Privacy Policy

1. Purpose of Processing Personal Information

Vellicell Clinic does not use users' personal information for purposes other than the following, and will obtain consent if the purpose of use changes.

Medical appointment and inquiries: Prompt communication with staff regarding appointments and inquiries about Vellicell Clinic medical services

Other: Prompt response measures for other customer inquiries

2. Processing and Retention Period of Personal Information

1) In principle, personal information of data subjects is destroyed without delay once the purpose of collection and use of personal information is achieved. However, the following information is retained for the periods specified below for the reasons stated.

2) When it is necessary to retain personal information in accordance with the provisions of relevant laws such as the Commercial Act and the Act on Consumer Protection in Electronic Commerce, Vellicell Clinic retains personal information for the period specified in relevant laws. In this case, Vellicell Clinic uses the retained information only for the purpose of retention, and the retention periods are as follows:

a) Records of medical appointments, etc. - Retention basis: Act on Consumer Protection in Electronic Commerce - Retention period: 5 years

b) Records of consumer complaints or dispute resolution - Retention basis: Act on Consumer Protection in Electronic Commerce - Retention period: 3 years

c) Website visit (login) records - Retention basis: Protection of Communications Secrets Act - Retention period: 3 months

3) In accordance with Article 39-6 of the Personal Information Protection Act, if information and communication services are not used for a period of one year, Vellicell Clinic takes necessary measures such as destroying personal information. However, if a separate period is specified in other laws or a different period is set at the user's request, necessary measures such as destruction are taken after that period elapses.

3. Matters Concerning Consignment of Personal Information Processing

* Proceeding under prior consultation in accordance with re-consignment restriction provisions in the personal information processing consignment contract

4. Matters Concerning Rights/Obligations of Data Subjects and Legal Representatives and How to Exercise Them

1) Data subjects (in the case of those under 14 years of age, legal representatives) may exercise rights such as access/correction/deletion/suspension of processing of personal information at any time.

2) The exercise of rights under Paragraph 1 may be made in writing, by email, by telephone, etc. after completing the form in accordance with Attached Form No. 8 of the "Notice on Personal Information Processing Methods," and we will take action without delay. [Attached Form 8] Download Request Form for Access, Correction, Deletion of Personal Information

3) The exercise of rights under Paragraph 1 may be made through an agent such as a legal representative of the data subject or a person who has been delegated authority. In this case, a power of attorney in accordance with Attached Form No. 11 of the "Notice on Personal Information Processing Methods" must be submitted. [Attached Form 11] Download Power of Attorney for Access, Correction, Deletion of Personal Information

4) Requests for access and suspension of processing of personal information may be restricted in accordance with Article 35, Article 42, etc. of the Personal Information Protection Act.

5) If the personal information is specified as a collection target in other laws, deletion cannot be requested for correction and deletion of personal information.

6) When requesting access, correction/deletion, or suspension of processing in accordance with the rights of data subjects, we verify whether the person making the request is the person themselves or a legitimate representative.

5. Purpose of Processing Personal Information

Vellicell Clinic collects and retains personal information only with the consent of data subjects and in accordance with legal provisions. The main personal information files collected and retained by Vellicell Clinic based on legal provisions are as follows:

1) Items of Personal Information Processed

2) Methods of Collecting Personal Information

Vellicell Clinic collects personal information directly from visiting customers, through membership registration and medical appointments on the website, online appointment confirmation, event participation applications, etc.

6. Procedures and Methods for Destroying Personal Information

In principle, Vellicell Clinic destroys the personal information without delay when the retention period of personal information expires or the processing purpose is achieved. However, this does not apply when preservation is required in accordance with other laws. The procedures, deadlines, and methods of destruction are as follows:

1) Destruction procedure - Information entered by users is destroyed in accordance with internal policies and relevant laws after the retention period expires or the processing purpose is achieved.

2) Destruction deadline - Personal information of users is destroyed within 5 days from the end date of the retention period when the personal information retention period expires, and within 5 days from the date when the processing of personal information is recognized as unnecessary when the personal information becomes unnecessary such as achievement of the processing purpose.

3) Destruction method - When destroying personal information processed by Vellicell Clinic, the following methods are used: - In the case of electronic files: Permanent deletion by methods that make restoration impossible - In the case of records, printed materials, documents, and other recording media other than electronic files: Shredding or incineration

7. Matters Concerning Installation/Operation and Rejection of Automatic Personal Information Collection Devices

1) Cookies are used to store and retrieve usage information from time to time to provide individualized customized services to users.

2) Cookies are small amounts of information sent by the server (http) used to operate the website to the user's computer browser and may also be stored on the user's PC computer hard disk.

Purpose of using cookies: Used to provide optimized information to users by identifying visits and usage patterns, popular search terms, secure access, etc. for each service and website visited by users.

Installation/operation and rejection of cookies: You can refuse to store cookies through option settings in the Tools > Internet Options > Privacy menu at the top of the web browser.

If you refuse to store cookies, you may experience difficulties in using customized services.

8. Measures to Ensure Safety of Personal Information

Vellicell Clinic takes the following technical, administrative, and physical measures necessary to ensure safety in accordance with Article 29 of the 「Personal Information Protection Act」.

1) Establishment and implementation of internal management plan - Vellicell Clinic establishes and implements an internal management plan based on the 'Standards for Securing Safety of Personal Information.'

2) Minimization and training of personal information handlers - We minimize the designation of personal information handlers and conduct regular training.

3) Access restrictions to personal information - We control access to personal information by granting, changing, and revoking access rights to database systems that process personal information, and control unauthorized access from outside using firewall systems. We also record details of granting, changing, or revoking rights and keep those records for at least 5 years.

4) Storage and prevention of forgery/alteration of access records - We store and manage records of access to personal information processing systems (web logs, summary information, etc.) for at least 1 year, and manage access records to prevent forgery, alteration, theft, and loss.

5) Encryption of personal information - Users' personal information is encrypted and stored and managed only for unique identification numbers. Important data is also encrypted during storage and transmission, and separate security functions are used.

6) Technical measures against hacking, etc. - Vellicell Clinic installs security programs and conducts periodic updates and inspections to prevent leakage and damage of personal information by hacking or computer viruses, installs systems in areas with controlled access from outside, and monitors and blocks technically and physically.

7) Access control for unauthorized persons - We separately maintain physical storage locations for personal information systems that store personal information and establish and operate access control procedures for them.