Privacy Policy

Gangnam Pieobom Clinic (the “Clinic”) establishes and publishes this Privacy Policy in accordance with the Personal Information Protection Act and related laws, in order to protect users’ personal information and to handle related complaints promptly and smoothly. This policy applies to online reservations made through our website (gn.pieobom.com). Medical records created after a visit are handled separately in accordance with the Medical Service Act and other related laws.

Effective date: November 1, 2026

Article 1 Personal Information Collected and Collection Methods

Category	Items collected	Collection method
Online reservation (required)	Name, contact number (mobile phone), preferred date and time, selected treatments and estimated amount, and the fact and time of consent to the collection and use of personal information	Website reservation form
Online reservation (required on non-Korean language pages)	Email	Website reservation form
Online reservation (optional)	Request details	Website reservation form
Automatically collected	An irreversibly converted value (hash) of the connecting IP address, and the time of the reservation request	Generated automatically when a reservation is submitted

The IP address is used only to prevent fraudulent or duplicate submissions, and the original IP address is not stored. Because the website does not offer membership registration, we do not collect IDs or passwords, and we do not collect resident registration numbers. You do not need to describe health information such as medical conditions, medications, or allergies in detail in your request; we will confirm what is necessary at your consultation with our medical staff after you visit.

Article 2 Purposes of Collection and Use

• Reservation-related contact, including receiving reservations and notifying you about confirmation, changes, or cancellation
• Notifying the Clinic’s staff by email that a new reservation has been received
• Preparing for your consultation about the selected treatments and estimated amount
• Preventing fraudulent or duplicate submissions and keeping the service stable

Collected personal information is not used for any purpose other than those above. If we wish to use it for advertising or marketing, we will obtain your separate consent.

Article 3 Retention and Use Period

Category	Retention period	Basis
Online reservation information	Destroyed without delay 30 days after the reservation date	User consent; purpose of collection fulfilled
Medical records, etc. (records created after a visit)	The period set by law, such as 10 years	Medical Service Act and its Enforcement Rules

Where retention is required by law, the information is kept separately for the required period. Notification emails of new reservations are deleted without delay after the staff member checks them, and are not kept beyond 30 days from the reservation date.

Article 4 Destruction Procedure and Method

• Procedure: Personal information whose retention period has ended or whose purpose has been fulfilled is destroyed without delay. Online reservation information past its retention period is deleted automatically by the system.
• Method: Electronic files are deleted in a way that cannot be recovered, and printed materials are shredded or incinerated.

Article 5 Provision to Third Parties

The Clinic uses users’ personal information only within the scope of the purposes in Article 2 and does not provide it to third parties without the user’s consent. Exceptions apply where required by law or where an investigative agency requests it through lawful procedures.

Article 6 Outsourcing of Personal Information Processing

Processor	Outsourced task	Retention and use period
Vercel Inc.	Website operation and server for storing reservation information	The retention period in Article 3 or until the outsourcing contract ends
Resend, Inc.	Sending email notifications of new reservations	Until the outsourcing contract ends, after the email has been sent
Google LLC	Providing the Clinic’s business email (Gmail) inbox	The retention period in Article 3 or until the outsourcing contract ends

When outsourcing, we set out the matters needed to keep personal information secure, and we will disclose any change of processor in this policy.

Article 7 Transfer of Personal Information Abroad

Item	Details
Recipient	Vercel Inc., Resend, Inc., Google LLC (all in the United States)
Country of transfer	The countries where the above companies’ servers are located (the United States, etc.)
Items transferred	The online reservation information collected under Article 1 (notification emails contain the reservation number, name, contact number, preferred date and time, treatments, and request details; for reservations from non-Korean language pages, the customer’s email is also included)
Date and method of transfer	Transmitted over the network in encrypted form at the time you submit a reservation
Purpose of transfer	Operating the website, storing and managing reservation information, and sending and receiving notification emails of new reservations
Retention and use period	Same as Article 3 (30 days from the reservation date)

If you do not want your information transferred abroad, you can make a reservation by phone (02-1644-8343) instead of online.

Article 8 Rights of Users and Legal Representatives and How to Exercise Them

• Users may at any time request access to, correction of, deletion of, or suspension of processing of their personal information, or withdraw their consent.
• Please make your request by phone (02-1644-8343) or email (pieobomclinic@gmail.com); we will act without delay after verifying your identity. If the request is made through a representative, documents confirming the representative’s authority, such as a power of attorney, may be required.
• Online reservations for children under 14 require the consent of a legal representative, who may request access to, correction of, deletion of, or suspension of processing of the child’s personal information.
• You have the right to refuse consent to the collection and use of personal information. If you do not consent, online reservations will be restricted, but you can still reserve by phone.

Article 9 How to Withdraw Consent

Users can withdraw consent and request deletion of their personal information by phone or email even after submitting a reservation. If you withdraw, the reservation may be canceled.

Article 10 Installation, Operation, and Refusal of Automatic Collection Devices (Cookies, etc.)

To show the treatments in your cart, the website uses the browser storage (localStorage) of your device. This information is stored only on your device and is not sent to the Clinic’s server. You can delete or block storage and cookies in your browser settings, but your cart may then not be kept.

Article 11 Collection and Use of Online Behavioral Information

The Clinic does not currently collect online behavioral information for personalized advertising or similar purposes. If we begin to collect it, we will first disclose the items collected, the purpose of use, and how to refuse in this policy.

Article 12 Measures to Ensure the Security of Personal Information

• Administrative measures: Staff who handle personal information are kept to a minimum.
• Technical measures: Reservation information is kept in private storage with restricted access, and only authenticated staff can access the admin screen. Data in transit is encrypted (HTTPS).
• Destruction: Reservation information past its retention period is deleted automatically.

Article 13 Personal Information Protection Officer

The Clinic has designated the following Personal Information Protection Officer to oversee the handling of personal information and to deal with user complaints and remedies.

Personal Information Protection Officer	Hyoseung Jang (Representative Director)
Department in charge	Reservations and consultations
Contact	Phone 02-1644-8343 · Email pieobomclinic@gmail.com

Users may direct any inquiry, complaint, or remedy request about personal information protection arising from use of the website to the contact above, and the Clinic will respond and act without delay.

Article 14 Remedies for Infringement of Rights

For consultation or reports about personal information infringement, you may contact the following organizations.

• Personal Information Dispute Mediation Committee 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center 118 (privacy.kisa.or.kr)
• Supreme Prosecutors’ Office 1301 (www.spo.go.kr)
• Korean National Police Agency Cyber Bureau 182 (ecrm.police.go.kr)

Article 15 Changes to this Privacy Policy

This policy applies from November 1, 2026. If anything is added, deleted, or changed, we will announce the change on the website from 7 days before it takes effect. For important changes affecting users’ rights, we will announce it 30 days in advance.

Announcement and effective date	November 1, 2026
Version	1.0 (established)