INEE Clinic Website Privacy Policy
INEE Clinic (the “Clinic”) complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws to protect the rights and freedoms of data subjects and to process personal information lawfully and securely. This Privacy Policy explains the Clinic’s procedures and standards for processing personal information and handling related inquiries and complaints.
Article 1. Purposes, Categories, and Retention Periods
1. Membership Registration and Management
Purposes:
Identification of social-login Members, membership management, provision of MY INEE, management of appointment and consultation history, service notices, and response to inquiries
Categories:
Required information includes the social login provider, provider user identifier (Provider User ID), and name or nickname. The Clinic may process an email address when it is provided by the social login provider and the Member agrees to provide it. Country, preferred language, and contact information may be processed when voluntarily provided by the Member.
Legal basis:
Entering into or performing the membership and service agreement, taking steps at the user’s request, or the user’s consent
Retention period:
Until account deletion, unless continued retention is required by applicable law
2. Appointments and Consultations
Purposes:
Appointment requests and confirmation, consultation, appointment changes and cancellations, schedule notices, response to inquiries, and preparation for a visit
Categories:
Name, contact information, treatment of interest or general inquiry details, and preferred appointment date. Email address, country or nationality, and preferred language may be processed when voluntarily provided by the Member.
Legal basis:
Providing appointment and consultation services requested by the user and entering into or performing the related agreement
Retention period:
Until account deletion or fulfillment of the appointment or consultation purpose. Records concerning consumer complaints or dispute resolution may be retained for three years as required by applicable law.
3. Marketing Communications
Purposes:
Providing information about treatments, programs, events, promotions, new services, skin and hair-related content, and revisit information
Categories:
Name, mobile telephone number, email address, and information relating to the communication channel selected by the user
Legal basis:
The user’s separate optional consent
Retention period:
Until withdrawal of marketing consent or account deletion
4. Service Operation and Security
Purposes:
Maintaining login status, ensuring service stability, identifying errors, preventing misuse, and responding to security incidents
Information that may be generated automatically:
IP address, access date and time, service usage records, cookies, browser information, and device information
Legal basis:
The Clinic’s legitimate interest in securely operating the Services
Retention period:
Three months from collection, unless a different retention period is required by applicable law
Article 2. Methods of Collection
The Clinic collects personal information through:
1. Kakao, LINE, or Google social login
2. Information entered directly by a Member on membership, consultation, or appointment screens
3. Access records and similar information automatically generated while the Website is used
Article 3. Sensitive Information
1. The Clinic does not collect health-related sensitive information through the Website, including medical conditions, medications, allergies, pregnancy or breastfeeding information, treatment or surgery history, or skin and scalp photographs.
2. Users must not enter or attach health information, photographs, or other sensitive information in the Website consultation field.
3. If health information is required for actual medical care, the Clinic will collect it after the user visits the Clinic or through a separate consent procedure permitted by applicable law.
Article 4. Provision to Third Parties
1. The Clinic processes personal information only within the purposes stated in this Privacy Policy and does not provide it to a third party without the user’s separate consent or another legal basis.
2. Personal information may be provided to the extent necessary where disclosure is required or permitted by law, including a lawful request from an investigative authority or court.
Article 5. Outsourcing and Access Rights
1. Membership, appointment, and consultation information collected through the Website is directly managed by the Clinic.
2. Personal information may be accessed only by authorized Clinic personnel who require access for their duties.
3. The Clinic does not currently outsource the processing of Website membership, appointment, or consultation information to an outside company.
4. If the Clinic outsources personal information processing in the future, it will disclose the processor and the outsourced functions through this Privacy Policy and supervise the processor in accordance with applicable law.
Article 6. Overseas Transfer
1. The Website membership, appointment, and consultation database collected and retained by the Clinic is not provided to an overseas third party or entrusted for processing or storage outside Korea.
2. When a Member selects Kakao, LINE, or Google social login, the Clinic receives the minimum account information necessary to identify the Member through the authentication process of the selected provider. The provider’s processing of personal information is governed by its own privacy policy.
3. If the Clinic transfers personal information overseas in the future, it will provide advance notice of the recipient, destination country, purpose, categories, timing and method of transfer, retention period, and method for refusing the transfer, and will complete all procedures required by applicable law.
Article 7. Retention Required by Law
1. Records concerning consumer complaints or dispute resolution may be retained for three years in accordance with applicable law.
2. Personal information that must be retained by law after account deletion will be separately stored for the required period.
3. Medical records created during actual medical care are separate from Website membership, appointment, and consultation information and are separately retained for the periods required by the Medical Service Act and other applicable laws.
Article 8. Destruction of Personal Information
1. The Clinic destroys personal information without undue delay when the retention period expires or the processing purpose is fulfilled and the information is no longer necessary.
2. Personal information that must be retained by law is stored separately in a separate database or storage location.
3. Electronic files are deleted using methods that prevent recovery or restoration.
4. Personal information recorded on paper is destroyed by shredding or incineration.
Article 9. Rights of Data Subjects
1. Users may request access, correction, deletion, suspension of processing, withdrawal of consent, or account deletion at any time.
2. Requests may be made through the functions provided in MY INEE or by calling the Clinic at +82-2-1899-1150.
3. After verifying the identity of the requester, the Clinic will process the request without undue delay in accordance with applicable law.
4. A user may exercise rights through an authorized representative. The Clinic may request a power of attorney or other evidence of authority.
5. A request may be restricted where another law requires retention of the information or limits correction, deletion, or suspension of processing.
Article 10. Children Under 14
The Clinic does not permit children under 14 to register for the Website or use online consultation and appointment services and does not collect their personal information through the Website.
Article 11. Security Measures
The Clinic takes the following measures to securely manage personal information:
1. Minimizing the number of personnel and access rights involved in personal information processing
2. Controlling access to personal information systems
3. Encrypting and securely transmitting personal information where required
4. Retaining access records and preventing unauthorized alteration
5. Installing security software and conducting regular inspections
6. Establishing internal management measures and providing personnel training
Article 12. Cookies
1. The Website may use cookies to maintain login status and provide stable Services.
2. The Clinic does not use Website cookies for personalized advertising or user behavior analytics.
3. Users may allow or block cookies through their browser settings. Blocking essential cookies may restrict login or the use of certain Services.
Article 13. Privacy Officer
Privacy Officer: Minseung Kim
Telephone: +82-2-1899-1150
Users may contact the Privacy Officer regarding privacy inquiries, complaints, or requests for relief arising from use of the Website.
Article 14. Remedies for Infringement
Users may contact the following authorities for advice or reporting concerning an infringement of personal information rights:
1. Personal Information Infringement Report Center
privacy.kisa.or.kr
Telephone: 118 within Korea
2. Personal Information Dispute Mediation Committee
[www.kopico.go.kr](http://www.kopico.go.kr)
Telephone: 1833-6972
3. Korean National Police Agency Cybercrime Reporting System
ecrm.police.go.kr
Telephone: 182 within Korea
Article 15. Changes to this Privacy Policy
1. If this Privacy Policy is amended, the Clinic will announce the changes and effective date through the Website.
2. Previous versions may be accessed through the Terms and Policies section of the Website.
Effective Date: August 25, 2026
