Privacy Policy

1. Collection of Personal Information

We collect the following personal information for consultation booking and inquiry processing:

Date of birth protection: Date of birth itself is ordinary personal information. It is collected and used only based on the explicit consent of the data subject, and destroyed within 2 years after the consultation purpose is fulfilled. Date of birth is encrypted with AES-256 at rest and can only be accessed after authenticated administrator review.

Collection methods: website consultation form and messenger channels (WhatsApp, KakaoTalk, LINE).

• Required: Name, gender, date of birth, nationality, contact phone, email, preferred appointment date & time, treatment of interest
• Optional: Budget, body areas of interest, main concern
• Before a choice (EEA, UK, Switzerland) or when optional cookies are declined (all regions): Google Consent Mode state and limited cookie-free measurements. Google may carry advertising-click parameters across same-domain links, but redacts those identifiers from Google-bound requests while advertising storage is denied; no optional analytics or advertising cookies, device identifiers, or first-touch attribution records are stored.
• Before a choice (other regions): Google analytics and advertising measurement cookies (GA client/session identifiers, Google Ads click identifiers) may be used by default. Declining stops them immediately and deletes stored optional cookies. The Meta (Facebook) measurement pixel may load before a choice in every region, but only on general pages (home, booking, pricing, about) and sends page views only; it does not load on procedure, guide or consultation pages and receives no consultation content, name, contact details or procedure interest. Declining stops it immediately and deletes its stored cookies (_fbp, _fbc). Ads personalization, first-touch attribution records, Microsoft Clarity and Ahrefs are used only after your explicit permission, in every region.
• If optional cookies are allowed: GA client/session identifiers, referrer and first landing path, UTM campaign data, Google Ads click identifiers (GCLID, GBRAID, WBRAID, DCLID), and cookies.

2. Purpose of Collection and Use

• Consultation booking and response
• Treatment information and visit preparation guidance
• Booking confirmation and schedule changes
• Website performance measurement, advertising attribution, and consultation conversion analysis

3. Retention Period

Personal information is destroyed within 2 years after the purpose of collection has been fulfilled, unless retention is required by applicable laws.

If optional cookies are allowed, the first-touch advertising cookie remains in the browser for up to 90 days. If a consultation is submitted, validated attribution identifiers become part of that private consultation record and follow the retention rule above.

4. Destruction of Personal Information

Personal information past its retention period is destroyed without delay using irrecoverable methods for electronic data, and shredding or incineration for paper records.

5. Third-Party Disclosure

We do not share personal information with third parties except as required by law.

This site uses Google Analytics and Google Ads tags. In the EEA, the UK and Switzerland before a choice, and in every region after a decline, Google receives only limited cookie-free consent and measurement signals with advertising-click identifiers redacted. In other regions, GA and Google Ads measurement cookies may be used by default before a choice; declining stops and deletes them immediately. The Meta (Facebook) measurement pixel may load before a choice in every region, but only on general pages (home, booking, pricing, about) and sends page views only; it does not load on procedure, guide or consultation pages and receives no consultation content, name, contact details or procedure interest. Declining stops it immediately and deletes its stored cookies (_fbp, _fbc). If optional cookies are allowed, the site may also load Microsoft Clarity for interaction and session replay, and Ahrefs Web Analytics for aggregate usage and performance measurement; these providers process limited technical usage data under their own terms and privacy policies. We do not intentionally send names, phone numbers, email addresses, or free-text consultation messages in analytics events.

6. Security Measures

• Encryption of sensitive personal data (AES-256)
• TLS/SSL encryption for data in transit
• Restricted and authenticated admin access
• Regular access log review

7. Data Subject Rights

You may request access to, correction, deletion, or suspension of processing of your personal information at any time. Please contact us using the information below.

8. Data Protection Officer

• Clinic: Delight Dermatology Clinic
• Representative: Dr. Yoon Sang-yeol
• Phone: 02-517-9991
• Email: delightskinofficial@gmail.com
• Address: 4th Floor, Building B, 509 Gangnam-daero, Seocho-gu, Seoul, South Korea

9. Changes to This Policy

This privacy policy may be updated in accordance with changes in applicable laws or internal policies. Changes will be announced on this website.