Privacy Policy
We inform you of the purpose of processing personal information and your rights during member login, online consultation, and hospital use.
document table of contents
1. Personal information processed and collection method
Online consultation: We collect your name, contact details, consultation title and text, and a password for viewing the post. Email and photos are optional; you can submit a consultation without them. Medical history, previous procedures, medications, and scalp photos supplied with a consultation may contain health information.
Standard registration: we store your username, encrypted password, name, phone number, email, registration time and required consent records. These are used for member identification, sign-in, account management and account recovery.
Member login: We process account information required for ID login, user identification value of the social login service provided, account creation date and time, login session, and consultation connection information. The social login identification number is managed as a converted identification value, and the social login profile name, email, and phone number are not separately stored for membership registration purposes.
Collection method: Collected through methods such as consultation on the website, login and authentication procedures, and phone calls or letters provided directly by users to the hospital. The website does not accept resident registration numbers, credit card numbers, or i-PIN information.
During the hospital visit treatment and payment process, personal information, health information, and payment information required for treatment may be processed separately. Consultation information and medical records on the website are separated, and guidance at the treatment site and related laws and regulations are followed.
2. Purpose of processing personal information
It is used to verify membership, maintain login, authenticate the author, view personal consultation history, and link consultation accounts.
It is used to receive and respond to online consultations, to contact you about your consultation, to handle inquiries and grievances, and to ensure service security. When linking your account, we record your identity verification method, the person in charge of processing, and the date and time of processing.
If the clinic uses consultation information or photos for other purposes, such as promotion, published cases, or research, it follows applicable legal procedures, including obtaining any required separate consent. Requesting a consultation does not constitute consent to advertising or public use of the information.
3. Provision of personal information and external services
The hospital does not use personal information beyond the stated purpose or provide it to a third party without the user's consent or legal basis.
Social login takes you to the selected provider’s authentication page. The clinic receives the identifying information needed for login. External consultation channels such as KakaoTalk, and map and video services, are subject to each provider’s privacy policy.
When personal information processing is entrusted to an external party or processed overseas, the trustee, entrusted work, and overseas transfer-related matters are provided and necessary legal procedures are implemented according to the actual contract and processing status.
4. Retention and use period of personal information
Member account information is retained while the account is active. On receiving a request to close the account, the clinic verifies the requester’s identity and begins the deletion process. Information that must be retained by law is stored separately for the required period.
The retention period of online consultation information is one year (upon confirmation of achievement of the consultation purpose) agreed upon on the writing screen. Consultation information that has passed the retention period is subject to deletion, and the creator may request deletion after verifying his/her identity.
The one-year retention period for website consultations does not automatically apply to records of in-person care. Medical records follow the retention periods set for each record type under applicable Korean laws, including the Medical Service Act.
5. Procedures and methods for destroying personal information
Personal information that becomes unnecessary after the retention period has expired or the purpose of processing has been achieved is destroyed without delay, except in cases where there is a preservation obligation under relevant laws and regulations.
Electronic records are deleted so that they cannot be recovered or reproduced, and paper documents are destroyed by shredding or incineration. Records preserved in accordance with laws and regulations are managed separately from other information.
6. Rights of users and legal representatives
Users may request to view, correct, delete, suspend processing, and withdraw consent for their personal information. You can receive guidance on how to apply by calling the hospital's main number: 02-547-1700, and you can also request it in person.
The hospital will process your request after verifying that it is you or your authorized representative. Legal representatives and authorized representatives may be required to submit materials necessary to verify authority. If we are unable to process your request due to legal restrictions, we will inform you of the reason.
When processing the personal information of children under the age of 14 based on consent, consent and confirmation from a legal representative are required. Legal representatives can exercise their rights regarding the child's personal information.
7. Withdrawal of consent and withdrawal of membership
Membership withdrawal and withdrawal of consent to personal information processing can be requested by calling the hospital's main number: 02-547-1700. The hospital processes your request after verifying your identity, and provides guidance on the processing results of consultation information and statutory preservation records.
Disconnecting your social login provider may not delete the member and consultation information stored by the clinic. To delete information held by the clinic, please also submit a request to the clinic.
If you do not consent to the processing of essential personal information or withdraw your consent, you may not be able to use member authentication or online consultation services that require such information.
8. Cookies and access information
The website uses cookies necessary to provide services such as maintaining login, confirming social login requests, and authenticating the consultation author. Security-related information, such as access records, may be processed during the usage environment and service operation process.
We use Google Analytics 4 to understand visits to this website. Information sent to Google includes views of public information pages, device and browser details, and cookie-based visitor identifiers.
Member, individual consultation and administrator pages, along with submitted consultation content, are excluded from analytics. Page addresses used for analytics exclude URL query parameters and authentication values.
You can delete or block cookies in your browser's privacy or site data settings. If you block cookies, some functions, such as staying logged in and viewing private consultations, may not function properly.
9. Ensuring the safety of personal information
Access to private consultation text and attached photos requires member or author authentication. Names are partially masked in the list. Author contact details are available only to authorized clinic administrators.
Authentication information is managed by applying protection measures such as hashing, and unauthorized use is prevented by checking login session expiration and administrator access rights. We record processing history related to consultation management and account linking.
Persons handling personal information must use the information only to the extent necessary for their work and comply with relevant protection obligations.
10. Information on video information processing devices
Requests to view or confirm the existence of video information within the hospital can be made to the person in charge of personal information protection. It is processed through procedures in accordance with relevant laws and regulations, such as identity verification and privacy protection of others.
Please check the actual operating details, such as the purpose of installation, filming range and hours, and retention period of the video information processing devices, through the notice boards in the hospital and the video information processing device operation and management policy.
11. Contact the person in charge of personal information protection
Privacy officer: Medical Director Moh Jae-seong / Clinic: Moh Jae-seong Plastic Surgery / Phone: 02-547-1700
Complaints regarding viewing, correction, or deletion of personal information, withdrawal of consent, and infringement may be submitted to the contact information above. The hospital will confirm your request and guide you through the processing procedures and results.
12. Changes to the Privacy Policy
If we change the privacy policy, we will notify you of the changes and the effective date through our website. Changes that require additional consent or individual notification are subject to procedures in accordance with relevant laws and regulations.
The effective date of the revised Privacy Policy will be announced separately through a notice on the website.