PRIVACY POLICY.

This Privacy Policy explains how SeoulClinics ("SeoulClinics", "we", "us", or "our") collects, uses, shares, and protects your personal information when you use the SeoulClinics website, tools, and introduction service (the "Service"). SeoulClinics is an independent directory and concierge introduction service based in Seoul, not a medical provider.

For the purposes of data protection law, SeoulClinics is the controller of the personal information described here. If you have any questions, contact us at hello@seoulclinics.io.

This policy applies to personal information we collect through the Service. It does not apply to clinics or other third parties, who are independent and handle your information under their own policies once you are in contact with them. Please review their policies separately.

Information you provide. When you take the quiz, run a face scan, send an enquiry, or contact us, we collect what you enter, such as your name, email address, phone number or messaging handle (for example WhatsApp or KakaoTalk), and country.

Your request details. The clinic you enquired about, procedures or treatments of interest, budget band, travel window, face zones and skin concerns you select, and any free-text message or notes you write.

Information collected automatically. Basic technical data such as IP address, device and browser type, pages viewed, and referring pages, collected through standard server logs and privacy-friendly analytics to keep the Service working and secure.

Cookies and similar technologies. Small files and local storage used to remember your preferences and measure aggregate usage. See "Cookies and analytics" below.

Some details you choose to share, such as the treatments, face zones, or skin concerns you are interested in, may indicate information about your health. In some jurisdictions this is treated as a special category of personal data that receives extra protection.

We process this information only to provide the Service you request, that is, to match you and to introduce you to clinics, and we rely on your explicit consent to do so. You do not have to provide it, but without it we may be unable to match you accurately. You can withdraw consent at any time by contacting hello@seoulclinics.io.

The optional face scan runs entirely in your browser. The photo itself is never uploaded to or stored on our servers. Only the numeric, non-identifying scores it produces may be saved alongside your results if you choose to submit them. We do not use the scan for facial recognition or to identify you.

We use your information to:

• match you with suitable clinics and generate your results
• contact you about your request and follow up on your enquiry
• introduce you to clinics by forwarding your enquiry, as described below
• operate, maintain, secure, and improve the Service and prevent misuse or fraud
• comply with legal obligations and enforce our Terms

Where data protection law such as the EU or UK GDPR applies, we rely on the following legal bases:

• Consent: for sending your enquiry to clinics, for processing health-related details, and for marketing messages. You can withdraw consent at any time.
• Performance of a contract or steps at your request: to provide the matching and introduction service you ask for.
• Legitimate interests: to operate, secure, and improve the Service, provided your rights do not override those interests.
• Legal obligation: to meet record-keeping, tax, and other legal requirements.

The core of our Service is introducing you to clinics. When you submit an enquiry or ask to be matched, you consent to us sharing your request and contact details with the relevant partner clinic or clinics so they can contact you directly.

If the clinic you enquired about is not one of our direct partners, we may instead introduce you to a similar partner clinic, and we tell you when we do so, so you can decide whether to proceed. Once a clinic receives your details it is an independent controller of that information and handles it under its own privacy policy.

Service providers. We use trusted providers to run the Service, such as cloud hosting and database infrastructure, an email delivery provider, and analytics. They process personal data only on our instructions to provide their service to us, under appropriate contractual safeguards.

Legal and safety. We may disclose information where required by law, to respond to lawful requests, or to protect the rights, safety, and property of you, us, or others.

Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

We do not sell your data. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

We operate with reference to Seoul, and the clinics we introduce you to are located there. If you are outside that country, your information will be transferred to and processed in it and potentially in other countries where we or our providers operate. These countries may have different data protection laws than yours. Where required, we use appropriate safeguards, such as standard contractual clauses, for such transfers.

We use a small number of cookies and similar technologies that are necessary for the Service to function and to understand aggregate usage so we can improve it. You can control cookies through your browser settings; blocking some may affect how the Service works. We aim to use privacy-friendly analytics and to minimise tracking.

We keep enquiry and matching records for as long as needed to provide the Service, follow up on your request, meet legal, tax, and record-keeping requirements, and resolve disputes. When information is no longer needed we delete or anonymise it. You can ask us to delete your information sooner, subject to any legal obligation to retain it.

We use reasonable technical and organisational measures to protect your information against loss, misuse, and unauthorised access, including encrypted transport and access controls. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.

Depending on where you live, you may have some or all of the following rights over your personal information:

• access a copy of the information we hold about you
• correct information that is inaccurate or incomplete
• delete your information ("right to be forgotten")
• restrict or object to certain processing, including direct marketing
• data portability, that is, receiving your data in a portable format
• withdraw consent at any time, without affecting processing already carried out
• not be subject to a decision based solely on automated processing that produces legal or similarly significant effects

To exercise any right, email hello@seoulclinics.io. We will respond within the timeframe required by applicable law and may need to verify your identity first. If you are in the EEA or UK you may also lodge a complaint with your local data protection authority; if you are in Seoul’s country you may contact the relevant national privacy authority. If you are a California resident, we do not sell or share your personal information as those terms are defined under California law, and we will not discriminate against you for exercising your rights.

We may send you messages relating to your enquiry. If we send optional updates or marketing, you can opt out at any time using the unsubscribe link or by emailing hello@seoulclinics.io. You can also ask us to stop contacting you through any channel at any time.

Our quiz and matching use automated logic to suggest clinics and treatments. These suggestions are informational and do not have legal or similarly significant effects on you; a human concierge and, ultimately, a licensed clinician remain involved before any treatment decision. You can contact us to discuss any match.

The Service is intended for adults aged 18 and over and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact hello@seoulclinics.io and we will delete it.

The Service links to third-party sites and services, including clinics and messaging platforms, which we do not control. This policy does not cover their practices; please review their own privacy policies.

We may update this policy from time to time. The current version always lives on this page, with the "updated" date shown at the top. Material changes take effect when posted, and where required by law we will seek your consent or give you additional notice.

For any privacy question or request, or to exercise your rights, contact us at hello@seoulclinics.io.