Privacy Policy

Face Plus Plastic Surgery (hereinafter the "Clinic") places great importance on protecting your personal information and complies with the Personal Information Protection Act. Through this Privacy Policy, the Clinic informs you of the purposes and manner in which the personal information you provide is used and the measures taken to protect it. This Privacy Policy is organized in the following order.

1. Items of Personal Information Collected and Collection Methods

2. Purposes of Collection and Use of Personal Information

3. Retention and Use Period of Personal Information

4. Procedures and Methods for Destroying Personal Information

5. Provision and Sharing of Personal Information

6. Entrusted Handling of Collected Personal Information

7. Rights of Users and Legal Representatives and How to Exercise Them

8. How to Withdraw Consent / Cancel Membership

9. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

10. Personal Information Protection Manager

11. Measures to Ensure the Security of Personal Information

12. Duty to Notify of Policy Changes

1. Items of Personal Information Collected and Collection Methods The Clinic collects only the minimum personal information necessary to use the service when you sign up as a member. To use the Clinic's services, there are required items and optional items at sign-up. Optional items such as whether to receive email do not restrict your use of the service if you do not enter them.

• [Medical Information]
• Items collected: name, resident registration number, address, contact details, medical records ※ Under the Medical Service Act, the Clinic is required to retain unique identification information and medical information (separate consent is not required)
• [Items Collected at Website Sign-up]
• Required items: name, user ID, password, email, contact details (telephone number, mobile phone number)
• Optional items: whether to receive email
• The following information may be generated and collected automatically while you use the service or while the service is being provided: service usage records, access logs, cookies, access IP information
• [How Personal Information Is Collected]
• Personal information is collected in the following ways.
• Website, paper forms, fax, telephone, consultation board, email

2. Purposes of Collection and Use of Personal Information The Clinic uses the personal information it collects for the following purposes. All information provided by users is not used for anything other than the purposes below, and if the purpose of use changes, we will obtain your prior consent.

• [Medical Information]
• Providing medical services for diagnosis and treatment, and administrative services such as billing, payment, and refunds
• [Website Member Information]
• Required information: booking medical appointments through the website, checking bookings, and providing member services,
• Optional information: guidance on clinic news and health information by email, surveys

3. Retention and Use Period of Personal Information When the purpose for which personal information was collected or provided has been achieved, the Clinic destroys your personal information without delay.

• [Medical Information]
• Kept in accordance with the medical record retention standards specified in the Medical Service Act
• [Website Member Information]
• Persons who have withdrawn from membership or been expelled as members. However, even when the purpose of collection or provision has been achieved, the Clinic may retain your personal information if retention is required under laws and regulations such as the Commercial Act.
• Records on consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
• Records on the collection, processing, and use of credit information: 3 years (Act on the Use and Protection of Credit Information) – Records on identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.) – Records on visits: 3 months (Protection of Communications Secrets Act)

4. Procedures and Methods for Destroying Personal Information The Clinic destroys personal information immediately after the "Purposes of Collection and Use of Personal Information" have been achieved. The destruction procedure and methods are as follows.

• [Destruction Procedure] Information entered by users for sign-up and other purposes is destroyed immediately by the destruction method after its purpose has been achieved.
• [Destruction Method] Personal information stored as electronic files is deleted using technical methods that make the records unrecoverable. Personal information printed on paper is shredded or incinerated.

5. Provision and Sharing of Personal Information The Clinic does not, under any circumstances, use your personal information beyond the scope notified in the "Purposes of Collection and Use of Personal Information", or provide it to other persons, companies, or institutions, except where you have given consent or where required by relevant laws and regulations.

• Submission of medical records to the Health Insurance Review and Assessment Service for claiming medical care benefit costs under the National Health Insurance Act – Provision, in a form that does not identify any specific individual, where necessary for compiling statistics or for academic research
• Submission when requested by an investigative agency in accordance with the procedures and methods set out in laws and regulations, etc.

6. Entrusted Handling of Collected Personal Information The Clinic does not entrust the personal information it collects to external organizations.

7. Rights of Users and Legal Representatives and How to Exercise Them Membership sign-up by children under the age of 14 (hereinafter "children") is carried out through a separate form written in plain language that children can easily understand, and the consent of a legal representative is always obtained when personal information is collected. To obtain the consent of a legal representative, the Clinic collects the minimum necessary information from the child, such as the legal representative's name and contact details, and obtains the legal representative's consent by the methods set out in the Privacy Policy. A child's legal representative may request to view, correct, or delete the child's personal information. To view, correct, or delete a child's personal information, the legal representative may click Edit Member Information and, after completing the legal representative verification procedure, view, correct, or delete the child's personal information directly, or contact the Personal Information Protection Manager in writing, by telephone, or by fax, and we will take the necessary measures. The Clinic does not provide or share information about children with third parties, and if a legal representative requests correction of an error in personal information collected from a child, the use and provision of that personal information is prohibited until the error is corrected. ※ Personal information that must be retained by law cannot be modified or deleted within the retention period, even upon request.

8. How to Withdraw Consent / Cancel Membership You may withdraw, at any time, the consent you gave at sign-up to the collection, use, and provision of your personal information. To cancel your membership, you may click "Cancel Membership" under My Page on the Clinic's website and, after completing the identity verification procedure, cancel your membership yourself, or you may contact the Personal Information Protection Manager in writing, by telephone, or by fax, and we will take the necessary measures, such as destroying your personal information without delay.

9. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices The Clinic uses "cookies" that store and retrieve your information from time to time. A cookie is a very small text file that the server used to operate the Clinic's website sends to your browser, and it is stored on your computer's hard disk. The Clinic uses cookies for the following purposes. You have the right to choose whether cookies are installed. Accordingly, by setting options in your web browser, you may allow all cookies, be asked for confirmation each time a cookie is stored, or refuse the storage of all cookies. If you refuse to allow cookies to be installed, you may have difficulty using some services.

10. Personal Information Protection Manager To protect your personal information and handle complaints related to personal information, the Clinic has designated a Personal Information Protection Manager as follows.

• [Personal Information Protection Manager]
• Name: Park Jung Keun
• Position: Director
• Affiliation: Face Plus Plastic Surgery
• Telephone: 02-541-8500
• Email: You may report any complaint related to personal information protection that arises while using the Clinic's services to the Personal Information Protection Manager. The Clinic will give users a prompt and thorough response to their reports. If you need to report or seek advice on any other infringement of personal information, please contact the organizations below.
• Personal Information Dispute Mediation Committee (http://www.1336.or.kr / 1336)
• Privacy Mark Certification Committee (http://www.eprivacy.or.kr / (02) 580-0533~4)
• Supreme Prosecutors' Office Cyber Crime Investigation Unit (http://www.spo.go.kr / (02) 3480-3573)
• National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr / (02) 392-0330)

11. Measures to Ensure the Security of Personal Information As technical measures to protect users' personal information, the Clinic has put in place a number of security devices. All information that users send is stored and managed safely in a security system protected by a firewall. In addition, as administrative measures to protect users' personal information, the Clinic has established the procedures necessary for access to and management of users' personal information, limits the number of staff who handle users' personal information to the minimum, and provides ongoing security training. We also designate the users of systems that process personal information, assign them user passwords, and will update these regularly.

12. Duty to Notify of Policy Changes This Privacy Policy was enacted on June 1, 2012. If content is added, deleted, or modified due to changes in laws, regulations, policies, or security technology, we will announce the reasons for and details of the change on the Clinic's website at least 7 days before the revised Privacy Policy takes effect.

• Date of announcement: June 30, 2021
• Effective date: June 30, 2021

Personal Information Protection Manager: Medical Director Park Jung Keun · 02-541-8500