Privacy Policy

Symphony Plastic Surgery Clinic (the “Clinic”) establishes and publishes the following privacy policy under the Personal Information Protection Act of the Republic of Korea, in order to protect users' personal information and to handle any related complaint promptly.

Article 1 (Purposes of processing)

The Clinic processes personal information for the purposes below. Processed personal information is not used for any purpose other than those below; where the purpose changes, the Clinic takes the necessary measures, including obtaining separate consent under Article 18 of the Personal Information Protection Act.

① Receiving online consultation enquiries: replying to your enquiry and arranging a consultation time.

② Consultation and reservations: identity confirmation, consultation, reservation guidance and aftercare.

③ Website usage statistics and advertising measurement: service improvement and advertising analysis.

④ Facility safety and fire prevention: operation of CCTV on the premises (Article 14).

Article 2 (Items of personal information processed)

Online consultation enquiry

Required: name, contact number, content of the enquiry. Optional: email, treatment of interest. Received only where you have consented. This form does not take photographs.

Stored together with the enquiry

The address of the page the enquiry was sent from and the referral path (the parameters attached to advertising links). Used only to count which channel an enquiry came through.

Information you give through a consultation channel

The name, contact number, content and photographs you provide during a KakaoTalk or telephone consultation. Photographs of your face or skin condition are sensitive information and are covered separately in Article 3.

Information generated automatically

While the website is used, the access IP address, cookies, visit time, service usage records, and device and browser type may be generated automatically.

Article 3 (Processing of sensitive information)

Photographs of your face or skin condition and your treatment history, sent for a consultation, are sensitive information under Article 23 of the Personal Information Protection Act. Under Article 23(1)1 the Clinic obtains separate consent for them and keeps them apart from other personal information.

How consent is obtained

Before you send a photograph, the Clinic tells you what is collected, why, how long it is kept, and that you may refuse — and confirms your consent in your reply. Where you come to the clinic, consent is taken in writing.

Scope of use

Used only for the consultation and for drawing up a treatment plan. You can have a consultation without consenting. It can be done without photographs, or in person at the clinic.

Publication requires consent again

Where a photograph is to be published on the website or in advertising, such as a before-and-after photograph, consent to publication is taken again, separately from consent for the consultation. Photographs you have not consented to are not published, and after consenting you may withdraw at any time; we take it down without delay.

Storage and destruction

Destroyed without delay once the consultation has ended. Photographs incorporated into medical records follow the retention period set by the Medical Service Act.

Article 4 (Processing and retention periods)

Online consultation enquiryDestroyed without delay once the consultation has ended, and in any case within 12 months of receipt.

Consultation channel conversationsDestroyed without delay after the consultation. The conversation itself remains inside the KakaoTalk service, where Kakao's own policy also applies.

Consultation photographsDestroyed without delay after the consultation (Article 3).

Medical recordsWhere you have attended and been treated, retained for the periods set by Article 22 of the Medical Service Act and Article 15 of its Enforcement Rule (10 years for medical records, 2 years for prescriptions, and so on).

Website usage recordsKept in Google Analytics for 14 months and then deleted. Processed as statistics that do not identify an individual.

CCTV footageOverwritten and deleted automatically 30 days after recording (Article 14).

Article 5 (Provision to third parties)

The Clinic does not provide users' personal information to third parties. It may do so only in the cases covered by Articles 17 and 18 of the Personal Information Protection Act (where the user has consented in advance, where a statute specifically provides for it, or where an investigative authority requests it by the procedure and method the law lays down).

Information passed to advertising providers for measurement is covered separately in Article 6 (entrusted processing), Article 7 (transfer abroad) and Article 13 (behavioural information).

Article 6 (Processing entrusted to others)

Supabase Inc.Storage of online enquiry records. Stored in the Republic of Korea (Seoul) region.

Google LLCWebsite usage analysis (Google Analytics) and advertising measurement (Google Ads).

Meta Platforms, Inc.Advertising measurement (Meta Pixel and Conversions API).

When entering into a processing agreement the Clinic sets out what is needed for personal information to be handled safely, and where the entrusted work or the processor changes, it is published through this policy.

KakaoTalk channel consultations are not entrusted to anyone. The Clinic runs the channel and answers it directly. Because the conversation travels through the KakaoTalk service, Kakao's policy also applies to that service.

Article 7 (Transfer of personal information abroad)

Among the processors above, personal information may be transferred abroad to the following.

Google LLC (United States)

Items transferred: access records, device information and website usage records collected through cookies. Time and method: transmitted automatically over the network while the website is used. Purpose: usage analysis and advertising measurement. Retention: until the processing agreement ends.

Meta Platforms, Inc. (United States)

Items transferred: access records and device information collected through cookies, and the fact that a consultation channel button was pressed. Time and method: transmitted automatically over the network while the website is used. Purpose: advertising measurement. Retention: until the processing agreement ends.

Under Article 28-8(5) of the Personal Information Protection Act you may refuse the transfer of your personal information abroad. To do so, block the collection of cookies by the methods set out in Article 12 (cookies) and Article 13 (behavioural information). Blocking them does not affect your use of the website.

Article 8 (Procedure and method of destruction)

Procedure

Where the retention period has passed or the purpose has been achieved and the personal information is no longer needed, the Clinic destroys it without delay.

Deadline

Destroyed within 5 days of the day the retention period ends, or of the day the information becomes unnecessary because the purpose has been achieved. Online consultation enquiries are destroyed within 12 months of receipt at the latest.

Method

Information in electronic files is deleted by a method that cannot be recovered; information printed on paper is shredded or incinerated.

Article 9 (Rights of the data subject and legal representative, and how to exercise them)

Rights you can exercise

You may at any time request access, correction, deletion or suspension of processing in respect of your personal information. Consent to sensitive information may be withdrawn at any time.

How to exercise them

Contact us on +82-2-2135-2633 or through the KakaoTalk channel and we will act without delay. You may also make the request in writing or by email.

Through a representative

You may also make the request through a legal representative or an authorised person. In that case a letter of authority in the form of Attachment 11 to the Notice on Methods of Processing Personal Information must be submitted.

Where rights are limited

Access or suspension of processing may be limited under Article 35(4) and Article 37(2) of the Personal Information Protection Act. In addition, medical records the Medical Service Act requires to be kept cannot be deleted during that period.

Article 10 (Personal information of children under 14)

The Clinic does not collect the personal information of children under 14 through the online consultation form. If you are under 14, please do not use this form; contact us together with a guardian on +82-2-2135-2633.

Article 11 (Measures to secure personal information)

Keeping the number of handlers to a minimum

Staff who handle personal information are designated and kept to the smallest number needed.

Access control

The administration screen that shows enquiry records opens only with a password. Access restrictions are also applied at the database, so enquiry records cannot be read without administrator rights.

Encryption in transit

The whole website is served over HTTPS so that what you enter is not exposed while it travels.

Minimum collection, destruction on time

Only what the consultation needs is taken, and records past their retention period are flagged by the administration screen so they are destroyed.

Article 12 (Installation and operation of automatic collection devices, and refusal)

The Clinic uses cookies to obtain usage statistics and to measure advertising. A cookie is a small piece of information a website sends to your browser and which is stored on your device.

You may refuse to have cookies stored. In your browser settings you can allow all cookies, be asked each time one is stored, or refuse them all. Refusing does not affect your ability to view this website.

Where the settings are. Chrome: Settings › Privacy and security. Edge: Settings › Cookies and site permissions. Safari: Preferences › Privacy.

Article 13 (Collection and use of behavioural information, and refusal)

The Clinic collects behavioural information as follows, for online tailored advertising and advertising measurement.

What is collected

Website visit history, pages viewed, and the fact that a consultation channel button was pressed. The content of a consultation — which treatment you asked about, for example — is not collected.

Method and purpose

Collected and transmitted automatically through cookies when you visit the website, in order to measure advertising and to serve advertising matched to your interests.

Retention and use

Follows each advertising provider's own retention policy; not used once the processing agreement ends.

How to refuse

Google: turn off personalised advertising at myadcenter.google.com. Meta: adjust this under Settings › Ad preferences on Facebook or Instagram. You may also block cookies in your browser (Article 12).

Article 14 (Installation and operation of CCTV)

Basis and purposeInstalled and operated under Article 25 of the Personal Information Protection Act for facility safety, fire prevention and theft prevention.

Location and field of viewInstalled in shared areas of the clinic; the number and positions are posted on a notice inside the clinic. Not installed anywhere privacy could be infringed, such as consultation rooms, treatment rooms or changing rooms.

Recording time and storageRecorded 24 hours a day; overwritten and deleted automatically 30 days after recording.

Person responsible and accessManaged by the personal information protection officer; viewing rights are limited to that officer and staff the Clinic designates.

Requesting footage of yourselfYou may request access to, or deletion of, footage in which you appear. Contact the main line and we will verify your identity first, so that nothing is viewed for any other purpose.

Protective measuresFootage is kept in a locked location, access is logged, and the Clinic manages it directly without entrusting it to anyone.

Article 15 (Rights regarding automated decisions)

The Clinic does not make decisions, by processing personal information through a fully automated system, that have legal effect or a comparable impact on the user within the meaning of Article 37-2 of the Personal Information Protection Act. Consultations and treatment plans are decided by people.

Article 16 (Processing of pseudonymised information)

The Clinic does not currently process pseudonymised information.

Article 17 (Personal information protection officer and requests for access)

Name of the medical institutionSymphony Plastic Surgery Clinic

Personal information protection officerShin Ji-sun

Contact+82-2-2135-2633

Address2F Sinsa Hill Building, 165 Dosan-daero, Gangnam-gu, Seoul

Requests for accessReceived on the contact above or through the KakaoTalk channel.

For any question, complaint or request for redress concerning personal information, let us know on the contact above and we will answer and act without delay.

Article 18 (Remedies for infringement of rights)

If you need help with an infringement of personal information, you may apply to the following bodies for dispute resolution or advice.

Personal Information Infringement Report Centre (privacy.kisa.or.kr / 118) · Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972) · Supreme Prosecutors' Office Cyber Investigation Division (spo.go.kr / 1301) · National Police Agency National Investigation Headquarters Cyber Bureau (ecrm.police.go.kr / 182)

Where your rights or interests have been infringed by a disposition or omission of a public authority, you may also request an administrative appeal as provided by the Administrative Appeals Act. Central Administrative Appeals Commission (simpan.go.kr / 110)

Article 19 (Changes to this privacy policy)

This privacy policy applies from 31 August 2026.

Where content is added, removed or amended because of a change in law or in the service, we will give notice on this page from 7 days before it takes effect. Where the change is unfavourable to users, notice is given from 30 days before.

Earlier versions of the policy can be obtained on request on +82-2-2135-2633.

This is an English translation of the Korean original. The Korean version governs, and it is the Korean statutes cited above that apply.

Skin, in Symphony

Care that continues after the treatment

Skin shows itself on ordinary days, not on special ones.We stay with the time that follows a treatment.

Symphony Plastic Surgery & Dermatology, Dosan-daero, Seoul