Privacy Policy

2. Personal information we process

• Online booking (required): name, phone number, visit type, appointment date and time, treatment interests and details. On non-Korean pages, nationality; for international visitors, name as shown in the passport and passport number
• Online booking (optional): date of birth, additional treatments of interest
• Checking or changing a booking: name, date of birth, phone number
• On-site questionnaire (required): name (international visitors: name as shown in the passport), date of birth, gender, city of residence, phone number, messenger and ID for follow-up, how you found us, reason for visiting, skin concerns and areas of interest, treatment plan (previous treatments, timing, sedation, budget, visit frequency), medical conditions, allergies and medications. International visitors: nationality and passport number or alien registration number
• On-site questionnaire (optional): email, emergency contact (name and phone), trip details (purpose, departure date, number of visits, recovery time, interpreter needed), recent treatments, pregnancy, concerns in your own words
• Consultation request: name, phone number, treatment of interest (required) / preferred date, message (optional)
• Satisfaction survey: name, last 4 digits of phone number, visit date, ratings (required) / comments (optional)
• Information generated automatically: access logs, referral information (referring address and ad identifiers), country of access (estimated from IP address), device and browser information, cookies

Health information (medical conditions, allergies, medications, pregnancy, skin concerns) is treated as sensitive information, and passport and alien registration numbers as unique identifiers. We ask for consent to each separately from the general consent. Passport and alien registration numbers are stored encrypted.

We do not collect Korean resident registration numbers online. If you need national health insurance, we will check your ID card when you visit.

3. Retention period

• Medical records (including the questionnaire): the period set by Article 15 of the Enforcement Rule of the Medical Service Act (10 years for medical charts, etc.)
• Online booking, consultation request and satisfaction survey records: 10 years from the date received
• Google Analytics usage statistics: the period set in Google's data retention settings

Where another law requires a longer period, we keep the information for that period.

4. Provision to third parties

The Clinic does not provide your personal information to outside parties without your consent, except where specifically required by law or requested by an investigative agency under the law.

Only if you use LINE booking on the Japanese pages, we provide the following after obtaining your separate consent on the booking screen.

• Recipient: MOA C&C Co., Ltd. (株式会社モアシーアンドシー, operator of LINE booking guidance and booking management)
• Purpose: LINE booking confirmation, reminders before your visit, receiving and handling changes or cancellations, booking and visit management
• Items: name (romanized), phone number, date of birth, gender, preferred date and time, first or return visit, treatment area, selected treatments, referral information
• Period: until your visit is completed or the booking is cancelled. If you receive treatment, the medical record retention period under the Medical Service Act

5. Outsourcing of processing

To run our services, the Clinic entrusts the processing of personal information to the companies below and supervises them under contract to keep it safe.

• TNH Co., Ltd.: booking, customer and check-in management (link to the "Vegas CRM" electronic chart)
• Cafe24 Corp.: operation of the relay server that passes booking information to the electronic chart
• Supabase Inc.: website database storage (location: Seoul, Republic of Korea)
• Vercel Inc.: website servers (Seoul, Republic of Korea)
• Google LLC: usage statistics (Google Analytics and Tag Manager)
• Meta Platforms, Inc.: ad performance measurement (only with your consent)

6. Transfer outside Korea

Booking, questionnaire and consultation information is stored on servers in the Republic of Korea. For usage statistics and ad performance measurement, the following information is transferred outside Korea. Your name, phone number and health information are not sent.

• Recipients: Google LLC (USA), Meta Platforms, Inc. (USA)
• Items: cookie identifiers, pages visited, referral information, device and browser information
• When and how: sent over the network while you use the website
• Purpose: usage statistics, ad performance measurement
• Period: as set by each company's retention policy

If you do not want this, you can refuse cookies as described in section 7. Refusing does not affect your use of the website or booking.

7. Cookies and behavioral information

The website uses cookies for usage statistics and ad performance measurement: our own visit statistics cookie (180 days), Google Analytics and the Meta Pixel.

• Non-Korean pages: analytics and advertising cookies are not used until you accept in the consent banner.
• Korean pages: usage statistics cookies are used; the advertising cookie (Meta Pixel) is used only with your consent.
• Analytics tools are not used on the questionnaire or booking check pages.

To refuse cookies, choose "Deny" in the consent banner or block cookies in your browser settings.

8. Destruction procedure and method

When the retention period ends or the purpose has been achieved, we destroy the information without delay. Electronic files are deleted in a way that cannot be recovered, and paper documents are shredded or incinerated. Information that must be kept by law is stored separately from other information.

9. Your rights and how to exercise them

You (or a legal representative for children under 14) may at any time request access to, correction, deletion or suspension of processing of your personal information, or withdraw your consent. Contact the privacy officer in section 11 by phone or email and we will act without delay. Medical records may not be deleted during the retention period required by the Medical Service Act.

10. Security measures

• Administrator login and access control
• Encrypted storage of passport and alien registration numbers
• Encrypted transmission (HTTPS)
• Keeping and reviewing access logs

11. Privacy officer

• Name: Kwon Si-jin
• Title: Representative Director
• Phone: +82-2-757-0126
• Email: admin@daclinicmd.com

You may also report or seek advice on privacy violations to the following Korean agencies.

• Personal Information Infringement Report Center: privacy.kisa.or.kr / 118 (in Korea)
• Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
• Supreme Prosecutors' Office: www.spo.go.kr / 1301 (in Korea)
• Korean National Police Agency: ecrm.police.go.kr / 182 (in Korea)

12. Changes to this policy

This policy applies from its effective date. If it changes, we will announce it on the website at least 7 days before the change takes effect.

• Previous policy: effective January 1, 2026