Privacy Policy

1. Purpose of Collection/Use of Personal Information

Purpose of Collection and Use of Personal Information The Company utilizes the collected personal information for the following purposes.

ο Performance of the contract regarding the provision of services and provision of content in accordance with the provision of services
ο Identity verification and personal identification regarding service usage, prevention of fraudulent use by delinquent members and unauthorized access, handling of civil complaints including grievances, and delivery of notices
ο Utilization for marketing and advertising: Providing event and promotional information and opportunities for participation; providing services and displaying advertisements based on demographic characteristics; identifying access frequency or statistics on service usage.
ο For the purpose of verifying the identity of the complainant, confirming the details of the complaint, contacting or notifying for fact-finding investigations, and notifying the results of processing, etc.

2. Items of personal information to be collected

We collect the following personal information for membership registration, consultation, service application, etc.

ο Collected Items: Name, Date of Birth, Login ID, Password, Mobile Phone Number, Email Address, Access Logs, Cookies, Service Usage History
ο Selectable items: Branch, Areas of Interest, Selected Events, Sign-up Channel, Receive Mailing and SMS Services
ο Retention Period: Semi-permanent until a separate request to opt out or withdraw membership is made
ο Method of collecting personal information: Website (member registration, consultation board, reservation board, simple login, etc.)

3. Retention and use period of personal information

① <The Company> processes and retains personal information within the personal information retention and usage period agreed upon when collecting personal information from data subjects or within the personal information retention and usage period stipulated by relevant laws and regulations.
② The specific personal information processing and retention period is as follows.

ο Customer Subscription and Management: Until the service usage contract is concluded or terminated; provided, however, if creditor-debtor relationships remain, until the settlement of such relationships.
o Records of contracts, withdrawal of subscriptions, payment settlements, and supply of goods, etc. in e-commerce: 5 years
ο In cases where collected for diagnosis and treatment, in accordance with the standards of the Medical Service Act
Even if the purpose of collection or the purpose of receipt has been achieved, personal information may be retained if preservation is necessary in accordance with the provisions of the Commercial Act or other laws.

4. Entrustment of personal information processing

① <Company> entrusts personal information processing tasks to external parties as follows to ensure smooth processing of personal information.

ο Entrusted Party (Trustee): BrainMedi Co., Ltd.
– Content of entrusted work: Identity verification related to the use of membership services, handling of civil complaints such as grievance processing,
Delivery of notices, development of new services (products) and provision of customized services, provision of event and promotional information and opportunities for participation

② A-Top Plastic Surgery Clinic, in accordance with Article 25 of the Personal Information Protection Act when concluding a consignment contract
We specify matters regarding the prohibition of processing personal information for purposes other than the performance of entrusted tasks, technical and administrative protective measures, restrictions on sub-entrustment, management and supervision of trustees, and liability such as compensation for damages in documents such as contracts, and we supervise whether trustees process personal information safely.

5. Provision of personal information to third parties

A-Top Plastic Surgery Clinic does not provide personal information to third parties except in cases falling under Article 17 of the Personal Information Protection Act, such as separate consent from the data subject or special provisions of the law.

6. Rights and Obligations of Data Subjects and Methods of Exercise

The data subject may exercise the following rights related to personal information protection with respect to A-Top Plastic Surgery Clinic at any time.

Regarding ① requests for access to personal information ② requests for correction in case of errors, etc. ③ requests for deletion ④ requests for suspension of processing
You may do so in writing, via email, fax, etc., in accordance with Form No. 8 of the Enforcement Rules of the Personal Information Protection Act, and A-Top Plastic Surgery Clinic will take action regarding this without delay.
If a data subject requests correction or deletion regarding errors, etc. in their personal information, the relevant personal information will not be used or provided until the correction or deletion is completed.
You may exercise your rights through a representative, such as the data subject's legal representative or an authorized agent.
In this case, you must submit a power of attorney in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act.

7. Items of Personal Information Processed A-Top Plastic Surgery Clinic processes the following items of personal information.

ο Collected Items: Name, Date of Birth, Login ID, Password, Mobile Phone Number, Email Address, Access Logs, Cookies, Service Usage History
ο Selectable items: Branch, Areas of Interest, Selected Events, Sign-up Channel, Receive Mailing and SMS Services

8. Destruction of personal information

① In principle, A-Top Plastic Surgery Clinic destroys personal information without delay once the purpose of processing the personal information has been achieved. The procedures, timeframes, and methods for destruction are as follows.

If the retention period of personal information has expired, the personal information is destroyed within 5 days from the end date of the retention period; and if the personal information becomes unnecessary due to the achievement of the purpose of processing the personal information, the discontinuation of the relevant service, the termination of the business, etc., the personal information is destroyed within 5 days from the date it is recognized that the processing of the personal information is unnecessary.

② A-Top Plastic Surgery Clinic destroys personal information in the following ways.

ο Electronic files: Uses technical methods such as file deletion, disk formatting, or recording that cannot be reproduced.
ο Paper documents: Shred or incinerate

9. Matters concerning the installation and operation of automatic personal information collection devices and the refusal thereof

A-Top Plastic Surgery Clinic operates "cookies" and similar technologies that frequently store and retrieve user information in order to provide specialized, customized services to users.

Cookies provide personalized services by analyzing access frequency or visit duration, identifying users' preferences and interests, tracking browsing history, and determining the level of participation in various events and the number of visits.
Users may set options in their web browser to allow all cookies, be prompted for confirmation whenever a cookie is saved, or refuse to save all cookies.

10. Measures to ensure the safety of personal information

In accordance with Article 29 of the Personal Information Protection Act, A-Top Plastic Surgery Clinic is taking the following technical, managerial, and physical measures necessary to ensure safety.

ο Conduct regular internal audits
We conduct regular internal audits (once a year) to ensure the security of personal information handling.
ο Minimization and training of employees handling personal information
We are implementing measures to manage personal information by designating employees who handle personal information and limiting them to the person in charge.
ο Establishment and implementation of internal management plans
We have established and implemented an internal management plan for safe handling of personal information.
ο Technical measures to prevent hacking, etc.
To prevent the leakage and damage of personal information caused by hacking or computer viruses, we install security programs, perform periodic updates and checks, install systems in areas where external access is controlled, and monitor and block access technically and physically.
ο Encryption of personal information
The user's personal information is stored and managed with an encrypted password, so only the user can know it. For important data, a separate security function is used, such as encrypting files and transmission data or using a file lock function.
ο Restriction on access to personal information
We are taking necessary measures to control access to personal information by granting, changing, and deleting access rights to the database system that processes personal information, and we are controlling unauthorized access from outside by using an intrusion prevention system.

11. Personal Information Protection Manager

A-Top Plastic Surgery Clinic takes overall responsibility for matters concerning the processing of personal information and has designated a Chief Privacy Officer as follows to handle complaints and provide relief for damages to data subjects regarding the processing of personal information.

ο Chief Privacy Officer
– Name: Lee Han-jeong
– Contact: 02-555-0410

12. Handling of Non-Agreement

Users (data subjects) have the right to refuse consent to the collection and use of personal information. However, if you do not consent, the provision of related services will be restricted.

13. This Privacy Policy is effective from July 2026.07.