Privacy Policy

1. Introduction

GangnamDoctor is a cosmetic surgery information platform operated by Rebeauty. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website and use our services. We are committed to protecting your personal data and being transparent about the information we hold.

Our Privacy Officer is Taeksu Jung. If you have any questions or concerns about this Privacy Policy or our data practices, you may contact us at cs@rebeauty.co.kr.

2. Information We Collect

We collect the following categories of personal information:

3. How We Use Your Information

• Provide Services: To operate the platform, manage your account, and deliver the features and functionality of GangnamDoctor.
• Improve User Experience: To analyze usage patterns, optimize content, and enhance the overall user interface and service quality.
• Send Notifications: To communicate important service updates, security alerts, and, with your consent, promotional information about our services.
• Analytics: To understand how our services are used, measure performance, and make data-driven improvements to our platform.

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: Where you have given explicit consent for specific processing activities, such as receiving marketing communications or the use of non-essential cookies.
• Legitimate Interest: Where processing is necessary for our legitimate business interests, such as improving our services, ensuring security, and preventing fraud, provided these interests do not override your fundamental rights.
• Legal Obligation: Where processing is necessary to comply with applicable laws and regulations, including tax laws, anti-fraud regulations, and data retention requirements.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform. Below is a description of the technologies we use:

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of our services.

6. Third-Party Services

We use the following third-party services that may collect or process your data:

• Google Analytics: For website traffic analysis and user behavior insights. Google's privacy policy applies to data collected through this service.
• Google Ads: For advertising and conversion tracking. Data collected is subject to Google's advertising policies.
• Rebeauty Partner Services: We may share limited information with Rebeauty partner clinics and services to facilitate service delivery and improve your experience on the platform.
• AWS S3 (Amazon Web Services): Used for secure storage of user-uploaded images, including profile photos and content images. AWS maintains industry-standard security measures for data protection.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside of the Republic of Korea, including the United States and other countries where Google and Amazon Web Services (AWS) operate their servers. These transfers are necessary for the use of Google Analytics, Google Ads, and AWS S3 image storage services.

When your data is transferred internationally, we ensure that appropriate safeguards are in place to protect your information, including contractual obligations and compliance with applicable data transfer regulations.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Upon account deletion, your personal data will be promptly deleted or anonymized, unless retention is required by applicable law.

Where required by law, certain data may be retained for the following periods:

• Records of contracts or subscription withdrawal: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records of payment and supply of goods: 5 years
• Records of consumer complaints or dispute resolution: 3 years
• Website visit logs: 3 months (Protection of Communications Secrets Act)

9. Your Rights

You have the following rights regarding your personal information:

• Right of Access: You may request information about the personal data we hold about you and obtain a copy of such data.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements.
• Right to Data Portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Restriction: You may request restriction of processing of your personal data under certain circumstances.
• Right to Object: You may object to the processing of your personal data for certain purposes, including direct marketing.

To exercise any of these rights, please contact our Privacy Officer at cs@rebeauty.co.kr. We will respond to your request within 30 days.

10. Children's Privacy

GangnamDoctor is not intended for use by individuals under the age of 14. We do not knowingly collect personal information from children under 14. If we become aware that we have collected personal data from a child under 14 without verified parental consent, we will take steps to delete that information as quickly as possible. If you believe we have inadvertently collected information from a child under 14, please contact us immediately at cs@rebeauty.co.kr.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption: All passwords are hashed using industry-standard algorithms. Data transmitted between your browser and our servers is encrypted using TLS/SSL protocols.
• Access Controls: Access to personal data is restricted to authorized personnel only, on a need-to-know basis. We maintain strict access control policies and regularly review access permissions.
• Infrastructure Security: Our servers and databases are protected by firewalls, intrusion detection systems, and regular security audits.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on our website with a revised "Last Updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact our Privacy Officer: