PRIVACY POLICY

[Established in October 1, 2024]

Benjamin Clinic (hereinafter referred to as the "Clinic") uses its members' personal information to provide services.

In compliance with relevant laws, including the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Personal Information Protection Act, and guidelines set by relevant authorities, the Clinic has established this Privacy Policy to prevent the misuse of valuable personal information, clarifying the purposes, methods, and scope of the collection and use of such information.

The Clinic makes this Privacy Policy public to ensure that members can easily access it at any time.

1.Purpose of Processing Personal Information

The Clinic processes personal information for the following purposes:

1. Membership Registration and Management To confirm the intent to join, verify that the member is 14 years of age or older, identify members for membership services, maintain and manage membership status, prevent unauthorized use of services, deliver various notifications, and handle administrative matters related to customer service.
2. Provision of Services To provide skin solution services, reservation services, consultation services, and other related services.
3. Handling of Complaints To identify members, confirm details of complaints, contact members to verify information, and notify members of the results.
4. Use in Marketing and Advertising To provide personalized advertisements, notify members of events and benefits, and deliver promotional information.

2.Types of Personal Information Processed

The Clinic collects only the minimum necessary personal information to provide services and does not use it for any purposes other than those specified.

Information required for service provision is categorized as required information, while additional information collected for specialized services is classified as optional information that requires separate consent; however, users can still access the Clinic's services without restriction even if they do not consent to providing optional information.

The Clinic does not collect sensitive personal information without users' explicit consent. If there is a risk of privacy infringement due to sensitive information disclosed during the service process, the Clinic will publish on its website how users can select their options about potential disclosure of personal information and opt for non-disclosure before the service is provided.

Below are the categories of personal information collected during membership registration and service use, along with their primary purposes, retention, and usage periods:

1. Membership Registration and Management
   • Retained until membership withdrawal. However, even after withdrawal, information will be retained and used for complaint handling, dispute resolution, and compliance with legal obligations as required by relevant laws during the specific retention period.
   • If a user, court, or government agency requests the early deletion or destruction of personal information during the retention period, the Clinic will comply.
2. Use of Skin Solution Services
   • Retained until membership withdrawal. However, even after withdrawal, information will be retained and used for complaint handling, dispute resolution, and compliance with legal obligations as required by relevant laws during the specific retention period.
   • If a user, court, or government agency requests the early deletion or destruction of personal information during the retention period, the Clinic will comply.
3. Use of Reservation Services
   • Retained until membership withdrawal. However, even after withdrawal, information will be retained and used for complaint handling, dispute resolution, and compliance with legal obligations as required by relevant laws during the specific retention period.
   • If a user, court, or government agency requests the early deletion or destruction of personal information during the retention period, the Clinic will comply.
4. Use of Consultation Services
   • Retained until membership withdrawal. However, even after withdrawal, information will be retained and used for complaint handling, dispute resolution, and compliance with legal obligations as required by relevant laws during the specific retention period.
   • If a user, court, or government agency requests the early deletion or destruction of personal information during the retention period, the Clinic will comply.
5. Use of Other Services
   • Data such as access IP, access logs, browser usage, and device usage.
   • Retained until membership withdrawal. However, even after withdrawal, information will be retained and used for complaint handling, dispute resolution, and compliance with legal obligations as required by relevant laws during the specific retention period.
   • If a user, court, or government agency requests the early deletion or destruction of personal information during the retention period, the Clinic will comply.

3.Personal Information Processing and Retention Period

The Clinic restricts the use of members' personal information solely to the period during which the member is utilizing the services, starting from the initial use of the service. If a member requests the deletion of their personal information, withdraws consent for its collection and use, or if the purposes for collection and use have been fulfilled or the retention period has expired, the personal information will be destroyed without delay. However, in compliance with relevant laws, certain personal information may be retained for a specific period as below:

1. Data related to display/advertising: 6 months (Act on the Consumer Protection in Electronic Commerce)
2. Data related to withdrawal of contracts or subscription, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce)
3. Data related to payment and supply of goods, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce)
4. Data related to consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce)
5. Service usage data, such as access logs and IP information: 3 months (Protection of Communications Secrets Act)

4.Procedures and Methods for Destroying Personal Information

The Clinic destroys personal information without delay once the purpose of collection and use has been achieved.

1. Destruction procedure Personal information that has exceeded its retention period is destroyed in a manner that makes recovery impossible
2. Destruction methods Personal information stored in electronic file formats is deleted using technical methods that render the data irretrievable, while personal information printed on paper is destroyed by shredding.