KOYOU Plastic Surgery
Privacy Policy
Effective Date: August 18, 2026
KOYOU Plastic Surgery Clinic (hereinafter
"the Clinic") establishes and discloses the following Privacy Policy
in accordance with Article 30 of the Personal Information Protection Act to
protect the personal information of data subjects and to handle related
grievances promptly and smoothly.
The Clinic processes personal information for
the following purposes. Personal information being processed will not be used
for any purpose other than the following, and if the purpose of use changes,
necessary measures such as obtaining separate consent will be taken in
accordance with Article 18 of the Personal Information Protection Act.
① Processing and managing remote/in-person
consultation replies and medical appointment reservations
② Recording and managing medical treatment and
procedure history
③ Providing post-procedure recovery guidance
and follow-up appointment scheduling
④ Handling complaints and delivering notices
⑤ Service improvement and statistical analysis
1. Items Collected
- Required: Name, contact number (mobile),
consultation content
- Optional: Email, procedure of interest,
photos
- Automatically collected: Access IP, cookies,
visit date/time, service usage records
2. Collection Methods
Homepage (koyoups.com) consultation form,
KakaoTalk consultation, phone consultation, in-person registration
The Clinic processes and retains personal
information within the personal information retention and use period as
stipulated by law or as agreed upon when collecting personal information from
data subjects.
|
Item
|
Retention Period
|
Legal Basis
|
|
Consultation inquiry information
|
1 year after consultation ends
|
Retention by consent
|
|
Medical records
|
10 years
|
Medical Service Act, Article 22
|
|
Prescriptions
|
2 years
|
Enforcement Rules of the Medical Service
Act, Article 15
|
|
Consumer complaint/dispute records
|
3 years
|
Act on Consumer Protection in Electronic
Commerce
|
|
Identity verification records
|
6 months
|
Act on Promotion of Information and
Communications Network Utilization and Information Protection
|
The Clinic processes personal information only
within the scope specified in Article 1 (Purpose of Processing Personal
Information) and does not provide personal information to third parties without
the consent of the data subject, except in the following cases:
① When separate consent has been obtained from
the data subject
② When required by law or when requested by
investigative agencies in accordance with the procedures and methods stipulated
by law for investigative purposes
③ When necessary to prevent imminent danger to
the life, body, or property of the data subject or a third party, such as in
emergency medical situations
The Clinic entrusts personal information
processing tasks as follows for smooth personal information business
processing:
|
Entrusted Company
|
Entrusted Tasks
|
|
Kakao Corp.
|
KakaoTalk consultation channel operation
|
|
Google LLC
|
Website usage statistics analysis (Google
Analytics)
|
|
Naver Corp.
|
Website visit statistics analysis (Naver
Analytics)
|
When concluding entrustment contracts, the
Clinic stipulates in documents such as contracts the prohibition of personal
information processing for purposes other than the entrusted tasks, technical
and managerial protection measures, restrictions on re-entrustment, management
and supervision of trustees, and liability for damages, in accordance with
Article 26 of the Personal Information Protection Act.
Data subjects may exercise the following
rights against the Clinic at any time:
① Request to access personal information
② Request to correct or delete personal
information
③ Request to suspend processing
④ Withdrawal of consent
Rights may be exercised through the Clinic's
representative phone number (02-540-6888) or by visiting in person, and the
Clinic will take action without delay. Rights may also be exercised through a
legal representative or an authorized agent.
The Clinic destroys personal information
without delay when it becomes unnecessary, such as when the personal
information retention period has elapsed or the processing purpose has been
achieved.
- Electronic files: Permanently deleted using
methods that make recovery impossible
- Paper documents: Shredded or incinerated
The Clinic takes the following technical,
managerial, and physical measures necessary to ensure safety, in accordance
with Article 29 of the Personal Information Protection Act:
- Managerial measures: Establishment and
implementation of internal management plans, personal information protection
training for employees
- Technical measures: Access authority
management for personal information processing systems, access control,
personal information encryption, security program installation and updates
- Physical measures: Locking devices for
server rooms and data storage rooms, CCTV operation
The Clinic may use cookies to enhance the
convenience of service use. Cookies are small pieces of data stored in the
user's browser and are used to analyze visit frequency and visit time, and to
improve services.
Users may set cookie permissions or refusals
through browser settings (Internet Options → Privacy). Please note that some
services may be restricted if cookies are refused.
The Clinic designates a Personal Information
Protection Officer as follows to oversee all personal information processing
tasks and to handle complaints and remedy damages related to personal
information:
- Department/Position: Representative
Director, KOYOU Plastic Surgery Clinic
- Contact: 02-540-6888
Data subjects may apply for dispute resolution
or consultation to the following agencies to seek remedy for personal
information infringement:
- Personal Information Infringement Report
Center: (without area code) 118 / privacy.kisa.or.kr
- Personal Information Dispute Mediation
Committee: 1833-6972 / www.kopico.go.kr
- Supreme Prosecutors' Office Cyber
Investigation Division: (without area code) 1301 / www.spo.go.kr
- National Police Agency Cyber Bureau:
(without area code) 182 / ecrm.police.go.kr
This Privacy Policy is effective from August
18, 2026.
When there are additions, deletions, or
modifications due to changes in laws, policies, or security technology, changes
will be announced in advance through the homepage (koyoups.com).
