Privacy Policy
IAN Clinic (hereinafter "the Clinic") collects, retains, and processes all personal information in accordance with applicable laws and regulations. The Personal Information Protection Act outlines general principles for managing personal information, and the Clinic complies with these regulations in collecting, retaining, and processing personal data to carry out its duties and to protect the rights and interests of data subjects. Additionally, as stipulated by law, the Clinic respects the rights of data subjects, including the right to access, correct/delete, and request suspension of the processing of their personal data held by the Clinic. Data subjects may also file an administrative appeal under the Administrative Appeals Act if their rights or interests are infringed. The Clinic has established the privacy policy below to safeguard personal information and data subject rights, and to facilitate the management of complaints related to personal information in accordance with the Personal Information Protection Act. If the privacy policy is revised, the changes will be announced on the website or via individual notification.
Items and Methods of Personal Information Collection
The Clinic informs users of the scope and purpose of personal information collection at the time of registration or in the terms of service, as required by law. The personal information collected includes the following items.
A. Items collected during treatment
Required items: Hospital registration number, name (in Korean), date of birth, address, e-mail, marital status, how you came to the clinic
Health information: Personal health details including medical history and family medical history, as deemed necessary by medical staff for providing medical services
B. Items collected when handling payment for treatment
For credit card payments: Card company, card number, and other details required for payment approval
※ For other purposes, if personal information is collected temporarily, you will be separately notified at the time of collection.
C. Methods of personal information collection
Personal information is collected through online services provided on the website, such as online consultation and online reservations.
Purpose of Personal Information Collection and Use
The Clinic uses the collected personal information for the following purposes. The information provided by users is used only for these stated purposes, and if the usage purpose changes, separate consent will be obtained in advance.
① Identity verification procedures for consultations, tests, reservation lookup, and treatment
② Services for diagnosis and treatment
③ Administrative services such as billing, payment, and refund of treatment fees
④ Sending invoices, statements, certificates, and delivering pharmaceuticals/supplies or results
⑤ Consignment of online/offline tests or requesting external tests
⑥ Ensuring communication channels for resolving complaints and concerns
⑦ Quality control of medical care and legal/administrative response for hospital management
⑧ Minimal analysis data for education and research
⑨ Providing information on medical services, academic information, and hospital news
Period of Personal Information Retention and Use
As a general rule, personal information is deleted without delay once its intended purpose has been fulfilled. However, the information below is retained for a specified period for the following reasons.
① Retained items: Name, gender, mobile phone number, email
② Retention basis: Terms of use of the clinic's website/Article 15 of the Medical Service Act Enforcement Rules (on retaining medical records)
③ Retention period: 10 years for medical records
Procedure and Method for Destruction of Personal Information
In principle, the Clinic destroys personal information without delay once the purpose for which it was collected and used has been achieved.
A. Destruction procedure
Information you entered for procedures such as reserving medical services is transferred to a separate database (or, for paper documents, a separate file) after achieving its purpose, and is stored for a certain period as required by internal policy or relevant laws (see retention and usage period) and then destroyed. Personal information transferred to a separate database is not used for any purpose other than storage unless required by law.
B. Destruction method
Personal information stored electronically is deleted using technical methods so that records cannot be restored. Printed personal information is shredded or incinerated.
Provision and Sharing of Personal Information
Except with your consent or as required by relevant laws and regulations, the Clinic does not use your personal information beyond the scope communicated at collection, nor provide it to third parties, companies, or organizations. However, exceptions apply in the following cases.
① Submission of medical records to the Health Insurance Review & Assessment Service as required by the National Health Insurance Act for reimbursement claims
② When users have agreed in advance to disclosure
③ When required by law or upon request from investigation agencies as prescribed by legal procedures
④ When anonymized for statistical or academic research purposes such that individuals cannot be identified
Matters Concerning the Entrustment of Personal Information Processing
For improved services and customer convenience, the Clinic outsources personal information processing to professional third-party companies as follows. The Clinic ensures secure management of personal information by stipulating confidentiality, compliance with personal information protection laws, prohibition of third-party provision, liability for accidents, consignment period, and the return or destruction of personal information upon completion of processing in its outsourcing agreements.
Matters Concerning Third-Party Sharing and Processing of Personal Information
- Provider of personal information: IAN Clinic
- Personal information manager: Director Haeyoung Lee
- Recipient of personal information: IAN Clinic (see website: http://ianclinic.kr/)
a. Purpose of Use of Personal Information by the Recipient
① Processing patient verification, appointment bookings, and cancellations
② Providing information about the clinic's services, new treatments, and event information
③ Sending mobile notifications regarding treatment, appointments, planned admissions, and tests
b. Retention and Use Period of Personal Information by the Recipient
① The retention period matches that of the data collection agency. However, this applies only in case of termination of the agreement with the data collection agency.
② You have the right to refuse consent. If you refuse, reservation may not be possible and convenience or satisfaction may be diminished.
Rights of Users and Legal Representatives and How to Exercise Them
The Clinic will diligently respond to and handle requests by customers to view, correct, or delete their personal information. For security reasons, requests to access, correct, or delete customer personal information via phone, mail, fax, or other non-in-person methods are not permitted.
A. Viewing personal information
① Customers may visit the clinic to request to view their personal information, to which the clinic will respond promptly.
B. Correction and deletion of personal information
① If a customer requests correction or deletion and there is a need due to an error or other reasons, the clinic will promptly carry out the correction or deletion. The clinic may request supporting documentation as needed to verify the facts of the correction or deletion.
② When a customer requests to view, correct, or delete personal information, their identity is verified via ID such as resident registration, passport, or driver's license.
③ If there is a justifiable reason to refuse all or part of a request to view, correct, or delete personal information, the clinic will notify the customer of such reason.
④ Legal guardians of children under 14 may request access, correction, deletion, or suspension of processing for the child’s personal information, but must provide documentation proving guardianship and their own identity.
Matters Regarding Installation and Operation of Automatic Personal Information Collection Devices and Refusal
The Clinic uses cookies—small text files that are frequently saved and stored on your device by the server operating the Clinic website and retrieved by your internet browser. Cookies are used for the following purposes.
① Analyzing access frequency and visit times of members and non-members to assess user preferences and interests and serve as a basis for service improvements.
② Collecting statistics about the number of visits during various events, in order to provide differentiated information based on individual interests.
You have the right to choose whether to enable cookies. You can allow all cookies, be prompted each time before a cookie is saved, or block cookies by adjusting your web browser settings. If you refuse cookies, some services may not be available.
Personal Information Protection Officer
The Clinic implements security measures to safeguard users’ personal information. All user data is protected and managed with security equipment such as firewalls. Administrative procedures are also in place to manage access and oversight of user data, to minimize the number of personnel with access, and to provide ongoing security training. In addition, user passwords are assigned to authorized system users and updated regularly.
Notification Obligation for Policy Changes
This privacy policy may be amended in accordance with changes in applicable laws or government guidelines, or due to updates to internal policies. Notices regarding updates will be posted on the Clinic's website (https://holdclinicgn.com/).
Effective Date: August 7, 2026
For questions or consultation regarding personal information infringement, please contact the following organizations:
1. Personal Information Dispute Mediation Committee (https://www.kopico.go.kr) 1833-6972 (no area code needed)
2. ePrivacy Certification Committee (www.eprivacy.or.kr / 02-550-9531~2)
3. Supreme Prosecutors’ Office Cyber Investigation Division (http://spo.go.kr/ 1301, cid@spo.go.kr, no area code needed)
4. National Police Agency Cyber Security Bureau (http://cyberbureau.police.go.kr/ 02-3150-2659)