Privacy
Privacy Policy
This is a reference translation. The Korean original is the governing version; where the two differ, the Korean text applies.
REMORE Clinic (the 'Clinic') regards the protection of your personal data as a matter of the first importance and complies with the Personal Information Protection Act.
Through this privacy policy the Clinic explains for what purposes and in what manner the personal data you provide is used, and what measures are taken to protect it.
1. Items of personal data collected and how they are collected
2. Purposes of collecting and using personal data
3. Retention and use period, and the procedure and method of destruction
4. Rights of users and legal representatives, and how to exercise them
5. How to withdraw consent
6. Provision and entrustment of personal data
7. Provision to third parties and entrustment of personal data
8. Personal data protection officer
9. Measures to secure the safety of personal data
10. Duty to give notice of changes to this policy
1. Items of personal data collected and how they are collected
The Clinic collects only the minimum personal data needed to use the service when you register online and make a booking. Information required for medical care is collected through completion of a patient card, without separate consent, in accordance with the Medical Service Act. For additional services beyond medical care (advertising), a separate consent form for collection and use must be completed; declining to complete it has no adverse effect on your care.
- Required items: name, date of birth, gender, address, age, contact number, mobile number, email, hospital registration number, whether a service was requested
- Health information: visit records, diagnosis information, prescription information, treatment information
- Payment information: card issuer, card number and other card payment authorisation details
2. Purposes of collecting and using personal data
(1) Required
- Treatment information: providing medical services for diagnosis and treatment, and administrative services such as billing, payment and refunds
- Booking information: verifying identity when booking or checking appointments and using other services
Clinic news, disease information and surveys delivered by text message and social media
- Other: preparing analyses of visiting patients for the development of new services
Baseline data for referring tests to external laboratories
- Collection of consumer hazard information under Article 52 of the Framework Act on Consumers
Restricting use by users who breach statutes or the Clinic's terms of use; preventing and sanctioning conduct that impedes the smooth operation of the service, including improper use; preventing misappropriation and improper use of personal data; keeping records for dispute resolution; and handling complaints
(2) Optional
- Marketing and promotion: delivering advertising information such as clinic news, treatments and events, and cosmetics
3. Retention and use period, and the procedure and method of destruction
[Retention and use period]
- The Clinic retains collected personal data only for the statutory periods for keeping the patient register (5 years) and medical records (10 years), after which it is deleted from the database. Where a claim or obligation remains outstanding, data is retained until it is settled.
- Where the data subject requests deletion of their personal data, it is deleted immediately
However, even where the purpose of collection or of provision has been achieved, personal data may be retained where retention is required under the Commercial Act or other statutes
* Records on consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce)
* Records on the collection, processing and use of credit information: 3 years (Use and Protection of Credit Information Act)
* Records on identity verification: 6 months (Act on Promotion of Information and Communications Network Utilisation and Information Protection)
[Procedure and method of destruction]
- Procedure: destroyed immediately by the method below once the statutory retention period has passed
- Method: personal data stored as electronic files is deleted using a technical method that makes the records unrecoverable; personal data printed on paper is shredded or incinerated
- On termination of entrusted customer management services: the processor permanently destroys the related files and database records within two weeks
4. Installation and operation of devices that automatically collect personal data, and how to refuse them
Besides the personal data above, the service recognises visitors through cookies, pixel tags or web beacons and IP addresses, and uses them for the purposes below. Using the REMORE Clinic website and services is taken as agreement to the use of these technologies. (A cookie is a small text file that a website or its service provider sends to the web browser on your computer; these files let the system of the website or service provider recognise your browser and store and remember particular information. A pixel tag or web beacon is a transparent graphic image placed in a web page or email that indicates whether the page or image has been viewed, or instructs the browser to display content from another server. An IP address is online address information assigned by an internet service provider to the device, such as a PC, through which a user connects to the internet. Views differ considerably between countries as to whether an IP address constitutes personal data.)
(1) Remembering the content a user viewed on previous visits, to provide an improved environment on the next visit
(2) Analysing visit traffic to the service and understanding how the service is used
(3) Using the data for traffic analysis through contracts with third parties where necessary
(4) Personalised advertising and marketing
(5) Restricting use by users who breach statutes or the Clinic's terms of use; preventing and sanctioning conduct that impedes the smooth operation of the service, including improper use; preventing misappropriation and improper use of personal data; keeping records for dispute resolution; and handling complaints
[How to refuse cookies]
○ For example: you can refuse cookies through the options in the web browser you use — accepting all cookies, being asked each time a cookie is stored, or refusing to store all cookies. Example (Internet Explorer):
: Tools at the top of the browser > Internet Options > Privacy
Note that if you refuse to allow cookies, there may be difficulty in providing the service.
5. Rights of users and legal representatives, and how to exercise them
Bookings by minors are made through a separate form written in plain language that a minor can understand, and the consent of a legal representative is always obtained when personal data is collected.
To obtain the consent of a legal representative, the Clinic collects minimal information from the minor, such as the representative's name and contact details, and obtains that consent by the method set out in this privacy policy.
A minor's legal representative may request access to, correction of and deletion of the minor's personal data. To do so, click 'edit member information', complete the verification of the legal representative, and then access, correct or delete the minor's personal data directly; alternatively, contact the personal data protection officer in writing, by telephone or by fax and the necessary steps will be taken.
※ Personal data whose retention is required by law cannot be amended or deleted within the retention period, even on request.
6. How to withdraw consent
You may at any time withdraw the consent you gave to the collection, use and provision of optional personal data when booking online. If you contact the personal data protection officer in writing, by telephone or by fax, your personal data will be destroyed and the necessary steps taken without delay.
7. Provision and sharing of personal data
Except with your consent or where provided for by the relevant statutes, the Clinic does not in any circumstances use your personal data beyond the scope notified in the purposes of collection and use, nor provide it to any other person, company or organisation.
- Submission of medical records to the Health Insurance Review and Assessment Service to claim treatment benefit costs under the National Health Insurance Act
- Provision in a form in which no individual can be identified, where necessary for statistical or academic research
- Submission where requested by an investigative authority in accordance with the procedures and methods prescribed by law
8. Provision to third parties and entrustment of personal data
The Clinic entrusts personal data for online booking and text notification services as set out below, and in accordance with the relevant statutes the entrustment contract prescribes what is necessary for personal data to be managed safely.
The Clinic's processors and the entrusted work are as follows.
Processors: Mement Co., Ltd. and Shine Factory Co., Ltd.
Entrusted work: website operation and management; database management and storage; delivery of advertising information such as treatments and events, cosmetics and cosmetics events.
Retention and use period: until the entrustment contract ends
9. Personal data protection officer
Name: Jang Ji-seok
Position: Director, REMORE Clinic
Affiliation: REMORE Clinic
Telephone: 1644-4163
10. Measures to secure the safety of personal data
As a technical measure to protect users' personal data, the Clinic has put several security systems in place. All information you provide is protected and managed securely by security equipment such as firewalls.
As an administrative measure, the Clinic has established procedures for access to and management of users' personal data, limits the number of staff who handle it to a minimum, and provides ongoing security training. The Clinic also designates users of the systems that process personal data, issues them passwords and renews those passwords regularly.
11. Duty to give notice of changes to this policy
This privacy policy was established on 1 February 2025. Where content is added, deleted or amended following changes to statutes, policy or security technology, the reasons for and details of the change will be announced on the clinic website at least 7 days before the amended privacy policy takes effect.
Date of notice: 1 February 2025
Effective date: 1 February 2025
User consent for the protection of personal data
REMORE Clinic (the 'Clinic') regards the protection of your personal data as a matter of the first importance and complies with the Personal Information Protection Act.
Through this privacy policy the Clinic explains for what purposes and in what manner the personal data you provide is used, and what measures are taken to protect it.
1. Purposes of collecting and using personal data
[Items of personal data collected]
- Required items: name, date of birth, gender, address, age, contact number, mobile number, email, hospital registration number, whether a service was requested
- Health information: visit records, diagnosis information, prescription information, treatment information
- Payment information: card issuer, card number and other card payment authorisation details
[Purposes of using personal data]
(1) Required
- Treatment information: providing medical services for diagnosis and treatment, and administrative services such as billing, payment and refunds
- Booking information: verifying identity when booking or checking appointments and using other services
Clinic news, disease information and surveys delivered by text message and social media
- Other: preparing analyses of visiting patients for the development of new services
Baseline data for referring tests to external laboratories
- Collection of consumer hazard information under Article 52 of the Framework Act on Consumers
(2) Optional
- Marketing and promotion: delivering advertising information such as clinic news, treatments and events, and cosmetics
2. Retention and use period of personal data
- The Clinic retains collected personal data only for the statutory periods for keeping the patient register (5 years) and medical records (10 years), after which it is deleted from the database. Where a claim or obligation remains outstanding, data is retained until it is settled.
- Where the data subject requests deletion of their personal data, it is deleted immediately
However, even where the purpose of collection or of provision has been achieved, personal data may be retained where retention is required under the Commercial Act or other statutes
* Records on consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce)
* Records on the collection, processing and use of credit information: 3 years (Use and Protection of Credit Information Act)
* Records on identity verification: 6 months (Act on Promotion of Information and Communications Network Utilisation and Information Protection)
3. Provision and sharing of personal data
Except with your consent or where provided for by the relevant statutes, the Clinic does not in any circumstances use your personal data beyond the scope notified in the purposes of collection and use, nor provide it to any other person, company or organisation.
- Submission of medical records to the Health Insurance Review and Assessment Service to claim treatment benefit costs under the National Health Insurance Act
- Provision in a form in which no individual can be identified, where necessary for statistical or academic research
- Submission where requested by an investigative authority in accordance with the procedures and methods prescribed by law
4. Rights of users and legal representatives, and how to exercise them
Bookings are made through a separate form written in plain language that a minor can understand, and the consent of a legal representative is always obtained when personal data is collected.
To obtain the consent of a legal representative, the Clinic collects minimal information from the minor, such as the representative's name and contact details, and obtains that consent by the method set out in this privacy policy.
A minor's legal representative may request access to, correction of and deletion of the minor's personal data. To do so, click 'edit member information', complete the verification of the legal representative, and then access, correct or delete the minor's personal data directly; alternatively, contact the personal data protection officer in writing, by telephone or by fax and the necessary steps will be taken.
※ Personal data whose retention is required by law cannot be amended or deleted within the retention period, even on request.
5. Right to refuse consent to the provision of personal data, and the disadvantages or limits that follow
- You have the right to refuse consent to the provision of personal data. Refusing optional consent carries no disadvantage; refusing required consent means online booking of treatment and the associated guidance services cannot be provided.
Consent to the provision of personal data to third parties and to entrustment
1. Grounds for providing personal data to third parties
- The Clinic entrusts personal data for online booking as set out below, and in accordance with the relevant statutes the entrustment contract prescribes what is necessary for personal data to be managed safely.
2. The Clinic's processors and the entrusted work are as follows.
Processors: Mement Co., Ltd. and Shine Factory Co., Ltd.
Entrusted work: website operation and management; database management and storage; delivery of advertising information such as treatments and events, cosmetics and cosmetics events.
3. Items of personal data entrusted or provided
- Name, date of birth, gender, address, age, contact number, mobile number, email, hospital registration number, whether a service was requested