Privacy Policy

The Company processes personal information for the following purposes. Personal information is not used for any purpose other than those stated below. If the purpose of use changes, the Company will take necessary measures such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

1. Handling consultation requests: receiving requests for clinic marketing consulting, verifying identity, scheduling and conducting consultations, and delivering consultation results and proposals
2. Providing the free diagnosis service: preparing and sending an SEO (search engine optimization) diagnosis report for the clinic website, explaining the results, and proposing follow-up consultation
3. Marketing and advertising (only with optional consent): sending promotional information such as clinic management and marketing content, seminars and service announcements
4. Service operation: managing inquiry history, preventing misuse, and statistical analysis for service improvement

The Company collects and processes the following personal information entered directly by the data subject through the inquiry forms on the website.

The website has no member registration, and the Company does not install its own cookies for advertising or analytics. Only the minimum access records technically required to provide the service are generated automatically by the hosting service.

The Company processes and retains personal information within the retention and use period prescribed by law or the period agreed to by the data subject at the time of collection.

When the retention period expires or the purpose of processing is achieved, the personal information is destroyed without delay. Where other laws require preservation, it is kept for the period prescribed by those laws.

The Company processes personal information only within the scope stated in Article 1 and does not provide it to third parties except in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the separate consent of the data subject or where specifically required by law.

The Company does not currently provide personal information to any third party.

To provide the service smoothly, the Company outsources personal information processing as follows. In accordance with Article 26 of the Personal Information Protection Act, outsourcing contracts specify the prohibition of processing beyond the outsourced purpose, technical and administrative safeguards, restrictions on sub-outsourcing, supervision of the processor and liability for damages, and the Company supervises whether processors handle personal information safely.

Because these processors are located overseas, personal information is transferred abroad. The transfer occurs as soon as the data subject submits an inquiry form and is carried out over information and communications networks. Data subjects may refuse the cross-border transfer, in which case the inquiry service cannot be used. Any change to the outsourced tasks or processors will be disclosed without delay through this Privacy Policy.

When personal information becomes unnecessary, such as upon expiry of the retention period or achievement of the purpose of processing, the Company destroys it without delay.

• Procedure: personal information subject to destruction is identified and destroyed with the approval of the Privacy Officer.
• Method: electronic files are deleted using technical methods that make the records unrecoverable; paper records are shredded or incinerated.

Data subjects may at any time exercise their rights to access, correct, delete, or suspend the processing of their personal information. Requests may be made in writing, by email or by phone, and the Company will act on them without delay.

• Rights may be exercised through a legal representative or an authorized agent. In such cases, a power of attorney in the form prescribed by the Notice on the Methods of Processing Personal Information (Annex Form No. 11) must be submitted.
• Requests for access or suspension of processing may be restricted under Articles 35(4) and 37(2) of the Personal Information Protection Act.
• Correction or deletion cannot be requested where other laws specify the personal information as subject to collection.
• Consent to receive marketing communications may be withdrawn at any time using the opt-out method indicated in each message or by contacting the Privacy Officer below.

The Company takes the following measures to ensure the security of personal information.

• Administrative: establishing and implementing an internal management plan, minimizing staff handling personal information, and regular training
• Technical: access control for personal information processing systems, encryption in transit (HTTPS/TLS), and retention and tamper-prevention of access logs
• Physical: access control to materials and devices that store personal information

The Company does not currently use cookies for advertising or analytics. If web analytics tools are introduced in the future to improve the service, this Policy will be revised to explain their purpose and how to refuse them.

Users may refuse cookies through their browser settings. Refusing cookies may make some parts of the service difficult to use.

The Company designates the following Privacy Officer who is responsible for overall personal information processing and for handling complaints and remedying damages related to it.

Data subjects may direct all privacy-related inquiries, complaints and requests for remedy arising from use of the Company's services to the Privacy Officer. The Company will respond and act without delay.

Data subjects may apply for dispute resolution or counseling to the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency (KISA), and other bodies listed below.

• Personal Information Dispute Mediation Committee: 1833-6972 · www.kopico.go.kr
• Personal Information Infringement Report Center (KISA): 118 · privacy.kisa.or.kr
• Supreme Prosecutors' Office, Cyber Investigation Division: 1301 · www.spo.go.kr
• Korean National Police Agency, Cyber Bureau: 182 · ecrm.police.go.kr

A person whose rights or interests have been infringed by a disposition or omission of the head of a public institution in response to a request under Articles 35 (access), 36 (correction and deletion) or 37 (suspension of processing) of the Personal Information Protection Act may file an administrative appeal under the Administrative Appeals Act.

This Privacy Policy applies from the effective date. Any additions, deletions or corrections required by law or policy will be announced on this page or through website notices at least 7 days before they take effect.