Privacy Policy
Dojagi Clinic (hereinafter 'the Clinic') considers the protection of your personal information very important and complies with the 『Personal Information Protection Act』.
Through this Privacy Policy, the Clinic informs you of the purposes and methods for which the personal information you provide is used, and the measures taken to protect it.
The Privacy Policy is organized as follows.
1. Items of Personal Information Collected and Collection Methods
2. Purposes of Collecting and Using Personal Information
3. Retention and Use Period of Personal Information
4. Procedures and Methods for Destroying Personal Information
5. Provision and Sharing of Personal Information
6. Entrustment of Personal Information Processing
7. Rights of Data Subjects and Legal Representatives and How to Exercise Them
8. How to Withdraw Consent / Withdraw Membership
9. Matters Regarding the Installation/Operation of Devices That Automatically Collect Personal Information and Refusal Thereof
10. Personal Information Protection Officer
11. Measures to Ensure the Safety of Personal Information
12. Duty to Give Notice of Policy Changes
1. Items of Personal Information Collected and Collection Methods
The Clinic collects only the minimum personal information necessary for treatment, consultation and member management.
a. [Medical Information] - Items collected: name, date of birth, address, contact number, medical records
※ Under the Medical Service Act, unique identification information and medical information must be retained (no separate consent required)
b. [Items collected when applying for website membership · consultation · appointments]
- Membership: ID, password, name, email address
- Quick consultation: name, contact (one of: mobile phone number, WhatsApp · LINE · WeChat ID, or email address), consultation area
- Online appointment: name, date of birth, mobile phone number, treatment item, preferred appointment date and time, inquiry details
- Real model application: name, mobile phone number, email address, age, height, weight, previous plastic surgery (treatment) experience, areas of interest, reason for applying, face photos
- The following information may be automatically generated and collected while using the service: access logs, access IP information
c. [Methods of Collecting Personal Information] - Personal information is collected through the following methods.
· Website (membership, quick consultation, online appointment, real model application), written forms, fax, phone, email, KakaoTalk · LINE · WeChat · WhatsApp consultation
2. Purposes of Collecting and Using Personal Information
The Clinic uses the collected personal information for the following purposes.
All information provided by users will not be used for any purpose other than those required for the purposes below, and prior consent will be sought if the purpose of use changes.
a. [Medical Information] - Provision of medical services for diagnosis and treatment, and administrative services such as billing, payment and refunds
b. [Website Member · Consultation · Appointment Information]
- Membership: member verification and management, providing the Before & After photo viewing service
- Quick consultation: confirming and responding to consultation requests
- Online appointment: receiving and confirming appointments, appointment notices
- Real model application: reviewing applications and notifying selection results
3. Retention and Use Period of Personal Information
The Clinic destroys your personal information without delay once the purpose of collection or the purpose for which it was provided has been achieved.
a. [Medical Information] - Retained in accordance with the medical record retention standards specified in the Medical Service Act
b. [Website Member · Consultation · Appointment Information]
- Member information: destroyed without delay upon membership withdrawal.
- Destroyed without delay once the purpose of the consultation · appointment · application has been achieved. However, even when the purpose has been achieved, if retention is necessary under the provisions of relevant laws, it may be retained for the periods below.
- Records of consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)
- Records of the collection/processing and use of credit information: 3 years (Credit Information Use and Protection Act)
- Records of identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.)
- Records of visits: 3 months (Protection of Communications Secrets Act)
4. Procedures and Methods for Destroying Personal Information
The Clinic destroys personal information immediately after the 『purposes of collecting and using personal information』 have been achieved. The destruction procedures and methods are as follows.
a. [Destruction Procedure] Information entered by users for membership, consultation · appointment requests, etc. is destroyed immediately by the destruction method once the purpose has been achieved.
b. [Destruction Method] Personal information stored in electronic file form is deleted using technical methods that make the records unrecoverable.
Personal information printed on paper is destroyed by shredding or incineration.
5. Provision and Sharing of Personal Information
The Clinic does not, under any circumstances, use your personal information beyond the scope notified in the 『purposes of collecting and using personal information』 or provide it to other persons, companies or institutions, except with your consent or as required by the provisions of relevant laws.
- Submission of medical records to the Health Insurance Review & Assessment Service for claims for medical care benefit costs under the National Health Insurance Act
- Provision in a form processed so that specific individuals cannot be identified, when necessary for statistics or academic research
- Submission when requested by an investigative agency in accordance with the procedures and methods prescribed by law, etc.
6. Entrustment of Personal Information Processing
To provide its services, the Clinic entrusts personal information processing as shown below, and in accordance with relevant laws, specifies the necessary matters in the entrustment contract so that personal information is managed safely.
The Clinic's personal information processing trustee and the entrusted tasks are as follows.
Trustee: (to be confirmed)
Entrusted tasks: website maintenance, access log management, member management, management of consultation · appointment request information
Entrusted personal information items: name, ID, contact number, email address, date of birth, consultation · appointment · application details, application photos
Retention and use period of personal information: until the end of the entrustment contract
7. Rights of Data Subjects and Legal Representatives and How to Exercise Them
Users may at any time request access to, correction, deletion or suspension of processing of their personal information. If you contact the Personal Information Protection Officer in writing, by phone or by fax, the necessary measures will be taken without delay.
Children under 14 years of age (hereinafter "children") cannot sign up as members. For children's consultations · appointments, please have a legal representative apply.
A child's legal representative may request access to, correction and deletion of the child's personal information. If you contact the Personal Information Protection Officer in writing, by phone or by fax, the necessary measures will be taken.
The Clinic does not provide or share information about children with third parties, and if a legal representative requests correction of an error in personal information collected from a child, the Clinic prohibits the use and provision of that personal information until the error is corrected.
※ Personal information whose retention is mandatory by law cannot be modified · deleted within the retention period, even upon request.
8. How to Withdraw Consent / Withdraw Membership
You may withdraw at any time the consent you gave to the collection and use of personal information when signing up or applying for consultations · appointments. If you contact the Personal Information Protection Officer in writing, by phone or by fax, the necessary measures, such as destroying your personal information, will be taken without delay.
Members can withdraw directly through 「Delete Account」 on the website login screen, and member information is destroyed without delay upon withdrawal.
9. Matters Regarding the Installation/Operation of Devices That Automatically Collect Personal Information and Refusal Thereof
The Clinic's website uses cookies to keep members logged in. A cookie is a very small text file sent to your browser by the server used to operate the website and stored on your computer. Login cookies are deleted when you close the browser.
However, the map (Google Maps) and video (YouTube) services embedded in the website may store cookies of the respective service providers.
You have a choice regarding the installation of cookies. Accordingly, by setting options in your web browser, you may allow all cookies, confirm each time a cookie is stored, or refuse to store all cookies.
If you refuse to store cookies, you may have difficulty using some services, such as viewing Before & After photos (which requires login), maps and videos.
10. Personal Information Protection Officer
To protect your personal information and handle complaints related to personal information, the Clinic has designated a Personal Information Protection Officer as follows.
Name: Park Sihyun
Position: Chief Medical Director
Organization: Dojagi Clinic
Contact: 02-6956-8333
You may report any complaints related to personal information protection that arise while using the Clinic's services to the Personal Information Protection Officer.
The Clinic will respond promptly and sufficiently to users' reports.
If you need to report or consult about other personal information infringements, please contact the agencies below.
· Personal Information Dispute Mediation Committee (https://www.kopico.go.kr / 1833-6972)
· Personal Information Infringement Report Center (https://privacy.kisa.or.kr / 118 without area code)
· Supreme Prosecutors' Office (https://www.spo.go.kr / 1301 without area code)
· Korean National Police Agency (https://ecrm.police.go.kr / 182 without area code)
11. Measures to Ensure the Safety of Personal Information
In processing users' personal information, the Clinic takes the following technical/administrative measures to ensure safety so that personal information is not lost, stolen, leaked, altered or damaged.
a. [Password Encryption] Members' passwords are encrypted when stored and managed, so only the members themselves know them.
b. [Access Control] Member · consultation · appointment information and application photos received through the website can be viewed only by staff logged in with an administrator account.
c. [Measures Against Hacking, etc.] The Clinic does its best to prevent users' personal information from being leaked or damaged by hacking, computer viruses and the like.
To guard against damage to personal information, data is backed up regularly. The latest antivirus programs are used to prevent users' personal information or data from being leaked or damaged, and encrypted communication is used so that personal information can be transmitted safely over the network. In addition, an intrusion prevention system is used to control unauthorized access from outside, and the Clinic strives to put in place every possible technical measure to ensure system security.
d. [Minimizing and Training Staff Handling Personal Information] Staff handling personal information at the Clinic are limited to those in charge, who are given separate passwords that are renewed regularly, and regular/ad hoc training is provided to those in charge.
However, the Clinic bears no responsibility whatsoever for problems arising from the leakage of personal information, such as phone numbers, due to the user's own carelessness or problems on the internet.
12. Duty to Give Notice of Policy Changes
This Privacy Policy was amended on the date stated below. If there are additions, deletions or modifications due to changes in laws, policies or security technology, the Clinic will announce the reasons for and details of the changes on the Clinic's website at least 7 days before the revised Privacy Policy takes effect.
· Effective date: November 12, 2026
· Previous effective date: June 17, 2025
