Privacy Policy

Somssi Good Obstetrics and Gynecology Clinic (hereinafter referred to as "the Clinic") places great importance on protecting your personal information and complies with the Personal Information Protection Act.
Through this Privacy Policy, we inform you of the purpose and method of using the personal information you provide and the measures taken to protect your personal information. The order of this Privacy Policy is as follows:

• 1. Items and Methods of Collecting Personal Information
• 2. Purpose of Collecting and Using Personal Information
• 3. Retention and Usage Period of Personal Information
• 4. Procedures and Methods for Destroying Personal Information
• 5. Provision and Sharing of Personal Information
• 6. Outsourcing of Collected Personal Information
• 7. Rights of Users and Legal Representatives and Their Exercise Methods
• 8. Withdrawal of Consent / Membership Cancellation Method
• 9. Installation/Operation and Rejection of Automatic Personal Information Collection Devices
• 10. Personal Information Manager
• 11. Measures to Ensure the Security of Personal Information
• 12. Obligation to Notify Changes to the Policy

1. Items and Methods of Collecting Personal Information

The Clinic collects only the minimum personal information necessary for service use during membership registration. When using the Clinic’s services, there are required and optional fields. Optional fields such as email preferences do not restrict service usage even if not provided.

ㅇ [Medical Information]

• Collected Items: Name, Address, Contact Information, Medical Records

• ※ Under the Medical Act, unique identification information and medical information must be retained (separate consent is not required).

ㅇ [Website Service Usage Information]

• Required Items: Name, Date of Birth, Gender, Contact Information (Mobile Number), Email, Subscription Preferences

• Automatically Collected Information During Service Use:

• Service Usage Records, Access Logs, Cookies, Access IP Information

ㅇ [Methods of Collecting Personal Information]

• Personal information is collected through the following methods:

• Website, Written Forms, Fax, Phone, Consultation Board, Email

2. Purpose of Collecting and Using Personal Information

The Clinic utilizes collected personal information for the following purposes. All information provided by users will not be used beyond the stated purposes, and prior consent will be obtained if usage purposes change.

ㅇ [Medical Information]

• Provision of medical services for diagnosis and treatment, and administrative services such as billing, payment, and reimbursement.

ㅇ [Website Membership Information]

• Required Information: Online appointment booking, appointment inquiry, and member services.

• Optional Information: Notifications about hospital news, disease information via email, and surveys.

3. Retention and Usage Period of Personal Information

The Clinic destroys personal information immediately when the collection purpose or the purpose for which it was provided is achieved.

ㅇ [Medical Information]

• Stored according to medical record retention standards stipulated by the Medical Act.

ㅇ [Website Membership Information]

• Retained until membership cancellation or expulsion.
  However, if required by commercial law or other applicable laws, personal information may be retained.

• Records related to consumer complaints or disputes: 3 years (Consumer Protection in Electronic Commerce Act)

• Records related to credit information collection/processing and use: 3 years (Credit Information Use and Protection Act)

• Identity verification records: 6 months (Information and Communications Network Act)

• Visit records: 3 months (Communications Privacy Act)

4. Procedures and Methods for Destroying Personal Information

The Clinic immediately destroys personal information once the collection and usage purpose is achieved. The destruction procedures and methods are as follows:

ㅇ [Destruction Procedures]

• Information entered by users for membership registration is immediately destroyed once the purpose is achieved.

ㅇ [Destruction Methods]

• Personal information stored in electronic files is deleted using technical methods that prevent data recovery.
• Printed personal information is shredded or incinerated for disposal.

5. Provision and Sharing of Personal Information

The Clinic does not use or provide personal information beyond the disclosed scope of the Privacy Policy without the user's consent or unless required by law.

• Submission of medical records to the Health Insurance Review and Assessment Service for claims under the National Health Insurance Act.

• Provision of anonymized data for statistics and academic research.

• Provision to investigative agencies upon legal request.

6. Outsourcing of Collected Personal Information

The Clinic outsources personal information processing for service execution and ensures safe management through contractual regulations.

Contracted Company	Outsourced Service	Personal Information Items	Retention and Usage Period
KBNet Solutions Co., Ltd.	Membership Management	Website Registration Information	Until the termination of the contract

7. Rights of Users and Legal Representatives and How to Exercise Them

Membership registration for children under the age of 14 (hereinafter referred to as "children") is conducted through a separate form written in simple expressions that are easy for children to understand, and consent from the legal representative is always obtained when collecting personal information. The institution collects minimal information from children, such as the name and contact details of the legal representative, to obtain their consent, and obtains consent from the legal representative in accordance with the methods specified in the personal information handling policy. The legal representative of the child can request access to, correction of, and deletion of the child's personal information. If the legal representative wishes to access, correct, or delete the child's personal information, they can click on member information modification, go through the verification procedure for the legal representative, and directly access, correct, or delete the child's personal information, or contact the person in charge of personal information protection in writing, by phone, or by fax to take necessary actions. The institution does not provide or share information about children with third parties, and if the legal representative requests correction of any errors in the personal information collected from the child, the use and provision of such personal information will be prohibited until the errors are corrected. ※ Personal information that is mandated by law to be retained cannot be modified or deleted even if a request is made during the retention period.

8. Method of Withdrawal of Consent / Membership Withdrawal

You can withdraw your consent to the collection, use, and provision of personal information at any time after registering as a member. Membership withdrawal can be done by clicking on "Membership Withdrawal" on the My Page of the institution's homepage and going through the identity verification process, or by contacting the person in charge of personal information management in writing, by phone, or by fax, and necessary actions will be taken promptly, such as destroying your personal information.

9. Installation/Operation of Automatic Personal Information Collection Devices and Matters Concerning Refusal

The institution operates cookies that store and retrieve your information from time to time. Cookies are very small text files sent by the server that operates the institution's website to your browser, which are stored on your computer's hard drive. The institution uses cookies for the following purposes. You have the option to choose whether to install cookies. Therefore, you can allow all cookies, confirm each time a cookie is saved, or refuse the storage of all cookies by setting options in your web browser. If you refuse to install cookies, some services may be difficult to provide.

10. Personal Information Management Officer

In order to protect your personal information and handle complaints related to personal information, the institution has appointed the following personal information management officer.

ㅇ [Personal Information Management Officer]

• Name: Lee Eung-seok

• Position: Managing Director

• Affiliation: Somssi Good Obstetrics and Gynecology Clinic

• Phone Number: (02) 575-4888

• Email: somsi1@hanmail.net

You can report any personal information protection-related complaints that arise while using the institution's services to the personal information management officer. The institution will promptly provide sufficient responses to the reports of users. If you need to report or consult about other personal information violations, please contact the institutions below.

• Personal Dispute Mediation Committee (http://www.1336.or.kr / 1336)

• Information Protection Mark Certification Committee (http://www.eprivacy.or.kr / (02) 580-0533~4)

• Supreme Prosecutor's Office Cyber Crime Investigation Team (http://www.spo.go.kr / (02) 3480-3573)

• National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr / (02) 392-0330)

• Personal Information Violation Report Center (http://www.118.or.kr)

11. Measures to Ensure the Safety of Personal Information

The institution has established various security devices as technical measures to protect users' personal information. All information you send is safely stored and managed in a secure system protected by a firewall device. Additionally, the institution has established procedures necessary for access to and management of users' personal information as administrative measures to protect users' personal information, limiting the number of personnel handling users' personal information and conducting continuous security training. Furthermore, users of the system handling personal information will be designated, and user passwords will be assigned and regularly updated.

12. Obligation to Notify Changes in Policy

This personal information processing policy was established on September 1, 2025, and if there are any additions, deletions, or modifications to the content due to changes in laws, policies, or security technologies, we will notify the reasons and details of the changes at least 7 days before the enforcement of the revised personal information handling policy through the institution's homepage.

• Announcement Date: August 1, 2025

• Effective Date: September 1, 2025