Privacy Policy

DORÉ Plastic Surgery Clinic (hereinafter referred to as the “Clinic”) establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect users’ personal information and to promptly and smoothly handle related complaints.

This Policy contains the following:

Purpose of processing personal information
Retention and processing period of personal information
Items of personal information processed and methods of collection
Processing of personal information of children under 14
Provision of personal information to third parties
Entrustment of personal information processing
Procedures and methods for destruction of personal information
Rights and obligations of data subjects and legal representatives and how to exercise them
Measures to ensure the security of personal information
Installation/operation and refusal of automatic collection devices
Personal Information Protection Officer
Remedies for infringement of rights
Changes to this Privacy Policy

1. Purpose of Processing Personal Information

The Clinic processes personal information for the following purposes, and if the purpose changes, separate consent will be obtained in accordance with Article 18 of the Personal Information Protection Act.

Website membership registration and management: User identification, authentication, maintenance and management of qualifications, prevention of fraudulent use, notices and notifications, complaint handling

Provision of goods or services: Delivery of content, products, invoices, payment processing, provision of customized services

Marketing and advertising: Provision of event and promotional information, analysis of access frequency, service usage statistics

2. Retention and Processing Period of Personal Information

Personal information is processed and retained within the scope of consent of the data subject and is destroyed without delay upon achievement of the purpose or request for deletion.

① Membership registration and management: Until membership withdrawal

② Provision of goods and services: Until completion of supply and settlement

Retention according to relevant laws (e.g., E-Commerce Act)

① Records of contracts and withdrawal of subscription: 5 years

② Records of payment and supply of goods: 5 years

③ Records of consumer complaints and dispute resolution: 3 years

④ Records of labeling and advertising: 6 months

⑤ Records of service visits: 3 months (Protection of Communications Secrets Act)

3. Items of Personal Information Processed and Collection Methods

Collected items

2. ■ Membership registration

3.Required: ID, password, name, email, mobile phone number, date of birth, (for children under 14) legal guardian information

4. Optional: Gender

5. ■ Product orders

6.Required: Name of orderer and recipient, email, mobile phone number, address (delivery), order inquiry password (for non-members)

7. Optional: Landline number

8. ■ Simple login

9. Kakao: Name

10.Naver: ID, name, email | Optional: nickname, birthday

11.■ Automatically generated and collected during service use

12.Usage records, access logs, cookies, IP address, payment records, suspension or misuse records

13.Collection methods: Website, written forms, email, telephone, fax, bulletin boards, events, provision from affiliated companies, log analysis tools

4. Processing of Personal Information of Children under 14

The Clinic collects only the minimum information with the consent of a legal guardian and verifies consent through the following methods:

Verification of consent through mobile phone authentication of the legal guardian

Verification through provision of credit/debit card information

Submission of written consent, email reply, or phone confirmation

5. Provision of Personal Information to Third Parties

The Clinic provides personal information to third parties only when required by law or with the consent of the data subject.

Provision status

Recipient | Purpose | Items | Retention and usage period

[KOS CRM] | [Initial survey] | [ ] | [Period]

In emergency situations such as disasters or infectious diseases, personal information may be provided without consent in accordance with government guidelines. Please refer here* for details.

6. Entrustment of Personal Information Processing

Entrusted companies and tasks

Cafe24 Co., Ltd.: Provision and maintenance of shopping mall hosting system

[Courier company name]: Delivery services

[Payment gateway company name]: Payment processing

#supply_list#: [Entrusted details]

When entering into entrustment contracts, matters such as confidentiality, restriction of re-entrustment, security measures, and responsibilities are specified in the contract and supervised.

Any changes to entrusted parties will be disclosed through this Policy.

7. Procedures and Methods for Destruction of Personal Information

Destruction procedure: When the retention period expires or the purpose is achieved, the information is transferred to a separate database and not used for any purpose other than those required by law.

Destruction method

Electronic files: Deleted using technical methods that make recovery impossible

Printed materials: Shredded or incinerated

8. Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them

Data subjects may request access, correction, deletion, or suspension of processing of their personal information.

Can be directly processed through the website “Edit Member Information/Withdrawal” menu

Requests via written form, phone, or email will be processed without delay

Exercise by a representative requires submission of a power of attorney (Form No. 11)

Requests may be restricted in accordance with relevant laws

9. Measures to Ensure the Security of Personal Information

Administrative: Internal management plan, dedicated organization, regular training

Technical: Access control and management, encryption, security programs

Physical: Access control to server rooms and data storage rooms

10. Installation/Operation and Refusal of Automatic Collection Devices

Purpose: Analysis of visit and usage patterns, provision of customized information

How to refuse: Browser > Internet Options > Privacy settings to block cookies

Refusal may limit the use of customized services

11. Personal Information Protection Officer

Personal Information Protection Officer and Person in charge | Name: In Seok Kyung | Organization: DORÉ CLINIC | Phone: 010-2579-2957 | Email: admin@dore.clinic

For inquiries, complaints, or damage relief related to personal information protection, please contact the above officer, and we will respond promptly.

12. Remedies for Infringement of Rights

Personal Information Dispute Mediation Committee: 1833-6972

Personal Information Infringement Report Center: 118

Supreme Prosecutors’ Office: 1301

National Police Agency: 182

For administrative appeals, refer to the Central Administrative Appeals Commission (www.simpan.go.kr)

13. Changes to this Privacy Policy

This Policy shall take effect from March 23, 2026.