from transfer (automatically deleted thereafter)

Live chat messages handled by Channel Talk are stored domestically in Korea (AWS Seoul region) and are not transferred overseas. To refuse transfer of consultation data to Supabase and GitHub, use the phone (02-595-9904) instead of the online form. To also refuse transfer of Vercel access logs, do not use this website and contact us by phone.

7. Children under 14

We do not collect personal information from children under the age of 14 through the online consultation form. Applicants must confirm that they are at least 14; this confirmation is not stored separately. If you are under 14, please contact us by phone at 02-595-9904.

8. Cookies and similar storage

This site uses browser storage for minimal functions such as remembering whether a notice popup has been dismissed. You may refuse this in your browser settings, though some features may then be limited. We do not use advertising or analytics tracking tools.

9. Your rights and how to exercise them

You may request access, correction, deletion or suspension of processing of your personal information. Requests can be made by phone (02-595-9904) or in person at the clinic, and we will act without delay as required by Korean law. A legal representative or an authorized agent may exercise these rights on your behalf; we may request a power of attorney, proof of family relationship, or other evidence of authority. Consultations posted privately can be viewed directly using the password you set when submitting.

10. Security measures

We limit access privileges to the minimum necessary, apply encryption in transit, and store passwords using one-way hashing. Private post access is protected by limiting the number of incorrect password attempts.

11. Privacy officer

We have designated a privacy officer to oversee personal information processing and handle complaints.

• Privacy officer: Dr. Yoonkyung Song, Director
• Contact: 02-595-9904

You may also contact the following Korean authorities regarding privacy infringement:

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Privacy Infringement Report Center: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office: 1301 / National Police Agency: 182

12. Changes to this policy

If this policy changes, we will announce the changes and their effective date on this website. The effective date is shown at the top of this document.