JC BITSOMANG EYE CLINIC — Healthy Eyes for a Brighter Life

Member Services

JC Bitsomang Eye Clinic strives for clearer vision, every day.

Privacy Policy

JC Bitsomang Eye Clinic (the “Clinic”) places the highest priority on protecting your personal information. Through this Privacy Policy, we inform you of the purposes and methods for which the personal information you provide is used, and the measures we take to protect it. When this policy is amended, the Clinic will announce the changes through the website notices.

Personal Information We Collect

The Clinic collects the following personal information for membership registration, consultation, and service requests. • Items collected: ID, name, password, date of birth, telephone, mobile, email, address, treatment history, service usage records, access logs, cookies, and access IP information • Method of collection: through the website (membership registration, consultation board) and online job applications

Purpose of Collection and Use

The Clinic uses the collected personal information for the following purposes. • Performance of service contracts — content delivery, shipping or billing, identity verification, sending of email and event notifications • Member management — identity confirmation, prevention of unauthorized use by ineligible members, age verification, complaint handling, and delivery of notices

Retention and Use Period

In principle, personal information is destroyed without delay once the purposes of collection and use have been achieved. • Membership data — when membership is withdrawn or terminated • Reservation data — when the reservation has been processed and treatment completed However, where retention is required by relevant laws, the Clinic retains member information for the period prescribed by such laws.

Technical Measures for Protection

The Clinic implements the following technical measures to ensure that personal information is not lost, stolen, leaked, altered, or damaged. Your personal information is protected by passwords, and important data is encrypted or protected via file lock functions and other security mechanisms. The Clinic exercises full diligence in member authentication and information security.

Procedures and Methods for Destruction

In principle, the Clinic destroys personal information without delay once its purposes have been achieved. The procedures and methods are as follows. • Procedure — information you have entered (e.g., for membership) is moved to a separate database (or filing cabinet for paper) after the purpose is achieved, retained for a defined period in accordance with internal policies and applicable laws, and then destroyed. • Method — printed records are shredded or incinerated; electronic files are deleted using technical methods that prevent recovery.

Provision to Third Parties

In principle, the Clinic does not provide users’ personal information to outside parties. The following are exceptions. • When users have given prior consent • When required by law or by lawful procedures of investigative agencies for criminal investigations

Outsourcing of Collected Information

The Clinic does not outsource your information to third parties without your consent. Should outsourcing become necessary in the future, we will notify you of the outsourcing partner and the scope of work, and obtain prior consent where necessary.

Rights of Users and Legal Representatives

Users may at any time review or modify their registered personal information and may also request withdrawal of membership. To review or modify, use “Edit Personal Information” (or “Edit Member Information”). To withdraw consent, submit a “Withdraw Membership” request; after identity verification, you may directly view, correct, or withdraw. You may also contact the Privacy Officer in writing, by phone, or by email — we will take the necessary action without delay.

Cookies and How to Refuse Them

The Clinic uses “cookies” that frequently store and retrieve your information. Cookies are small text files sent by the server operating the website to your browser and stored on your computer’s hard disk. • Purposes — analyzing access frequency and visit duration of members and non-members, identifying user preferences and interests, tracking activity, measuring participation in events and visit counts for targeted marketing and personalized services • How to refuse — you may set cookie preferences in your browser under Tools > Internet Options > Privacy. Please note that refusing cookies may make some services difficult to use.

Protection Policy for Children Under 14

The Clinic does not allow children under 14 to register as members and does not share their personal information with third parties without parental consent. We do not sell or rent user information.

Basis and Purpose of CCTV Installation

Pursuant to Article 25(1) of the Personal Information Protection Act, the Clinic installs and operates video information processing devices (CCTV) for the following purposes. • Facility safety and fire prevention • Crime prevention for the safety of patients • Treatment management

Safeguards for Video Information

Video information processed by the Clinic is securely managed through encryption and other measures. As an administrative safeguard, access rights are differentiated, and the time of creation, purpose of access, accessor, and time of access are logged to prevent forgery or alteration. Video information is also stored in a separate, locked space for physical security.

Responses to Data Subject Requests

You may at any time request the operator of the video information processing device to allow you to view, confirm the existence of, or delete personal video information. However, the personal video information you may request is limited to information that is clearly necessary to protect the urgent life, body, or property interests of the data subject. The Clinic will take the necessary measures without delay for any such requests within the conditions stated above.

Other

Please note that this Privacy Policy does not apply to personal information collected by websites linked from the Clinic’s website.

Privacy-Related Inquiry Service

To protect customers’ personal information and to handle related complaints, the Clinic designates the following department and Privacy Officer.

※ Privacy Officer Name : Dong-woo Kim Department : General Affairs Phone : 02-785-1068 Email : jceye@naver.com

Other Reporting and Consultation Channels

This Privacy Policy is effective from October 26, 2010.