Privacy Policy

1. Information we collect

When you submit an online consultation request, we collect:

• Required: name, phone number, subject, password (for viewing your private post — stored encrypted)
• Optional: your message

Access logs and browser information may be generated automatically during use.

2. Purpose of collection and use

Collected information is used only to receive and respond to consultation requests and to guide booking and care. It is not used for any other purpose.

3. Retention period and destruction

Information is destroyed without delay once its purpose is fulfilled, and in no case retained longer than one year from collection. However, where an online consultation leads to actual treatment, the resulting medical record is retained for 10 years under Article 15 of the Enforcement Rule of the Medical Service Act. Information is also retained for any other period required by law. Method of destruction: electronic files are permanently deleted by unrecoverable means; any printed materials are shredded or incinerated.

4. Provision to third parties

We do not provide your information to third parties, except where required by law or by a lawful request from authorities. For processing entrusted to service providers, see section 5.

5. Entrusted processing

We entrust the following tasks to operate this service:

• Supabase Inc. — storage of consultation data and database operation
• Vercel Inc. — website hosting and access log processing
• Channel Corporation (Channel Talk) — operation of the live chat on this website
• GitHub, Inc. — encrypted storage of consultation data backups

Our agreements require these providers to handle personal information securely. We will announce any change of provider through this policy.

6. Transfer of personal information overseas

Personal information is transferred overseas in the course of the entrusted processing above.

• Recipient: Supabase Inc. / Country: Japan (Tokyo) / Items: name, phone number, consultation subject and message, password (encrypted) / Time and method: transmitted over the network when you submit a consultation / Purpose: storage and operation of consultation data / Period: same as the retention period in section 3
• Recipient: Vercel Inc. / Country: United States / Items: access logs (IP address, etc.) / Time and method: transmitted over the network when you visit the site / Purpose: website hosting / Period: term of the hosting agreement
• Recipient: GitHub, Inc. / Country: United States / Items: name, phone number, consultation subject and message, password (encrypted) / Time and method: an encrypted backup is transmitted over the network once a day / Purpose: retention of backups against data loss / Period: 30 days from the transfer (deleted automatically thereafter)

Live chat messages handled by Channel Talk are stored domestically (AWS Seoul region) and are not transferred overseas. You may refuse this overseas transfer. In that case, please contact us by phone at 02-595-9904 instead of using the online consultation form.

7. Children under 14

We do not collect personal information from children under the age of 14 through the online consultation form. If you are under 14, please contact us by phone at 02-595-9904.

8. Cookies and similar storage

This site uses browser storage for minimal functions such as remembering whether a notice popup has been dismissed. You may refuse this in your browser settings, though some features may then be limited. We do not use advertising or analytics tracking tools.

9. Your rights and how to exercise them

You may request access, correction, deletion or suspension of processing of your personal information. Requests can be made by phone (02-595-9904) or in person at the clinic, and we will act without delay as required by law. Consultations posted privately can be viewed directly using the password you set when submitting.

10. Security measures

We limit access privileges to the minimum necessary, apply encryption in transit, and store passwords using one-way hashing. Private post access is protected by limiting the number of incorrect password attempts.

11. Privacy officer

We have designated a privacy officer to oversee personal information processing and handle complaints.

• Privacy officer: Dr. Song Yun-kyung, Director
• Contact: 02-595-9904

You may also contact the following Korean authorities regarding privacy infringement:

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Privacy Infringement Report Center: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office: 1301 / National Police Agency: 182

12. Changes to this policy

If this policy changes, we will announce the changes and their effective date on this website. The effective date is shown at the top of this document.