Le Blanc Dental Clinic (hereinafter referred to as "the Clinic") values the privacy of our patients and complies with the [Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.]. Accordingly, the Clinic informs you how the personal information you provide is used and for what purposes, and what measures are taken to protect your privacy, in accordance with our privacy policy. The order of our privacy policy is as follows: ❑ Types of personal information collected and method of collection ❑ Purpose of collection and use of personal information ❑ Retention and use period of personal information ❑ Procedure and method of destruction of personal information ❑ Provision and sharing of personal information ❑ Outsourcing of personal information processing ❑ Rights of the user and legal representative and how to exercise them ❑ Withdrawal of consent / method of withdrawal (membership withdrawal) ❑ Installation/operation of automatic personal information collection devices and matters regarding their refusal ❑ Personal information manager ❑ Measures to ensure the security of personal information ❑ Obligation to notify changes to the policy ❑ Types of personal information collected and method of collection The Clinic collects only the minimum necessary personal information required for service use at the time of membership registration. Membership registration includes mandatory and optional fields, but not filling in the optional fields, such as whether to receive mail, does not restrict service use. [Collected Information] Name, Resident Registration Number, Address, Contact Information, Medical Records ※ According to the Medical Law, it is mandatory to retain unique identification information and medical information (separate consent not required) [Method of Collecting Personal Information] Website (membership registration, consultation board, online reservation, etc.) ❑ Purpose of collection and use of personal information The Clinic uses the collected personal information for the following purposes. All information provided by users will not be used for any purpose other than those listed below, and prior consent will be obtained if the purpose of use changes. [Medical Information] Providing medical services such as diagnosis and treatment, and administrative services such as billing, payment, and refunds [Website Member Information] The website does not provide services such as medical appointment reservations, appointment inquiries, or membership services and conducts only anonymous consultations online. Since no surveys are conducted via email for hospital news or disease information, member information is not used. ❑ Retention and use period of personal information The Clinic will immediately destroy your personal information once the purpose of its collection or provision has been achieved. [Medical Information] Stored according to the retention standards specified in the Medical Law [Website Member Information] As the website operates without requiring membership registration or withdrawal, there is no need to enter member information. However, even if the purpose of collection or provision has been achieved, your personal information may be retained if necessary under the provisions of laws such as the Commercial Act. Records related to consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce, Etc.) Records on collection/processing and use of credit information: 3 years (Use and Protection of Credit Information Act) Records on identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.) Records on visit: 3 months (Protection of Communications Secrets Act) ❑ Procedure and method of destruction of personal information After achieving the [Purpose of Collection and Use of Personal Information], the Clinic will immediately destroy the information. The destruction procedure and method are as follows: [Destruction Procedure] Information entered by users for membership registration or other purposes will be immediately destroyed by the method of destruction after achieving its purpose. [Destruction Method] Personal information stored in electronic file format will be deleted using a technical method that cannot reproduce the records. Personal information printed on paper will be destroyed by shredding or incinerating. ❑ Provision and sharing of personal information The Clinic will not use your personal information beyond the scope notified in the [Purpose of Collection and Use of Personal Information] nor provide it to others, companies, or institutions without your consent, except in cases required by law. Submission of medical records to the Health Insurance Review and Assessment Service for health insurance claims, as required by the National Health Insurance Act When necessary for statistical compilation or academic research, provided in a form that cannot identify specific individuals Submission to investigative agencies upon request in accordance with the procedures and methods defined by law ❑ Outsourcing of personal information processing The Clinic does not outsource the handling of personal information. ❑ Rights of the user and legal representative and how to exercise them Membership registration for children under 14 years old (hereinafter referred to as "children") is conducted using a separate form written in easy-to-understand expressions, and consent from the legal representative is always obtained when collecting personal information. The Clinic collects minimal information from children, such as the name and contact information of the legal representative, to obtain consent from the legal representative in accordance with the methods defined in the privacy policy. The legal representative of the child can request to view, correct, or delete the child's personal information. If you wish to view, correct, or delete the child's personal information, you can click on the member information modification and go through the legal representative verification process, or directly contact the personal information protection officer by letter, phone, or fax to take the necessary measures. The Clinic does not provide or share information about children to third parties and prohibits the use and provision of the child's personal information until the error is corrected if the legal representative requests correction of an error. ※ Personal information required to be retained by law cannot be modified or deleted during the retention period, even upon request. ❑ Withdrawal of consent / method of withdrawal (membership withdrawal) Since the website is an open type without membership registration, it is fundamentally impossible to collect, use, and provide personal information on the website. If you wish to delete internet inquiries, please contact the personal information manager by letter or email to take the necessary measures to destroy your personal information. ❑ Installation/operation of automatic personal information collection devices and matters regarding their refusal The Clinic operates 'cookies' which frequently store and retrieve your information. Cookies are very small text files sent to your browser by the server used to operate our website and are stored on your computer's hard disk. The hospital uses cookies for the following purposes: Patients have the option to install cookies. Therefore, you can either allow all cookies by setting options in your web browser, check each time a cookie is stored, or refuse to store all cookies. If you refuse to install cookies, there may be difficulties in providing some services. ❑ Personal information manager Manager: Byun Sang-gyun, Head Doctor Department: Le Blanc Dental Clinic Representative Office Contact: 02-3444-2080 Patients can report all personal information protection-related complaints that occur while using the Clinic's services to the personal information manager. The Clinic will provide a prompt and sufficient response to users' reports. For reports or consultations on personal information infringement, please contact the following institutions: Personal Information Dispute Mediation Committee (http://www.1336.or.kr / 1336) Information Protection Mark Certification Committee (http://www.eprivacy.or.kr / (02) 580-0533~4) Supreme Prosecutors' Office Cybercrime Investigation Division (http://www.spo.go.kr / (02) 3480-3573) National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr / (02) 392-0330) ❑ Measures to ensure the security of personal information The Clinic has technical measures in place to protect users' personal information, including various security devices to prevent leakage, loss, or damage of information. All information sent by users is securely stored/managed in a security system protected by a firewall. Additionally, the Clinic has administrative measures in place to protect users' personal information, including establishing and implementing procedures necessary for access and management, limiting the personnel handling personal information to the minimum necessary, and conducting continuous security training. ❑ Obligation to notify changes to the policy This privacy policy was established on December 15, 2017, and if there are additions, deletions, or modifications to the content due to changes in laws, policies, or security technology, the Clinic will notify the reason and content of the changes at least 7 days before the implementation of the changed privacy policy through the Clinic's website. Announcement Date: December 1, 2023 Effective Date: December 1, 2023