Céramique Clinic (hereinafter referred to as "Céramique") collects, retains, and processes all personal information in accordance with applicable laws or based on the data subject's consent through its website (http://ceramiqueclinic.com). This policy is effective as of May 26, 2025. Céramique handles personal data lawfully and appropriately to protect the rights and interests of the data subject and respects users' rights such as access and correction as stipulated in the relevant laws. In the event of any violation, users may file for administrative appeal as stipulated by the Administrative Appeals Act or seek resolution and consultation from the Personal Information Dispute Mediation Committee or the Personal Information Infringement Reporting Center. This Privacy Policy complies with the current Personal Information Protection Act and related regulations. 1. Purpose of Personal Data Processing Céramique only uses your personal information for the following purposes. Should the purpose change, your consent will be obtained in advance. Appointment and Inquiry: For efficient communication regarding clinic appointments and inquiries Other: To respond promptly to customer inquiries 2. Retention and Use Period of Personal Information In principle, personal information is destroyed without delay once its collection and use purposes are fulfilled. However, information may be retained for a designated period as required by law, such as the Commercial Act and the Act on Consumer Protection in Electronic Commerce. The information will only be used for the following purposes: Records of appointments: 5 years (Basis: Act on Consumer Protection in Electronic Commerce) Records of customer complaints or disputes: 3 years (Basis: Same as above) Website visit (login) records: 3 months (Basis: Protection of Communications Secrets Act) In accordance with Article 39-6 of the Personal Information Protection Act, if a user does not use the information service for one year, Céramique will take necessary actions such as data destruction, unless another period is stipulated by law or agreed upon by the user. 3. Outsourcing of Personal Data Processing Céramique may outsource personal data processing in compliance with legal contracts and under prior agreement, with restrictions on sub-outsourcing. 4. Rights and Duties of Data Subjects and Legal Representatives Data subjects (or legal representatives for minors under age 14) may exercise the right to access, correct, delete, or suspend the processing of their personal data. Such requests can be submitted via written document, email, or phone using [Form No. 8] as prescribed in the Notice on Personal Information Processing Methods. Rights may also be exercised by legal representatives or delegated agents, in which case [Form No. 11] must be submitted. Requests for access or suspension of processing may be restricted in accordance with Articles 35 and 42 of the Personal Information Protection Act. Deletion requests may be denied if the data is required by law. Identity verification is required when requesting access or changes to personal information. 5. Collection and Processing of Personal Information Céramique collects and retains personal data only under legal grounds or with user consent. 1) Items Collected Registration and Online Appointment Kakao Auth: Kakao ID, subscription status to business channel Required: Name, phone number, date of birth, gender, appointment date, time, treatment Optional: User notes Appointment Inquiry Kakao Auth: Kakao ID Required: Name and contact info of the person who made the reservation 2) Collection Method Personal information is collected via website registration, online appointment requests, inquiries, or participation in promotional events. 6. Destruction of Personal Information When the retention period expires or the purpose is fulfilled, personal data is destroyed as follows: Procedure: Data is deleted according to internal policies after purpose or period ends. Timeframe: Within 5 days of expiration of retention or deemed unnecessary Method: Electronic files: Permanently deleted beyond recovery Printed records: Shredded or incinerated 7. Use of Cookies Cookies are used to provide customized services by storing and retrieving user information. Cookies are small files sent to a user’s browser and stored on their computer hard drive. Purpose: To analyze usage patterns and enhance personalized user experienceRejection: You may refuse cookies via browser settings (Tools > Internet Options > Privacy) Note: Disabling cookies may limit some services. 8. Measures for the Protection of Personal Information To ensure security under Article 29 of the Personal Information Protection Act, Céramique implements the following: Establishes and enforces an internal management plan Minimizes and trains authorized personnel Limits and records access to data systems and networks Maintains and protects access logs for at least one year Encrypts unique identifiers and sensitive data Uses antivirus programs and firewalls Restricts physical access to systems and stores records separately 9. Remedies for Personal Data Infringement If your rights are violated, you may contact the following organizations: Personal Information Dispute Mediation Committee: 1833-6972 | www.kopico.go.kr Privacy Infringement Report Center: 118 | privacy.kisa.or.kr Prosecution Service Cyber Crime Investigation: 1301 | www.spo.go.kr Police Cyber Investigation Bureau: 182 | ecrm.cyber.go.kr 10. Data Protection Officer For any inquiries related to personal data, please contact: Data Protection Officer Department: Operations Name: Jongjin Lee Email: CEO@thedaylabs.com Phone: 010-2767-1215 11. Policy Update This Privacy Policy is effective as of May 26, 2025.