Privacy Policy

1. Who we are

This website is operated by [Clinic legal name] ("Dernia Clinic Myeongdong", "Dernia", "we" or "us"), a medical clinic opening soon in Myeongdong, Jung-gu, Seoul, Republic of Korea. We are the personal information handler responsible for the information described in this policy. Our contact details are in section 12.

2. What personal information we collect

When you use our consultation or contact form

The details you enter, such as your name, email address, phone or messaging contact, country of residence, preferred visit dates, the treatments you are interested in and your message
Any health information you choose to share, such as skin concerns, medical history, medications or photos, which we process only with your separate consent (see section 4)

When you visit the clinic

The details needed to register you as a patient, such as your name, date of birth, nationality, contact details and, where required, passport or other identification details
Medical information, including your medical history, medications, allergies, skin assessment, treatment records, consent forms and, with your consent, clinical photographs
Payment records, such as amounts, dates and payment method

Automatically, when you browse this website

Technical data such as your IP address, browser and device type, the pages you visit and the date and time of your visit
Cookies and similar technologies (see section 8)

3. Why we use your personal information

To answer your inquiries and arrange consultations and appointments
To assess whether a treatment is suitable for you and to provide medical care safely
To keep medical records as required by the Medical Service Act
To process payments, issue receipts and meet tax and accounting obligations
To contact you about your appointments, aftercare and follow-up
To operate, secure and improve this website
To send you news or offers, only if you have separately agreed to receive them; you can opt out at any time

We do not use your personal information for other purposes without your consent, unless the law permits it.

4. Health information and unique identifiers

Information about your health is sensitive information under PIPA. We collect and use it only with your separate, explicit consent, or where the law requires or permits it, such as the medical records we must keep. You may decline, but we may then be unable to assess you or provide treatment safely.

Passport and other identification numbers are unique identification information under PIPA. We process them only where the law requires or permits it, or with your separate consent, and protect them as the law requires, including by encryption.

5. How long we keep your information

Medical records: kept for the periods required by the Medical Service Act and its Enforcement Rules (for example, 10 years for medical records), even if you ask us to delete them
Payment and tax records: kept for the period required by tax and other applicable laws
Inquiries that do not lead to a visit: kept for [retention period, e.g. 1 year] after our last contact, then destroyed
Marketing preferences: kept until you withdraw your consent

When a retention period ends or the purpose of processing has been achieved, we destroy the information without delay. Electronic files are deleted in a way that prevents recovery, and paper records are shredded or incinerated.

6. Sharing your information with third parties

We do not sell your personal information. We provide it to third parties only:

with your consent, for example if you ask us to send your records to another doctor or to your insurer
where a law requires it, such as a valid request from a court, investigating authority or health authority
where it is clearly necessary to protect your life, body or property in an emergency

7. Service providers and transfers outside Korea

We use service providers to run this website and our communications, such as website hosting and form processing, email and payment processing. They process personal information only on our instructions and under a written contract, as PIPA requires.

Some providers may store or process information outside the Republic of Korea, for example on cloud servers. For each such transfer we disclose the recipient and its contact details, the country, the items transferred, when and how they are transferred, the purpose, the retention period and how you can refuse, and we put the safeguards PIPA requires in place.

[Service providers and overseas transfers: list each provider and the work entrusted to it, and for any transfer outside Korea the recipient, contact details, country, items, timing and method, purpose and retention period.]

8. Cookies and similar technologies

This website uses cookies, small files stored by your browser, to make the site work and to understand how it is used. You can refuse or delete cookies in your browser settings. If you block all cookies, some parts of the website may not work properly.

9. Your rights

Under PIPA you have the right to:

ask to see the personal information we hold about you
ask us to correct information that is wrong or incomplete
ask us to delete your information, unless another law requires us to keep it, as with medical records
ask us to suspend the processing of your information
withdraw any consent you have given, for example to marketing messages

To exercise these rights, contact our privacy officer (section 12) in writing or by email. A legal representative or a person you have authorized can also make a request for you, with proof of authority. We will verify your identity and respond without undue delay and within the period set by law. If we cannot fully meet a request, we will explain why.

10. How we protect your information

Administrative measures: internal privacy rules, staff training, and access limited to staff who need it
Technical measures: access controls, secure connections, encryption of sensitive and unique identification information, and security software
Physical measures: restricted access to the areas where records are stored

11. Children

Our services are intended for adults. We do not knowingly collect personal information from children under 14 without the consent of a parent or legal guardian, as PIPA requires.

12. Contact us

If you have questions, requests or complaints about how we handle your personal information, contact our privacy officer:

Privacy officer: [Privacy officer name & email]
Clinic: [Clinic legal name] (Dernia Clinic Myeongdong)
Business registration number: [Business registration number]
Address: [Full street address and floor], Myeongdong, Jung-gu, Seoul, Republic of Korea

You can also send us a message through our contact page .

Help from outside the clinic

If you are not satisfied with our response, you can contact these Korean bodies for advice or dispute resolution:

Personal Information Dispute Mediation Committee: 1833-6972 (kopico.go.kr)
Personal Information Infringement Report Center, run by the Korea Internet & Security Agency (KISA): 118 (privacy.kisa.or.kr)

13. Changes to this policy

We may update this policy when our services or the law change. We will post the updated version on this page with a new effective date and, where required, give notice of significant changes on this website in advance. This policy is effective from [Effective date].

See also our Terms of Use and Medical Disclaimer .

Dernia Clinic Myeongdong

Legal