JIA CLINIC

Privacy Policy

Effective date: 15 June 2026

JIA Clinic (the 'Clinic') establishes and discloses this privacy policy in accordance with the Personal Information Protection Act to protect users' personal information and handle related concerns promptly.

1. Personal information we collect

At public signup (currently provided through Google and Kakao sign-in) and when requesting a consultation, we collect: · Google sign-in required: user identifier and email address supplied by Google · Kakao sign-in required: stable account identifier supplied by Kakao · Optional Kakao data: email address, nickname and profile image · If supplied by Google: name and profile photo · Generated during service use: member role, login/session data and access logs · Consultation required: name and contact number · Consultation optional: treatment of interest, preferred date and preferred time · Consultation screen language: Korean, English, Chinese or Japanese The Clinic does not collect sensitive information such as health conditions, medical history or medication at signup or consultation request. Health information required for treatment is collected separately at the clinic and managed as a medical record. Signup does not create marketing consent.

2. Purpose of collection and use

Member information is used for member identification, member login and session provision, access to member-only event prices and case content, authentication, and access security. Consultation information is used only to confirm and respond to consultation requests. No health information is requested at signup or consultation request, and information is not used for marketing or advertising or to automatically set a marketing-channel opt-in. It is not used for any other purpose.

3. Retention and use period

Member account and login/session data are retained and used until the member withdraws or requests deletion. Information that must actually be retained under applicable law is kept for the period required by that law. Consultation-request information is destroyed without delay after the consultation is completed, except where applicable law requires retention.

4. Provision to third parties

The Clinic does not generally provide personal information to third parties. However, during signup and login, information may be processed through Google and Kakao (the sign-in providers) and Supabase Auth (the authentication and account-storage processor); exceptions also apply where required by law or upon a lawful request from an investigative authority.

5. Outsourcing of processing

Member accounts, authentication, sessions and consultation requests are stored and processed by Supabase (Seoul region). Google and Kakao are sign-in providers. Website hosting is entrusted to Vercel. Any further outsourcing will be disclosed in this policy.

6. Cross-border transfer of personal data

Personal data is transferred abroad only as needed to operate the website and handle consultation requests. · Legal basis: Article 28-8(1)3(b) of the Personal Information Protection Act (processing/storage necessary to perform a contract and disclosed in this policy) · Recipient/contact: Vercel Inc. (United States), privacy@vercel.com · Purpose: website operation and consultation-request handling · Items: name, contact number, treatment of interest, preferred date/time, consultation-screen language and access logs · Timing/method: transmitted over the network when the service is used · Retention: until the outsourcing agreement ends or the purpose is fulfilled The Supabase database storing accounts and consultation information is located in the Seoul region. You may refuse the transfer and instead request a consultation by calling 0507-1345-2338.

7. Rights of data subjects

You may request access, correction, deletion, or suspension of processing of your personal information at any time. For correction or deletion requests, including member-account deletion, contact JIA CLINIC at 0507-1345-2338. Requests are handled subject to identity verification and applicable law. The privacy officer is Soohwan Seong.

8. Destruction procedure and method

Personal information is destroyed without delay once the retention period expires or the purpose is achieved. Electronic files are deleted irrecoverably; printed materials are shredded or incinerated.

9. Security measures

The Clinic applies access control, transport encryption (HTTPS), and access logging to protect personal information.

10. Privacy officer

Name: Soohwan Seong Contact: JIA CLINIC 0507-1345-2338 (for privacy inquiries and rights requests)

11. Automatic collection tools and how to opt out

The Clinic may generate access logs for service operation and security. It currently uses no advertising or behavioural-analytics cookies. The policy and consent process will be updated before any analytics tool is introduced.

12. Changes to this policy

Any addition, deletion, or amendment will be announced at least 7 days before it takes effect.

Privacy inquiries, corrections and deletion requests: JIA CLINIC 0507-1345-2338.