Privacy Policy

Sarang-i Women's Clinic (hereinafter the "Clinic") takes the protection of personal information online very seriously and does its utmost to ensure that the personal information users provide while using the Clinic's services is protected. Accordingly, the Clinic has established and complies with a privacy policy based on the laws and regulations that information and communications service providers must observe, including the Protection of Communications Secrets Act, the Telecommunications Business Act, and the Act on Promotion of Information and Communications Network Utilization and Information Protection. This Privacy Policy may be revised from time to time due to changes in government laws and guidelines or in the Clinic's internal policies, and any such changes are promptly reflected in the Privacy Policy posted on the main page of our website.

1. Personal information collected and methods of collection

At sign-up, the Clinic collects only the minimum personal information required to use our services.

A. Information collected for medical care

• Required: name (in Korean), address, contact number
• Health information: personal health information that the medical staff deems necessary to provide medical services, such as medical history and family history.
  ※ Under the Medical Service Act, the Clinic is required to retain unique identification information and medical records.

B. Information collected at website sign-up

• Required: ID, password, name, email
• Optional: contact number (telephone, mobile phone)
• Sensitive information: past medical history, surgical history, procedures of interest
• Information that may be generated and collected automatically while using or providing the service (service usage records, access logs, cookies, access IP information)
• Identity verification: name, verification value, date of birth, gender, ID, password, contact number

C. Information collected at payment

• Credit card payments: card approval information such as the card issuer and card number

D. Methods of collection

• Website (sign-up, live consultation, online reservation, online consultation, etc.), written forms, fax, telephone, email

2. Purposes of collection and use

The Clinic uses the personal information it collects for the following purposes.

• Identity verification for treatment, testing, reservation inquiries and medical care — services for diagnosis and treatment
• Administrative services such as billing, payment and refunds of medical fees
• Sending medical bills, statements and certificates, and sending medication, supplies and results
• Providing medical information to other medical institutions for referrals and return referrals
• Securing channels of communication to deliver notices and handle complaints and grievances
• Materials for responding to online consultations
• Providing information on new services and events
• Quality management of medical care, and legal and administrative responses and measures for the operation of the Clinic
• The minimum analytical data required for education and research
• Providing medical, academic and Clinic information
• Reference material for providing smooth service during consultation and treatment
• Collecting information for consumers under Article 52 of the Framework Act on Consumers

3. Provision and sharing of personal information

Except with your consent or as required by applicable laws and regulations, the Clinic does not under any circumstances use your personal information or provide it to other persons, companies or institutions.

However, the following cases are exceptions.

• Where users have consented to disclosure in advance
• Where required by law, or where an investigative agency makes a request for investigative purposes in accordance with the procedures and methods prescribed by law
• Where the information is needed for statistics, academic research or market research and is provided in a form in which a specific individual cannot be identified

4. Retention and use period

The Clinic destroys your personal information without delay once the purpose for which it was collected or provided has been achieved.

A. Membership information: when the member withdraws or is expelled from membership
B. Information collected for surveys, events and similar purposes: when the survey or event ends
C. Information collected for medical care: retained in accordance with the periods specified in Article 15 of the Enforcement Rule of the Medical Service Act
D. Records of consumer complaints or dispute resolution: 3 years
E. Records of the collection, processing and use of credit information: 3 years
F. Records of identity verification: 6 months
G. Records of visits: 3 months

5. Destruction procedures and methods

The Clinic destroys personal information immediately after the purpose of its collection and use has been achieved.

A. Destruction procedure

Information entered by users for sign-up and similar purposes is destroyed immediately after its purpose has been achieved.

B. Destruction deadline

Once the retention period has elapsed, users' personal information is destroyed within 5 days from the end of the retention period.

C. Destruction method

Personal information stored as electronic files is deleted using technical methods that make the records impossible to restore. Personal information printed on paper is destroyed by shredding or incineration.

6. Rights of users and legal representatives and how to exercise them

When a patient requests to view, correct or delete their personal information, the Clinic responds in good faith and processes the request without delay.

A. Viewing personal information

Patients may visit the Clinic to request to view their personal information, and the Clinic responds promptly.

B. Correction / deletion of personal information

• When a patient requests correction or deletion of their personal information, the Clinic corrects or deletes it without delay.
• When a patient requests to view, correct or delete their own personal information, the Clinic verifies their identity by checking an identification document.
• When a patient's representative visits to request viewing, correction or deletion, the Clinic checks the power of attorney, the consent form and the representative's identification document.

7. Withdrawal of consent · Account deletion

You may withdraw at any time the consent you gave at sign-up to the collection, use and provision of your personal information. To withdraw consent (delete your account), click Withdraw Consent (Delete Account) on the website and complete identity verification, or contact the person in charge of personal information, and we will take the necessary measures without delay, including destroying your personal information.

8. Installation, operation and refusal of automatic data collection devices

The Clinic uses cookies to provide users with specialized, personalized services.

A. Purpose of cookies

• Cookies identify a user's computer but do not identify individual users.
• Users can choose whether to allow cookies by adjusting their web browser options.

B. Installing, operating and refusing cookies

• Users can allow or refuse all cookies by setting options in their web browser.
• Example: Internet Explorer > Tools > Internet Options > Privacy > Settings

9. Measures to ensure the security of personal information

The Clinic takes the following technical and administrative measures to prevent patients' personal information from being lost, stolen, leaked, altered or damaged.

[Minimizing and training staff who handle personal information]

We keep the number of designated personal information handlers to a minimum and provide regular training.

[Regular internal audits]

We conduct regular internal audits to ensure security in the handling of personal information.

[Establishing and implementing an internal management plan]

We have established and implement an internal management plan for the safe processing of personal information.

[Encryption of personal information]

Among users' personal information, passwords are stored and managed in encrypted form.

[Technical measures against hacking]

To prevent personal information from being leaked or damaged by hacking or computer viruses, we install security programs and update and inspect them periodically.

[Restricting access to personal information]

We control access by granting, changing and revoking access rights to the database systems that process personal information.

[Access control for unauthorized persons]

We maintain a separate physical location for the systems that store personal information and operate access control procedures.

10. Operation and management of video surveillance equipment

The Clinic operates and manages video surveillance equipment as follows.

[Grounds and purpose of installation]

Safety of patients and facilities; prevention of fire and crime

[Location and coverage]

Location and coverage: lobby, corridors, etc.

[Manager in charge]

Manager in charge: Jung-Hyun Cho

[Recording hours and handling of video data]

Recording hours: 24 hours a day / When the retention period expires, footage is permanently deleted in a way that cannot be restored.

11. Privacy officer

To protect your personal information and handle complaints related to personal information, the Clinic has designated a privacy officer as follows.

[Privacy officer]

Officer: Jung-Hyun Cho
Affiliation: Sarang-i Women's Clinic
Position: Chief Director
Phone: 02-419-7501

Personal Information Dispute Mediation Committee (http://www.1336.or.kr / 1336)
Cybercrime Investigation Division, Supreme Prosecutors' Office (http://www.spo.go.kr / (02) 3480-3573)
Cyber Terror Response Center, Korean National Police Agency (http://www.ctrc.go.kr / (02) 392-0330)

12. Duty to notify of policy changes

This Privacy Policy was established on August 31, 2015. If content is added, deleted or amended due to changes in laws, policies or security technology, we will announce the reasons for and details of the changes on the Clinic's website at least 7 days before the revised Privacy Policy takes effect.

13. Outsourcing of personal information processing

To improve our services, members' personal information is collected and analyzed by a contractor. In accordance with applicable laws, our outsourcing contracts stipulate the matters necessary to ensure that personal information is managed safely.

Through outsourcing agreements and similar documents, the Clinic stipulates compliance with privacy laws, confidentiality of personal information and a prohibition on provision to third parties, and supervises contractors to ensure compliance.