Privacy Policy

The Well Sam Korean Medicine Hospital (hereinafter referred to as 'the Hospital') establishes and discloses this Privacy Policy to protect the personal information of data subjects and to promptly and smoothly handle related grievances, in accordance with Article 30 of the 「Personal Information Protection Act」.

Article 1 (Purpose of Personal Information Processing)

The Hospital processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those specified below, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent.

Medical Appointment Booking and Management: Identity verification, appointment schedule notification, processing appointment changes and cancellations.
Provision of Medical Services: Verification of preliminary information (symptoms, areas of interest) for diagnosis and consultation, provision of customized medical services.
AI Chatbot Service Operation: Understanding consultation context based on chatbot conversation content and linking to appointments.

Article 2 (Items of Personal Information Processed)

The Hospital collects the minimum necessary personal information for providing services.

Required and Automatically Collected Items

Required Items: Name, contact information (email and mobile phone number), appointment date and time.
Automatically Collected Items: IP address, cookies, service usage records, access logs.

Optional Items (When using AI Chatbot)

Collected Items: Entire conversation history with the chatbot (symptoms, pain areas, interested treatments, consultation details, etc.)

※ The moment a user completes a reservation through the chatbot, the conversation log is transmitted to the medical staff for medical reference purposes.

Article 3 (Personal Information Processing and Retention Period)

The Hospital processes and retains personal information within the period of personal information retention and use stipulated by law or the period agreed upon by the data subject at the time of collection.

Retention Period Appointment booking information and chatbot consultation logs: Until the purpose of treatment is achieved or [3 years/5 years] from the appointment date (in accordance with the medical record retention period under medical law).
Exceptional Disposal In case of simple consultation/appointment cancellation without receiving treatment: Disposed of after [1 year] from the date of collection.

Article 4 (Provision of Personal Information to Third Parties and Access Rights)

The Hospital provides personal information to third parties only in cases corresponding to Article 17 and Article 18 of the 「Personal Information Protection Act」, such as with the consent of the data subject or a special provision in the law.

System Access Rights Specification

For smooth operation of the reservation system and medical linkage, collected personal information (appointment information and chatbot conversation content) is stored in the Hospital's database and can be accessed by the following entities.

Medical Staff (Doctors, Nurses, Consultation Managers): For the purpose of preparing for medical consultations and managing appointments.
System Administrators (Web/DB Administrators): For the purpose of correcting system errors, data backup, and security management.

Article 5 (Entrustment of Personal Information Processing)

The Hospital entrusts personal information processing tasks as follows for smooth handling of personal information.

Entrusted Party (Recipient): PREDAQ (johjaesung@gmail.com)
Content of Entrusted Work: Website and reservation system maintenance, DB management, AI chatbot system technical support.

Article 6 (Rights and Obligations of Data Subjects and How to Exercise Them)

Users can exercise their rights to view, correct, delete, or suspend processing of personal information at any time, and the Hospital will take action without delay. However, deletion of medical records that are subject to retention obligations under relevant laws such as the Medical Service Act may be restricted.

Article 7 (Measures to Ensure Personal Information Security)

The Hospital takes the following measures to ensure the security of personal information.

Administrative Measures: Establishment and implementation of internal management plans, regular employee training.
Technical Measures: Access control for personal information processing systems (only authorized personnel such as medical staff and system administrators), installation of security programs, encryption of unique identification information.
Physical Measures: Access control for computer rooms, data storage rooms, etc.

Article 8 (Personal Information Protection Officer)

The Hospital is responsible for overseeing all personal information processing tasks and designates a personal information protection officer as follows to handle grievances and provide remedies for data subjects related to personal information processing.

Name: Nam Yeo-jeong (Chief Director)
Affiliation: The Well Sam Korean Medicine Hospital
Contact: 02-3427-8275