Privacy Policy

1. Introduction

Will Be Plastic Surgery (윌비성형외과의원, "the Clinic") respects your privacy. This policy explains how the Clinic processes personal information in accordance with the Personal Information Protection Act of the Republic of Korea (PIPA), the Medical Service Act and other applicable laws.

Effective date: [EFFECTIVE DATE]

2. What personal information do we collect?

• Identification and contact details: name, date of birth, gender, phone number, email address, messenger ID (such as KakaoTalk), nationality and, where required, passport or identification details.
• Health information (sensitive information): medical history, medications, allergies, previous procedures, examination findings, clinical photographs and treatment records.
• Consultation information: photographs and descriptions you send for a virtual consultation.
• Payment information: details needed to process payments and any VAT refund.
• Website data: IP address, browser type, cookies and visit logs, collected automatically.

Sensitive information such as health data is processed only with your separate consent or where permitted by law.

3. Why do we use your information?

• To provide consultation, diagnosis, treatment and follow-up care
• To respond to enquiries and arrange appointments
• To keep medical records as required by law
• To process payments and VAT refunds
• To support international patients with travel-related documentation where requested
• To maintain and improve the website and its security

Clinical photographs are used for your medical record. They are not used for education, publication or any other purpose without your separate, explicit consent, which you may refuse or withdraw.

4. How long do we keep it?

Medical records are kept for the periods required by the Medical Service Act and related regulations. Other personal information is kept only as long as needed for the purpose for which it was collected, or as required by other laws, and is then destroyed securely.

[RETENTION PERIODS BY CATEGORY TO CONFIRM]

5. Do we share your information?

The Clinic does not provide your personal information to third parties except with your consent or where required or permitted by law, for example at the request of a lawful authority.

Where the Clinic entrusts processing to service providers, such as IT, messaging or payment services, it supervises them under contracts that require appropriate protection. [LIST OF PROCESSORS AND ENTRUSTED TASKS TO CONFIRM]

Where information is transferred overseas, for example through cloud or messaging services, the Clinic will inform you of the recipient, country, items, purpose and retention period, and obtain consent where required. [OVERSEAS TRANSFER DETAILS TO CONFIRM]

6. Your rights

Under PIPA you may, at any time:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion, except where retention is required by law
• Request suspension of processing
• Withdraw consent you have given

Requests can be made to the Data Protection Officer below. The Clinic will respond without undue delay and within the periods set by law. You may also act through a legal representative.

7. How do we protect your information?

• Access to personal information is limited to staff who need it for their role
• Staff receive training on handling personal and medical information
• Technical measures such as access controls, encryption of sensitive data where appropriate and security software
• Physical measures such as restricted access to records storage

[SECURITY MEASURES TO CONFIRM]

8. Cookies

The website may use cookies to remember preferences and understand how it is used. You can control or disable cookies in your browser settings, although some features may then not work as intended. [COOKIE AND ANALYTICS TOOLS TO CONFIRM]

9. Data Protection Officer

• Name: [DATA PROTECTION OFFICER NAME]
• Position: [POSITION]
• Email: [DPO EMAIL]

If you are not satisfied with the Clinic's response, you may contact the Personal Information Infringement Report Center, the Personal Information Dispute Mediation Committee or other competent authorities in Korea.

10. Changes to this policy

The Clinic may update this policy to reflect changes in law or practice. Updates will be posted on this page with the new effective date. See also our terms of use and medical disclaimer.