Kate Clinic values your personal information and complies with the “Act on Promotion of Information and Communications Network Utilization and Information Protection.”

Through this Privacy Policy, the Clinic informs you of how your personal information is used and protected.

If the Clinic revises this Privacy Policy, such changes will be announced through the website notice board (or individual notifications).

Effective date of this policy: August 16, 2013

■ Personal Information Collected

The Clinic collects the following information for membership registration, consultations, service applications, and related purposes.

Collected items: Name, Login ID, Password, Home phone number, Home address, Mobile phone number, Email
Method of collection: Website (membership registration, consultation board, complaint handling, online reservation, etc.)

■ Purpose of Collecting and Using Personal Information

The Clinic uses collected personal information for the following purposes:

Service provision and contract fulfillment
Providing content and processing payments related to service provision

Member management
Identity verification for member-based services, preventing unauthorized or fraudulent use, confirming membership intention, verifying age, confirming legal guardian consent for children under 14, handling complaints and inquiries, delivering notices

Marketing and advertising
Sending event or promotional information, analyzing visit frequency, generating statistics on service usage

■ Retention and Use Period of Personal Information

The Clinic destroys personal information without delay once the purpose of collection and use has been fulfilled.

■ Procedure and Method of Personal Information Destruction

When the purpose of collecting and using personal information is fulfilled, the Clinic promptly destroys the information according to the following procedure:

Destruction procedure
Information entered for membership registration, etc., is transferred to a separate database (or stored in a separate file cabinet for paper documents) and kept for a certain period in accordance with internal policies and relevant laws. After this period, the information is destroyed.

Personal information transferred to a separate DB will not be used for any purpose other than those required by law.

Destruction method
- Electronic files are deleted using technical methods that prevent data recovery.
- Printed documents are shredded or incinerated.

■ Outsourcing of Personal Information

The Clinic does not outsource personal information to external companies without the customer’s consent. If outsourcing becomes necessary in the future, the Clinic will notify customers of the recipient and the details of the outsourced tasks, and obtain prior consent when required.

■ Rights of Users and Legal Guardians and How to Exercise Them

Users and legal guardians may view or modify personal information of themselves or children under 14 at any time, and may request membership cancellation.

To view or modify personal information, click “Edit Personal Information” (or “Member Information”). To withdraw consent or delete your account, click “Delete Account” and complete the identity verification process.
You may also request corrections or deletions by contacting the Personal Information Manager via written request, phone, or email.

If you request correction of an error, the Clinic will not use or provide the relevant information until the correction is completed. If incorrect information has already been provided to a third party, the Clinic will promptly notify the third party so that the correction may also be applied.

Any personal information deleted upon user or legal guardian request will be processed according to the retention period stated in this Privacy Policy, and will not be viewed or used for other purposes.

■ Installation and Operation of Automatic Data Collection Tools

The Clinic does not operate automatic data collection tools such as cookies.

■ Personal Information Complaint Handling Services

To protect personal information and handle any related complaints, the Clinic designates the following department and Personal Information Manager:

- Personal Information Manager: Dr. Wonsang Lee
- Contact Number: 02-6952-1234

You may report any personal information-related inquiries or complaints to the Personal Information Manager. The Clinic will respond promptly and appropriately.

For additional assistance regarding personal information infringement, you may contact the following organizations:

1. Personal Dispute Mediation Committee (www.1336.or.kr / 1336)
2. ePrivacy Certification Committee (www.eprivacy.or.kr / 02-580-0533~4)
3. Supreme Prosecutors’ Office Cybercrime Investigation Center (http://icic.sppo.go.kr / 02-3480-3600)
4. National Police Agency Cyber Terror Response Center (www.ctrc.go.kr / 02-392-0330)

■ Patient Rights and Responsibilities (related to Article 1-2, Paragraph 1)

1. Patient Rights

a. Right to receive care
Patients have the right to receive appropriate healthcare services for their well-being without discrimination based on gender, age, religion, social status, or economic circumstances. Healthcare providers may not refuse treatment without just cause.

b. Right to information and self-determination
Patients have the right to sufficient explanation regarding their treatment and the right to decide whether to accept or refuse treatment.

c. Right to confidentiality
Patients have the right to confidentiality regarding their medical information. Healthcare providers and institutions may not disclose such information without the patient’s consent, except in cases prescribed by law (e.g., criminal investigations).

d. Right to seek remedy
If a patient suffers physical, financial, or other harm due to rights violations, they may request consultation and mediation from the Korea Medical Dispute Mediation and Arbitration Agency
(+82 2-6210-0114, www.k-medi.or.kr).

2. Patient Responsibilities

a. Duty to trust and respect healthcare providers
Patients must provide accurate health information to healthcare providers and trust and respect the treatment plan recommended by medical professionals.

b. Duty not to obtain medical services by fraudulent means
Patients must accurately identify themselves before receiving treatment and must not receive treatment using another person’s identity or through false or unlawful means.