Privacy Policy

Lumiin Dermatology Clinic (the "Clinic") complies with the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and other applicable laws, and makes every effort to protect users' personal information.

This Privacy Policy explains the categories of personal information collected through the website operated by the Clinic, the purposes of use, the retention period, and whether processing is outsourced or provided to third parties.

Effective dateJune 27, 2025

Personal Information Collected and Collection Methods

Website consultation inquiries: name, contact number, date of birth, symptoms, etc.
Treatment booking or event application: name, contact number, preferred appointment date and time, treatments of interest, etc.

※ Collection methods: website forms, phone, KakaoTalk, and other online channels

Purposes of Collecting and Using Personal Information

Providing medical care and consultations
Appointment management and follow-up care
Providing information on events and services
Customer support and complaint handling
Website statistics and service improvement

Retention and Use Period of Personal Information

Personal information is retained for 1 year from the date of collection and then destroyed; where retention is required by applicable laws, it is kept for the period specified.

Category	Applicable law	Retention period
Medical records, etc.	Medical Service Act	10 years
Records of contracts and withdrawal of offers	E-Commerce Act	5 years
Records of consumer complaints and dispute resolution	E-Commerce Act	3 years

Outsourcing of Personal Information Processing

The Clinic outsources the processing of personal information as follows.

Website operation: Korea Health Technology Co., Ltd. (한국건강기술 주식회사)
SMS and Kakao notification messages: Solapi Inc.
Server management: Cafe24

Provision of Personal Information to Third Parties

As a rule, the Clinic does not provide personal information to third parties; exceptions apply only in the following cases.

User information may be collected for Instagram user authentication, but it is not provided to third parties
Website content is retained by Korea Health Technology Co., Ltd. (한국건강기술 주식회사) until the service is terminated, and can be deleted upon request
Where provision is required by law

Users' Rights and How to Exercise Them

Users may at any time request access to, correction of, or deletion of their personal information.
If consent is refused, use of some online services (such as consultations) may be limited.
Requests can be submitted by email, phone, or other means.

Use of Cookies

Cookies may be used for user convenience and statistical analysis on the website.

Users can refuse or delete cookies through their browser settings, which may limit the use of some services.

Cookie settings example (Chrome): Settings > Privacy and security > Cookies and other site data

Procedures and Methods for Destroying Personal Information

Personal information whose purpose of use has been fulfilled is stored separately and then destroyed securely without delay.
Paper documents are shredded, and electronic files are deleted using methods that make recovery impossible.

Personal Information Protection Officer

NameChoi Jae-won, Head Director

Contact02-565-8273

Address3F SH Tower, 324 Seolleung-ro, Gangnam-gu, Seoul

Notice of Policy Changes

This policy takes effect on June 27, 2025; any changes will be announced in advance before taking effect.