I agree to the privacy policy
Article 1 Purpose of Processing Personal Information
The Clinic processes personal information for the following purposes. Processed personal information will not be used for purposes other than those listed below. If the purpose of use changes, necessary measures, such as obtaining separate consent under Article 18 of the Personal Information Protection Act, will be implemented.
1. Membership Registration and Management
* Purposes: Confirming intent to register, identifying/authenticating for membership services, maintaining/managing membership status, verifying identity for restricted identification systems, preventing fraudulent use, confirming legal guardian consent for children under 14, providing notices, and handling grievances.
2. Provision of Goods or Services
* Purposes: Providing services (e.g., consultation booking, procedure information), issuing contracts or invoices, delivering content, offering personalized services, identity/age verification, payment processing, settlement, and debt collection.
3. Grievance Handling
* Purposes: Verifying complainants’ identities, confirming grievance details, contacting/notifying for fact-finding, and notifying processing results.
Article 2 Retention and Use Period of Personal Information
1. The Clinic processes and retains personal information within the retention and use period stipulated by law or as agreed upon by the data subject at the time of collection.
2. Specific retention periods are as follows:
* Membership Registration and Management: Until membership withdrawal.
* Exceptions:
* Until the conclusion of investigations or inquiries for violations of related laws.
* Until settlement of remaining debts or obligations related to website use.
* Medical Information: Retained as required by the Medical Service Act (no separate consent required).
Article 3 Rights and Exercise Methods of Data Subjects and Legal Guardians
1. Data subjects may exercise the following personal information protection rights at any time:
* Request access to personal information.
* Request correction of errors in personal information.
* Request deletion of personal information.
* Request suspension of personal information processing.
2. These rights can be exercised via written request, phone, email, or fax, and the Clinic will promptly address such requests.
3. If a data subject requests correction or deletion of errors in personal information, the Clinic will not use or provide such information until the correction or deletion is completed.
4. Rights may be exercised through a legal guardian or an authorized agent, with submission of a power of attorney as per Annex No. 11 of the Enforcement Rules of the Personal Information Protection Act.
5. Data subjects must not infringe on their own or others’ personal information or privacy processed by the Clinic in violation of the Personal Information Protection Act or related laws.
Article 4 Processed Personal Information Items
The Clinic processes the following personal information items:
* Medical Information (mandatory under Medical Service Act, no separate consent required):
* Items: Name, address, contact details, email, medical records.
* Membership Registration:
* Mandatory Items: Name, email, password.
* Consultation Form Submission:
* Mandatory Items: Name, contact details.
* Collection Methods: Website, written forms, fax, phone, consultation boards, email.
Article 5 Destruction of Personal Information
1. The Clinic destroys personal information without delay once the retention period expires or the processing purpose is achieved.
2. If personal information must be retained under other laws despite the expiration of the consent period or achievement of the purpose, it will be stored in a separate database or location.
3. Destruction procedures and methods:
* Procedure: Personal information identified for destruction is selected and destroyed with the approval of the Clinic’s Data Protection Officer.
* Methods: Electronic files are permanently deleted to prevent restoration; paper documents are shredded or incinerated.
Article 6 Security Measures for Personal Information
The Clinic implements the following measures to ensure the security of personal information:
1. Administrative Measures: Establishing and implementing internal management plans, conducting regular staff training.
2. Technical Measures: Managing access rights to personal information systems, installing access control systems, encrypting sensitive information, and installing security programs.
3. Physical Measures: Controlling access to server rooms and data storage areas.
Article 7 Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
1. The Clinic uses cookies to store and retrieve user information for personalized services.
2. Cookies are small text files sent by the website server to a user’s browser and stored on their device.
3. Purposes of cookies:
* Analyzing access frequency, visit duration, user preferences, and interests for targeted marketing and service improvement.
* Tracking visited services, popular searches, and secure connection status for optimized information delivery.
4. Users may allow or block cookies via browser settings, but blocking cookies may limit access to personalized services.
5. How to manage cookies:
* Chrome: Settings > Privacy and Security > Clear Browsing Data.
* Edge: Settings > Cookies and Site Permissions > Manage and Delete Cookies and Site Data.
* Mobile Chrome: Settings > Privacy and Security > Clear Browsing Data.
* Safari: Settings > Safari > Advanced > Block All Cookies.
* Samsung Internet: Settings > Browsing Privacy Data > Delete Browsing Data.
Article 8 Data Protection Officer
1. The Clinic designates the following Data Protection Officer to oversee personal information processing, handle complaints, and provide remedies for data subjects:
* Name: Kim Chan
* Title: Head Director
* Affiliation: IS Plastic Surgery
* Contact: isps2371500@naver.com
2. Data subjects may direct inquiries, complaints, or remedy requests regarding personal information protection to the Data Protection Officer or relevant department, and the Clinic will respond promptly.
Article 9 Remedies for Infringement of Rights
Data subjects may seek remedies or consultations for personal information infringements through the following organizations:
1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
4. National Police Agency: 182 (ecrm.police.go.kr/minwon/main)
Article 10 Amendments to the Privacy Policy
This Privacy Policy takes effect on September 22, 2025. Any additions, deletions, or corrections due to statutory changes or internal policies will be announced via notices seven (7) days prior to implementation.
I have read and agree to the terms and conditions and privacy policy.