Cellin Clinic (hereinafter referred to as "the Clinic") establishes and discloses this privacy policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects (customers) and to promptly and smoothly handle related complaints.
1. Purpose of Personal Information Collection and Use
The Clinic collects and uses personal information for the following purposes:

• Provision of Services: To fulfill contracts for service provision and to deliver content associated with such services.

• Identity Verification: To verify identity, prevent unauthorized or fraudulent use by delinquent members, handle complaints, and notify users.

• Marketing and Advertising: To provide event and promotional information, offer participation opportunities, deliver services and advertisements tailored to demographic characteristics, analyze access frequency, and compile service usage statistics.

• Complaint Handling: To verify the identity of complainants, confirm complaints, contact or notify for fact-checking, and inform users of results.

2. Categories of Personal Information Collected
The Clinic collects the following personal information during membership registration, consultations, and service applications:

• Required Information: Name, date of birth, login ID, password, mobile phone number, email address, access logs, cookies, service usage records.

• Optional Information: Branch, interests, event selection, registration source, mailing and SMS service preferences.

• Retention Period: Retained semi-permanently unless the user opts out or requests withdrawal of membership.

• Collection Methods: Via website (membership registration, consultation boards, reservation boards, easy login, etc.).

3. Retention and Use of Personal Information

1. The Clinic processes and retains personal information within the period agreed upon when collecting the information or within the retention period stipulated by law.

2. Specific retention periods include:

   • Membership Management: Until the termination of the service usage contract or membership withdrawal. However, in the case of outstanding debts, until they are settled.

   • Contracts in E-Commerce: 5 years for contract, withdrawal, payment, and supply records.

   • Medical Records: Retained in accordance with the Medical Services Act.

   • Legal Retention: Even if the purpose of collection is fulfilled, personal information may be retained as required by the Commercial Act or other applicable laws.

4. Delegation of Personal Information Processing

1. To facilitate personal information processing, the Clinic may delegate certain tasks to external parties:

   • Delegated Entity: BrainMedi Co., Ltd.

   • Scope of Work: Identity verification, complaint handling, notifications, new service development, tailored service provision, event and promotional information dissemination, and participation opportunities.

2. When entering into delegation agreements, the Clinic ensures compliance with Article 25 of the Personal Information Protection Act, specifying obligations such as restricted processing, technical and managerial safeguards, re-delegation limitations, supervision of delegates, and liability for damages.

5. Provision of Personal Information to Third Parties
The Clinic does not provide personal information to third parties without the explicit consent of the data subject or unless required by law (as stipulated in Article 17 of the Personal Information Protection Act).
6. Rights and Responsibilities of Data Subjects
Data subjects may exercise the following rights regarding their personal information:

1. Request access to personal information.

2. Request corrections if there are errors.

3. Request deletion of personal information.

4. Request suspension of processing.

Requests can be submitted in writing, by email, or via fax using Form 8 of the Enforcement Rules of the Personal Information Protection Act. The Clinic will take prompt action.
When correcting or deleting errors in personal information, the information will not be used or provided until the corrections or deletions are completed.
7. Personal Information Processed by the Clinic
The Clinic processes the following categories of personal information:

• Required Information: Name, date of birth, login ID, password, mobile phone number, email address, access logs, cookies, service usage records.

• Optional Information: Branch, interests, event selection, registration source, mailing and SMS service preferences.

8. Destruction of Personal Information

1. The Clinic promptly destroys personal information once its processing purpose is achieved. Destruction occurs as follows:

   • If the retention period has expired, within five days of expiration.

   • If the purpose of processing is achieved, within five days of deeming the information unnecessary.

2. Methods of destruction:

   • Electronic Files: Deleted using technical methods to prevent restoration.

   • Paper Documents: Shredded or incinerated.

9. Use of Cookies
To provide personalized services, the Clinic uses cookies to store and retrieve user information.

• Purpose of Cookies: Analyzing access frequency, tracking user preferences, monitoring event participation, and providing tailored services.

• Cookie Settings: Users can configure their browser settings to accept all cookies, receive notifications when cookies are saved, or refuse all cookies.

10. Measures to Ensure Information Security
The Clinic implements the following measures to safeguard personal information in accordance with Article 29 of the Personal Information Protection Act:

• Regular internal audits.

• Restricting and training employees who handle personal information.

• Developing and enforcing internal management plans.

• Installing security programs to prevent hacking or data breaches.

• Encrypting personal data such as passwords.

• Controlling access to databases storing personal information.

11. Personal Information Protection Officer
The Clinic designates the following individual as the Personal Information Protection Officer to oversee and manage personal information-related complaints and disputes:

• Name: Yeom Jihye

• Contact Information: 02-325-7979

12. Consequences of Non-Consent
Users have the right to refuse consent for the collection and use of personal information. However, non-consent may limit access to certain services.
13. Effective Date
This privacy policy applies from January 15, 2025.