Privacy Policy

1. General Provisions and Scope

NEWYOUNG CLINIC (the “Clinic”) processes personal information and protects data subjects' rights in accordance with the Personal Information Protection Act and other applicable laws. This Policy applies to the Clinic's website providing information about the clinic, medical team, treatments, fees, and location.

The website currently does not offer membership registration or login, online inquiry forms, a shopping cart, or payment functions. Appointments and consultations are arranged by phone or through an external booking or messaging channel chosen by the user. Those services process information under their own policies. Personal information and medical records received by the Clinic through those channels are handled according to separate notices for the actual booking and care process and applicable law.

The Korean policy is the authoritative version. Any translation is provided to aid understanding. If versions differ, the Korean version takes precedence to the extent permitted by the mandatory laws of the Republic of Korea.

2. Purposes, Categories, and Methods of Collection

To operate the website, compile visit statistics, improve usability, identify errors, and respond to security issues, the following may be generated and collected automatically during use: IP addresses and hashes, visitor and session identifiers, browser and device information, access times, pages visited, navigation paths and referring pages, referral sources, language, screen size, and records of link clicks and scrolling.

The website itself has no public form for submitting a name, mobile number, email address, or health information. When using an external booking or consultation channel, please review the collection notice shown there.

3. Processing and Retention of Personal Information

Session and usage records needed to compile website statistics are processed temporarily until daily aggregation and accuracy checks are complete. Individual records are then deleted. Aggregate results do not include IP addresses, visitor or session identifiers, or individual navigation paths. Statistics that cannot identify an individual may be retained without a time limit to operate and improve the service.

Web sessions expire three hours after the last activity. Visitor identifiers are stored in browser local storage and are removed from that device if the user deletes site data. An analytics session is assigned a new identifier after 30 minutes of inactivity. Deleting browser data does not delete server records.

Personal information that is no longer needed after the retention period or the purpose of processing ends is deleted without delay. Where retention is required by law, the information is kept separately for the applicable legal basis and period.

4. Outsourced Processing and External Services

Service provider: Nine One Labs
Outsourced work: website hosting and server operation and management

The Clinic oversees processing within the scope needed for the outsourced work and updates this Policy if the service provider or outsourced work changes.

Clicking an external map, booking, social media, or messenger link takes you to that service. This website does not collect account details or booking information for those services. Please consult each service's notices about its processing of personal information and any international transfers.

5. Provision of Personal Information to Third Parties

The Clinic processes personal information within the stated purposes of collection. It does not provide it to third parties without the data subject's consent or a legal basis. Where disclosure is needed, the Clinic provides the required information, including the recipient, purpose, categories, and retention period, and follows the procedures required by law.

6. Management of Cookies and Local Storage

The website uses cookies and browser local storage for sessions, security, language settings, and visit statistics. Users can view, delete, or block cookies and site data in their browser privacy settings. Blocking them may limit some functions, such as retaining the language setting.

7. Deletion and Protection of Personal Information

Electronic records are deleted by methods that make recovery difficult. Information retained separately as required by law is not used for purposes other than that retention.

The Clinic implements organizational and technical measures to protect personal information, including restricted access rights, administrator authentication and access controls, protection during transmission, and security updates.

8. Data Subject Rights and How to Exercise Them

Data subjects and their lawful representatives may request access, correction or deletion, suspension of processing, and withdrawal of consent under applicable law. Requests may be made to the contact below by phone or email. After verifying the identity or lawful authority of the requester, the Clinic follows the legally required procedures. If a legal restriction applies, the Clinic explains the reason.

Health information needed for care and personal information of children under 14 are handled through separate procedures, including verification of a legal guardian where required, distinct from general browsing of website information.

9. Privacy Officer and Remedies

Privacy Officer: Medical Director Dr. SeoJoon Oh
Hosting service provider: Nine One Labs
Phone: 02-2088-4260
Email: newyoungclinic@naver.com

Privacy questions and complaints may be sent to the contact above. For reports or advice about privacy infringements, contact the Personal Information Infringement Report Center (118); for dispute mediation, contact the Personal Information Dispute Mediation Committee (1833-6972).

10. Changes and Effective Date

If this Policy changes, the Clinic will announce the changes and effective date on the website and follow legally required procedures where separate consent is needed.

Announcement date: October 12, 2026
Effective date: October 12, 2026