Privacy policy

Article 1 (Purposes of processing)

The clinic processes personal data for the following purposes. If a purpose changes, consent is obtained in advance.

• Replying to consultation requests — contacting you on the number you leave on the website, about treatment, costs or appointments.
• Marketing information (only where you opt in) — treatment information and news of events.

Marketing messages are optional. Declining them places no restriction on your use of the consultation service.

Article 2 (Categories of personal data processed)

• Required — name, contact number (mobile phone number).
• Optional — whether you consent to marketing messages.
• Generated automatically — an identifier for the route the request came through, the time of the request, and the access IP address and browser information (for the purpose of preventing abuse).
• AI consultation chatbot — what you type into the chatbot is processed in order to generate an answer, and the clinic does not store the content of the conversation. The conversation is not transmitted together with your contact details when you leave them.
• AI symptom check — only where you have consented to usage statistics, the clinic records the items you pick on screen (age group, area and tooth position, symptoms, answers to the follow-up questions, the 0–10 discomfort level, and the visit timing that was shown to you). This is used to see which items are picked often and to improve the guidance, and it is not combined with your name or contact number. Because the items you pick are information about health, they are kept only alongside an anonymous visitor identifier and are not linked to consultation requests. If you do not consent, nothing is recorded and you can still use the symptom check.

Article 3 (Retention and use period)

• Consultation request details (name and contact number): 1 year from the date of collection — destroyed without delay once that period has passed.
• Marketing consent details: until the consent is withdrawn.
• Records of consumer complaints and dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce).
• Usage statistics (visit records and the items picked in the AI symptom check): event records 13 months, visit records 25 months — deleted automatically once that period has passed.

Article 4 (Provision to third parties)

The clinic does not provide personal data to third parties, except where required by law or where the data subject has given separate consent.

Article 5 (International transfers of personal data)

The clinic transfers personal data abroad as set out below. Names and contact numbers are not transferred abroad.

1. AI consultation chatbot

• Recipient: Google LLC (United States)
• Data transferred: what you type into the chatbot
• When and how: sent by API at the time of the conversation
• Purpose: generating the chatbot’s answer
• Retention: destroyed after processing, in accordance with Google’s policy

2. Visitor analysis and advertising measurement

• Recipients: Google LLC (United States), Meta Platforms, Inc. (United States)
• Data transferred: visit records collected through cookies, device and browser information, and page usage history
• When and how: sent automatically when you visit the website
• Purpose: analysing visits and measuring advertising performance
• Retention: in accordance with each operator’s policy

Article 6 (Procedure and method for deleting and disposing of personal data)

Personal data is destroyed without delay once the retention period has passed or the purpose of processing has been achieved. Electronic files are permanently deleted by a method that makes recovery or reconstruction impossible; printed material is shredded or incinerated.

Article 7 (Rights and duties of data subjects, and how to exercise them)

A data subject may exercise the following rights at any time.

• Request access to their personal data
• Request correction where there is an error
• Request deletion
• Request that processing be suspended
• Withdraw consent to marketing messages

Contact the privacy officer named in Article 10 by telephone or email and the request will be acted on without delay. A request may also be made through a legal representative or an authorised agent.

Article 8 (Measures to ensure security)

• Keeping the number of staff who handle personal data to a minimum, and training them
• Managing access rights and retaining access logs
• Encrypting data in transit (HTTPS)
• Authentication for the administration pages and blocking external access
• Preventing abuse of the consultation system by limiting the number of requests

Article 9 (Cookies and similar technologies, and how to refuse them)

The clinic operates the following cookie-based tools in order to analyse how the website is used and to measure advertising performance.

• Google Tag Manager and Google Analytics — analysis of referral routes and page usage
• Meta Pixel — measuring advertising performance and personalised advertising
• Naver Analytics — visitor analysis
• The clinic’s own usage statistics — referral routes, page usage history, and the items picked in the AI symptom check. Only an arbitrary value (cookie) is used to tell visits and visitors apart, and the IP address is not stored in its original form.

What these collect is visit records through cookies, device and browser information, and page usage history. This information is not combined with your name or contact number.

How to refuse — you can refuse or delete cookies in your browser settings. If you refuse cookies, some functions may be inconvenient to use. You may also opt out of personalised advertising individually on the advertising settings pages each operator provides. Consent to the clinic’s own usage statistics can be withdrawn at any time through “Cookie settings” in the footer.

Separately from the above, an essential cookie is used to keep administrators signed in. It does not apply to ordinary visitors.

Article 10 (Privacy officer)

• Officer: 김기영 (Dr. Kim Ki-young), director
• Telephone: 031-341-2828
• Email: [email protected]

Data subjects may direct enquiries, complaints and requests for redress relating to personal data to the contact details above, and the clinic will answer and act on them without delay.

Article 11 (Remedies for infringement of rights)

You may apply to the following bodies for dispute resolution or advice.

• Personal Information Dispute Mediation Committee — 1833-6972 (www.kopico.go.kr)
• Privacy Infringement Report Centre — 118 (privacy.kisa.or.kr)
• Supreme Prosecutors’ Office, Cyber Investigation Division — 1301 (www.spo.go.kr)
• National Police Agency, Cyber Bureau — 182 (ecrm.police.go.kr)

Article 12 (Changes to this policy)

This policy takes effect on 2026-08-22. If its content is added to, removed or amended following a change in law or policy, notice will be given on the website from seven days before the change takes effect.