Privacy Policy
'Sia Clinic Daejeon' (hereinafter the "Clinic") places great importance on protecting your personal information and complies with the Personal Information Protection Act of Korea.
Through this Privacy Policy, the Clinic informs you of the purposes and methods for which the personal information you provide is used, and the measures taken to protect it.
1. Personal Information Collected and Collection Methods
2. Purposes of Collection and Use of Personal Information
3. Retention and Use Period, Destruction Procedure and Method
4. Installation, Operation and Refusal of Automatic Collection Devices
5. Rights of Users and Legal Representatives and How to Exercise Them
6. How to Withdraw Consent
7. Provision and Sharing of Personal Information
8. Provision to Third Parties and Outsourcing of Personal Information
9. Personal Information Protection Officer
10. Measures to Ensure the Security of Personal Information
11. Duty to Notify Policy Changes
1. Personal Information Collected and Collection Methods
The Clinic collects only the minimum personal information necessary to provide services when you sign up as a member or make a reservation online. Information essential for medical treatment is collected through the patient registration card without separate consent, in accordance with the Medical Service Act. For additional services other than treatment (advertising), you must complete a separate consent form for collection and use. Not completing this form will not affect your treatment in any way.
- Required items: name, date of birth, gender, address, age, contact number, mobile phone number, email, clinic registration number, service application status
- Health information: visit information, diagnosis information, prescription information, treatment information
- Payment information: card payment approval information such as card issuer and card number
2. Purposes of Collection and Use of Personal Information
① Required
- Treatment information: providing medical services for diagnosis and treatment, and administrative services such as billing, payment and refunds
- Reservation information: identity verification for treatment reservations, reservation inquiries and other services
Notices about Clinic news and health information, and surveys via text message and social media
- Other: preparing visitor analysis data for the development of new services
Basic data for requesting outsourced laboratory tests
- Collection of consumer hazard information pursuant to Article 52 of the Framework Act on Consumers
Restricting the use of users who violate laws or the Clinic's Terms of Use, preventing and sanctioning acts that interfere with the smooth operation of the service including fraudulent use, preventing identity theft and misuse of personal information, keeping records for dispute resolution, handling complaints, etc.
② Optional
- Marketing and promotion: delivering advertising and promotional information such as Clinic news, treatments and events, personalized advertising and marketing, and cosmetics
3. Retention and Use Period, Destruction Procedure and Method [Retention and Use Period]
- The Clinic retains collected personal information only for the statutory periods (patient register: 5 years; medical records: 10 years), after which it is deleted from the database. However, if any claim or debt relationship remains, the information is retained until it is settled.
- If the information provider requests deletion of personal information, it will be deleted immediately.
However, even after the purpose of collection or provision has been achieved, personal information may be retained where it must be preserved under the Commercial Act or other laws.
* Records of consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)
* Records of collection, processing and use of credit information: 3 years (Credit Information Use and Protection Act)
* Records of identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.)
[Destruction Procedure and Method]
- Procedure: destroyed immediately using the methods below after the statutory retention period
- Method: personal information stored in electronic files is deleted using technical methods that make the records unrecoverable, and personal information printed on paper is shredded or incinerated
- Upon termination of outsourced customer management services: the contractor permanently destroys related files and database data within 2 weeks
4. Installation, Operation and Refusal of Automatic Collection Devices
In addition to the personal information above, the service identifies visitors through cookies, pixel tags or web beacons, and IP addresses, and uses them for the purposes below. By using the Clinic's website and services, you are deemed to consent to the use of cookies and similar technologies. (A cookie is a small text file sent by a website or its service provider to the web browser on the user's computer, which allows the system to recognize the user's browser and store and remember certain information. A pixel tag or web beacon is a transparent graphic image placed on a web page or email to indicate whether a page/image has been viewed, or to instruct the browser to display content from another server. An IP address is online address information assigned by an internet service provider to a device such as a PC connecting to the internet. Views on whether an IP address constitutes personal information vary widely from country to country.)
① Remembering content used during previous visits to provide an improved service environment on the next visit
② Analyzing visit traffic and understanding service usage patterns
③ Using for visit traffic analysis through contracts with third parties when necessary
④ Personalized advertising and marketing
⑤ Restricting the use of users who violate laws or the Clinic's Terms of Use, preventing and sanctioning acts that interfere with the smooth operation of the service including fraudulent use, preventing identity theft and misuse of personal information, keeping records for dispute resolution, handling complaints, etc.
How to refuse cookies
○ Example: You can allow all cookies, be asked for confirmation each time a cookie is stored, or refuse to store all cookies by selecting the options in your web browser. Example (Internet Explorer):
Tools at the top of the web browser > Internet Options > Privacy
However, if you refuse the installation of cookies, there may be difficulties in providing the service.
5. Rights of Users and Legal Representatives and How to Exercise Them
Reservations for minors are made through a separate form written in plain language that minors can easily understand, and the consent of a legal representative is always obtained when collecting personal information.
To obtain the consent of a legal representative, the Clinic collects minimum information from the minor, such as the name and contact information of the legal representative, and obtains consent in accordance with the methods set out in this Privacy Policy.
The legal representative of a minor may request access to, correction of, or deletion of the minor's personal information. To do so, the legal representative may click "Edit Member Information," complete the legal representative verification process, and directly view, correct or delete the minor's personal information, or contact the Personal Information Protection Officer in writing, by phone or by fax, and the necessary measures will be taken.
※ Personal information that must be retained by law cannot be corrected or deleted within the retention period, even upon request.
6. How to Withdraw Consent
You may withdraw your consent to the collection, use and provision of optional personal information given when making an online reservation at any time. If you contact the Personal Information Protection Officer in writing, by phone or by fax, we will take the necessary measures, such as destroying your personal information, without delay.
7. Provision and Sharing of Personal Information
Except with your consent or as required by relevant laws, the Clinic will under no circumstances use your personal information beyond the scope notified in the purposes of collection and use, or provide it to other persons, companies or institutions.
- Submission of medical records to the Health Insurance Review and Assessment Service for claims of medical care benefit costs under the National Health Insurance Act
- Provision in a form that does not identify specific individuals when necessary for statistics or academic research
- Submission upon request by investigative agencies in accordance with procedures and methods prescribed by law, etc.
8. Provision to Third Parties and Outsourcing of Personal Information
The Clinic outsources the processing of personal information for online reservations and text notification services as follows, and in accordance with relevant laws, specifies the matters necessary to ensure that personal information is managed safely in outsourcing contracts.
The Clinic's outsourcing contractors and outsourced tasks are as follows.
Contractors: Wavecode Co., Ltd., Sianext Co., Ltd.
Outsourced tasks: website operation and management, database management and storage, delivery of advertising information on the Clinic, treatments and events, personalized advertising and marketing, cosmetics and cosmetics events
Retention and use period: until the end of the outsourcing contract
9. Personal Information Protection Officer
Name: Hwang Hyunseong
Position: Representative Director
Affiliation: Sia Clinic Daejeon
Phone: 1544-9543
10. Measures to Ensure the Security of Personal Information
As technical measures to protect users' personal information, the Clinic has various security systems in place. All information provided by users is safely protected and managed by security equipment such as firewalls.
In addition, as administrative measures, the Clinic has established the procedures necessary for access to and management of users' personal information, limits the number of staff who handle users' personal information to a minimum, and provides continuous security training. The Clinic also designates users of systems that process personal information, assigns them passwords, and renews these passwords regularly.
11. Duty to Notify Policy Changes
This Privacy Policy was established on November 1, 2026. If there are any additions, deletions or modifications due to changes in laws, policies or security technology, the Clinic will announce the reasons for and details of the changes on its website at least 7 days before the revised Privacy Policy takes effect.
Date of announcement: November 1, 2026
Effective date: November 1, 2026
