Wells Dermatology Clinic (hereinafter referred to as "the Clinic") places great importance on the protection of users' personal information and always strives to do its utmost to safeguard it.

The Clinic complies with all personal information protection-related laws, including the "Act on Promotion of Information and Communications Network Utilization and Information Protection," which is a key legislation in the area of personal data protection. In addition, the Clinic has established a "Privacy Policy" and adheres to it, and has made the "Privacy Policy" publicly available on its website (www.wellsclinic.co.kr) so that users may access it at any time with ease.

The Clinic's "Privacy Policy" may be revised in accordance with changes to relevant laws and guidelines or changes to internal operational policies. Should the "Privacy Policy" be revised, the updated details will be announced through the website (www.wellsclinic.co.kr). The Clinic's Privacy Policy contains the following information.

<p><strong>1. Personal Information Collection Items</strong>When registering as a member on our internet service online site (hereinafter referred to as the "Website"), we collect only the minimum personal information necessary for using the Website's services. To use our Website, there are mandatory and optional fields during membership registration. Optional fields, such as email subscription preferences, do not restrict access to the Website even if left blank.<br>[Information Collected During Website Membership Registration]<br>- Mandatory items: ID, password, email, name, mobile phone number, date of birth, gender, and additional identity verification information provided by identity verification agencies, including encrypted unique identification information (C.I.) and duplicate registration confirmation information (D.I.)<br>- Optional items: Email subscription preference, SMS subscription preference<br>- Users under the age of 14 must fully understand the purpose of personal information collection and use, obtain consent from a parent or legal guardian, and then apply for membership and provide their personal information.<br>[Information Collected During Online Appointment Requests]<br>- Sensitive information: Whether it is a first visit or a return visit<br>[Automatically Generated Collection Items]<br>- Device information (PC/mobile), date and time of last visit, cookies, access IP information</p><p><strong>2. Purpose of Use of Collected Personal Information</strong>Our clinic uses the collected personal information for the following purposes. All collected information will not be used for any purpose other than those listed below, and prior consent will be obtained in the event of any change in the purpose of use.<br>- Mandatory information: Responding to online consultation requests, confirming online appointment notifications, providing My Page services for members<br>- Optional information: Delivering hospital news, promotional information, and health condition guidance via email or SMS<br>- Sensitive information: Determining whether consultation is required upon visiting the clinic</p>

<p><strong>3. Retention and Use Period of Personal Information</strong>Personal information is retained and used only for the duration in which our clinic provides services to users.<br>- Members: Upon processing a membership withdrawal request or revoking membership by an administrator, all registration information except the ID will be destroyed.<br>- Non-members: Upon achieving the purpose for which personal information was collected.<br>- Common to members and non-members: When collected for the purpose of providing medical services, the standards of the Medical Act apply.<br>However, even after the purpose of collection or provision has been achieved, personal information may be retained if there is a need to preserve it in accordance with applicable laws such as the Commercial Act.<br>To protect personal information, our clinic separately stores accounts as dormant accounts if there has been no website login record for an extended period (one year or more).</p><p><strong>4. Procedures and Methods for Destruction of Personal Information</strong>After the purpose for which collected personal information was used has been achieved, our clinic destroys the relevant information without delay in accordance with the retention and use period. The procedures and methods of destruction are as follows.<br>[Destruction Procedure]<br>- Information entered by users for membership registration and similar purposes is destroyed immediately upon achievement of its purpose, using the destruction method below.<br>[Destruction Method]<br>- Personal information stored in electronic file format is deleted using technical methods that prevent the records from being reproduced. Personal information printed on paper is destroyed by shredding or incineration.</p><p><strong>5. Use of Collected Personal Information and Provision to Third Parties</strong>Users' personal information is used within the scope notified under the "Purpose of Collection and Use of Personal Information" in the Terms of Service and Privacy Policy, or within the scope specified in the Terms of Service, and is not used beyond that scope or provided to third parties. However, the following cases are exceptions.<br>- When users have given prior consent to disclosure.<br>- When required by law, or when requested by investigative authorities in accordance with procedures and methods prescribed by law for investigative purposes.<br>- When necessary for statistical compilation, academic research, or market research, provided the information is processed in a form that does not allow identification of specific individuals.</p>

"<p><strong>6. Entrustment of Collected Personal Information Processing</strong>Our clinic entrusts the following personal information processing tasks to external specialized companies in order to provide better services, user convenience, and smooth business operations.<br>Companies to which personal information is provided<br>Our clinic stipulates compliance with personal information protection laws, confidentiality of personal information, prohibition of third-party provision, liability in the event of incidents, the entrustment period, and the obligation to return or destroy personal information after the completion of processing through entrustment agreements, and manages compliance accordingly.</p><p><strong>7. Rights of Users and Legal Representatives and How to Exercise Them</strong>- Users may view or modify their registered personal information at any time and may also request membership withdrawal.<br>- To view or modify personal information, users must log in, click "My Page > Edit Member Information," and complete the identity verification process before making changes.<br>- To withdraw membership (revoke consent), users may log in, click "My Page > Withdraw Membership," and submit a withdrawal request; the withdrawal will be completed after administrator approval.<br>- If you contact the Personal Information Manager in writing, by phone, or by email, we will take action without delay.<br>- If a user requests correction of an error in their personal information, the relevant personal information will not be used or provided until the correction is completed.<br>- Personal information that has been terminated or deleted at the user's request is processed in accordance with the terms specified in "Retention and Use Period of Personal Information Collected by the Company" and is managed so that it cannot be accessed or used for any other purpose.<br>- Legal representatives may withdraw consent for the collection, use, or provision of personal information of children under the age of 14, and may request access to or correction of errors in personal information provided by children under the age of 14.</p><p><strong>8. How to Revoke Consent / Withdraw Membership</strong>Users may withdraw their consent to the collection, use, and provision of personal information given at the time of membership registration at any time. To withdraw membership, users may log in to our clinic's website, click "My Page > Withdraw Membership," and submit a withdrawal request; the withdrawal will be completed after administrator approval. In addition, if you contact the Personal Information Manager in writing, by phone, or by fax, we will take necessary measures, such as destroying the user's personal information without delay after completing the identity verification process.</p>"

9. Installation/Operation of Automatic Personal Information Collection Devices and How to Refuse Them
Our clinic operates "cookies" that periodically store and retrieve user information. Cookies are very small text files sent by the server operating our clinic's website to the user's browser, and are stored on the user's computer hard disk.
Users have the right to choose whether to allow cookie installation. Accordingly, users may allow all cookies, require confirmation each time a cookie is saved, or refuse to save all cookies by adjusting the options in their web browser.
However, if a user refuses to allow cookies, some services may be difficult to provide.

10. Personal Information Protection Officer
In order to protect users' personal information and handle complaints related to personal information, our clinic has designated a Personal Information Protection Officer as follows.
[Personal Information Protection Officer]
Name:
Department:
Phone number:
Email:
Users may report any personal information protection-related complaints arising from using our clinic's website services to the Personal Information Protection Officer. Our clinic will respond promptly and sufficiently to users' reports. If you need to report or seek consultation regarding other personal information infringements, please contact the organizations below.
Personal Information Infringement Report Center (http://privacy.kisa.or.kr / 118)
Supreme Prosecutors' Office Cyber Crime Investigation Unit (http://www.spo.go.kr / (02) 3480-3573)
National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr / (02) 392-0330)

**11. Measures to Ensure the Security of Personal Information**
Our clinic has implemented various security measures as technical safeguards to protect users' personal information. All information visible to users is safely stored and managed within a security system protected by firewall devices. In addition, as an administrative measure to protect users' personal information, our clinic has established procedures necessary for accessing and managing users' personal information, limits the number of personnel who handle personal information to the minimum, designates authorized users for systems used to view and process personal information, assigns user passwords, and will update them on a regular basis.

**12. Obligation to Notify Upon Policy Changes**
This Privacy Policy was established on August 28, 2020. In the event of additions, deletions, or modifications to the content due to changes in laws, policies, or security technologies, the effective date and reasons for revision will be specified, and a notice will be posted on the main screen no later than 7 days before the effective date and up until the day before the effective date. Members who object to the revised terms may request to withdraw their membership.

This Privacy Policy is effective as of August 28, 2020.