Onsil Clinic (hereinafter the “clinic”) considers protection of your personal information very important and complies with the Personal Information Protection Act.
Through this privacy policy, the clinic explains how it uses the personal information you provide and what measures it takes to protect it.
This privacy policy is organized as follows.

1. Personal information collected and collection methods
2. Purpose of collection and use of personal information
3. Retention and use period of personal information
4. Procedures and methods for destroying personal information
5. Provision and sharing of personal information
6. Outsourcing of personal information processing
7. Rights of users and legal guardians and how to exercise them
8. How to withdraw consent or membership
9. Installation and operation of automatic personal information collection devices and how to refuse them
10. Person responsible for personal information
11. Measures to secure personal information
12. Duty to notify of policy changes
13. Personal information collected and collection methods

The clinic collects only the minimum personal information needed to use its consultation service. The consultation has fields to complete, but you may use the service without providing an email address or contact number.

[Medical information]

• Items collected: name, resident registration number, address, contact details, and medical records
  ※ Unique identifying information and medical records must be retained under the Medical Service Act (separate consent is not required).

[Items collected for website consultations]

• Required information: name, ID, password, email, contact number (telephone and mobile)
• Optional item: whether to receive email
• The following information may be generated and collected automatically during use or delivery of the service: usage records, access logs, cookies, and access IP address.

[Methods of collecting personal information]

• We collect personal information through the following methods.
  Website, paper forms, fax, telephone, consultation board, and email

2. Purpose of collection and use of personal information
   The clinic uses the collected personal information for the following purposes.
   Information you provide will be used only for the purposes below. We will seek prior consent if those purposes change.
   [Medical information]

• Provision of medical care for diagnosis and treatment, and administrative services such as billing, payment, and refunds
  [Website consultation information]
• Consultation service, clinic news and disease information by email, and surveys

3. Retention and use period of personal information
   The clinic destroys your personal information without delay once the purpose of collection or provision has been fulfilled.
   [Medical information]

• Retained in accordance with statutory requirements for medical records under the Medical Service Act
  [Website consultation information]
• Even after the purpose of collection or provision has been fulfilled, we may retain your personal information where required by the Commercial Act or other laws.
• Records of consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
• Records relating to the collection, processing, and use of credit information: 3 years (Credit Information Use and Protection Act)
• Identity verification records: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection)
• Visit records: 3 months (Protection of Communications Secrets Act)

4. Procedures and methods for destroying personal information
   The clinic destroys personal information immediately after the “Purpose of collection and use of personal information” has been fulfilled. The procedure and method are as follows.
   [Destruction procedure]
   Information entered for registration or similar purposes is destroyed immediately after its purpose has been fulfilled, using the methods described below.
   [Method of destruction]
   Personal information stored electronically is deleted by technical means that prevent restoration of the records.
   Printed personal information is destroyed by shredding or incineration.
5. Provision and sharing of personal information
   Unless you consent or applicable law permits, the clinic will never use your personal information beyond the stated “Purpose of collection and use of personal information,” or provide it to another person, company, or institution.

• Submission of medical records to the Health Insurance Review and Assessment Service to claim care benefits under the National Health Insurance Act
• Processed and provided in a form that cannot identify an individual when needed for statistics or academic research
• Submission when requested by investigative authorities in accordance with procedures and methods prescribed by law, etc.

6. Outsourcing of personal information processing
   The clinic entrusts the processing of personal information as described below to fulfill its services and specifies necessary safeguards in the outsourcing contract in accordance with applicable law.
   The organizations entrusted with personal information processing and their duties are listed below.
   -Contractor: Now Design
   -Outsourced work: website operation and maintenance
   -Personal information outsourced: customer personal information on the website
   -Retention and use period of personal information: until the outsourcing agreement ends
7. Rights of users and legal guardians and how to exercise them
   Children under 14 (hereinafter “children”) register using a separate form written in language they can easily understand. We obtain the consent of their legal guardian before collecting personal information.
   To obtain legal guardian consent, the clinic collects only minimal information from children, such as the guardian's name and contact number, and obtains consent by the method described in this privacy policy.
   A child's legal guardian may request access to, correction of, or deletion of the child's personal information. To do so, select Edit Membership Information and complete guardian verification, then view, correct, or delete the information directly. Alternatively, contact the privacy officer in writing, by telephone, or by fax; we will take the necessary action.
   The clinic does not provide or share information about children with third parties. If a legal guardian requests correction of a child's personal information, we prohibit its use and provision until the error is corrected.
   ※ Personal information that must be retained by law cannot be modified or deleted during the mandatory retention period, even on request.
8. How to withdraw consent or membership
   You may withdraw your consent to the collection, use, and provision of personal information given when you registered at any time.
   You may withdraw through My Page on the clinic website by selecting “Withdraw Membership” and completing identity verification, or contact the person responsible for personal information in writing, by telephone, or by fax. We will promptly take necessary steps, including destroying your personal information.
9. Installation and operation of automatic personal information collection devices and how to refuse them

The clinic uses cookies to store and retrieve information about you. A cookie is a small text file sent to your browser by the server running the clinic's website and stored on your computer's hard drive. The clinic uses cookies for the following purposes.
You may choose whether cookies are installed. In your browser settings, you can accept all cookies, require confirmation whenever a cookie is stored, or refuse all cookies.
If you refuse cookies, some services may be difficult to provide.

10. Person responsible for personal information
    To protect your personal information and handle related complaints, the clinic has appointed a person responsible for personal information as follows.

[Person responsible for personal information]
Name: Ji-seon Kim
Position: Director
Affiliation: Onsil Clinic
Telephone: 02-000-0000
Email: 222@222.com

You may report any complaint about personal information protection arising from use of the clinic's services to the person responsible for personal information. The clinic will respond promptly and fully. For other reports or advice concerning infringements of personal information, contact the agencies below.

Personal Information Dispute Mediation Committee (http://www.1336.or.kr / 1336)
Supreme Prosecutors' Office Cybercrime Investigation Division (http://www.spo.go.kr / (02) 3480-3573)
National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr / (02) 392-0330)

11. Measures to secure personal information
    The clinic maintains several technical safeguards for users' personal information. Information you send is securely stored and managed in a system protected by a firewall.
    The clinic also has administrative measures to protect personal information: procedures for access and management, restricting the number of people who handle it, and continuing security education. We designate users of systems that process personal information, assign passwords, and update them regularly.
12. Duty to notify of policy changes
    This privacy policy was established on October 1, 2026. If laws, policies, or security technology require additions, deletions, or revisions, we will announce the reason and contents on the clinic website at least 7 days before the revised policy takes effect.

Notice date: October 1, 2026
Effective date: October 1, 2026