Privacy Policy


JAYJUN Plastic Surgery Clinic (hereinafter referred to as the “Clinic”) values users’ personal information and hereby informs that the personal information processed is limited to the minimum necessary for the purposes of such processing. The Clinic complies with applicable laws and regulations related to personal information protection, including the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Personal Information Protection Act, and the personal information protection regulations established by the Korea Communications Commission. In accordance with such laws, the Clinic has established this Privacy Policy and makes every effort to protect users’ rights and interests. Through this Privacy Policy, the Clinic informs users of the purposes and methods by which personal information is used and the measures taken to protect such information.
In addition, in accordance with applicable laws and regulations, the Clinic respects the rights of data subjects, including the right to access, correct, delete, and request suspension of processing of personal information held by the Clinic. This Policy shall take effect on January 15, 2015.


________________________________________
Article 1 (Items of Personal Information Collected, Collection Methods, and Security Measures)

The Clinic provides prior notice of the scope and purpose of personal information collection at the time of membership registration or in the Terms of Use in accordance with relevant laws and regulations. The items of personal information collected are as follows:
■ Personal Information Collected upon Website Membership Registration
• Items collected: Name, ID, password, email, gender, date of birth, home address, mobile phone number, telephone number, access logs, cookies, IP address
• Collection methods: Website (membership registration, online reservations, online consultations, post-surgery consultations)
※ During the course of service use or service processing, the following information may be automatically generated and collected:
• Service usage records, access logs, cookies, IP address
■ Personal Information Collected During Medical Services
• Required items: Name, gender, date of birth, contact information (including guardian contact information), address, height, weight, blood type, previous surgery history, alien registration number, resident registration number, medical records
• Health information: Medical history, family history, and other personal health information deemed necessary by medical staff for the provision of medical services
■ Personal Information Collected During Payment
• Credit card payment: Card company name, card number, and other payment authorization information
※ If personal information is collected for a specific short-term purpose, such collection will be separately announced.
■ Methods of Collecting Personal Information
• Website, written forms, fax, telephone, consultation boards, email, etc.
■ Security Measures
• Encryption applied during transmission of collected personal information


________________________________________
Article 2 (Purpose of Collection and Use of Personal Information)

The Clinic uses collected personal information for the following purposes. All information provided by users will not be used for purposes other than those listed below, and prior consent will be obtained if the purpose of use changes.
• Identity verification for medical treatment, examinations, and reservation inquiries
• Provision of diagnostic and treatment services
• Administrative services such as billing, payment, and refunds
• Issuance and delivery of bills, statements, certificates, medications, and results
• Outsourced online/offline testing and external test requests
• Communication channels for handling complaints and grievances
• Legal and administrative measures for quality control and clinic operations
• Minimum data for education and research purposes
• Provision of medical information, academic information, and clinic-related information


________________________________________
Article 3 (Provision and Sharing of Personal Information with Third Parties)

The Clinic does not use or provide personal information beyond the scope stated in the “Purpose of Collection and Use” without the user’s consent, except where required by law.
However, exceptions apply in the following cases:
• Identity verification for medical services
• Submission of medical records for insurance claims to the Health Insurance Review & Assessment Service under the National Health Insurance Act
• Where users have given prior consent
• Where required by law or requested by investigative authorities in accordance with legal procedures
• Where provided in a form that does not identify individuals for statistical or academic research purposes


________________________________________
Article 4 (Outsourcing of Personal Information Processing)

Personal information shall not be provided to third parties without legal grounds or user consent.
• Recipient: CRM Program
• Company Name: Inable Soft Co., Ltd.
• Contact: +82-2-556-2750~3
• Representative: Cheol-Soo Song
• Outsourced Task: Member information management


________________________________________
Article 5 (Retention and Use Period of Personal Information)

The Clinic shall destroy personal information without delay once the purpose of collection or provision has been achieved.
• Membership information: Upon withdrawal or termination
• Survey/event information: Upon completion
• Medical records: Retained in accordance with Article 15 of the Enforcement Rule of the Medical Service Act
(Patient registry: 5 years / Medical records: 10 years)
(Retention items: name, address, resident registration number, medical information)
• Consumer complaints/dispute records: 3 years (Act on the Consumer Protection in Electronic Commerce)
• Credit information records: 3 years (Act on the Use and Protection of Credit Information)
• Identity verification records: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection)
• Website visit records: 3 months (Protection of Communications Secrets Act)
※ However, personal information may be retained if required by applicable laws such as the Commercial Act.


________________________________________
Article 6 (Destruction Procedures and Methods)

Personal information is destroyed without delay once its purpose is fulfilled.
■ Procedure
Information entered for membership registration, etc., is transferred to a separate database (or stored in a separate physical file cabinet) after the purpose is achieved, and retained for a certain period in accordance with internal policies and applicable laws before being destroyed. Personal information transferred to a separate database is not used for any purpose other than retention unless required by law.
■ Method
• Electronic files: Permanently deleted using technical methods that prevent recovery
• Printed materials: Shredded or incinerated


________________________________________
Article 7 (Rights of Users and Legal Representatives and Methods of Exercise)

The Clinic responds promptly and in good faith to requests from users to access, correct, or delete personal information.
To protect personal information, requests for access, correction, or deletion via telephone, mail, or fax are not accepted; requests must be made through in-person visits.
■ Access to Personal Information
Users may visit the Clinic to request access, and the Clinic will respond promptly.
■ Correction and Deletion
1. If a user requests correction or deletion and it is determined necessary, the Clinic will process it without delay and may request supporting documents.
2. Identity verification will be conducted using official identification such as a resident registration card, passport, or driver’s license.
3. If there is a legitimate reason to refuse, the Clinic will notify the user and explain the reason.
4. Legal guardians of children under 14 may exercise these rights with proof of relationship and identification.


________________________________________
Article 8 (Installation/Operation of Automatic Collection Devices such as Cookies and Refusal Thereof)

The Clinic uses cookies to store and retrieve user information.
Cookies are small text files sent by the server to the user’s browser and stored on the user’s device.
Purpose of cookies:
• Analyze frequency and duration of visits and user preferences
• Provide differentiated information based on user interests
Users may refuse cookies through browser settings, but some services may be limited.


________________________________________
Article 9 (Measures to Ensure Security of Personal Information)

The Clinic implements technical and administrative measures:
• Protection through firewalls and security systems
• Restricted access to personal information
• Continuous security training
• Assignment of system users and regular password updates


________________________________________
Article 10 (Withdrawal of Consent / Membership Termination)

Users may withdraw consent at any time.
• Through the website “My Page” → “Membership Withdrawal”
• Or via written request, phone, or fax
The Clinic will take necessary measures, including prompt deletion of personal information.


________________________________________
Article 11 (Notice of Policy Changes)

Changes to this Privacy Policy will be announced on the website:
http://www.jjprs.com

________________________________________

[Personal Information Manager]
• Name: Sung-Hyun Lim
• Position: Director
• Contact: +82-70-4128-9646
• Email: lim8279@naver.com
[Personal Information Officer]
• Name: Sung-Il Cho
• Position: Head of Administration Team
• Contact: +82-70-4351-4476
• Email: whtjddlf12@naver.com
________________________________________

If you need to report or consult regarding personal information infringement, please contact:
1. Personal Information Dispute Mediation Committee
(www.kopico.go.kr / +82-1833-6972)
2. Supreme Prosecutors’ Office Internet Crime Investigation Center
(http://icic.sppo.go.kr / +82-2-3480-3600)
3. National Police Agency Cyber Bureau
(www.ctrc.go.kr / +82-2-392-0330)


________________________________________
CCTV Operation and Management Policy

Article 1 (Purpose of Installation and Operation)
• Facility safety and fire prevention
• Crime prevention for customer safety

________________________________________
Article 2 (Number of Installations, Locations, Scope, Time, Retention, Storage, Processing, and Managers)
• Number of cameras installed: 61
• Installation locations and scope: Inside and outside the building, including parking areas
• Recording hours: 24 hours
• Retention period: 7 to 14 days
• Storage location: Within the Clinic
• Processing method: Automatically deleted after 14 days
Authorized personnel (Access: +82-2-563-0530):
• Hyung-Jun Park (Chief Director)
• Sung-Hyun Lim (Director)
• Sung-Il Cho (Head of Administration Team)
• Do-Yun Gu (Manager)
• Ju-Ri Han (Head of Treatment Team)
• Yoon-Hee Sung (Head of Operating Room Team)
• Jin-Hee Park (Head of Dermatology Department)
Persons in charge of video information management:
• Sung-Il Cho (Head of Administration Team) – +82-70-4351-4476
• Do-Yun Gu (Manager) – +82-70-4351-4693

________________________________________
Article 3 (Access to Video Information)
Users may access footage by contacting the manager in advance and visiting the Clinic.

________________________________________
Article 4 (Requests by Data Subjects for Access, Confirmation, or Deletion of Video Information)
Data subjects may request access, confirmation of existence, or deletion of their personal video information at any time.
Such requests are limited to footage in which the individual appears or where it is necessary to protect urgent life, body, or property interests.
The Clinic will take necessary measures without delay.
However, requests may be denied in the following cases, and the reason will be notified in writing within 10 days:
• Where the retention period has expired and the data has been deleted
• Where there is a legitimate reason to refuse the request

________________________________________
Article 5 (Security Measures for Video Information)
• Encryption measures
• Differential access control
• Recording of access logs (date, purpose, user)
• Physical security measures (locking devices)

________________________________________
Article 6 (Changes to CCTV Policy)
This policy was established on January 15, 2015.
Changes due to laws, policies, or technology will be announced at least 7 days in advance.
• Effective Date: January 15, 2015
• Announcement Date: January 15, 2015
• Revision Date: April 17, 2023


________________________________________
Personal Information Infringement Support
1. Personal Information Dispute Mediation Committee
(www.kopico.go.kr / +82-1833-6972)
2. Supreme Prosecutors’ Office Internet Crime Investigation Center
(http://icic.sppo.go.kr / +82-2-3480-3600)
3. National Police Agency Cyber Bureau
(www.ctrc.go.kr / +82-2-392-0330)