Consent to provide personal data for service use and booking

Doctors Dermatology Clinic(hereinafter 'the Clinic') considers online privacy very important and makes every effort to protect the personal data users provide when using the Clinic.

Accordingly, the Clinic has established and complies with a privacy policy under applicable laws (Protection of Communications Secrets Act, Telecommunications Business Act, Information and Communications Network Act, etc.).

This policy may change with laws or internal policies; changes will be posted on the website’s main page.

1. Personal information collected and how it is collected

The Clinic collects only the minimum personal information needed to provide its services.

A. Collected during treatment

• Required: name, resident registration number, address, phone number, mobile number, email, alien registration number (if applicable)
• Health information: medical history, family history and other information needed to provide care
• ※ Under the Medical Service Act, medical records are retained as required without separate consent.

B. Collected at website membership sign-up

• Required: ID, password, name, mobile number, email
• Optional: SMS opt-in, email opt-in
• Sensitive information: past medical history, surgical history, treatments of interest
• Automatically collected: service usage records, access logs, cookies, IP address, etc.

C. Collected at payment

For credit card payments: card issuer, card number and other authorization details

D. How personal information is collected

Website (sign-up, consultation, booking, etc.), paper forms, email, phone, KakaoTalk, fax, etc.

2. Purposes of collection and use

• Providing medical services for diagnosis and treatment
• Medical support such as billing, payment and refunds
• Check-up notices and delivery of items
• Education, research and improvement of medical services
• Member services such as online booking and consultation
• Service usage statistics and analysis
• Notices and handling of complaints
• Information on new services and personalized content

3. Provision and sharing of personal information

As a rule, the Clinic does not provide users’ personal information to third parties, except in the following cases.

• With the user’s prior consent
• When requested by investigative authorities under the law
• When provided in a non-identifiable form for statistics, academic research, etc.

4. Outsourcing of personal information processing

To improve service quality and efficiency, the Clinic outsources personal information processing as follows.

5. Retention and use period

• Member information: until cancellation or 1 year of inactivity
• Medical records: 5–10 years under the Medical Service Act
• Complaint/dispute records: 3 years
• Credit information: 3 years
• Identity verification records: 6 months
• Visit records: 3 months

Where the law requires retention, information is kept for that period.

6. Destruction procedure and method

• Destroyed within 5 days after the retention period ends
• Electronic files are deleted by technical means that prevent recovery
• Paper documents are shredded or incinerated

Summary of sections 7–13

• User rights — You may request access, correction or deletion
• Cookies — Used for personalized services; can be blocked in browser settings
• Security measures — Access control, encryption and security checks
• CCTV — For patient safety and facility protection; 24-hour recording and storage
• Privacy officer — Shin Eun-hye (General Manager) / Tel: 02-6437-0082
• Policy change notice — Posted on the website 7 days before changes

Announced and effective: September 1, 2018
Revised: November 6, 2025