Repic Clinic (hereinafter referred to as the "Clinic") establishes and discloses the following privacy policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of users and to promptly and smoothly handle any related concerns.


Article 1 (Purpose of Processing Personal Information)

The Clinic processes personal information for the following purposes. The collected personal information will not be used for purposes other than those specified below. If the purpose of use changes, we will take the necessary steps, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

	1.	Membership Registration and Management
	•	Verification of membership registration intent
	•	User identification and authentication for membership services
	•	Maintenance and management of membership status
	•	Identity verification under the limited identity verification system
	•	Prevention of unauthorized service use
	•	Verification of parental or legal guardian consent for children under 14
	•	Notifications and announcements
	•	Handling of complaints
	2.	Provision of Goods or Services
	•	Delivery of goods
	•	Provision of services
	•	Issuance of contracts and invoices
	•	Delivery of content
	•	Personalized service provision
	•	Identity and age verification
	•	Payment processing and billing
	•	Collection of debts
	3.	Complaint Handling
	•	Verification of the complainant’s identity
	•	Confirmation of complaints
	•	Communication for factual investigation
	•	Notification of complaint resolution results


Article 2 (Processing and Retention Period of Personal Information)

① The Clinic processes and retains personal information within the period specified by law or the period agreed upon when collecting the information.
② The processing and retention periods for each category of personal information are as follows:
	1.	Membership Registration and Management
	•	Retained until membership withdrawal
	•	However, in cases where a violation of law is under investigation, information will be retained until the investigation is concluded.
	•	If there are outstanding financial transactions, information will be retained until the settlement of those transactions.
	2.	Provision of Goods or Services
	•	Retained until the completion of service provision and payment processing
	•	However, in cases where retention is required by law, the following periods apply:
		◦	Records of advertisements and contracts: 6 months
		◦	Records of transactions (contracts, payments, delivery of goods): 5 years
		◦	Consumer complaints or dispute resolution records: 3 years
		◦	Telecommunications records (under the Communications Privacy Act):
			▪	Subscriber communication details: 1 year
			▪	Computer communication, internet log records, and access tracking: 3 months


Article 3 (Provision of Personal Information to Third Parties)

① The Clinic processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information) and does not provide personal information to third parties without the user’s consent, unless required by law under Articles 17 and 18 of the Personal Information Protection Act.
② When necessary for service provision, the Clinic may obtain consent under Article 17, Paragraph 1, Subparagraph 1 of the Personal Information Protection Act and provide minimal personal information to third parties.
	•	Recipient: Ex. OO Card Inc.
	•	Purpose of Use: Ex. Joint events, business partnerships, co-branded credit card issuance
	•	Personal Information Provided: Ex. Name, address, phone number, email, payment account information
	•	Retention and Use Period: Ex. During the contract period for the relevant transaction


Article 4 (User Rights and How to Exercise Them)

① Users can exercise the following privacy rights at any time:
	1.	Request access to personal information
	2.	Request corrections for errors
	3.	Request deletion of personal information
	4.	Request suspension of data processing
② These requests can be made via written document, phone, email, or fax, and the Clinic will promptly respond.
③ If a user requests correction or deletion of personal information due to errors, the Clinic will not use or provide the information until the correction is completed.
④ Users may authorize a legal representative or an agent to act on their behalf by submitting a power of attorney as per the format in Annex 11 of the Personal Information Protection Act Enforcement Rules.
⑤ Users must not infringe upon the privacy of themselves or others when exercising their rights under relevant laws.


Article 5 (Destruction of Personal Information)

① The Clinic will immediately dispose of personal information when the retention period expires or when it is no longer needed.
② If personal information must be retained beyond the agreed period due to legal requirements, it will be transferred to a separate database (DB) or stored in a different location.
③ Methods of Disposal:
	•	Procedure: The Clinic selects personal information for disposal and obtains approval from the Privacy Officer before deletion.
	•	Method:
		◦	Electronic files are permanently deleted so that they cannot be restored.
		◦	Paper documents are shredded or incinerated.


Article 6 (Security Measures for Personal Information)

The Clinic implements the following security measures to protect personal information:
1.	Administrative Measures: Internal management plans, employee training
2.	Technical Measures: Access control, encryption of sensitive data, security programs
3.	Physical Measures: Restricted access to server rooms and document storage areas


Article 7 (Use of Cookies and Automated Collection Tools)

① The Clinic uses cookies to provide customized services to users.
② Cookies are small text files sent by the website’s server to the user's browser and stored on their device.
③ Users can adjust their browser settings to allow, block, or delete cookies.
How to Manage Cookies
	•	Chrome: Settings > Privacy & Security > Clear Browsing Data
	•	Edge: Settings > Cookies & Site Permissions > Manage & Delete Cookies
	•	Safari (Mobile): Settings > Safari > Advanced > Block All Cookies
	•	Samsung Internet: Settings > Browsing Data > Clear Browsing Data
④ The Clinic collects and uses service usage patterns, search history, and security access status to optimize service delivery.


Article 8 (Privacy Officer and Inquiries)

① The Clinic has appointed a Privacy Officer responsible for handling personal information-related inquiries and complaints.
▶ Privacy Officer
	•	Name: Yong-Heon Ha
	•	Position: Chief Doctor
	•	Contact: 02-6952-0312
		(Inquiries will be directed to the relevant department)


Article 9 (Legal Remedies for Privacy Violations)

Users can contact the following agencies for dispute resolution and privacy-related inquiries:
1.	Personal Information Dispute Mediation Committee: ☎ 1833-6972 | www.kopico.go.kr
2.	Personal Information Infringement Report Center: ☎ 118 | privacy.kisa.or.kr
3.	Supreme Prosecutors' Office: ☎ 1301 | www.spo.go.kr
4.	vCyber Bureau, National Police Agency: ☎ 182 | ecrm.police.go.kr

Article 13 (Implementation and Changes to the Privacy Policy)
This privacy policy is effective as of February 27, 2025.