Heyday Clinic (hereinafter referred to as the “Company”) establishes and discloses the following Personal Information Processing Policy pursuant to Article 30 of the Personal Information Protection Act in order to protect the personal information of data subjects and to promptly and smoothly handle related complaints.
Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes. The personal information being processed will not be used for any purposes other than those specified below. If the purpose of use is changed, the Company will take necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.
Registration and Management of Website Members
Personal information is processed for the purposes of confirming the intention to register as a member, identification and authentication for the provision of membership services, maintaining and managing membership status, identity verification pursuant to the limited real-name verification system, preventing fraudulent use of services, confirming whether consent has been obtained from a legal representative when processing the personal information of children under the age of 14, providing various notices and notifications, and handling complaints.
Provision of Goods or Services
Personal information is processed for the purposes of delivery of goods, provision of services, sending contracts and invoices, provision of content, provision of customized services, identity verification, age verification, payment and settlement of fees, and debt collection.
Handling of Complaints
Personal information is processed for the purposes of verifying the identity of the complainant, confirming the details of the complaint, contacting and notifying the complainant for fact-finding purposes, and notifying the complainant of the results of the handling of the complaint.
Article 2 (Period of Processing and Retention of Personal Information)
① The Company processes and retains personal information within the period of retention and use prescribed by applicable laws and regulations or within the period of retention and use agreed upon by the data subject at the time of collection of personal information.
② The respective periods for processing and retention of personal information are as follows.
Registration and Management of Website Members : Until the member withdraws from the business/organization website
However, in the following cases, personal information will be retained until the relevant reason has been resolved.
If an investigation or inquiry is in progress due to a violation of applicable laws and regulations, until the relevant investigation or inquiry is completed
If any rights or obligations arising from the use of the website remain outstanding, until the relevant rights and obligations have been settled
Article 3 (Provision of Personal Information to Third Parties)
① The Company processes the personal information of data subjects only within the scope specified in Article 1 (Purpose of Processing Personal Information), and provides personal information to third parties only in cases falling under Article 17 of the Personal Information Protection Act, such as with the consent of the data subject or pursuant to special provisions of law.
② The Company provides personal information to third parties as follows.
Recipient of Personal Information : Forestand Co., Ltd.
Purpose of Use of Personal Information by the Recipient : Marketing
Personal Information Provided : Name, phone number, SNS account information, email address
Retention and Use Period by the Recipient : 1 year
Article 4 (Entrustment of Personal Information Processing)
① The Company entrusts the following personal information processing tasks to ensure the smooth handling of personal information-related matters.
Operation of Telephone Consultation Center
Entrusted Party (Processor) : Forestand Co., Ltd.
Details of Entrusted Tasks : Responding to telephone inquiries, providing information about departments and employees, etc.
② When entering into an entrustment agreement, the Company specifies in the agreement or other documents matters concerning the prohibition of processing personal information beyond the purpose of performing the entrusted tasks, technical and administrative safeguards, restrictions on further entrustment, management and supervision of the processor, liability for damages, and other matters in accordance with Article 25 of the Personal Information Protection Act. The Company also supervises whether the processor handles personal information safely.
③ If the details of the entrusted tasks or the processor are changed, the Company will disclose such changes through this Privacy Policy without delay.
Article 5 (Rights of Data Subjects and Legal Representatives and How to Exercise Them)
① Data subjects may exercise the following rights related to personal information protection against the Company at any time.
Request for access to personal information
Request for correction in the event of errors, etc.
Request for deletion
Request for suspension of processing
② The rights under Paragraph 1 may be exercised against the Company in writing, by telephone, email, facsimile (FAX), or other means, and the Company will take action without delay.
③ If a data subject requests the correction or deletion of errors, etc. in personal information, the Company will not use or provide such personal information until the correction or deletion has been completed.
④ The rights under Paragraph 1 may be exercised through a legal representative or an authorized agent. In such cases, a power of attorney in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
⑤ Data subjects shall not infringe upon the personal information or privacy of themselves or others that is being processed by the Company in violation of the Personal Information Protection Act or other applicable laws and regulations.
Article 6 (Categories of Personal Information Processed)
The Company processes the following categories of personal information.
Registration and Management of Website Members
Required Information : Name, phone number, SNS account information, email address
The following personal information may be automatically generated and collected during the use of Internet services.
IP address, cookies, MAC address, service usage records, visit records, records of improper use, etc.
Article 7 (Destruction of Personal Information)
① The Company destroys personal information without delay when it is no longer necessary, such as when the retention period has expired or the purpose of processing has been achieved.
② If personal information must be continuously retained pursuant to other laws and regulations even after the retention period agreed upon by the data subject has expired or the purpose of processing has been achieved, the Company transfers the relevant personal information to a separate database (DB) or stores it in a separate storage location.
③ The procedures and methods for destroying personal information are as follows.
Destruction Procedure
The Company selects personal information for which a reason for destruction has arisen and destroys such personal information with the approval of the Company's Chief Privacy Officer.
Destruction Method
The Company destroys personal information recorded and stored in electronic file format using methods such as Low Level Format that prevent the records from being reproduced. Personal information recorded and stored in paper documents is destroyed by shredding or incineration.
Article 8 (Measures to Ensure the Security of Personal Information)
The Company takes the following measures to ensure the security of personal information.
Administrative Measures : Establishment and implementation of internal management plans, regular employee training, etc.
Technical Measures : Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
Physical Measures : Access control to computer rooms, document storage rooms, etc.
Article 9 (Installation, Operation, and Rejection of Automatic Personal Information Collection Devices)
① The Company uses “cookies” that store and retrieve usage information from time to time in order to provide users with individually customized services.
② Cookies are small amounts of information sent by the server used to operate the website to the user's web browser, and may also be stored on the hard disk of the user's computer.
A. Purpose of Using Cookies : Cookies are used to identify the user's visits to and usage patterns of each service and website visited, popular search terms, whether a secure connection is being used, etc., in order to provide users with optimized information.
B. Installation, Operation, and Rejection of Cookies : Users may refuse the storage of cookies by adjusting the options under Tools > Internet Options > Privacy in the web browser.
C. Refusal of Cookie Storage : If users refuse to store cookies, they may experience difficulties in using customized services.
1) The Company has designated the following Chief Privacy Officer, who is responsible for overseeing matters related to the processing of personal information, as well as handling complaints and providing remedies for damages related to the processing of personal information.
Chief Privacy Officer
Name: Im Chang Hoon
Title: CEO
Contact: 010-3017-0551, heydayclinic03@heydayclinic3.com
2) Data subjects may contact the Chief Privacy Officer regarding any inquiries, complaints, or requests for remedies related to personal information protection that arise while using the Company's services. The Company will respond to and process such inquiries without delay.
Data subjects may request access to their personal information pursuant to Article 35 of the Personal Information Protection Act from the department specified below. The Company will make every effort to process requests for access to personal information promptly.
Department Responsible for Receiving and Processing Requests for Access to Personal Information
Person in Charge: Im Chang Hoon
Contact: 010 3017 0551, heydayclinic03@heydayclinic3.com
Data subjects may contact the following organizations for remedies, consultation, and other assistance regarding personal information infringement.
Personal Information Infringement Report Center (operated by the Korea Internet & Security Agency)
Website : privacy.kisa.or.kr
Telephone : 118 (without area code)
Personal Information Dispute Mediation Committee
Website : www.kopico.go.kr
Telephone : 1833-6972
Supreme Prosecutors' Office Cyber Crime Investigation Division : 02-3480-3573 (www.spo.go.kr)
National Police Agency Cyber Bureau : 182 (http://cyberbureau.police.go.kr)
This Privacy Policy shall take effect on October 1, 2026.