Privacy Policy
데이뷰 의원 (DayBeau Clinic), operating DayBeau Gangnam — The Premium
Effective date: September 29, 2026
데이뷰 의원 (DayBeau Clinic, “we”, “us”) sets out this policy under the Personal Information Protection Act of the Republic of Korea (“PIPA”) to protect personal information and handle related concerns. It applies to this website (daybeaugangnam.com), our online booking and messaging channels, and visits and care at the clinic.
1. Personal information we process and how we collect it
| Category | Items | How we collect them |
|---|---|---|
| Using this website | Cookie IDs, pages viewed, time on page, referring page, device and browser information, IP address, time of access, search terms typed into the treatment search box (included in the page address) | Collected automatically when you use the website — by our hosting provider always, and by Google Analytics only if you accept analytics cookies |
| Online booking | Name, email address, phone number, selected treatment, preferred date and time, notes | Entered by you on the Setmore booking page |
| Inquiries | Name or account name, phone number or account ID, date of birth, message content, files you send | Given by you by phone, WhatsApp, LINE, WeChat, KakaoTalk, or Instagram |
| Visits and care at the clinic | Name, date of birth, sex, contact details, address, resident registration number (Korean patients), foreigner registration number (foreign patients), or passport number (foreign patients without a foreigner registration number), health information (symptoms, medical history, diagnosis, treatment details, prescriptions, and, depending on the treatment, clinical photos), payment information, name and contact details of a minor’s guardian | Given by you or your guardian during registration, consultation, treatment, and payment, or recorded during your care |
| Video footage | Footage recorded by the clinic’s CCTV | Recorded by the CCTV described in section 11 |
| Reviews shown on this website | Reviewer’s first name and surname initial, review text | Taken from reviews that the reviewers published on Google |
| Staff photos shown on this website | A group photo of the medical team and staff | Published with the consent of the people shown |
We process resident registration numbers and foreigner registration numbers only as far as the Medical Service Act and other laws require them, for example for medical records. We do not ask for them through online booking or messaging. For foreign patients without a foreigner registration number, we process the passport number to prepare medical records, with the patient’s separate consent obtained at registration.
2. Purposes of processing
- Responding to bookings and inquiries, and giving information about care
- Providing care, keeping medical records, and issuing prescriptions and certificates
- Receiving payment and sending aftercare notices
- Analyzing website use and keeping the website secure
- Showing patient reviews and introducing our medical team and staff
- Complying with legal obligations
3. Retention periods
- Booking and inquiry records: 5 years
- Records related to care (Enforcement Rule of the Medical Service Act): patient register 5 years, medical records 10 years, prescriptions 2 years, surgery records 10 years, test results and findings 5 years, radiology images and their reports 5 years, nursing records 5 years, midwifery records 5 years (if such records are made), copies of certificates 3 years
- Clinical photos and guardian details for minors: 10 years, kept with the medical records in our electronic chart (VEGAS CRM) (the retention period for medical records)
- Payment records: 5 years (the period for keeping books and supporting documents under the Framework Act on National Taxes)
- Website analytics data: 14 months (our Google Analytics retention setting)
- Hosting access logs: until our contract with the hosting provider (Vercel) ends
- CCTV footage: 60 days from recording
- Reviews shown on this website: while shown (removed without delay if the reviewer asks)
- Staff photos shown on this website: 5 years from publication (removed without delay if the person withdraws consent)
4. Provision to third parties
We provide personal information to third parties only with your consent or where a law specifically provides for it. We provide medical records only where the Medical Service Act permits.
- Investigative authorities and courts: when they request it through a procedure set by law
- Health authorities: when a law requires a report, such as for infectious diseases
- National Tax Service: medical expense data for year-end tax settlement under the Income Tax Act (patient name, resident registration number, amount paid, and similar items)
- TheSC (주식회사 더에스씨, a foreign-patient agency in the Republic of Korea): for patients who came to us through TheSC and have consented, we provide their name, contact details, treatment details, and visit schedule so that visits can be arranged and TheSC’s referral fee settled. Because treatment details are health information, we ask for this consent separately, and we provide them only with the documents Article 21 of the Medical Service Act requires: a consent form and a power of attorney signed by the patient, and copies of identification. You can receive care even if you do not consent. TheSC keeps this information until these purposes are achieved.
5. Entrusted processing and transfers outside Korea
| Recipient | Entrusted task | Country | Information transferred | When and how | Retention |
|---|---|---|---|---|---|
| TNH Co., Ltd. (VEGAS CRM) | Operating our electronic chart (medical records and bookings) | Republic of Korea | Items recorded in medical records | Sent over the internet when records are made or saved (cloud) | Until our contract with TNH Co., Ltd. ends |
| NICE Information & Telecommunication, Inc. | Authorizing and settling card payments | Republic of Korea | Card information, payment amount, date and time | Sent over the payment network when you pay by card | Until our contract with NICE Information & Telecommunication ends (transaction records that a law requires to be kept are kept for the period that law sets) |
| Google LLC | Website analytics (Google Analytics) | United States | Cookie IDs, usage information, IP address, page addresses (which may include search terms) | Sent over the internet when you open a web page, after you accept analytics cookies | 14 months |
| Google LLC | The map on our home page (Google Maps) | United States | IP address, browser information, the address of the website showing the map, Google cookies in your browser (if any) | When the home page is displayed, the map loads automatically and the information is sent over the internet at that time | As set by Google’s Privacy Policy (policies.google.com/privacy) |
| Vercel Inc. | Website hosting | United States | IP address, time of access, page address requested, browser information | Sent over the internet when you open a web page | Until our contract with Vercel ends |
| Setmore | Online booking | United States | Name, email address, phone number, booking details | Sent over the internet when you make a booking | As long as needed to provide its service and to comply with the law |
The entrusted management of our CCTV is described in section 11.
For website hosting (Vercel) and online booking (Setmore), we transfer information outside Korea under Article 28-8(1)(iii) of PIPA, as entrusted processing or storage needed to perform our service contract with you, by disclosing it in this policy. For website analytics (Google Analytics), we transfer information under Article 28-8(1)(i) of PIPA, with your consent: accepting analytics cookies is that consent.
When the home page is displayed, the map loads automatically from Google, and the information listed in the Google Maps row above is sent to Google LLC at that time.
Contact details of recipients outside Korea: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA · Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA, privacy@vercel.com · Setmore (Raleigh, North Carolina, USA), privacy@setmore.com
How to refuse transfers outside Korea, and what happens if you do: Google Analytics data is not sent unless you accept analytics cookies, and you can withdraw your consent at any time under Cookie settings at the bottom of each page; you can still use the website without it. If you block google.com content in your browser, Google Maps data is not sent; only the map will not be shown. You can book by phone or messaging instead of through Setmore. Hosting is needed to deliver the website; if you do not want this, you can contact us by phone instead.
6. Cookies
We use Google Analytics cookies to analyze how the website is used, but only if you accept them. We do not use Google signals data collection. We ask for your choice on your first visit, and you can change it at any time under Cookie settings at the bottom of each page. Your choice is stored only in your browser. You can also refuse or delete cookies in your browser settings, and you can still use the website.
7. Destruction of personal information
When the retention period ends or the purpose of processing is achieved, we destroy personal information without delay. Electronic files are deleted so that they cannot be recovered, and paper documents are shredded or incinerated. Where another law requires us to keep information, we store it separately from other personal information.
8. Possible disclosure of sensitive information, and how to keep it private
A review shown on this website may reveal that its author visited our clinic. If you do not want your review shown, ask the privacy officer in section 12. We will remove it or hide your name without delay.
9. Your rights and how to exercise them
You may at any time request access to, correction of, deletion of, or suspension of processing of your personal information, and may withdraw your consent. Contact the privacy officer in section 12 by phone, in writing, or by email. We will take the necessary action and notify you of the outcome within 10 days of receiving your request. Some requests may be limited where the law requires us to keep the information or where the request could harm another person’s rights. We process the personal information of children under 14 with the consent of their legal guardian, who may exercise these rights for the child. For care at the clinic, we obtain this consent by having the accompanying guardian sign our registration consent form. Please have a legal guardian make any online booking or inquiry for a child under 14.
10. Security measures
We maintain an internal management plan, limit which staff can access personal information and manage their access rights, train our staff on privacy, keep access logs for our personal information systems, and encrypt website traffic (HTTPS).
11. CCTV
- Legal basis and purpose: in the waiting room, corridors, entrance, and reception desk, for facility safety and crime prevention under Article 25(1) of PIPA; in treatment and consultation rooms, for facility safety, crime prevention, and checking safety during care, with the consent of the people recorded.
- Locations: waiting room, corridors, entrance, reception desk, treatment rooms, consultation rooms. There are no cameras where patients change clothes, and patients can be screened while changing. Notices are posted where cameras are installed. In treatment and consultation rooms, we record only people who have consented; patients are asked for this consent at registration.
- Number of devices and recording range: 79 devices, recording where they are installed and the surrounding area. Sound is not recorded.
- Recording hours: 24 hours
- Retention: 60 days from recording
- Storage location and handling: stored on the clinic’s own server and destroyed as described in section 7 when the retention period ends.
- Manager and people with access: the clinic’s chief administrator (only this person has access to the recording system). Responsible department: Management Support Team
- Entrusted management: S-1 Corporation (CCTV management), customer center 1588-3112 (within Korea)
- How and where footage can be checked: if a person recorded asks the privacy officer in section 12, the clinic’s chief administrator reviews the footage with them at the clinic.
- Requests: a person recorded may ask to view the footage, to confirm whether it exists, or to have it deleted. Requests may be limited, for example where they could harm another person’s rights.
- Protection: the measures in section 10 also apply to video footage.
12. Privacy officer
- Name: Jung Wook Lim
- Position: Medical Director
- Phone: +82-2-2138-2225
- Email: daybeau777@gmail.com
13. Remedies
- Personal Information Infringement Report Center (KISA): privacy.kisa.or.kr, phone 118
- Personal Information Dispute Mediation Committee: www.kopico.go.kr, phone 1833-6972
- Supreme Prosecutors’ Office, Cybercrime Investigation: www.spo.go.kr, phone 1301
- Korean National Police Agency, Cyber Bureau: ecrm.police.go.kr, phone 182
14. Changes to this policy
This policy takes effect on September 29, 2026. If we change it, we will post the changes and their effective date on this website and at the clinic before they take effect. Revision history: Previous policy effective September 27, 2026; revised September 29, 2026 to display the home page map automatically (previously displayed only after pressing a button).