Nunsarang Eye Clinic (hereinafter referred to as the Clinic)
places great importance on the protection of your personal information and complies with the Personal Information Protection Act.
Through this Privacy Policy, the Clinic informs you how and for what purposes the personal information you provide is used, and what measures are being taken to protect your personal information.
If the Clinic revises this Privacy Policy, it will notify you through the clinic website notice board or by individual notice.
■ Items of Personal Information Collected and Methods of Collection
The Clinic collects only the minimum personal information necessary to provide its services.
There are required and optional items for you to use the Clinic services.
Optional items such as whether to receive email newsletters may be left blank without any restriction on the use of services.
[Medical treatment information]
* Items collected: name, resident registration number, address, contact information, medical records
※ Under the Medical Service Act, unique identifying information and medical records must be retained by law, and separate consent is not required.
[Items collected when writing posts for medical consultation or appointments]
* Required items: name, password, contact information (mobile phone number), email address
* Optional items: email address, preference for receiving email messages
[Items collected upon website membership registration]
* Required items: name, ID, password, contact information (telephone number, mobile phone number)
* Optional items: email address, preference for receiving email messages
* In the course of using the service or during service provision, the following information may be automatically generated and collected: service usage records, access logs, cookies, access IP information
[Methods of collecting personal information]
* The Clinic collects personal information by the following methods
Website, written forms, fax, telephone, consultation board, appointment board, email
■ Purpose of Collection and Use of Personal Information
The Clinic uses the collected personal information for the following purposes.
All information provided by users will not be used for purposes other than those listed below, and if the purpose of use changes, prior consent will be obtained.
[Medical treatment information]
* Provision of medical services for diagnosis and treatment, and administrative services such as billing, payment, and refunds
[Website membership information]
* Required information: provision of member services such as online appointment booking and appointment inquiry via the website
* Optional information: delivery of clinic news and medical information by email, surveys, and statistical analysis regarding service usage
■ Retention and Use Period of Personal Information
The Clinic will promptly destroy your personal information once the purpose of collection or provision has been achieved.
[Medical treatment information]
* Retained in accordance with the medical record retention standards stipulated in the Medical Service Act
[Website membership information]
* When a member withdraws from membership or is expelled from membership
However, even if the purpose of collection or provision has been achieved, your personal information may be retained if it is necessary to do so under relevant laws such as the Commercial Act.
* Records regarding consumer complaints or dispute resolutions: 3 years
(Act on the Consumer Protection in Electronic Commerce etc)
* Records regarding the collection, processing, and use of credit information: 3 years
(Use and Protection of Credit Information Act)
* Records regarding identity verification: 6 months
(Act on Promotion of Information and Communications Network Utilization and Information Protection)
* Records regarding website visits: 3 months
(Protection of Communications Secrets Act)
■ Procedures and Methods of Destroying Personal Information
The Clinic destroys personal information without delay once the Purpose of Collection and Use of Personal Information has been fulfilled. The procedures and methods are as follows.
[Destruction procedures]
Information entered by users for membership registration and other purposes is destroyed immediately in accordance with the destruction methods once the purpose has been achieved.
[Destruction methods]
Personal information stored in electronic file format is deleted using technical methods that render the records irrecoverable.
Personal information printed on paper is destroyed by shredding with a shredder or incineration.
■ Provision and Sharing of Personal Information
Except where the user has given consent or where required by relevant laws and regulations, the Clinic will not use your personal information beyond the scope notified in the Purpose of Collection and Use of Personal Information, nor provide it to third parties such as other individuals, companies, or institutions.
* When information is provided in a form in which a specific individual cannot be identified, for statistical or academic research purposes
* When it is submitted at the request of an investigative agency in accordance with procedures and methods stipulated by law, etc.
■ Entrustment of Collected Personal Information
The Clinic does not entrust your personal information to external companies without your consent.
If such a need arises in the future, the Clinic will notify you of the entrusted party and the details of the entrusted work and, where necessary, obtain prior consent.
■ Rights of Users and Legal Representatives and How to Exercise Them
Membership registration for children under the age of 14 (hereinafter referred to as children) is conducted through a separate form drafted in plain language that is easy for children to understand, and consent from the legal representative is always obtained when personal information is collected.
To obtain the legal representative’s consent, the Clinic collects the minimum necessary information such as the name and contact information of the legal representative from the child, and obtains consent from the legal representative in accordance with the methods specified in this Privacy Policy.
The legal representative of a child may request access to, correction of, or deletion of the child’s personal information.
If the legal representative wishes to access, correct, or delete the child’s personal information, the legal representative may click on Member Information Edit, complete the legal representative verification procedure, and then directly access, correct, or delete the child’s personal information, or contact the Personal Information Protection Officer by written request, telephone, or fax, in which case the necessary measures will be taken.
The Clinic does not provide or share information about children to third parties, and if the legal representative requests correction of errors in the personal information collected from a child, the use and provision of such personal information will be suspended until the errors are corrected.
※ Personal information that must be retained by law cannot be modified or deleted upon request during the required retention period.
■ Method of Withdrawing Consent and Membership Cancellation
You may withdraw at any time the consent you have given regarding the collection, use, and provision of personal information at the time of membership registration.
To cancel membership, you may click on Member Withdrawal in the information edit section of the clinic website and complete the identity verification procedure to withdraw directly, or contact the Personal Information Manager by written request, telephone, or fax, in which case your personal information will be promptly destroyed and the necessary measures will be taken.
■ Installation, Operation, and Rejection of Automatic Personal Information Collection Devices
The Clinic uses cookies to store and retrieve your information from time to time.
Cookies are very small text files sent to your browser by the server used to operate the Clinic website and are stored on your computer hard disk.
The Clinic uses cookies for the following purposes.
You have the option to allow or refuse the installation of cookies.
Accordingly, by setting options in your web browser, you may allow all cookies, require confirmation each time a cookie is stored, or refuse the storage of all cookies.
If you refuse to install cookies, some services may not be provided smoothly.
■ Personal Information Protection Officer
To protect your personal information and handle complaints related to personal information, the Clinic designates a Personal Information Protection Officer as follows.
You may report any personal information protection related complaints arising from the use of Clinic services to the Personal Information Protection Officer. The Clinic will provide prompt and sufficient responses to users reports. If you need to report or consult regarding personal information infringement, please contact the organizations below.
Personal Information Dispute Mediation Committee ([http://www.1336.or.kr](http://www.1336.or.kr) / Tel 1336)
Korea Information Security Management and Privacy Certification Committee ([http://www.eprivacy.or.kr](http://www.eprivacy.or.kr) / Tel 02 580 0533–4)
Supreme Prosecutors Office Cyber Crime Investigation Department ([http://www.spo.go.kr](http://www.spo.go.kr) / Tel 02 3480 3573)
Korean National Police Agency Cyber Terror Response Center ([http://www.ctrc.go.kr](http://www.ctrc.go.kr) / Tel 02 392 0330)
■ Measures to Ensure the Security of Personal Information
The Clinic has implemented various security measures as technical safeguards to protect users personal information.
All information you send is safely stored and managed within a security system protected by a firewall.
The Clinic has also established internal management procedures as administrative safeguards for personal information protection, limits the number of personnel who handle personal information to a minimum, and provides them with ongoing security training.
In addition, the Clinic designates users of systems that process personal information, assigns passwords to those users, and regularly updates those passwords.
■ Obligation to Notify Due to Policy Changes
This Privacy Policy was enacted on 21 May 2025.
If there are additions, deletions, or modifications to its content due to changes in laws, policies, or security technologies, the Clinic will announce the reasons for and details of the changes on the clinic website at least 7 days before the revised Privacy Policy takes effect.
