DORÉ Plastic Surgery Clinic (hereinafter referred to as the “Clinic”) establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect users’ personal information and to promptly and smoothly handle related complaints.
This Policy contains the following:
The Clinic processes personal information for the following purposes, and if the purpose changes, separate consent will be obtained in accordance with Article 18 of the Personal Information Protection Act.
Website membership registration and management: User identification, authentication, maintenance and management of qualifications, prevention of fraudulent use, notices and notifications, complaint handling
Provision of goods or services: Delivery of content, products, invoices, payment processing, provision of customized services
Marketing and advertising: Provision of event and promotional information, analysis of access frequency, service usage statistics
Personal information is processed and retained within the scope of consent of the data subject and is destroyed without delay upon achievement of the purpose or request for deletion.
① Membership registration and management: Until membership withdrawal
② Provision of goods and services: Until completion of supply and settlement
Retention according to relevant laws (e.g., E-Commerce Act)
① Records of contracts and withdrawal of subscription: 5 years
② Records of payment and supply of goods: 5 years
③ Records of consumer complaints and dispute resolution: 3 years
④ Records of labeling and advertising: 6 months
⑤ Records of service visits: 3 months (Protection of Communications Secrets Act)
Collected items
2. ■ Membership registration
3.Required: ID, password, name, email, mobile phone number, date of birth, (for children under 14) legal guardian information
4. Optional: Gender
5. ■ Product orders
6.Required: Name of orderer and recipient, email, mobile phone number, address (delivery), order inquiry password (for non-members)
7. Optional: Landline number
8. ■ Simple login
9. Kakao: Name
10.Naver: ID, name, email | Optional: nickname, birthday
11.■ Automatically generated and collected during service use
12.Usage records, access logs, cookies, IP address, payment records, suspension or misuse records
13.Collection methods: Website, written forms, email, telephone, fax, bulletin boards, events, provision from affiliated companies, log analysis tools
The Clinic collects only the minimum information with the consent of a legal guardian and verifies consent through the following methods:
Verification of consent through mobile phone authentication of the legal guardian
Verification through provision of credit/debit card information
Submission of written consent, email reply, or phone confirmation
The Clinic provides personal information to third parties only when required by law or with the consent of the data subject.
Provision status
Recipient | Purpose | Items | Retention and usage period
[KOS CRM] | [Initial survey] | [ ] | [Period]
In emergency situations such as disasters or infectious diseases, personal information may be provided without consent in accordance with government guidelines. Please refer here* for details.
Entrusted companies and tasks
Cafe24 Co., Ltd.: Provision and maintenance of shopping mall hosting system
[Courier company name]: Delivery services
[Payment gateway company name]: Payment processing
#supply_list#: [Entrusted details]
When entering into entrustment contracts, matters such as confidentiality, restriction of re-entrustment, security measures, and responsibilities are specified in the contract and supervised.
Any changes to entrusted parties will be disclosed through this Policy.
Destruction procedure: When the retention period expires or the purpose is achieved, the information is transferred to a separate database and not used for any purpose other than those required by law.
Destruction method
Electronic files: Deleted using technical methods that make recovery impossible
Printed materials: Shredded or incinerated
Data subjects may request access, correction, deletion, or suspension of processing of their personal information.
Can be directly processed through the website “Edit Member Information/Withdrawal” menu
Requests via written form, phone, or email will be processed without delay
Exercise by a representative requires submission of a power of attorney (Form No. 11)
Requests may be restricted in accordance with relevant laws
Administrative: Internal management plan, dedicated organization, regular training
Technical: Access control and management, encryption, security programs
Physical: Access control to server rooms and data storage rooms
Purpose: Analysis of visit and usage patterns, provision of customized information
How to refuse: Browser > Internet Options > Privacy settings to block cookies
Refusal may limit the use of customized services
Personal Information Protection Officer and Person in charge | Name: In Seok Kyung | Organization: DORÉ CLINIC | Phone: 010-2579-2957 | Email: admin@dore.clinic
For inquiries, complaints, or damage relief related to personal information protection, please contact the above officer, and we will respond promptly.
Personal Information Dispute Mediation Committee: 1833-6972
Personal Information Infringement Report Center: 118
Supreme Prosecutors’ Office: 1301
National Police Agency: 182
For administrative appeals, refer to the Central Administrative Appeals Commission (www.simpan.go.kr)
This Policy shall take effect from March 23, 2026.