Ceramic Dental Clinic (hereinafter referred to as “the Clinic”) considers the protection of personal information online and offline to be of utmost importance and does its best to ensure that the personal information users provide to the Clinic while using its services is protected. Accordingly, the Clinic has established a privacy protection policy based on the relevant laws and regulations that information and communications service providers must comply with, including the Protection of Communications Secrets Act, the Telecommunications Business Act, and the Act on Promotion of Information and Communications Network Utilization and Information Protection, and it continues to comply with that policy. This Privacy Policy may be amended from time to time due to changes in government laws and guidelines or changes in the Clinic’s internal policies, and whenever changes are made, the Clinic immediately reflects them in the Privacy Policy posted on the main page of the website. Through this Privacy Policy, users will be able to understand for what purposes and in what manner the collected personal information is used, and how it is safely protected.
[This Privacy Policy is organized as follows.]
1. Items of Personal Information Collected and Collection Methods
2. Purposes of Collection and Use of Personal Information
3. Provision and Sharing of Personal Information
4. Retention and Use Period of Personal Information
5. Procedures and Methods for Destroying Personal Information
6. Rights of Users and Legal Representatives and How to Exercise Them
7. Withdrawal of Consent / Membership Withdrawal
8. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
9. Operation and Management of Video Surveillance Devices
10. Measures to Ensure the Security of Personal Information
11. Personal Information Manager
12. Duty to Notify of Policy Changes
13. Outsourcing of Personal Information Processing
1. Items of Personal Information Collected and Collection Methods
The Clinic collects only the minimum personal information necessary for the use of its services upon membership registration. The information collected for your use of the Clinic's services consists of required items and optional items entered at registration, and you may use the services without restriction even if you do not enter optional items such as whether you wish to receive emails.
A. Items Collected During Treatment
- Required items: name (in Korean), address, contact information
- Health information: personal health information that the medical team deems necessary for providing medical services, such as medical history and family history.
※ Under the Medical Service Act, the Clinic is required to retain unique identification information and medical information.
(Separate consent is not obtained for the collection of medical information.)
B. Items Collected Upon Website Membership Registration
- Required items: ID, password, name, email
- Optional items: contact information (telephone number, mobile phone number)
- Sensitive information: past medical history, surgical history, procedures of interest
- The following information may be automatically generated and collected without the user's consent in the course of using the services or processing service operations: (service use records, access logs, cookies, access IP information)
- Identity verification (mobile phone verification / i-PIN verification): name, identity verification value, i-PIN number for i-PIN members, date of birth, sex, ID, password, contact information (email address, mobile phone number), legal representative information for those under 14 years of age, registration verification information
C. Items Collected Upon Payment of Medical Fees
- For credit card payments: card approval information such as the card company name and card number
D. Information collected when requesting a consultation through the website
- Required items: Name, mobile phone number (collected after obtaining your consent to the collection and use of personal information on the request screen)
E. Methods of Collecting Personal Information
- Personal information is collected through the following methods.
Website (sign-up, consultation requests, live consultations, online reservations, online consultations, etc.), written forms, fax, phone, and email
2. Purposes of Collection and Use of Personal Information
The Clinic uses the personal information it collects for the following purposes. Information provided by users will not be used for any purpose other than those listed below, and we will ask for your prior consent if the purpose of use changes.
- Identity verification for treatment, examinations, appointment inquiries, and care
- Services for diagnosis and treatment
- Administrative services such as billing, payment, and refunds of medical fees
- Sending medical bills, itemized statements, and other certificates, and sending medications, supplies, and results
- Providing medical information to other medical institutions for referrals and returned referrals
- Securing communication channels for delivering notices and handling complaints and grievances
- Materials for responding to online consultations
- To contact you about your website consultation request (call or text)
- Information about new services and events
- Quality management of medical care, and legal and administrative responses and measures for operating the Clinic
- The minimum analysis data necessary for education and research
- Information on medical care, academic matters, and the Clinic
- Reference materials for providing smooth service during consultations and treatment
- Collecting information for consumers pursuant to Article 52 of the Framework Act on Consumers
- Website membership registration and management
(confirming intent to join, identification and authentication for membership services, maintaining and managing membership, identity verification under the limited identity verification system, preventing misuse of services, confirming legal guardian consent when processing the personal information of children under 14, various notices and notifications, and handling grievances)
- Materials for responding to online consultations
3. Provision and Sharing of Personal Information
Except with your consent or as required by relevant laws and regulations, the Clinic will under no circumstances use your personal information beyond the scope stated in "Purposes of Collection and Use of Personal Information" or provide it to other persons, companies, or institutions.
However, the following cases are exceptions:
- Where users have consented to disclosure in advance
- Where required under the provisions of laws and regulations, or where requested by an investigative agency in accordance with the procedures and methods prescribed by law for investigative purposes
- Where necessary for statistics, academic research, or market research, and the information is provided in a form that does not identify any specific individual
4. Retention and Use Period of Personal Information
The Clinic destroys your personal information without delay once the purpose for which it was collected or provided has been achieved.
A. Membership information: when a member withdraws or is expelled from membership, or when 1 year has passed since the last login date (Article 29 of the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc. and Article 16 of its Enforcement Decree)
B. Information collected for surveys, events, or similar purposes: when the relevant survey, event, etc. ends
C. Information collected for treatment purposes: retained for the periods specified in Article 15 ("Retention of Medical Records") of the Enforcement Rule of the Medical Service Act (patient register: 5 years, medical records: 10 years) (retained items: name, address, medical information)
D. Records of consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)
E. Records of the collection, processing, and use of credit information: 3 years (Credit Information Use and Protection Act)
F. Records of identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.)
G. Records of visits: 3 months (Protection of Communications Secrets Act)
H. Website consultation request information (name, mobile phone number, request date and time): Kept for 1 year from the request date, then destroyed
※ However, even after the purpose of collection or provision has been achieved, we may retain your personal information if it must be preserved under laws such as the Commercial Act.
5. Procedures and Methods for Destroying Personal Information
The Clinic destroys personal information immediately after the "Purposes of Collection and Use of Personal Information" have been achieved. The destruction procedures and methods are as follows.
A. Destruction Procedure
Information entered by users for membership registration, etc. is destroyed immediately after the purpose has been achieved, using the destruction methods below.B. Destruction Deadline
Where the retention period of a user's personal information has expired, the personal information is destroyed within 5 days from the end of the retention period; where the personal information is no longer necessary, such as when the purpose of processing has been achieved, the relevant service has been discontinued, or the business has been terminated, it is destroyed within 5 days from the date on which its processing is deemed no longer necessary.C. Destruction Method
Personal information stored in electronic file form is deleted using technical methods that make the records unrecoverable. Personal information printed on paper is destroyed by shredding or incineration.6. Rights of Users and Legal Representatives and How to Exercise Them
When a customer requests access to, correction of, or deletion of their personal information, the Clinic responds to the request in good faith and processes it without delay. To protect personal information, the Clinic does not provide procedures for accessing, correcting, or deleting a customer's personal information through application methods other than an in-person visit by the customer, such as telephone, mail, or fax.
A. Access to Personal Information
Customers may visit the Clinic to request access to their personal information, and the Clinic will respond promptly.B. Correction/Deletion of Personal Information
- When a customer requests correction or deletion of their personal information, and correction or deletion is deemed necessary, such as when the personal information is found to contain errors, the Clinic will correct or delete it without delay. The Clinic may request supporting documents necessary to verify the facts of the correction or deletion. The relevant personal information will not be used or provided until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, the Clinic will notify the third party of the result of the correction without delay so that the correction can be made.- When a customer requests access to, correction of, or deletion of their own personal information, the Clinic verifies the customer's identity by checking an identification document such as a resident registration card, passport, or driver's license.
- When a customer's representative visits and requests access, correction, or deletion, the Clinic verifies that the person is a legitimate representative by checking the customer's power of attorney and letter of consent, as well as the representative's identification document.
- Where the Clinic has a legitimate reason to refuse access to, correction of, or deletion of all or part of the personal information, it will notify the customer and explain the reason.
- Cases in which access to and correction of personal information may be restricted
- Where there is a risk of significantly harming the life, body, property, or rights and interests of the person or a third party
- Where there is a risk of significantly interfering with the business of the service provider
- Where it would violate laws and regulations, etc.
- Membership registration for children under 14 (hereinafter "children") is carried out through a separate form, and the consent of a legal representative is always obtained when collecting personal information.
- To obtain the consent of the legal representative, the Clinic collects minimal information from the child, such as the legal representative's name and contact information, and obtains the legal representative's consent in the manner prescribed in this Privacy Policy.
- Users and legal representatives may exercise their rights regarding personal information by contacting the Clinic via the internet, telephone, in writing, etc., and the Clinic will take the necessary measures without delay.
※ Personal information that must be retained by law cannot be modified or deleted during the retention period, even upon request.
7. Withdrawal of Consent • Membership Withdrawal
You may withdraw at any time the consent you gave at registration to the collection, use, and provision of personal information. To withdraw consent (withdraw membership), click "Withdraw Consent (Withdraw Membership)" on the website and complete the identity verification procedure to withdraw directly, or contact the personal information officer, and the Clinic will take the necessary measures, such as destroying your personal information, without delay.
8. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
To provide customized services tailored to users, the Clinic uses "cookies," which store users' information and retrieve it from time to time. Cookies are small amounts of information sent by a website to the web browser on the user's computer, and may be stored on the PC's hard disk.
A. Purpose of Using Cookies
1) Cookies identify the user's computer but do not identify individual users. Using these cookies, the Clinic can understand users' visit and usage patterns for each service and the number of users, and make its services even more convenient.2) Users can choose whether to use cookies by adjusting the options in their web browser. That is, users may accept all cookies, receive a notification whenever a cookie is installed, or refuse all cookies.
3) However, users must allow cookies to log in (LOG-IN) and use the services after accessing the Clinic's website.
B. Installation, Operation, and Refusal of Cookies
1) Users have a choice regarding the installation of cookies. Accordingly, by setting options in their web browser, users may allow all cookies, confirm each time a cookie is stored, or refuse the storage of all cookies.2) As a way to refuse cookies, by selecting options in the web browser they use, users may allow all cookies, confirm each time a cookie is stored, or refuse the storage of all cookies.
3) Example settings
a. Internet Explorer: Tools menu at the top of the web browser > Internet Options > Privacy > Settings
b. Chrome: Settings menu on the right of the web browser > Show advanced settings at the bottom of the screen > Content settings button under Privacy > Cookies
4) However, if users refuse the storage of cookies, they may have difficulty using some of the Clinic's services that require login.
9. Measures to Ensure the Security of Personal Information
To ensure security so that customers' personal information is not lost, stolen, leaked, altered, or damaged, the Clinic takes the following technical and administrative measures.
[Minimizing and training staff who handle personal information]
The Clinic minimizes the number of designated personal information handlers and provides regular training.
[Regular self-inspections]
To ensure security in handling personal information, the Clinic conducts regular self-inspections at least once a year.
[Establishment and implementation of an internal management plan]
The Clinic has established and implements an internal management plan for the safe processing of personal information.
[Encryption of personal information]
Among users' personal information, passwords are encrypted when stored and managed so that only the user knows them, and separate security functions are used for important data, such as encrypting files and transmitted data.
[Technical measures against hacking, etc.]
To prevent leakage of and damage to personal information by hacking or computer viruses, the Clinic installs security programs, updates and inspects them regularly, installs its systems in areas where access from outside is controlled, and monitors and blocks access technically and physically.
[Restriction of access to personal information]
The Clinic takes the necessary measures to control access to personal information by granting, changing, and revoking access rights to the database systems that process personal information, and controls unauthorized external access using intrusion prevention systems.
[Access control for unauthorized persons]
The Clinic maintains a separate physical storage location for the personal information systems that hold personal information and has established and operates access control procedures for it.
10. Operation and Management of Video Surveillance Devices
The Clinic operates and manages video information processing devices (CCTV) as follows.
[Legal Basis and Purpose of Installation]
Safety of patients and facilities, and prevention of fire and crime
[Number of Devices, Installation Locations, and Recording Range]
Number of devices: 10 in total
Installation locations and recording range: front desk, waiting room, consultation room, treatment rooms, etc.
[Person in Charge]
Person in charge: Sunmin Kim
[Recording Hours and Processing Method]
Recording hours: 24-hour recording
Processing method: The Clinic records and manages matters concerning requests for use of personal video information for other purposes, provision to third parties, destruction, access, etc., and upon expiration of the retention period, permanently deletes the information by a method that makes restoration impossible (printed materials are shredded or incinerated).
[Measures in Response to Data Subjects’ Requests for Access to Video Information]
You may at any time request the operator of the video information processing devices to allow access to, or confirm the existence of, your personal video information. However, this is limited to personal video information in which you have been recorded and personal video information clearly necessary for the urgent benefit of the data subject’s life, body, or property.
Notwithstanding a data subject’s request for access, etc., the Clinic may refuse a request for access to personal video information in the following cases.
- Where the personal video information has been destroyed because its retention period has expired
- Where there are other justifiable grounds for refusing the data subject’s request for access, etc.
[Technical, Administrative, and Physical Measures to Protect Video Information]
Video information processed by the Clinic is managed securely through measures such as encryption. In addition, as an administrative measure to protect personal video information, the Clinic grants differentiated access rights to personal information, and to prevent forgery or alteration of personal video information, it records and manages the date and time of creation of personal video information and, upon access, the purpose of access, the person accessing it, the date and time of access, and so on. Furthermore, the Clinic has installed locking devices for the secure physical storage of personal video information.
11. Personal Information Manager
To protect your personal information and handle complaints related to personal information, the Clinic has designated a Chief Privacy Officer as follows.
[Chief Privacy Officer]
Officer in charge: Sunmin Kim
Staff in charge: Sunmin Kim
Affiliation: Ceramic Dental Clinic
Position: Head Director
Phone:02-517-0002
Email: seohyun_0425@naver.com
You may report any complaints related to personal information protection arising from your use of the Clinic’s services to the Chief Privacy Officer.
The Clinic will respond promptly and thoroughly to users’ reports.
If you need to report or seek advice on other infringements of personal information, please contact the following organizations.
Personal Dispute Mediation Committee (http://www.1336.or.kr / 1336)
Cyber Crime Investigation Unit, Supreme Prosecutors’ Office (http://www.spo.go.kr / (02) 3480-3573)
Cyber Terror Response Center, Korean National Police Agency (http://www.ctrc.go.kr / (02) 392-0330)
12. Duty to Notify of Policy Changes
This Privacy Policy was established on August 31, 2015. If any content is added, deleted, or modified due to changes in laws, policies, or security technology, the Clinic will announce the reasons for and details of the changes on its website at least 7 days before the amended Privacy Policy takes effect.
13. Outsourcing of Personal Information Processing
To improve its services, the Clinic has members' personal information collected and analyzed by an outsourcing company, and in accordance with relevant laws, specifies the necessary matters in the outsourcing contract to ensure that personal information is managed safely.
- Matters regarding the trustee, the scope of outsourcing, the scope of shared information, etc. are posted via email, telephone, or the website.
- The outsourcing contract specifies the service provider's compliance with instructions on personal information protection, confidentiality of personal information, prohibition of provision to third parties, etc., and the contract is stored electronically.
The Clinic outsources personal information as follows to provide its services, and in accordance with relevant laws, specifies the necessary matters in the outsourcing contract to ensure that personal information is managed safely. The Clinic's personal information processing trustees and the outsourced tasks are as follows.
| Jeongbonet | Server hosting | Website member information, cookies, and other data | Until the outsourcing contract ends |
| Google LLC | Storage of website consultation request details (consultation records in Google Sheets) | Name, mobile phone number, request date and time | 1 year from the request date |
| Trustee | Outsourced Task | Item | Retention and Use Period |
|---|
Website consultation request information is stored in the cloud service (Google Sheets) of Google LLC, the outsourcing contractor named above, and may be transferred overseas in this process (to the United States and other countries where Google has data centers).
- Items transferred: Name, mobile phone number, request date and time
- Time and method of transfer: Transmitted over information and communications networks when a consultation is requested
- Recipient: Google LLC (inquiries: https://support.google.com/policies)
- Purpose of use and retention period: Managing consultation contacts; 1 year from the request date
- If you do not want your information transferred overseas, you may consult with us by phone (+82-2-517-0002) or via KakaoTalk instead of using the consultation request form.
Through outsourcing contracts and similar agreements, the Clinic stipulates compliance with personal information protection laws, confidentiality of personal information, prohibition of provision to third parties, the outsourcing period, and the obligation to return or destroy personal information after processing ends, and supervises compliance with these obligations.
Announcement date: October 11, 2026
Effective date: October 18, 2026