Privacy Policy
Ohvelyjoo Clinic (hereinafter referred to as 'the Clinic') places great importance on the protection of your personal information and complies with the Personal Information Protection Act. Through this Privacy Policy, the Clinic informs you of the purposes and methods by which your personal information is used, and the measures taken to protect it.
■ Items and Methods of Personal Information Collection
The Clinic collects only the minimum personal information necessary for service use at the time of membership registration. When using the Clinic's services, there are required and optional items. Optional items such as email subscription preferences do not affect service use even if left blank.
[Medical Information]
- Items collected: Name, gender, date of birth, resident registration number, age, occupation, mobile phone number, email, address, nationality, referral information
※ Medical records including unique identification information must be retained in accordance with the Medical Service Act (no separate consent required)
[Website Membership Registration]
- Required items: Name, ID, password, address, contact information (phone number, mobile number), gender, age, weight, height, region of residence, desired treatment , past treatment history, SNS accounts
- Optional subscription preferences: Email, SMS, SNS message
- The following information may be automatically generated and collected during service use: service usage records, access logs, cookies, access IP information
■ Purpose of Personal Information Collection and Use
The Clinic uses collected personal information for the following purposes.
All information provided by users will not be used for purposes other than those stated below, and prior consent will be obtained if the purpose of use changes.
[Medical Information]
- Provision of medical services for diagnosis and treatment, as well as administrative services such as billing, payment, and refunds; reference for telephone consultations by call center staff; communication related to medical services, including appointment scheduling; and service information for promotional/marketing purposes (e.g., sending text messages about promotions).
[Website Member Information]
- Required information: Provision of medical consultation and reservation services through the website
- Optional information: Photo attachments for selfie consultations, hospital news and medical information via email, surveys
■ Third-Party Provision of Personal Information
Items of personal/medical information provided: Name, gender, date of birth, resident registration number, age, mobile phone number, email, address, nationality, referral information, reservation information, visit information, consultation information, treatment information, medical records (charts), treatment information, medical expense information, past history, medical history, attending physician
Purpose of third-party provision: For reference by telephone consultation staff during phone consultations; communication related to medical services, including appointment scheduling; and providing service information for promotional/marketing purposes (e.g., contacting patients regarding promotions).
Third parties receiving information: Current or future contractors who perform the same business on behalf of Ohvelyjoo Clinic (telephone consultation staff reference, appointment notifications, promotional/marketing service guidance, website maintenance companies)
■ Retention and Use Period of Personal Information
Retention/use period: 5 years from the date of collection. However, if a retention period is stipulated by relevant law, the period specified by that law applies.
Destruction procedure: Immediately destroyed after the retention period by the destruction method below.
Destruction method: Electronic files are deleted using technical methods that prevent reproduction; paper documents are shredded and destroyed.
[Medical Information]
- Retained in accordance with medical record retention standards specified in the Medical Service Act
[Website Member Information]
- Upon withdrawal or removal of membership
However, even after the purpose of collection or provision has been achieved, personal information may be retained if required by law such as the Commercial Act.
- Records related to consumer complaints or disputes: 3 years (Act on Consumer Protection in Electronic Commerce)
- Records related to credit information collection/processing and use: 3 years (Credit Information Use and Protection Act)
- Records related to identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection)
- Records related to visits: 3 months (Protection of Communications Secrets Act)
■ Procedures and Methods for Destruction of Personal Information
The Clinic destroys personal information immediately after the [Purpose of Personal Information Collection and Use] has been achieved.
[Destruction Procedure]
Information entered by users for membership registration is destroyed immediately after the purpose has been achieved.
[Destruction Method]
Personal information stored in electronic file format is deleted using technical methods that prevent reproduction.
Personal information printed on paper is destroyed by shredding or incineration.
■ Provision and Sharing of Personal Information
Except with your consent or as required by relevant laws, the Clinic will not use your personal information beyond the scope stated in [Purpose of Personal Information Collection and Use], nor provide it to any third party or organization.
- Submission of medical records for National Health Insurance reimbursement claims to the Health Insurance Review and Assessment Service under the National Health Insurance Act
- Provision in a form that does not identify specific individuals for statistical compilation or academic research
- Submission upon request from investigative authorities through procedures and methods prescribed by law
■ Rights of Users and Legal Representatives and How to Exercise Them
Membership registration for children under the age of 14 (hereinafter referred to as "children") is conducted through a separate form written in simple language that is easy for children to understand. The Clinic obtains the consent of the child's legal guardian before collecting any personal information.
To obtain such consent, the Clinic collects only the minimum information necessary from the child regarding the legal guardian, such as the guardian's name and contact information, and obtains the guardian's consent in accordance with the procedures set forth in this Privacy Policy.
A child's legal guardian has the right to access, correct, or request the deletion of the child's personal information. To access, correct, or delete the child's personal information, the legal guardian may click Edit Member Information and complete the guardian verification process to directly access, correct, or delete the child's information. Alternatively, the legal guardian may contact the Personal Information Protection Officer in writing, by telephone, or by fax, and the necessary measures will be taken.
The Clinic does not provide or share a child's personal information with any third party. If a legal guardian requests the correction of inaccurate personal information collected from a child, the Clinic will suspend the use and disclosure of the relevant personal information until the correction has been completed.
※ Personal information required by law to be retained cannot be modified or deleted during the retention period even upon request.
■ Withdrawal of Consent / Membership Cancellation
You may withdraw your consent to the collection, use, and provision of personal information at any time. To cancel your membership, click 'Withdraw Membership' on the My Page section of the Clinic's website and go through the identity verification process, or contact the Privacy Officer in writing, by phone, or fax, and the Clinic will promptly destroy your personal information and take necessary measures.
■ Installation/Operation of Automatic Personal Information Collection Devices and Opt-Out Options
The Clinic operates 'cookies' that store and retrieve your information. Cookies are small text files sent by the server operating the Clinic's website to your browser and stored on your computer's hard disk.
You have the right to choose whether to allow cookie installation. You may allow all cookies, confirm each time a cookie is saved, or refuse all cookies through your web browser settings.
If you refuse cookie installation, some services may be limited.
■ Privacy Officer
To protect your personal information and handle complaints related to personal information, the Clinic has designated a Privacy Officer as follows.
ㆍPrivacy Officer: Oh Young-ju
ㆍOrganization: Ohvelyjoo Clinic
ㆍPhone: 02-393-5541
You may report any complaints related to the protection of your personal information that arise while using the Clinic's services to the Personal Information Protection Officer. The Clinic will respond promptly and adequately to all reported matters. If you require additional assistance or wish to report a personal information infringement, you may contact the organizations listed below.
ㆍPersonal Dispute Mediation Committee (http://www.1336.or.kr / 1336)
ㆍInformation Protection Mark Certification Committee (http://www.eprivacy.or.kr / (02) 580-0533~4)
ㆍSupreme Prosecutors' Office Cyber Crime Investigation Unit (http://www.spo.go.kr / (02) 3480-3573)
ㆍNational Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr / (02) 392-0330)
■ Security Measures for Personal Information
The Clinic has established various security devices as technical measures to protect users' personal information. All information sent by users is safely stored and managed in a security system protected by a firewall.
As an administrative measure, the Clinic has established procedures for access and management of personal information, limits the number of personnel handling personal information to a minimum, and conducts continuous security training. Additionally, users of systems processing personal information are designated and assigned passwords, which are regularly updated.
■ Notification Obligation Upon Policy Changes
The revised Privacy Policy of Ohvelyjoo Clinic takes effect from September 1, 2023.
