[LITING Plastic Surgery] Privacy Policy
LITING Plastic Surgery Clinic (hereinafter referred to as the “Clinic”) highly values the personal information of its customers and is committed to handling such information lawfully and appropriately in order to protect the rights and interests of data subjects.
The Clinic complies with applicable laws and regulations, including the Framework Act on Telecommunications, the Telecommunications Business Act, the Personal Information Protection Act, and the Enforcement Decree thereof.
This Privacy Policy explains how the personal information you provide is collected and used, for what purposes it is processed, and what measures the Clinic takes to protect your personal information.
⸻
■ Personal Information We Collect
1. Categories of Personal Information Collected
The Clinic collects the following personal information for membership registration, customer consultations, and the provision of various services:
* Individual Members: Name, date of birth, gender, address, age, contact information, mobile phone information, email address
* Members Under the Age of 14: Information regarding the legal representative (resident registration number or i-PIN number, mobile phone information)
* Other Information: Visit information, prescription information, medical treatment information, card issuer name, card number, and other card payment authorization information
* When Participating in Events: Name, age, contact information, email address, address, gender, reservation information, medical treatment information, and consultation history
2. Methods of Collecting Personal Information
Personal information may be collected through the following channels:
* Website
* Written forms
* Fax
* Telephone
* Online bulletin boards
* Email
* Event participation
3. Information Automatically Collected During Use of Services
The following information may be automatically generated and collected while using the Clinic’s services:
* IP address
* Cookies
* Date and time of visits
* Service usage records
* Records of improper or unauthorized use
⸻
■ Purposes of Collecting and Using Personal Information
The Clinic will not use personal information for purposes other than those stated below. If the purpose of use changes, the Clinic will obtain the data subject’s consent where required by applicable law.
1. Provision of Services
* Medical Information: Provision of medical services for diagnosis and treatment, as well as administrative services including billing, payment, and refunds
* Reservation Information: Identity verification for medical appointments, appointment inquiries, and other related services
* Consultation Information: Medical consultations and guidance via telephone, text message, KakaoTalk, or other communication channels
* Other Information: Providing hospital news and health-related information via text messages and social media, conducting surveys, handling complaints, and maintaining effective communication channels
2. Membership Management
Personal information may be used for:
* Identity verification in connection with the use of services
* Individual identification
* Prevention of unauthorized or improper use
* Verification of consent from a legal representative when collecting personal information from children under the age of 14
* Subsequent verification of the identity of legal representatives
* Retention of records for dispute resolution
* Handling complaints and other inquiries
* Delivery of notices
* Provision of information related to membership management
* Delivery of news and updates
* Conducting surveys
3. Development of New Services, Marketing, and Advertising
* Development of new services and provision of customized services
* Provision of promotional and advertising information
* Providing opportunities to participate in events and promotions
When a member participates in an event or promotion or chooses to use an optional service, the Clinic may collect the following information with the member’s separate consent:
* Name, age, contact information, email address, address, gender, reservation information, medical treatment information, and consultation information
* Mobile phone numbers of third parties stored in the member’s mobile phone contacts, only for services equipped with social community functions. In such cases, the third-party mobile phone numbers will not be stored.
* Credit card number, mobile phone number, and the ID and password of affiliated gift certificate payment service providers, where applicable to members using paid services
4. Event Participation
* Customer consultation by LITING Plastic Surgery Clinic via telephone and text message
⸻
■ Processing and Retention Period of Personal Information
The Clinic processes and retains personal information within the retention and usage periods prescribed by applicable laws and regulations or within the periods agreed to by the data subject at the time the personal information is collected.
Even after the purpose of collection or provision has been fulfilled, personal information may be retained where necessary pursuant to the Korean Commercial Act or other applicable laws and regulations.
The applicable processing and retention periods are as follows:
1) Website Membership Registration and Management
Personal information will be retained until the member withdraws from the website.
However, where any of the following circumstances apply, the information will be retained until the relevant circumstance has been resolved:
* If an investigation or inquiry concerning a violation of applicable laws is ongoing, until the investigation or inquiry has been completed
Website Visit Records
* Reason for Retention: Protection of Communications Secrets Act
* Retention Period: 3 months
Records Concerning Identity Verification
* Reason for Retention: Act on Promotion of Information and Communications Network Utilization and Information Protection
* Retention Period: 6 months
Records Concerning Consumer Complaints or Dispute Resolution
* Reason for Retention: Act on the Consumer Protection in Electronic Commerce
* Retention Period: 3 years
Records Concerning the Collection, Processing, and Use of Credit Information
* Reason for Retention: Credit Information Use and Protection Act
* Retention Period: 3 years
2) Medical Services
Medical records are retained in accordance with Article 15 of the Enforcement Rule of the Medical Service Act:
* Patient register: 5 years
* Medical records: 10 years
* Prescriptions: 2 years
* Surgical records: 10 years
* Examination results and findings: 5 years
* Radiographic images, including digital images, and related reports: 5 years
* Copies of medical certificates and similar documents: 3 years
3) Handling of Civil Complaints and Inquiries
* Retention Period: 3 years after completion of the complaint or inquiry handling process
During the use of services, certain information such as IP addresses, cookies, service usage records, and device information may be automatically generated and collected.
Depending on whether such information can be linked to an identifiable individual or other personal information, it may or may not constitute personal information under applicable law.
⸻
■ Provision of Personal Information to Third Parties and Outsourcing of Personal Information Processing
The Clinic outsources certain tasks necessary for the provision of its services to external service providers.
The Clinic establishes appropriate requirements and conducts necessary management and supervision to ensure that outsourced service providers process personal information safely and in accordance with the Personal Information Protection Act.
If the scope of outsourced services or any service provider changes, the Clinic will disclose such changes without delay through this Privacy Policy.
The Clinic’s personal information processing service providers and the scope of outsourced services are as follows:
Retention Period: Until termination of the applicable outsourcing agreement
Service Provider Outsourced Services Personal Information Processed Retention Period
Carelabs Co., Ltd. Customer management system operation Clinic registration number, medical information, name, resident registration number, address, telephone number, email address, etc. Until termination of the outsourcing agreement
Meta S&C Co., Ltd. Customer management system operation, call system operation, IT system management Clinic registration number, medical information, name, resident registration number, address, telephone number, email address, etc. Until termination of the outsourcing agreement
Crado Co., Ltd. Use of customer information in external tools for raw material management Name, resident registration number, telephone number Until termination of the outsourcing agreement
Techlabs Co., Ltd. Telemarketing customer management, marketing, IT system management Name, telephone number, address, email address, medical information, reservation and consultation information, etc. Until termination of the outsourcing agreement
※ Website operation and management, delivery of promotional information including event-related advertisements, IT management outsourcing services, customer management, etc.:
* LITING Labs Co., Ltd.
* LITING Busan Co., Ltd.
* LITING Daegu Co., Ltd.
* Selting Suwon Co., Ltd.
* LITING Plastic Surgery Clinic (Seoul, Busan, and Daegu branches)
* Selting Clinic (Suwon, Gyeonggi-do)
⸻
■ Rights and Obligations of Data Subjects and How to Exercise Them
In principle, the Clinic destroys personal information without delay once the retention period has expired or the purpose of processing has been fulfilled.
However, this does not apply where personal information must be retained pursuant to other applicable laws.
The procedures, timeframes, and methods for destruction are as follows:
1. Destruction Procedure
Information provided by users will be destroyed in accordance with the Clinic’s internal policies and applicable laws and regulations once the applicable retention period has expired or the purpose of processing has been fulfilled.
Please refer to the section titled “Processing and Retention Period of Personal Information.”
2. Destruction Period
When the retention period for personal information expires, the Clinic will destroy the personal information within five (5) days from the expiration date.
Where personal information becomes unnecessary due to fulfillment of the processing purpose or for any other reason, the Clinic will destroy such information within five (5) days from the date on which the information is deemed no longer necessary.
3. Methods of Destruction
The Clinic destroys personal information using the following methods:
* Electronic files: Permanently deleted using methods that prevent restoration or recovery
* Paper records, printed materials, written documents, and other physical recording media: Shredded or incinerated
⸻
■ Measures to Ensure the Security of Personal Information
In accordance with Article 29 of the Personal Information Protection Act, the Clinic implements the following technical, administrative, and physical measures necessary to ensure the security of personal information.
1. Establishment and Implementation of an Internal Management Plan
The Clinic establishes and implements an internal management plan in accordance with Article 29 of the Personal Information Protection Act.
2. Minimization and Training of Personnel Handling Personal Information
The Clinic limits the number of personnel authorized to handle personal information to the minimum necessary and provides regular training in accordance with its internal management plan.
3. Administrative Measures
* Upon employment, all employees are required to sign confidentiality and security agreements to prevent unauthorized disclosure of information. The Clinic also maintains internal procedures to audit compliance with its privacy policies and employee obligations.
* The transfer of responsibilities involving personal information is conducted under strict security controls, and responsibilities relating to personal information incidents are clearly defined both during and after employment.
4. Restrictions on Access to Personal Information
The Clinic controls access to personal information by granting, modifying, and revoking access rights to database systems that process personal information.
The Clinic also uses intrusion prevention and detection systems to prevent unauthorized external access. Records concerning the granting, modification, or revocation of access rights are maintained for at least three (3) years.
5. Retention and Prevention of Alteration of Access Records
The Clinic retains and manages access records to personal information processing systems, including web logs and summary information, for at least six (6) months and takes appropriate measures to prevent such records from being altered, stolen, or lost.
6. Encryption of Personal Information
Users’ personal information is encrypted when stored and managed. Important data is also protected using additional security measures, including encryption during storage and transmission.
7. Technical Measures Against Hacking and Other Security Threats
To prevent the loss, damage, or unauthorized disclosure of personal information caused by hacking, computer viruses, or other security threats, the Clinic installs security software and regularly updates and inspects such software.
The Clinic also places its systems in areas where external access is controlled and implements technical and physical monitoring and access restrictions.
8. Physical Access Control for Unauthorized Persons
The Clinic maintains separate physical locations for systems containing personal information and establishes and operates access control procedures to prevent unauthorized entry.
⸻
■ Personal Information Protection Officer
The Clinic has designated the following Personal Information Protection Officer to oversee the protection of personal information and handle matters related to personal information:
* Name: Yeonju Yang
* Affiliation: Blooming Labs Co., Ltd.
* Email: bloominglabsglobal@gmail.com
⸻
■ Changes to This Privacy Policy
This Privacy Policy shall take effect as of the effective date stated below.
If any provisions of this Privacy Policy are added, deleted, or amended due to changes in applicable laws, regulations, or internal policies, the Clinic will endeavor to provide notice of such changes through its website at least seven (7) days prior to their implementation.
* Date of Amendment: September 1, 2026
* Effective Date: September 1, 2026
⸻
■ Remedies for Infringement of Rights
Customers may contact the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency (KISA) Personal Information Infringement Report Center to seek dispute resolution or consultation regarding infringements of personal information rights.
For other reports or consultations concerning personal information infringement, please contact the following organizations:
* Personal Information Infringement Report Center
* Website: privacy.kisa.or.kr
* Telephone: 118 (without area code)
* Cyber Investigation Department, Supreme Prosecutors’ Office
* Website: www.spo.go.kr
* Telephone: 1301 (without area code)
* Korean National Police Agency Cyber Bureau
* Website: police.go.kr
* Telephone: 182 (without area code)
⸻
■ View Previous Versions of the Privacy Policy
[리팅성형외과] 서비스 이용약관
이 약관은 리팅성형외과(이하 '회사')가 제공하는 서비스 이용조건 및 절차에 관한 사항과 기타 필요한 사항을 전기통신사업법 및 동법 시행령이 정하는 대로 준수하고 규정함을 목적으로 합니다.
제1조 (목적)
본 약관은 리팅성형외과(이하 “병원”)이 제공하는 리팅성형외과 홈페이지(이하 “홈페이지”)의 이용과 관련하여 “병원”과 회원 간의 권리 및 의무, 책임사항, 기타 서비스 이용에 필요한 사항을 전기통신기본법, 전기통신사업법, 개인정보 보호법 및 동법 시행령이 정하는 대로 준수하고 규정함을 목적으로 합니다.
제2조 (정의)
① “서비스”란 구현되는 단말기(PC, TV, 모바일단말기 등의 각종 유무선 장치를 포함)와 상관없이 회원이 이용할 수 있는 홈페이지 관련 제반 서비스를 의미합니다.
② "회원"이란 “병원” 홈페이지에 본 약관 및 개인정보 이용에 동의를 한 자로서, “병원”이 제공하는 서비스를 이용하는 사람을 말합니다.
③ "아이디(ID)"라 함은 "회원"의 식별과 "서비스" 이용을 위하여 "회원"이 정하고 "병원"이 승인하는 문자와 숫자의 조합을 의미합니다.
④ "비밀번호"라 함은 "회원"이 부여 받은 "아이디와 일치되는 "회원"임을 확인하고 비밀보호를 위해 "회원" 자신이 정한 문자 또는 숫자의 조합을 의미합니다.
⑤ "게시물"이라 함은 "회원"이 "서비스"를 이용함에 있어 서비스 상에 게시한 부호ㆍ문자ㆍ음성ㆍ음향ㆍ화상ㆍ동영상 등의 정보 형태의 글, 사진, 동영상 및 각종 파일과 링크 등을 의미합니다.
제3조 (약관의 게시와 개정)
① 본 약관은 홈페이지에 공시함으로써 효력이 발생하며, “병원"은 관계법령을 위배하지 않는 범위에서 약관을 개정할 수 있습니다.
② "병원"이 약관을 개정할 경우에는 적용일자 및 개정사유를 명시하여 현행약관과 함께 전항의 방식에 따라 개정약관의 시행일 7일 전부터 시행일 전까지 홈페이지에 공지합니다.
③ 회원이 개정약관의 적용에 동의하지 않는 경우 “병원”은 개정 약관의 내용을 적용할 수 없으며, 이 경우 회원은 이용계약을 해지할 수 있습니다.
④ 전항의 경우에 “병원”은 기존 약관 내용만으로는 회원에게 지속적인 서비스 제공이 불가능하다고 판단하는 경우 서비스 이용계약을 해지할 수 있습니다.
제4조 (약관의 해석)
이 약관에서 정하지 아니한 사항이나 해석에 대해서는 관계법령 또는 상관례에 따릅니다.
제5조 (서비스 이용계약 체결)
① 서비스 이용계약은 "회원"이 되고자 하는 자(이하 "가입신청자")가 약관의 내용에 대하여 동의를 한 다음 회원가입신청을 하고 "병원"이 이러한 신청에 대하여 승낙함으로써 체결됩니다.
② "병원"은 "가입신청자"의 신청에 대하여 "서비스" 이용을 승낙함을 원칙으로 합니다. 다만, "병원"은 다음 각 호에 해당하는 신청에 대하여는 승낙을 하지 않거나 사후에 이용계약을 해지할 수 있습니다.
1. 가입신청자가 본 약관에 의하여 이전에 회원자격을 상실한 적이 있는 경우. 단, "병원"의 회원 재가입 승낙을 얻은 경우에는 예외로 함
2. 실명이 아니거나 타인의 명의를 이용한 경우
3. 허위의 정보를 기재하거나, “병원”이 제시하는 내용을 누락하여 신청한 경우
4. 14세 미만 아동이 법정대리인(부모 등)의 동의를 얻지 아니하고 신청한 경우
5. 가입신청자의 귀책사유로 인하여 승인이 불가능하거나 기타 본 약관에 규정된 사항을 위반하여 신청한 경우
제6조 (개인정보보호 의무)
① "병원"은 "정보통신망법", “개인정보 보호법” 등 관계 법령이 정하는 바에 따라 "회원"의 개인정보를 보호하기 위해 노력합니다.
② 개인정보의 보호 및 사용에 대해서는 관련 법 및 "병원"의 개인정보취급방침이 적용됩니다. 다만, "병원"의 공식 사이트 이외의 링크된 사이트에서는 "병원"의 개인정보취급방침이 적용되지 않습니다.
제7조 ("회원"에 대한 통지)
① "병원"이 "회원"에 대한 통지를 하는 경우 본 약관에 별도 규정이 없는 한, 서비스 이용계약 체결 시 기재한 “회원”의 전자우편주소 등으로 통지 할 수 있습니다.
② "병원"의 "회원"에 대한 통지는 7일 이상 "병원"의 게시판에 게시함으로써 전항의 통지에 갈음할 수 있습니다.
제8조 ("회원"의 의무)
① "회원"은 다음 각호의 행위를 하여서는 안 됩니다.
1. 신청 또는 변경 시 허위내용의 등록
2. 타인의 정보도용
3. "병원"이 게시한 정보의 변경
4. "병원"이 정한 정보 이외의 정보(컴퓨터 프로그램 등) 등의 송신 또는 게시
5. "병원"과 기타 제3자의 저작권 등 지적재산권에 대한 침해
6. "병원" 및 기타 제3자의 명예를 손상시키거나 업무를 방해하는 행위
7. 외설 또는 폭력적인 메시지, 화상, 음성, 기타 공서양속에 반하는 정보를 "서비스"에 공개 또는 게시하는 행위
8. “병원”의 동의 없이 영리를 목적으로 "서비스"를 사용하는 행위
9. 기타 불법적이거나 부당한 행위
② "회원"은 관계법령, 본 약관의 규정, 이용안내 및 서비스 이용과 관련하여 공지한 주의사항, "병원"이 통지하는 사항 등을 준수하여야 하며, 기타 "병원"의 업무에 방해되는 행위를 하여서는 안 됩니다.
제9조 (“병원”의 의무)
① "병원"은 관련법령과 본 약관이 금지하거나 미풍양속에 반하는 행위를 하지 않으며, 계속적이고 안정적으로 "서비스"를 제공하기 위하여 최선을 다하여 노력하여야 합니다.
② "병원"은 "회원"이 안전하게 "서비스"를 이용할 수 있도록 개인정보(신용정보 포함)보호를 위해 보안시스템을 갖추어야 하며 개인정보취급방침을 공시하고 준수합니다.
③ "병원"은 서비스이용과 관련하여 "회원"으로부터 제기된 의견이나 불만이 정당하다고 인정할 경우에는 이를 처리하기 위하여 노력하여야 합니다. "회원"이 제기한 의견이나 불만사항에 대해서는 전자우편이나 등록된 연락처 등을 통하여 "회원"에게 처리과정 및 결과를 전달합니다.
제10조 (서비스의 제공 및 변경)
① “병원”은 다음 각 호의 서비스를 제공합니다.
1. 홈페이지를 통해 제공되는 예약 서비스
2. 홈페이지를 통해 제공되는 온라인 상담 서비스
3. 홈페이지를 통해 제공되는 의료 정보 서비스
4. 기타 “병원”이 정하는 서비스
② "서비스"는 연중무휴, 1일 24시간 제공함을 원칙으로 합니다.
③ "병원"은 컴퓨터 등 정보통신설비의 보수점검, 교체 및 고장, 통신두절 또는 운영상 상당한 이유가 있는 경우 "서비스"의 제공을 일시적으로 중단할 수 있습니다. 이 경우 "병원"은 제7조에 정한 방법으로 "회원"에게 통지합니다. 다만, "병원"이 사전에 통지할 수 없는 부득이한 사유가 있는 경우 사후에 통지할 수 있습니다.
④ "병원"은 서비스의 제공에 필요한 경우 정기점검을 실시할 수 있으며, 정기점검시간은 서비스제공화면에 공지한 바에 따릅니다.
⑤ "병원"은 상당한 이유가 있는 경우 운영상, 기술상의 필요에 따라 제공하고 있는 "서비스"의 내용을 변경할 수 있습니다.
⑥ "병원"은 무료로 제공되는 서비스의 내용을 “병원”의 정책 및 운영의 필요상 수정, 중단, 변경할 수 있으며, 이에 대하여 관련법에 특별한 규정이 없는 한 "회원"에게 별도의 보상을 하지 않습니다.
제11조 (서비스의 사용료)
① 서비스는 “회원”으로 등록한 모든 사람들이 무료로 사용할 수 있습니다.
② “병원”이 서비스를 유료화할 경우 유료화의 시기, 정책, 비용에 대하여 유료화 실시 이전에 서비스에 공시하여야 합니다.
제12조 (진료예약 서비스)
① 회원은 본인이 원하는 경우 홈페이지를 통한 진료예약 서비스를 이용할 수 있습니다.
② 모든 회원은 사전에 예약된 진료에 관하여 신의성실의 의무를 집니다.
③ “병원“은 회원의 진료예약 서비스 중 발생 가능한 모든 손실에 대하여 “병원”은 고의 또는 중과실이 있는 경우를 제외하고 민•형사상의 법적인 책임을 지지 않습니다.
제13조 (온라인 상담 서비스)
① 온라인상담 서비스는 어떠한 경우에도 실제 진료나 진단 및 수술 등의 실제 의료행위를 대신할 수 없습니다.
② “병원”은 서비스의 회원의 상담 내용이 상담의와 서비스 관리자를 제외한 제3자에게 유출되지 않도록 최선을 다해 보안을 유지하려고 노력합니다. 그러나 다음 각호의 사유에 해당하는 경우에는 상담 내용 공개 및 상실에 대하여 병원은 책임을 지지 않습니다.
1. 회원의 부주의로 비밀번호가 유출된 경우
2. 회원이 '상담삭제' 기능을 사용한 경우
3. 천재지변 등 기타 불가항력에 의한 경우
③ 홈페이지에서 진행된 상담의 내용은 특정 개인을 식별할 수 없는 형태로 아래와 같은 목적으로 사용할 수 있습니다.
1. 통계작성, 학술활동
2. 법률에 특별한 규정이 있는 경우
3. FAQ 활용 및 병원의 운영에 필요하다고 판단되는 기초자료로의 활용
④ 상담에 대한 답변 내용은 각 전문 의사의 의학적 지식을 바탕으로 한 주관적인 답변으로 “병원”의 서비스의 의견을 대표하지는 않습니다.
⑤ 아래와 같은 내용으로 상담을 신청하는 경우에는 “병원”은 상담 서비스의 일부 또는 전부를 제공하지 않을 수 있습니다.
1. 동일한 회원이 같은 내용의 상담을 반복하여 신청하는 경우
2. 상식에 어긋나는 표현을 사용하여 상담을 신청하는 경우
3. 진단명을 요구하는 상담을 신청하는 경우
4. 치료비, 검사비, 의약품 가격 등에 대하여 상담을 신청하는 경우
5. 타 진료기관에서 받은 내용에 대한 확인성 질문을 하는 경우
6. 의료기관 및 의료기관 종사자에 대하여 이유 없이 비방(모욕)하거나 명예를 훼손하는 경우
제14조 (의료 정보 서비스)
① 서비스에서 제공되는 내용은 개략적이며 일반적인 내용이고 정보제공만을 위해 제공됩니다. 서비스에서 제공되는 정보나 상담은 절대로 의학적인 진단을 대신할 수 없습니다. 서비스에서 제공되는 정보나 상담은 결코 의학적 진단, 진료, 혹은 치료를 대신하려는 목적이 아닙니다. 회원의 건강상태에 관한 의문점이나 걱정이 있다면 실제 전문 의사를 찾아 진단을 받아야 합니다. 어떠한 경우에도 서비스에서 제공하는 정보 때문에 의학적 진단을 무시하거나, 진단, 진료 혹은 치료 받는 것을 미루면 안됩니다.
② “병원”은 서비스에서 언급된 어떠한 특정한 검사나 제품 혹은 치료법도 추천하지 않습니다. 서비스에 표현된 개인의 의견은 모두 해당 저자의 의견입니다.
③ 본 서비스의 정보, 서비스에 참여하는 전문 의사 혹은 서비스를 사용하는 다른 회원이나 방문객의 의견을 받아들이는 것은 전적으로 사용자의 판단에 따르는 것입니다. 따라서 “병원”에서는 회원에게 제공된 어떠한 제품의 활용, 정보, 아이디어 혹은 지시로부터 비롯하는 어떠한 손해, 상해 혹은 그 밖의 불이익에 대한 책임을 지지 않습니다.
제15조 (저작권의 귀속)
① “병원”이 작성한 저작물에 대한 저작권 및 기타 지적재산권은 “병원”에 귀속합니다.
② “회원”은 홈페이지를 이용함으로써 얻은 정보를 “병원”의 사전 승낙 없이 수정, 복제, 공중송신(방송), 출판, 배포, 전시, 기타 방법에 의하여 영리목적으로 이용하거나 제3자에게 이용하게 하여서는 안됩니다.
제16조 ("게시물"의 관리)
① "회원"의 "게시물"이 "정보통신망법" 및 "저작권법"등 관련법에 위반되는 내용을 포함하는 경우, 권리자는 관련법이 정한 절차에 따라 해당 "게시물"의 게시중단 및 삭제 등을 요청할 수 있으며, "병원"은 관련법에 따라 조치를 취하여야 합니다.
② "병원"은 전항에 따른 권리자의 요청이 없는 경우라도 권리침해가 인정될 만한 사유가 있거나 기타 “병원” 정책 및 관련법에 위반되는 경우에는 정책 및 관련법에 따라 해당 "게시물"에 대해 임시조치 등을 취할 수 있습니다.
제17조 (계약해제, 해지 등)
① "회원"은 언제든지 서비스 초기화면의 정보관리 메뉴를 통하여 이용계약 해지 신청을 할 수 있으며, "병원"은 관련법 등이 정하는 바에 따라 이를 즉시 처리하여야 합니다.
② "회원"이 계약을 해지할 경우, 관련법 및 개인정보취급방침에 따라 "병원"이 회원정보를 보유하는 경우를 제외하고는 해지 즉시 "회원"의 모든 데이터는 소멸됩니다.
③ "회원"이 계약을 해지하는 경우, "회원"이 작성한 "게시물", 타인에 의해 재게시 되거나, 공개된 게시판에 등록된 "게시물" 등은 삭제되지 않으니 사전에 삭제 후 탈퇴하시기 바랍니다.
④ “병원”은 “회원”이 다음 각호에 해당하는 행위를 하였을 경우, 사전 통지 없이 이용 계약을 해지하거나 기간을 정하여 서비스 이용을 중지할 수 있습니다.
1. 공공질서 및 미풍양속에 반하는 경우
2. 범죄적 행위에 관련되는 경우
3. 국익 또는 사회적 공익을 저해할 목적으로 서비스 이용을 계획 또는 실행할 경우
4. 타인의 ID 및 비밀번호를 도용한 경우
5. 타인의 명예를 손상시키거나 불이익을 주는 경우
6. 같은 사용자가 다른 ID로 이중 등록을 한 경우
7. 서비스에 위해를 가하는 등 건전한 이용을 저해하는 경우
8. 기타 관련 법령이나 병원이 정한 이용조건에 위배되는 경우
제18조 (책임제한)
① "병원"은 천재지변 또는 이에 준하는 불가항력으로 인하여 "서비스"를 제공할 수 없는 경우에는 "서비스" 제공에 관한 책임이 면제됩니다.
② "병원"은 "회원"의 귀책사유로 인한 "서비스" 이용의 장애에 대하여는 책임을 지지 않습니다.
③ "병원"은 "회원"이 "서비스"와 관련하여 게재한 정보, 자료, 사실의 신뢰도, 정확성 등의 내용에 관하여는 책임을 지지 않습니다.
④ "병원"은 "회원" 간 또는 "회원"과 제3자 상호간에 "서비스"를 매개로 하여 거래 등을 한 경우에는 책임이 면제됩니다.
⑤ "병원"은 무료로 제공되는 서비스 이용과 관련하여 관련법에 특별한 규정이 없는 한 책임을 지지 않습니다.
제19조 (분쟁조정 및 재판관할)
① 본 이용약관에 규정된 것을 제외하고 발생하는 서비스 이용에 관한 제반 문제에 관한 분쟁은 최대한 쌍방합의에 의해 해결하도록 합니다.
② 서비스 이용으로 발생한 분쟁에 대해 소송이 제기될 경우 서울중앙지방법원을 제1심 전속 관할법원으로 합니다.
[부칙]
이 약관은 2020년 01 월 01 일을 시작으로 새로운 약관이 나오기 전까지 사용합니다.
Consent to the Collection and Use of Personal Information for Marketing Purposes
Liting Plastic Surgery Clinic (hereinafter referred to as the “Clinic”), pursuant to Article 22(4) of the Personal Information Protection Act, obtains your consent to collect and use personal information for marketing purposes in order to provide customized medical information, promotional offers, and other benefits.
This consent is optional. Refusal to provide consent will not restrict your access to basic medical services, consultations, or appointment services.
1. Purpose of Collection and Use of Personal Information
To provide information on new treatments and surgical procedures, promotions, events, and special offers provided by Liting Plastic Surgery Clinic
To provide personalized medical information and updates from the Clinic
To conduct customer satisfaction surveys and statistical analysis for service improvement
2. Personal Information Collected
3. Retention and Use Period
Your personal information will be retained and used until you withdraw your consent or terminate your membership.
However, where retention is required under applicable laws and regulations, the information will be retained for the period prescribed by such laws and regulations.
4. Methods of Sending Marketing Information
Marketing information may be sent through the following channels:
Right to Refuse Consent and Notice of Possible Disadvantages
You have the right to refuse consent to receive marketing information.
Even if you refuse to provide consent, you may continue to use the Clinic’s basic consultation and medical services without restriction.
However, if you do not provide consent, you may not receive information regarding benefits, promotional discounts, events, or personalized treatment information offered by Liting Plastic Surgery Clinic.
You may withdraw your consent to receive marketing communications at any time by contacting the Clinic’s customer service center or using the unsubscribe link provided in text messages.
[LITING Plastic Surgery] Privacy Policy
LITING Plastic Surgery Clinic (hereinafter referred to as the “Clinic”) highly values the personal information of its customers and is committed to handling such information lawfully and appropriately in order to protect the rights and interests of data subjects.
The Clinic complies with applicable laws and regulations, including the Framework Act on Telecommunications, the Telecommunications Business Act, the Personal Information Protection Act, and the Enforcement Decree thereof.
This Privacy Policy explains how the personal information you provide is collected and used, for what purposes it is processed, and what measures the Clinic takes to protect your personal information.
⸻
■ Personal Information We Collect
1. Categories of Personal Information Collected
The Clinic collects the following personal information for membership registration, customer consultations, and the provision of various services:
* Individual Members: Name, date of birth, gender, address, age, contact information, mobile phone information, email address
* Members Under the Age of 14: Information regarding the legal representative (resident registration number or i-PIN number, mobile phone information)
* Other Information: Visit information, prescription information, medical treatment information, card issuer name, card number, and other card payment authorization information
* When Participating in Events: Name, age, contact information, email address, address, gender, reservation information, medical treatment information, and consultation history
2. Methods of Collecting Personal Information
Personal information may be collected through the following channels:
* Website
* Written forms
* Fax
* Telephone
* Online bulletin boards
* Email
* Event participation
3. Information Automatically Collected During Use of Services
The following information may be automatically generated and collected while using the Clinic’s services:
* IP address
* Cookies
* Date and time of visits
* Service usage records
* Records of improper or unauthorized use
⸻
■ Purposes of Collecting and Using Personal Information
The Clinic will not use personal information for purposes other than those stated below. If the purpose of use changes, the Clinic will obtain the data subject’s consent where required by applicable law.
1. Provision of Services
* Medical Information: Provision of medical services for diagnosis and treatment, as well as administrative services including billing, payment, and refunds
* Reservation Information: Identity verification for medical appointments, appointment inquiries, and other related services
* Consultation Information: Medical consultations and guidance via telephone, text message, KakaoTalk, or other communication channels
* Other Information: Providing hospital news and health-related information via text messages and social media, conducting surveys, handling complaints, and maintaining effective communication channels
2. Membership Management
Personal information may be used for:
* Identity verification in connection with the use of services
* Individual identification
* Prevention of unauthorized or improper use
* Verification of consent from a legal representative when collecting personal information from children under the age of 14
* Subsequent verification of the identity of legal representatives
* Retention of records for dispute resolution
* Handling complaints and other inquiries
* Delivery of notices
* Provision of information related to membership management
* Delivery of news and updates
* Conducting surveys
3. Development of New Services, Marketing, and Advertising
* Development of new services and provision of customized services
* Provision of promotional and advertising information
* Providing opportunities to participate in events and promotions
When a member participates in an event or promotion or chooses to use an optional service, the Clinic may collect the following information with the member’s separate consent:
* Name, age, contact information, email address, address, gender, reservation information, medical treatment information, and consultation information
* Mobile phone numbers of third parties stored in the member’s mobile phone contacts, only for services equipped with social community functions. In such cases, the third-party mobile phone numbers will not be stored.
* Credit card number, mobile phone number, and the ID and password of affiliated gift certificate payment service providers, where applicable to members using paid services
4. Event Participation
* Customer consultation by LITING Plastic Surgery Clinic via telephone and text message
⸻
■ Processing and Retention Period of Personal Information
The Clinic processes and retains personal information within the retention and usage periods prescribed by applicable laws and regulations or within the periods agreed to by the data subject at the time the personal information is collected.
Even after the purpose of collection or provision has been fulfilled, personal information may be retained where necessary pursuant to the Korean Commercial Act or other applicable laws and regulations.
The applicable processing and retention periods are as follows:
1) Website Membership Registration and Management
Personal information will be retained until the member withdraws from the website.
However, where any of the following circumstances apply, the information will be retained until the relevant circumstance has been resolved:
* If an investigation or inquiry concerning a violation of applicable laws is ongoing, until the investigation or inquiry has been completed
Website Visit Records
* Reason for Retention: Protection of Communications Secrets Act
* Retention Period: 3 months
Records Concerning Identity Verification
* Reason for Retention: Act on Promotion of Information and Communications Network Utilization and Information Protection
* Retention Period: 6 months
Records Concerning Consumer Complaints or Dispute Resolution
* Reason for Retention: Act on the Consumer Protection in Electronic Commerce
* Retention Period: 3 years
Records Concerning the Collection, Processing, and Use of Credit Information
* Reason for Retention: Credit Information Use and Protection Act
* Retention Period: 3 years
2) Medical Services
Medical records are retained in accordance with Article 15 of the Enforcement Rule of the Medical Service Act:
* Patient register: 5 years
* Medical records: 10 years
* Prescriptions: 2 years
* Surgical records: 10 years
* Examination results and findings: 5 years
* Radiographic images, including digital images, and related reports: 5 years
* Copies of medical certificates and similar documents: 3 years
3) Handling of Civil Complaints and Inquiries
* Retention Period: 3 years after completion of the complaint or inquiry handling process
During the use of services, certain information such as IP addresses, cookies, service usage records, and device information may be automatically generated and collected.
Depending on whether such information can be linked to an identifiable individual or other personal information, it may or may not constitute personal information under applicable law.
⸻
■ Provision of Personal Information to Third Parties and Outsourcing of Personal Information Processing
The Clinic outsources certain tasks necessary for the provision of its services to external service providers.
The Clinic establishes appropriate requirements and conducts necessary management and supervision to ensure that outsourced service providers process personal information safely and in accordance with the Personal Information Protection Act.
If the scope of outsourced services or any service provider changes, the Clinic will disclose such changes without delay through this Privacy Policy.
The Clinic’s personal information processing service providers and the scope of outsourced services are as follows:
Retention Period: Until termination of the applicable outsourcing agreement
Service Provider Outsourced Services Personal Information Processed Retention Period
Carelabs Co., Ltd. Customer management system operation Clinic registration number, medical information, name, resident registration number, address, telephone number, email address, etc. Until termination of the outsourcing agreement
Meta S&C Co., Ltd. Customer management system operation, call system operation, IT system management Clinic registration number, medical information, name, resident registration number, address, telephone number, email address, etc. Until termination of the outsourcing agreement
Crado Co., Ltd. Use of customer information in external tools for raw material management Name, resident registration number, telephone number Until termination of the outsourcing agreement
Techlabs Co., Ltd. Telemarketing customer management, marketing, IT system management Name, telephone number, address, email address, medical information, reservation and consultation information, etc. Until termination of the outsourcing agreement
※ Website operation and management, delivery of promotional information including event-related advertisements, IT management outsourcing services, customer management, etc.:
* LITING Labs Co., Ltd.
* LITING Busan Co., Ltd.
* LITING Daegu Co., Ltd.
* Selting Suwon Co., Ltd.
* LITING Plastic Surgery Clinic (Seoul, Busan, and Daegu branches)
* Selting Clinic (Suwon, Gyeonggi-do)
⸻
■ Rights and Obligations of Data Subjects and How to Exercise Them
In principle, the Clinic destroys personal information without delay once the retention period has expired or the purpose of processing has been fulfilled.
However, this does not apply where personal information must be retained pursuant to other applicable laws.
The procedures, timeframes, and methods for destruction are as follows:
1. Destruction Procedure
Information provided by users will be destroyed in accordance with the Clinic’s internal policies and applicable laws and regulations once the applicable retention period has expired or the purpose of processing has been fulfilled.
Please refer to the section titled “Processing and Retention Period of Personal Information.”
2. Destruction Period
When the retention period for personal information expires, the Clinic will destroy the personal information within five (5) days from the expiration date.
Where personal information becomes unnecessary due to fulfillment of the processing purpose or for any other reason, the Clinic will destroy such information within five (5) days from the date on which the information is deemed no longer necessary.
3. Methods of Destruction
The Clinic destroys personal information using the following methods:
* Electronic files: Permanently deleted using methods that prevent restoration or recovery
* Paper records, printed materials, written documents, and other physical recording media: Shredded or incinerated
⸻
■ Measures to Ensure the Security of Personal Information
In accordance with Article 29 of the Personal Information Protection Act, the Clinic implements the following technical, administrative, and physical measures necessary to ensure the security of personal information.
1. Establishment and Implementation of an Internal Management Plan
The Clinic establishes and implements an internal management plan in accordance with Article 29 of the Personal Information Protection Act.
2. Minimization and Training of Personnel Handling Personal Information
The Clinic limits the number of personnel authorized to handle personal information to the minimum necessary and provides regular training in accordance with its internal management plan.
3. Administrative Measures
* Upon employment, all employees are required to sign confidentiality and security agreements to prevent unauthorized disclosure of information. The Clinic also maintains internal procedures to audit compliance with its privacy policies and employee obligations.
* The transfer of responsibilities involving personal information is conducted under strict security controls, and responsibilities relating to personal information incidents are clearly defined both during and after employment.
4. Restrictions on Access to Personal Information
The Clinic controls access to personal information by granting, modifying, and revoking access rights to database systems that process personal information.
The Clinic also uses intrusion prevention and detection systems to prevent unauthorized external access. Records concerning the granting, modification, or revocation of access rights are maintained for at least three (3) years.
5. Retention and Prevention of Alteration of Access Records
The Clinic retains and manages access records to personal information processing systems, including web logs and summary information, for at least six (6) months and takes appropriate measures to prevent such records from being altered, stolen, or lost.
6. Encryption of Personal Information
Users’ personal information is encrypted when stored and managed. Important data is also protected using additional security measures, including encryption during storage and transmission.
7. Technical Measures Against Hacking and Other Security Threats
To prevent the loss, damage, or unauthorized disclosure of personal information caused by hacking, computer viruses, or other security threats, the Clinic installs security software and regularly updates and inspects such software.
The Clinic also places its systems in areas where external access is controlled and implements technical and physical monitoring and access restrictions.
8. Physical Access Control for Unauthorized Persons
The Clinic maintains separate physical locations for systems containing personal information and establishes and operates access control procedures to prevent unauthorized entry.
⸻
■ Personal Information Protection Officer
The Clinic has designated the following Personal Information Protection Officer to oversee the protection of personal information and handle matters related to personal information:
* Name: Yeonju Yang
* Affiliation: Blooming Labs Co., Ltd.
* Email: bloominglabsglobal@gmail.com
⸻
■ Changes to This Privacy Policy
This Privacy Policy shall take effect as of the effective date stated below.
If any provisions of this Privacy Policy are added, deleted, or amended due to changes in applicable laws, regulations, or internal policies, the Clinic will endeavor to provide notice of such changes through its website at least seven (7) days prior to their implementation.
* Date of Amendment: September 1, 2026
* Effective Date: September 1, 2026
⸻
■ Remedies for Infringement of Rights
Customers may contact the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency (KISA) Personal Information Infringement Report Center to seek dispute resolution or consultation regarding infringements of personal information rights.
For other reports or consultations concerning personal information infringement, please contact the following organizations:
* Personal Information Infringement Report Center
* Website: privacy.kisa.or.kr
* Telephone: 118 (without area code)
* Cyber Investigation Department, Supreme Prosecutors’ Office
* Website: www.spo.go.kr
* Telephone: 1301 (without area code)
* Korean National Police Agency Cyber Bureau
* Website: police.go.kr
* Telephone: 182 (without area code)
⸻
■ View Previous Versions of the Privacy Policy
