PRIVACY POLICY
Privacy policy
This is an English translation provided for convenience. If there is any difference, the Korean version prevails. View the Korean version.
VEI CLINIC (the "Clinic") maintains this privacy policy to protect personal information and promptly address related complaints in accordance with the Personal Information Protection Act. This policy applies to personal information processed on the Website (veiclinic.com). Medical records from in-person care are managed separately under the Medical Service Act.
1. Personal Information Processed, Purposes, and Retention Periods
| Category | Information | Purpose | Retention period |
|---|---|---|---|
| Email registration | (Required) Email, password, name, mobile number (Optional) Marketing message preferences (text and email) | Identifying members, confirming intent to register, login, booking and consultation services, and service notices | Until account closure |
| Social login registration | (Required) Member identifier provided by Naver, Kakao, or Google, name or nickname, mobile number (If supplied by the provider) Email | Same as above | Until account closure |
| Online booking requests | (Required) Name, mobile number, treatment, preferred date and time, first or return visit (Optional) Notes | Receiving booking requests, contacting you to confirm the schedule, and booking notices | Members: until account closure Guests: 1 year from the request date |
| Online consultations | (Required) Name, mobile number, consultation category, subject, consultation content | Responding to consultations and notifying you of replies | Members: until account closure Guests: 1 year from submission |
| Quick consultations | (Required) Name, contact number (contact or WhatsApp number on the English website) (Optional) Treatment of interest | Confirming consultation requests and providing consultations by phone or messaging | 1 year from receipt |
Booking notes and online consultations may contain sensitive information, such as health conditions. Separate consent is obtained when you provide this information. We do not collect resident registration numbers.
2. Information Collected Automatically
- Login records: Your IP address and browser information at login are used to prevent unauthorized account use and maintain your login. They are deleted when you log out or when the login period ends (up to 30 days).
- Cookies: Cookies maintain your login (vei_sid) and indicate your login status (vei_m). You may block cookies in your browser settings, but features requiring login will then be unavailable.
- Visit statistics: The Clinic's own statistics retain only daily totals of visited page addresses, referring sites, and device types. They do not store IP addresses or identifiers that can identify an individual. Google Analytics and Naver Analytics also collect browsing behavior through cookies under their respective policies. You may opt out through browser settings or the Google Analytics opt-out browser add-on.
3. Disclosure of Personal Information to Third Parties
The Clinic does not disclose personal information to third parties except in cases permitted by Articles 17 and 18 of the Personal Information Protection Act, including the individual's consent or specific legal provisions.
4. Outsourced Processing and Overseas Transfers
| Recipient | Outsourced work | Retention period |
|---|---|---|
| Vultr (The Constant Company, LLC) | Website server operation (the server is in Seoul) | Until the outsourcing agreement ends |
| Comple, bizmsg | Sending Kakao notification messages to Clinic staff about new bookings and consultations (name, contact details, requested item) | Until delivery is complete |
| Resend, Inc. (United States) | Sending member email verification, password reset, and booking and consultation emails (email, name) | Under the provider's policy after delivery (up to 30 days) |
Overseas transfers: Each time an email is sent, the recipient's email address and name are transmitted over the network to the above email provider's overseas servers (United States and Japan). If you do not want this transfer, you may sign up through social login without an email or remove your email address. You will then be unable to receive email notices.
5. Destruction of Personal Information
- Information is destroyed promptly when the retention period ends or its processing purpose has been fulfilled. The Website automatically deletes information past its retention period once a day.
- Electronic files are deleted using methods that prevent recovery. Paper documents are shredded or incinerated.
- Database copies for disaster recovery are retained for only 14 days and then deleted.
6. Your Rights and How to Exercise Them
- You may request access to, correction or deletion of, or suspension of processing of your personal information, or withdraw consent, at any time.
- Members may edit their information, close their accounts, or withdraw marketing consent in My page. Other requests may be made by phone or in writing to the privacy officer below and will be handled promptly.
- You may also make a request through a representative by submitting a power of attorney.
7. Children Under 14
Website membership is available only to people aged 14 or older.
8. Security Measures
- Passwords are stored using an irreversible method (scrypt), and all communications are encrypted with HTTPS.
- Administrative access to personal information uses individual staff accounts and permissions, supports two-factor authentication, and locks access after a specified number of failed login attempts.
- Records of administrators viewing, editing, deleting, and downloading personal information are retained and reviewed for 2 years.
- A firewall permits only necessary server connections, and operating system security updates are applied automatically.
9. Privacy Officer
- Privacy officer: Medical Director Hyun Sung Park
- Contact: +82 2 542 8275 (during clinic hours)
- Address: VEI CLINIC, 3F, 162 Apgujeong-ro, Gangnam-gu, Seoul (Sinsa-dong, Beneheim City; Apgujeong Station exit 5, 1 minute walk)
10. Remedies for Infringement of Rights
For reports or advice about personal information infringements, you may contact the following organizations:
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
11. Changes to This Policy
This policy applies from its effective date. Changes will be announced on the Website at least 7 days before taking effect. Previous versions are available on this page.