Privacy Policy
Zero Lab Clinic (hereinafter referred to as "the Clinic") places great importance on protecting your personal information and complies with the Personal Information Protection Act. Through this Privacy Policy, the Clinic informs you of the purposes and methods for which your personal information is used, as well as the measures taken to protect it.
Table of Contents
1. Items and Methods of Personal Information Collected
2. Purpose of Collection and Use of Personal Information
3. Retention and Use Period, Destruction Procedure and Method of Personal Information
4. Rights of Users and Legal Guardians and How to Exercise Them
5. Method of Withdrawing Consent
6. Provision and Consignment of Personal Information
7. Provision to Third Parties and Consignment of Personal Information
8. Personal Information Protection Officer
9. Measures to Ensure the Security of Personal Information
10. Notification Obligations Regarding Policy Changes
1. Items and Methods of Personal Information Collected
The Clinic collects only the minimum personal information necessary for online membership registration and reservation services. Information required for medical treatment is collected through the medical record form in accordance with the Medical Service Act without separate consent. For additional (marketing) services beyond medical treatment, a separate consent form for collection and use must be completed; however, not completing this form does not result in any disadvantage regarding your treatment.
- Required items: name, date of birth, gender, address, age, contact number, mobile phone number, email, hospital registration number, service application status
- Health information: visit records, diagnosis information, prescription information, treatment information
- Payment information: card company name, card number, and other card payment approval information
2. Purpose of Collection and Use of Personal Information
① Required
- Medical treatment information: to provide medical services for diagnosis and treatment, as well as administrative services such as billing, payment, and refunds
- Reservation information: Name, phone number, gender, and date of birth are collected as required items in order to provide services such as membership registration, identity verification, appointment scheduling, and appointment inquiries. The information collected is used as basic data for identifying users and providing services smoothly.
Notification of clinic news and health information via text message and social media, and surveys
- Other: used to compile visitor analysis data for the development of new services
Basic data for requesting external outsourced testing
- Collection of consumer harm information under Article 52 of the Framework Act on Consumers
Restrictions on users who violate laws or the Clinic's terms of use; prevention and sanctions against fraudulent activities that interfere with the smooth operation of services; prevention of identity theft and misuse of personal information; record retention for dispute resolution; complaint handling, etc.
② Optional
- Marketing and promotion: delivery of promotional information such as clinic news, treatments, events, and cosmetic products
3. Retention and Use Period, Destruction Procedure and Method of Personal Information
[Retention and Use Period]
- The Clinic retains patient registry information for 5 years and medical records for the legally required period (10 years), after which they are deleted from the database. However, if there is an outstanding claim or obligation, the information will be retained until the matter is settled.
- If the data subject requests deletion of their personal information, it will be deleted immediately.
Even after the purpose of collection or provision has been achieved, personal information may be retained if required under the Commercial Act or other applicable laws.
* Records related to consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
* Records related to the collection, processing, and use of credit information: 3 years (Credit Information Use and Protection Act)
* Records related to identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection)
[Destruction Procedure and Method]
- Procedure: Personal information is destroyed immediately after the legally required retention period, using the destruction method described below.
- Method: Personal information stored in electronic file form is deleted using technical methods that prevent the data from being recovered. Personal information printed on paper is destroyed by shredding or incineration.
- Upon termination of outsourced customer management services: the outsourced company permanently destroys all related files and database data within 2 weeks.
4. Installation and Operation of Automatic Personal Information Collection Devices and How to Opt Out
In addition to the personal information above, the service recognizes visitors through cookies, pixel tags, web beacons, and IP addresses, which are used for the purposes described below. By using the Clinic's website and services, you are considered to have agreed to the use of these technologies.
(A cookie is a small text file sent from a website or its service provider to the web browser on a user's computer; it allows the website's or service provider's system to recognize the user's browser and store and remember certain information. A pixel tag or web beacon is a transparent graphic image placed on a web page or in an email that indicates whether a page or image has been viewed, or instructs the browser to display content from another server. An IP address is online address information assigned by an internet service provider to a user's device connecting to the internet. Views on whether an IP address constitutes personal information vary widely by country.)
① To remember content used during previous visits and provide an improved service experience on the next visit
② To analyze visitor traffic and understand usage patterns of the service
③ To be used, when necessary, for traffic analysis through contracts with third parties
④ For personalized advertising and marketing
⑤ Restrictions on users who violate laws or the Clinic's terms of use; prevention and sanctions against fraudulent activities that interfere with the smooth operation of services; prevention of identity theft and misuse of personal information; record retention for dispute resolution; complaint handling, etc.
[How to Refuse Cookie Settings]
Example: You can refuse cookies by adjusting the settings in your web browser to allow all cookies, to be prompted for confirmation each time a cookie is saved, or to refuse the storage of all cookies. Example setting method (Internet Explorer): Tools at the top of the browser > Internet Options > Privacy
However, if you refuse to allow cookies, you may experience difficulties in using our services.
5. Rights of Users and Legal Guardians and How to Exercise Them
Reservations for minors are made through a separate form written in plain language that is easy for minors to understand, and the consent of a legal guardian must always be obtained when collecting personal information.
To obtain the legal guardian's consent, the Clinic collects the minimum necessary information from the minor, such as the legal guardian's name and contact information, and obtains the legal guardian's consent in accordance with the method specified in this Privacy Policy.
The legal guardian of a minor may request to view, correct, or delete the minor's personal information. To view, correct, or delete a minor's personal information, click on "Edit Member Information," complete the legal guardian verification process, and then the legal guardian may directly view, correct, or delete the minor's personal information, or contact the Personal Information Protection Officer in writing, by phone, or by fax for the necessary action to be taken.
* Personal information that is required by law to be retained cannot be modified or deleted within the retention period, even upon request.
6. Method of Withdrawing Consent
You may withdraw your consent at any time regarding the optional collection, use, and provision of personal information given at the time of making an online reservation. Please contact the Personal Information Protection Officer in writing, by phone, or by fax, and we will promptly take the necessary action, such as destroying your personal information.
7. Provision and Sharing of Personal Information
Except with your consent or as required by relevant laws, the Clinic does not use your personal information beyond the scope disclosed for the purposes of collection and use, nor does it provide your personal information to any other individual, company, or institution.
- Submission of medical records to the Health Insurance Review & Assessment Service to claim medical care benefit costs under the National Health Insurance Act
- When necessary for statistical compilation or academic research, information is provided in a form that cannot identify specific individuals
- Submission in response to requests from investigative agencies in accordance with the procedures and methods prescribed by law
8. Provision to Third Parties and Consignment of Personal Information
The Clinic outsources the following tasks related to online reservations and SMS notification services, and, in accordance with relevant laws, stipulates the necessary matters to ensure the safe management of personal information in the outsourcing contract.
Details of the Clinic's personal information outsourcing company and the outsourced tasks are as follows.
Outsourced company: Wavecode Co., Ltd.
Details of outsourced tasks: website operation and management, database management and storage, delivery of promotional information such as clinic treatments and events
Retention and use period of personal information: until termination of the outsourcing contract
9. Personal Information Protection Officer
Name: DONG WON KIM
Position: Medical Director
Affiliation: Zero Lab Clinic
Phone number: 1544-5598
10. Measures to Ensure the Security of Personal Information
The Clinic has established various security systems as technical measures to protect users' personal information. All information provided by users is securely protected and managed by security equipment such as firewalls.
In addition, as administrative measures to protect users' personal information, the Clinic has established the necessary procedures for accessing and managing users' personal information, limits the number of staff handling personal information to the minimum necessary, and provides ongoing security training. The Clinic also designates authorized users of the systems that process personal information, assigns them passwords, and will renew these passwords on a regular basis.
11. Notification Obligations Regarding Policy Changes
This Privacy Policy was established on March 26, 2018. In the event of any additions, deletions, or amendments due to changes in laws, policies, or security technologies, the Clinic will notify users of the reasons and details of such changes through the Clinic's website at least 7 days prior to the implementation of the revised Privacy Policy.
Date of Announcement: September 1, 2026
Effective Date: September 1, 2026
