[Le Shine] Privacy Policy

Le Shine (hereinafter referred to as the “Clinic”) places great importance on the protection of your personal information and complies with the “Personal Information Protection Act.” Through this privacy policy, we inform you about how the personal information you provide is used and the measures taken to protect your personal information. The order of this privacy policy is as follows:

1. Items and Methods of Collecting Personal Information
2. Purpose of Collection and Use of Personal Information
3. Retention and Use Period of Personal Information
4. Procedure and Method of Disposal of Personal Information
5. Provision and Sharing of Personal Information
6. Entrustment of Collected Personal Information
7. Rights of Users and Legal Representatives and How to Exercise Them
8. Withdrawal of Consent / Membership Cancellation Method
9. Installation, Operation, and Rejection of Automatic Personal Information Collection Devices
10. Personal Information Management Officer
11. Measures to Ensure the Security of Personal Information
12. Notification Obligations Due to Policy Changes

1. Items and Methods of Collecting Personal Information
The Clinic collects only the minimum personal information necessary for service use during membership registration. When using our services, users may provide mandatory and optional information. However, failure to provide optional information, such as email subscription preferences, does not restrict the use of the service.
[Medical Information]
- Collected Items: Name, Resident Registration Number, Address, Contact Information, Medical Records※ As required by the Medical Act, unique identification information and medical records must be retained without separate consent.
[Personal Information Collected for Website Membership Registration]
- Mandatory Items: Name, ID, Password, Email, Contact Information (Phone Number, Mobile Number)
- Optional Items: Email Subscription Preferences
- During service usage or processing, the following information may be automatically collected: Service Usage Records, Access Logs, Cookies, Access IP Information
[Methods of Collecting Personal Information]
- Personal information is collected through the following methods:
- Website, written forms, fax, phone, consultation board, email

2. Purpose of Collection and Use of Personal Information
The Clinic uses collected personal information for the following purposes. Personal information will not be used for any purposes other than those specified below, and prior consent will be obtained in the event of any changes.
[Medical Information]
- Provision of medical services such as diagnosis and treatment, as well as administrative services such as billing, payment, and refunds
[Website Membership Information]
- Mandatory Information: Online medical appointment booking, appointment inquiries, and membership services
- Optional Information: Email notifications about hospital news, medical information, and surveys

3. Retention and Use Period of Personal Information
The Clinic promptly disposes of personal information once the purpose of collection or the provided purpose is achieved.
[Medical Information]
- Retained according to the medical record storage standards specified in the Medical Act
[Website Membership Information]
- Even after membership cancellation, personal information may be retained if required by commercial laws or other relevant regulations.
- Records of customer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
- Records on the collection, processing, and use of credit information: 3 years (Credit Information Use and Protection Act)
- Records of identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection)
- Records of website visits: 3 months (Protection of Communications Secrets Act)

4. Procedure and Method of Disposal of Personal Information
Once the purpose of collecting and using personal information is achieved, the Clinic immediately disposes of the information through the following procedures and methods:
[Disposal Procedure]
- Information entered by the user is promptly disposed of after achieving its purpose.
[Disposal Method]
- Personal information stored in electronic file format is deleted using technical methods that prevent record recovery.
- Printed personal information is shredded or incinerated.

5. Provision and Sharing of Personal Information
The Clinic does not use or share personal information beyond the notified scope unless consent is obtained or required by law.
- Submission of medical records to the Health Insurance Review and Assessment Service for claims under the National Health Insurance Act
- Provision of anonymized data for statistical or academic research purposes
- Submission in accordance with legal procedures and methods when requested by investigative agencies

6. Entrustment of Collected Personal Information
The Clinic does not entrust collected personal information to external institutions.

7. Rights of Users and Legal Representatives and How to Exercise Them
For users under the age of 14 (“children”), a separate form with easily understandable language is provided for registration, requiring legal guardian consent.
The Clinic collects minimal information (guardian's name and contact information) to obtain consent and ensures that guardians can review, correct, or delete the child’s personal information.
If guardians wish to access, modify, or delete a child’s personal information, they can do so through the member information update feature or by contacting the Personal Information Protection Officer via writing, phone, or fax.
The Clinic does not provide a child’s personal information to third parties, and in cases of requested corrections, usage and provision of information will be suspended until corrections are completed.
※ Legally mandated information cannot be modified or deleted during the required retention period.

8. Withdrawal of Consent / Membership Cancellation Method
Users can withdraw their consent to the collection, use, and provision of personal information at any time.
Membership withdrawal can be done through the “Membership Withdrawal” section in My Page, or by contacting the Personal Information Protection Officer via writing, phone, or fax, upon which personal information will be promptly deleted.

9. Installation, Operation, and Rejection of Automatic Personal Information Collection Devices
TheClinic uses cookies, which are small text files stored on users’ computers, to operate its website.
Users can configure their browser settings to accept, confirm, or reject cookies. However, rejecting cookies may result in service limitations.

10. Personal Information Management Officer
[Personal Information Management Officer]
- Name: Choi Won-jun
- Position: Chief Medical Director
- Affiliation: Le Shine
- Phone: 010-3467-8112
Users can report any personal information-related complaints to the officer. The Clinic will promptly respond to reported matters.
For external privacy violation complaints or counseling, please contact the following agencies:
- Personal Dispute Mediation Committee: http://www.1336.or.kr / 1336
- Information Protection Mark Certification Committee: http://www.eprivacy.or.kr / (02) 580-0533~4
- Supreme Prosecutors' Office Cyber Crime Investigation Unit: http://www.spo.go.kr / (02) 3480-3573
- National Police Agency Cyber Terror Response Center: http://www.ctrc.go.kr / (02) 392-0330

11. Measures to Ensure the Security of Personal Information
The Clinic has implemented security measures, including firewalls, to protect personal information. Access and management of personal information are restricted to authorized personnel who undergo regular security training.
Passwords for systems handling personal information are assigned and updated regularly.

12. Notification Obligations Due to Policy Changes
This privacy policy has been effective since July 1, 2022. Changes due to law, policy, or security technology updates will be announced on the Clinic’s website at least 7 days before implementation.