TLC Cheongdam Clinic (the “Clinic”) establishes and discloses this Privacy Policy as follows in accordance with the Personal Information Protection Act, the Medical Service Act and other relevant laws and regulations, in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.
Article 1 Purposes of processing personal information
The Clinic processes personal information for the following purposes. Personal information processed will not be used for any purpose other than those listed below. If the purpose of use changes, the Clinic will take necessary measures, such as obtaining separate consent.
- Appointment booking and consultation, and appointment confirmation notices
- Provision of medical services, including treatment, tests and prescriptions
- Billing and collection of medical fees, and health insurance–related tasks
- Handling of complaints and responses to inquiries
Article 2 Items of personal information processed
- Required items: name, date of birth, sex, contact information
- Items collected during treatment: resident registration number (pursuant to the Medical Service Act and other laws and regulations), address, medical records and health information
- Automatically collected items: access logs, access IP information
Article 3 Processing and retention period of personal information
The Clinic retains and uses personal information for the retention period prescribed by law or the period consented to by the data subject.
- Medical records: 10 years (Article 15 of the Enforcement Rule of the Medical Service Act)
- Prescriptions: 2 years
- Test details and test findings records: 5 years
- Appointment and consultation records: destroyed without delay once the purpose has been achieved
Article 4 Provision of personal information to third parties
The Clinic processes the personal information of data subjects only within the scope of the purposes of processing, and provides it to third parties only with the consent of the data subject or where specifically provided by law.
- National Health Insurance Service (NHIS), Health Insurance Review & Assessment Service (HIRA): claims and review of health insurance benefits (National Health Insurance Act)
Article 5 Outsourcing of personal information processing
The Clinic outsources personal information processing tasks as follows for efficient operations.
- NAVER Corp.: online appointment booking (Naver Booking)
- GC MediAI Co., Ltd. (formerly UBcare): operation and maintenance of the electronic medical record (EMR) system “Uisarang”
Article 6 Rights and obligations of data subjects and how to exercise them
Data subjects may at any time exercise their rights against the Clinic, including requests to access, correct, delete or suspend the processing of their personal information. However, deletion may not be requested for information that must be retained under law, such as medical records. Rights may be exercised in writing, by phone or in person, and the Clinic will take action without delay.
Article 7 Destruction of personal information
The Clinic destroys personal information without delay once the retention period has expired or the purpose of processing has been achieved. Electronic files are deleted using methods that make them unrecoverable, and paper documents are shredded or incinerated.
Article 8 Measures to ensure the security of personal information
- Administrative measures: establishment and implementation of an internal management plan, regular staff training
- Technical measures: management of access rights, access control, encryption of unique identification information, installation of security programs
- Physical measures: access control to areas where medical records are stored
Article 9 Chief Privacy Officer
The Clinic has designated a Chief Privacy Officer, as set out below, to take overall responsibility for personal information processing and to handle related complaints and provide remedies for damages.
- Chief Privacy Officer: Name Lee Ui-seong / Position Medical Director / Contact 02-3444-0101 · cheongdam@tlcmedi.com
- Privacy Officer: Name Kim Hyo-suk / Position General Operations Manager / Contact 02-3444-0101 · cheongdam@tlcmedi.com
Data subjects may contact the Chief Privacy Officer and the Privacy Officer with any inquiries, complaints or requests for remedies related to personal information protection. TLC Cheongdam Clinic will respond to and handle such inquiries without delay.
Article 10 Remedies for infringement of rights and interests
If you need to report or seek advice on an infringement of personal information, you may contact the organizations below.
- Personal Information Infringement Report Center: 118 (no area code)
- Personal Information Dispute Mediation Committee: 1833-6972
- Supreme Prosecutors’ Office: 1301 (no area code)
- Korean National Police Agency: 182 (no area code)
Article 11 Changes to the Privacy Policy
This Privacy Policy applies from November 3, 2026. If any content is added, deleted or modified, we will give notice on our website at least 7 days before the changes take effect.