Privacy Policy

1. Personal Information Collected

• Sign-up: Email address, Display language, Access history
• Reservation: Name (as per passport), Nationality, Date of Birth, Contact Information, Scheduled Visit Date, Selected Healthcare Facility and Procedure
• Health-related information (sensitive information): procedures of interest, underlying medical conditions, medications being taken, etc., which medical institutions request to be confirmed in advance — collected only upon obtaining separate consent
• Payment: Payment approval result, payment amount, payment date and time (payment method information such as card number is processed by the payment service provider and the company does not retain it)
• Lead Collection (Optional): Email Address, Area of Interest, Planned Visit Time
• Automatic Collection: Access IP, Browser Type, Visit Date and Time, Cookies

2. Purpose of Personal Information Use

• Member Identification and Login Link Delivery
• Reservation acceptance, confirmation, modification, cancellation processing and sharing of reservation information with medical institutions
• Deposit Payment, Refund, and Transaction Record Retention
• Customer Inquiry Handling and Dispute Resolution
• Sending of newsletters and service announcements is permitted only with your opt-in consent.
• Service Usage Statistics Analysis and Quality Improvement

3. Retention and Use Period of Personal Information

The company will promptly destroy personal information once the purpose of collection is achieved. However, the following information will be retained for the periods specified below in accordance with relevant laws and regulations.

• Records regarding contracts or withdrawal of offers: 5 years (Act on Electronic Commerce)
• Records regarding payment and supply of goods and services: 5 years (Act on Electronic Commerce)
• Records relating to the handling of consumer complaints or disputes: 3 years (Act on Electronic Commerce)
• Records relating to displays and advertisements: 6 months (Act on Electronic Commerce)
• Access Records: 3 months (Telecommunications Secrets Protection Act)
• Member Account Information: Until member withdrawal. After withdrawal, it will be disposed of, except for the statutory preservation targets mentioned above.

4. Disclosure of Personal Information to Third Parties

The company does not provide personal information to third parties without the user's consent. However, it may provide such information as follows for the performance of reservations.

• Recipient: Medical institution reserved by the user
• Purpose of Provision: Confirmation of medical appointment, preparation for medical care, interpretation, and prior notification
• Provided Information: Name, Contact Information, Nationality, Scheduled Visit Date and Time, Selected Procedure, Additional Health-Related Information for Which Separate Consent Has Been Given
• Retention Period: The retention period of the medical institution's medical records and the period stipulated by related laws and regulations

The user may refuse to agree to third-party provision. However, in such case, the use of the reservation service will be restricted.

5. Entrustment of Personal Information Processing and Transfer Abroad

The company entrusts the processing of personal information as follows for the operation of the service, and some of it is processed overseas. The timing and method of transfer are real-time transmission through the network when using the service.

• Stripe, Inc. — Payment and Refund Processing / United States / Payment Approval Information, Email / Until Termination of the Agency Agreement
• Supabase, Inc. — Database and File Storage / United States / Member and Reservation Information / Until Termination of the Entrustment Contract
• Vercel, Inc. — Web Service Hosting / United States / Access Logs / Until Termination of the Entrusted Contract
• Resend, Inc. — Email Sending / United States / Email Address, Sending History / Until the Termination of the Entrustment Contract

Users may refuse to transfer data abroad. However, since the above company is essential for service provision, users who refuse such transfer will not be able to register as members or use the reservation service.

6. Destruction of Personal Information

Personal information that has exceeded the retention period or for which the processing purpose has been achieved shall be disposed of without delay. Electronic files shall be deleted in a manner that makes recovery impossible, and printed materials shall be shredded or incinerated.

7. User Rights and Methods of Exercise

• You may request access to, correction of, deletion of, and suspension of processing of your personal information.
• You may withdraw your consent. Withdrawing consent for mandatory items may limit your use of the service.
• Exercise of rights may be requested through account settings or {{고객센터 이메일}}, and the company will take action within 10 days from the date of receipt of the request.
• Personal information of children under the age of 14 is not collected.

8. Use of Cookies

The company uses cookies to maintain login status and analyze usage statistics. Users may refuse to store cookies through browser settings, and in such cases, the use of functions requiring login may be restricted.

9. Measures for Ensuring the Security of Personal Information

• Access Authority Management and Access Control System Operation
• Encryption of Transmission Segments (HTTPS) and Encryption of Stored Data
• Retention of Access Logs and Prevention of Tampering
• Minimization of Personal Information Handlers and Regular Training

10. Personal Information Protection Officer

Personal Information Protection Officer: {{개인정보 보호책임자 성명 / 직위 / 연락처}}

Users may apply for consultation with the following agencies regarding personal information infringement. Personal Information Infringement Reporting Center (privacy.kisa.or.kr, 118), Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), Cyber Investigation Division of the Supreme Prosecutors' Office (spo.go.kr, 1301), Cyber Investigation Bureau of the National Police Agency (ecrm.police.go.kr, 182)

11. Changes to the Policy

If the contents of this policy are changed, notice will be given on the service screen 7 days before the implementation date. Unfavorable changes for users will be notified 30 days in advance.

Effective Date: {{시행일}}