Banpo Standar Orthopedic Clinic (hereinafter referred to as the "Clinic") establishes and discloses the following Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of Korea in order to protect the personal information of patients and website users and to promptly and appropriately handle related inquiries and complaints.

The Clinic processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those specified below. If the purpose of use changes, the Clinic will take necessary measures, including obtaining separate consent from the data subject in accordance with applicable laws.

1. Appointment and Consultation Requests

To confirm appointment requests, provide medical consultation information, respond to inquiries, and communicate with patients regarding appointments and treatment-related matters.

2. International Patient Services

To provide medical information, schedule appointments, assist international patients, and facilitate communication regarding treatment and clinic services.

3. Customer Service and Complaint Handling

To verify the identity of the requester, investigate inquiries or complaints, communicate processing results, and improve service quality.

4. Website Operation and Service Improvement

To analyze website usage, improve services, maintain website security, and provide optimized information to users.

① The Clinic processes and retains personal information within the period prescribed by applicable laws or within the period agreed upon by the data subject at the time of collection.

② Personal information collected through appointment requests, consultation forms, and inquiry forms is retained for up to three (3) years after the purpose of collection has been achieved, unless a longer retention period is required by applicable laws.

③ If retention is required under applicable laws, the Clinic shall retain personal information for the period prescribed by such laws.

The Clinic does not provide personal information to third parties except where:

1. The data subject has provided prior consent;

2. Disclosure is required by applicable laws and regulations;

3. Disclosure is necessary to comply with legal obligations imposed on the Clinic.

① The Clinic entrusts certain personal information processing tasks to external service providers as follows:

Entrusted Party: Imweb Corp.

Scope of Entrustment: Website hosting services, inquiry form management, system operation, notification services, and related website functions.

Subcontractor: Infobip Ltd.

Scope of Entrustment: SMS and notification message delivery services.

Subcontractor: LUNASOFT Inc.

Scope of Entrustment: SMS, KakaoTalk AlimTalk, and FriendTalk message delivery services.

② The Clinic supervises entrusted service providers and requires them to implement appropriate technical and administrative safeguards to protect personal information.

① Data subjects may exercise the following rights regarding their personal information at any time:

1. Request access to personal information;

2. Request correction of inaccurate information;

3. Request deletion of personal information;

4. Request suspension of processing.

② Such requests may be submitted to the Clinic by email or in writing, and the Clinic will respond without undue delay in accordance with applicable laws.

The Clinic processes the following personal information items.

1. Appointment and Consultation Requests

Required Information:

Name, Phone Number, Email Address, Inquiry Details

2. International Patient Inquiries

Required Information:

Name, Nationality, Phone Number, Email Address, Inquiry Details

3. Automatically Collected Information During Website Use

IP Address, Cookies, Access Logs, Browser Information, Device Information

① The Clinic destroys personal information without delay when the retention period expires or when the purpose of processing has been achieved.

② If personal information must be retained pursuant to applicable laws, such information shall be stored separately from other personal information.

③ Personal information stored electronically is permanently deleted using methods that prevent recovery, while paper documents are shredded or securely destroyed.

The Clinic implements the following measures to ensure the security of personal information:

1. Administrative Measures: Establishment and implementation of internal management plans, employee training, and access control policies.

2. Technical Measures: Access control systems, password protection, encryption, security software, and monitoring systems.

3. Physical Measures: Restricted access to data storage and processing facilities.

① The Clinic may use cookies to provide customized services and improve user experience.

② Users may configure their web browser settings to accept or reject cookies.

③ Refusing cookies may limit access to certain website functions or services.

The Clinic may collect website usage information, including visit records, access logs, browser type, and device information, for service improvement and security purposes.

The Clinic designates the following contact person responsible for personal information protection matters.

Personal Information Protection Officer

Organization: Banpo Standar Orthopedic Clinic

Email: banpostandaros@naver.com

Data subjects may contact the Clinic regarding any inquiries, complaints, or requests related to personal information protection.

Requests regarding access, correction, deletion, or suspension of processing of personal information may be submitted to:

Banpo Standar Orthopedic Clinic

Email: banpostandaros@naver.com

Data subjects may seek assistance from the following organizations regarding personal information disputes or infringements:

Personal Information Dispute Mediation Committee: https://www.kopico.go.kr

Personal Information Infringement Report Center: https://privacy.kisa.or.kr

Supreme Prosecutors' Office: https://www.spo.go.kr

Korean National Police Agency: https://ecrm.police.go.kr

This Privacy Policy shall become effective on June 8, 2026.