Obliv Clinic Songdo Main Branch (hereinafter referred to as "the Clinic") establishes and discloses the following privacy policy in order to protect the personal information of data subjects in accordance with the Personal Information Protection Act and to promptly and smoothly handle related complaints.

Article 1 (Purpose of Processing Personal Information)

1. The Clinic processes personal information for the following purposes.

2. Provision of medical services: provision of all services for treatment, examinations, appointments and appointment confirmations, diagnosis and treatment, etc.

3. Medical fee billing: collection and payment of medical fees and claims for health insurance benefits, etc.

4. Customer management: identity verification, delivery of notices, handling of complaints, satisfaction surveys on service use, etc.

5. Fulfillment of legal obligations: issuance and retention of supporting documents pursuant to the Medical Service Act, tax-related laws, etc.

6. The personal information being processed will not be used for any purpose other than the following purposes, and if the purpose of use is changed, necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act will be implemented.

Article 2 (Processing and Retention Period of Personal Information)

1. The Clinic processes and retains personal information within the retention and use periods prescribed by law or the retention and use periods agreed to when personal information is collected from the data subject.

   1. Medical records: 10 years

   2. Examination review report: 5 years

   3. Prescription: 2 years

2. Customer management and marketing (with consent): retained until the date service use ends or consent is withdrawn; however, if an investigation or inquiry due to a violation of relevant laws is in progress, it will be retained until the investigation or inquiry is completed.

Article 3 (Items of Personal Information Processed)

1. The Clinic collects only the minimum personal information necessary to provide services.

   1. Required items: name, resident registration number, address, phone number, medical information (medical history, etc.)

   2. Optional items: email, consent to use for marketing

   3. Collection methods: registration forms completed when visiting the clinic, website reservations, phone consultations, etc.

2. The Clinic does not currently operate any online automatic collection devices, and if such devices are operated through the website, app, etc. in the future, the following items will be collected and disclosed.

   1. Definition of cookies, items collected (IP address, visit date and time, usage records, etc.), purpose of collection, and how to refuse them (browser settings)

Article 4 (Provision of Personal Information to Third Parties)

1. In principle, the Clinic processes the data subject's personal information only within the scope specified in Article 1 and does not process it beyond that scope or provide it to third parties without the data subject's prior consent. However, the following cases are exceptions.

   1. When separate consent has been obtained from the data subject

   2. When there are special provisions in the law or when it is unavoidable to comply with legal obligations

   3. In emergency situations, that is, when the data subject or their legal representative is unable to express intent, or when prior consent cannot be obtained due to unknown address, etc., and it is clearly recognized as necessary to protect the urgent life, body, or property interests of the data subject or a third party

2. The Clinic provides personal information processing operations as follows for smooth business processing.