Healing Paper Co., Ltd. (hereinafter the ‘Company’) hereby establishes and discloses the Privacy Policy of Gangnam Unni to protect the personal information of service users and to promptly and seamlessly resolve any concerns relevant to such matter in operating the Gangnam Unni Service (including Application and Website both, hereinafter the ‘Service’) as follows. The Company is the controller of the information that is provided or collected through the use of the website, or third-party websites or platforms or the application of the Company, where this Policy is published. The Company values the personal information of users. The Company hereby informs them of how and for what purposes the Company uses the personal information provided by the users and what measures are being taken for the protection of personal information. This Privacy Policy covers the following details.
[Contents]
The Company only collects the minimal scope of personal information necessary for service provisioning for the following purposes. The Company shall not use collected information for purposes other than those stated in this Policy, nor disclose such information without the consent of the users. If personal information is to be used for purposes not set forth in this Policy, the Company shall seek the users’ consent.
① Management of members
Personal identification of individuals, confirmation of the intent to register, screening before joining and limiting the number of attempts to join, taking measures to limit the use of the members who have violated the Company’s Terms of Service, sanctioning the actions that may hinder smooth operation of the Service and illegitimate use of the Service, verifying personal identification and age, preserving records for dispute resolution, handling grievances such as complaints, transmission of notices, and confirmation of membership withdrawal intentions
② Provision of the Service and improvement of features
Requesting consultations, making appointments and payments, receiving SMS for confirmation, drafting and saving content, providing rewards(points) and confirming whether such rewards(points) have been used, shipping of prizes, providing customized services within the platform, providing search results and personalized ads based on location information, providing an AI-based image generation service (“AI Romance”), limiting the access to content based on age, and preventing illegitimate use of the Service. Improving the features of the application, developing technologies for the Service and launching new services, analyzing the Service use records and access frequency, and generating Service usage statistics.
③ ****Marketing
Sending ads via push notification, SMS, and email, and providing information on promotions and opportunities to participate.
① The Company processes and retains the personal information for the duration provided for by relevant statutes for the retention and use of personal information or the duration for the retention and use of personal information for which the data subject’s consent was obtained at the time of the collection of the personal information.
| Relevant service | Collected item | Purpose | Collection method | Duration for retention and use |
|---|---|---|---|---|
| Member Registration | [Required items] Name, mobile phone number, email address (ID), password, gender, birth year, nationality, device information, IP address |
[If joining the membership using a social media account] • Facebook - ID, email • KakaoTalk - ID, email, profile name, profile image, thumbnail image • LINE - ID, email, profile name, profile image, status message • Apple - ID, email | • Management of members • Service provision and feature improvement
| • Provided by the users themselves via the website or the application • Provided by Facebook, KakaoTalk, LINE, and Apple | • Until withdrawal of membership • However, even after withdrawal, personal information may be retained and used during the retention and usage period according to relevant laws for complaint processing, dispute resolution, and legal obligations.
• Any requests from the users, the court or a government body to delete or discard such personal information even during the duration period for retention and use, the Company shall comply with such requests. | | The use of content | [Required items] Email address (ID), password, gender, birth year, nationality, device information, information on body areas of interest, accrual of reward points and redemption records
[Information collected from location information collectors] Location information
[Sensitive information] Information about health included in written posts (collectively refers to posts and procedure reviews created after joining the membership, and if a post contains photos, the included photos), and the details about the body areas for which the users wish to get a procedure on and the user’s concerns thereof | • Management of members • Service provision and feature improvement
| • Provided by the users themselves via the website or the application • Provided by the location information collectors | • Until withdrawal of membership • However, even after withdrawal, personal information may be retained and used during the retention and usage period according to relevant laws for complaint processing, dispute resolution, and legal obligations.
• Any requests from the users, the court or a government body to delete or discard such personal information even during the duration period for retention and use, the Company shall comply with such requests. | | Request Consultation and the use of the appointment service | [Required items] Name, mobile phone number, whether the user visited the clinic, whether a consultation took place, whether a procedure/surgery was received, the scheduled date for the procedure/surgery, time and date of the appointment (when booked through the application)
[Information collected from the medical institution from which the user requested the consultation] Whether the user visited the clinic, whether a consultation took place, whether a procedure was received, the scheduled date for the procedure
[Sensitive information] Information about the surgery or procedure of interest | • Service provision and feature improvement | • Provided by the user via the website or the application • Provided by the medical institution from which the user requested the consultation | • Until withdrawal of membership • However, even after withdrawal, personal information may be retained and used during the retention and usage period according to relevant laws for complaint processing, dispute resolution, and legal obligations.
• Any requests from the users, the court or a government body to delete or discard such personal information even during the duration period for retention and use, the Company shall comply with such requests. | | The use of App Pay service (pre-payment service) | [Required items] Name, mobile phone number, information about the procedure being paid for, payment (credit information) method information, (for reward points redemption) reward redemption records
[Information collected from the clinic upon visit procedure] Whether the user visited the clinic, the scheduled visit day, the time at which the user underwent the paid procedure, the attending surgeon
[Sensitive information] Information about the procedure being paid for | • Service provision and feature improvement | • Provided by the users themselves via the website or the application • Provided by the medical institution from which the users requested a consultation | • Until withdrawal of membership • However, even after withdrawal, personal information may be retained and used during the retention and usage period according to relevant laws for complaint processing, dispute resolution, and legal obligations.
• Any requests from the users, the court or a government body to delete or discard such personal information even during the duration period for retention and use, the Company shall comply with such requests. | | Post review | [Required items] The name of the surgery or procedure the user underwent or received, area of the surgery/procedure, other information about user’s experience such as regarding the course of the surgery /procedure
[Optional items] Before and after photos for the surgery/procedure, the surgeon or the doctor who undertook the surgery/procedure, cost
[If a receipt is uploaded] Information contained in the image file of the receipt such as the payment date and time, paid entity, purchased service items, and the paid amount
[Sensitive information] Information about health included in reviews and written posts (if a post contains photos, the included photos) | • Service provision and feature improvement | • Provided by the users themselves via the website or the application | • Until withdrawal of membership • However, even after withdrawal, personal information may be retained and used during the retention and usage period according to relevant laws for complaint processing, dispute resolution, and legal obligations.
• Any requests from the users, the court or a government body to delete or discard such personal information even during the duration period for retention and use, the Company shall comply with such requests. | | Shipment of prizes such as the After Care Package, etc. | [Required items] Name, address, surgery information, mobile phone number, email | • Shipment of prizes and service improvement | • Provided by the users via the website, the application, and the Customer Center | 3 months after the shipment of prizes | | Location-based services | [Optional items] Terminal GPS records | • Providing search results and personalized ads based on location information | | Until the retention and usage period according to the Act on the Protection and Use of Location Information | | Personalized services (checking favorite regions and photos) | [Optional items] Favorite regions, Photos taken by camera equipment integrated with platform | • Service provision and feature improvement | • Provided by the users via the website, the application, and email | • Until withdrawal of the consent for personalized services or withdrawal of membership, whichever comes earlier • However, even after withdrawal, personal information may be retained and used during the retention and usage period according to relevant laws for complaint processing, dispute resolution, and legal obligations • Any requests from the users, the court or a government body to delete or discard such personal information even during the duration period for retention and use, the Company shall comply with such requests. | | The AI Romance service | [Required items] Photo, email address | • Service provision and feature improvement (AI photo editing and retouching service) | • Provided by the users via the website, the application, etc. | Until the service is discontinued | | Marketing | [Optional items] Name, mobile phone number, email address, gender, birth year, nationality, device information, IP address | • Sending ads via push notification, SMS, and email, and providing information on promotions and opportunities to participate. | • Provided by the users via the website, the application, email, etc. | • Until withdrawal of the consent for the collection and use of personal information for marketing or withdrawal of membership, whichever comes earlier • However, even after withdrawal, personal information may be retained and used during the retention and usage period according to relevant laws for complaint processing, dispute resolution, and legal obligations • Any requests from the users, the court or a government body to delete or discard such personal information even during the duration period for retention and use, the Company shall comply with such requests. | | Information automatically collected and generated from the use of the Service | Terminal information, service usage records, IP address, access records, browsing environment, date and time of access, device information, platform information | Use of the Service and execution of the contract, confirmation of the Service validation, prevention of illegitimate usage, statistics and analysis recommendation, new service development, feature improvement | • Automated collection and generation tool | • Retained for the duration of the retention period provided by relevant statutes and company regulations upon withdrawal of membership • Information automatically collected and generated (terminal information) based on the use of required information (management of new membership): Retained for 30 days after withdrawal of membership | | Customer Center (chat consultation) | [Required items] Name, address, email [Optional items] Address (for inquiries related to address changes for the Edema Treatment Package) | Customer inquiry response (types: member/account, posts, Edema Treatment Package, rewards, application payment service, clinic reportings, consultation requests, other inquiries) | • Provided by the user through the website, application, or Customer Center | Up to 3 years from the end date of consultation |
② The retention and usage periods according to the relevant laws mentioned in 2.1 are as follows: