Privacy Policy
Nuwa Clinic (hereinafter referred to as "the Clinic") places great importance on protecting your personal information and complies with the Personal Information Protection Act.
This Privacy Policy informs you of the purposes and methods by which the personal information you provide is used, and what measures are being taken to protect your personal information.
1. Items and Methods of Personal Information Collection
2. Purpose of Personal Information Collection and Use
3. Retention Period, Destruction Procedures and Methods
4. Installation/Operation of Automatic Personal Information Collection Devices and Refusal
5. Rights of Users and Legal Representatives and Exercise Methods
6. Method of Withdrawal of Consent
7. Provision and Sharing of Personal Information
8. Third-Party Provision and Consignment of Personal Information
9. Personal Information Protection Officer
10. Security Measures for Personal Information
11. Obligations to Notify Policy Changes
1. Items and Methods of Personal Information Collection
The Clinic collects only the minimum personal information necessary for service use during online membership registration and reservations. Essential information for medical treatment is collected through medical record cards in accordance with the Medical Service Act without separate consent. For additional services (advertising) outside of medical treatment, a separate collection and use consent form must be completed. Failure to complete the consent form does not result in any disadvantage in receiving medical treatment.
• Required items: Name, date of birth, gender, address, age, contact number, mobile phone, email, medical registration number, service application status
• Health information: Visit information, disease information, prescription information, medical treatment information
• Payment information: Card company name, card number, and other card payment approval information
2. Purpose of Personal Information Collection and Use
① Required
• Medical information: Providing medical services for diagnosis and treatment, and administrative services such as billing, payment, and refunds
• Reservation information: Membership registration, identity verification, and service provision such as medical appointment scheduling and inquiries. Name, phone number, gender, and date of birth are collected as required items and used as basic data for user identification and smooth service provision.
② Optional
• Marketing and promotion: Clinic news, clinic procedures and events, surveys, personalized advertising and marketing, delivery of advertising and promotional information such as cosmetics
3. Retention Period, Destruction Procedures and Methods
[Retention Period]
• The Clinic retains collected customer personal information only for the legally required period: patient register for 5 years, medical records for 10 years, after which it is deleted from the database. However, if creditor-debtor relationships remain, retention continues until settlement.
• Immediate deletion upon request from the information provider.
However, even if the collection or provision purpose is achieved, personal information may be retained if there is a need to preserve it according to the provisions of the Commercial Act and other laws:
• Records related to consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
• Records related to collection/processing and use of credit information: 3 years (Act on Use and Protection of Credit Information)
• Records related to identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection)
[Destruction Procedures and Methods]
• Destruction procedure: Immediate destruction according to destruction methods after the legal retention period
• Destruction method: Personal information stored in electronic file format is deleted using technical methods that cannot reproduce records, and personal information printed on paper is destroyed by shredding or incineration
• Upon termination of customer management service consignment: The consignee permanently destroys related files and database data within 2 weeks
4. Installation/Operation of Automatic Personal Information Collection Devices and Refusal
In addition to the above personal information, the service recognizes visitors through cookies, pixel tags or web beacons, and IP addresses and uses them for the following purposes. Using the Clinic website and services is considered consent to the use of these cookie technologies.
(Cookies are small text files sent by a website or service provider to a web browser on a user's computer. These files allow the website or service provider's system to recognize the user's web browser and store and remember specific information. Pixel tags or web beacons are transparent graphic images placed on web pages or emails that indicate page/image view status or command browsers to display content from other servers. An IP address is online address information assigned by an internet service provider to a device such as a PC connecting to the internet. Views on whether IP addresses constitute personal information vary greatly from country to country.)
① Remembering content used during past service visits to provide improved service environment on next visit
② Analysis of service visit traffic and understanding service usage patterns
③ Service visit traffic analysis through contracts with third parties as needed
④ Personalized advertising and marketing
⑤ Usage restrictions on users violating laws and Clinic terms of use, prevention and sanctions against actions that interfere with smooth service operation including fraudulent use, prevention of identity theft and fraudulent use, record preservation for dispute resolution, complaint handling, etc.
Cookie Setting Refusal Method Example: You can allow all cookies, confirm each time cookies are saved, or refuse to save all cookies by selecting options in your web browser. Setting method example (for Internet Explorer): Tools at top of web browser > Internet Options > Privacy
However, if you refuse cookie installation, there may be difficulties in providing services.
5. Rights of Users and Legal Representatives and Exercise Methods
Reservations by minors are made through separate forms written in plain expressions that minors can easily understand, and consent from legal representatives is always obtained when collecting personal information.
The Clinic collects minimum information such as the name and contact information of legal representatives from minors to obtain consent from legal representatives, and obtains consent from legal representatives according to the methods specified in the Privacy Policy.
Legal representatives of minors may request to view, correct, and delete the minor's personal information. To view, correct, or delete a minor's personal information, click Member Information Modification and go through the legal representative verification process, then the legal representative can directly view, correct, or delete the minor's personal information, or contact the Personal Information Protection Officer by mail, phone, or fax for necessary measures.
※ Personal information required to be retained by law cannot be modified or deleted during the retention period even if requested.
6. Method of Withdrawal of Consent
You may withdraw your consent to the collection, use, and provision of optional personal information during online reservation at any time. If you contact the Personal Information Protection Officer by mail, phone, or fax, we will take necessary measures such as destroying your personal information without delay.
7. Provision and Sharing of Personal Information
The Clinic does not use your personal information beyond the scope disclosed in the collection and use purposes, nor provide it to other persons, companies, or institutions, except with your consent or as required by relevant laws.
• Submission of medical records to the Health Insurance Review and Assessment Service for medical expense claims under the National Health Insurance Act
• Provision in a form that cannot identify specific individuals for statistical compilation and academic research
• Submission to investigative agencies upon request according to procedures and methods stipulated by law
8. Third-Party Provision and Consignment of Personal Information
The Clinic consigns personal information for internet reservation and text notification services as follows, and stipulates necessary matters to ensure safe management of personal information when concluding consignment contracts in accordance with relevant laws.
The Clinic's personal information consignment processing institution and consignment work content are as follows:
Consignee: Wavecode Co., Ltd.
Consignment work content: Website operation and management, database management and storage, delivery of advertising information such as clinic procedures and events, personalized advertising and marketing, cosmetics, cosmetics events, etc.
Personal information retention and use period: Until termination of consignment contract
9. Personal Information Protection Officer
Name: Song Myeong-seung
Title: Director
Organization: Nuwa Clinic
Phone: 02-581-1668
10. Security Measures for Personal Information
The Clinic has established various security devices as technical measures to protect users' personal information. All information you provide is safely protected/managed by security equipment such as firewalls.
The Clinic also establishes procedures necessary for access to and management of users' personal information as administrative measures to protect users' personal information, minimizes personnel handling users' personal information, and conducts continuous security education. We also designate users of systems that process personal information, assign user passwords, and regularly update them.
11. Obligations to Notify Policy Changes
This Privacy Policy was established on January 9, 2026, and if there are additions, deletions, or modifications to the content due to changes in laws, policies, or security technologies, the reasons for and content of the changes will be announced on the Clinic website at least 7 days before the revised Privacy Policy takes effect.
Announcement date: January 9, 2026
Effective date: January 9, 2026
