ANYFILM DENTAL CLINIC
Privacy Policy
Anyfilm Dental Clinic (hereinafter referred to as "the Clinic") values the personal information of its patients and complies with the [Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc.]. In accordance with this Privacy Policy, the Clinic informs patients of how the personal information you provide is used, and what measures are taken to protect it. This Privacy Policy is organized as follows. ❑ Categories of Personal Information Collected and Collection Methods ❑ Purpose of Collection and Use of Personal Information ❑ Retention and Use Period of Personal Information ❑ Procedures and Methods for Destruction of Personal Information ❑ Provision and Sharing of Personal Information ❑ Entrustment of Personal Information Handling ❑ Rights of Users and Legal Representatives and How to Exercise Them ❑ Withdrawal of Consent / Membership Withdrawal Procedure ❑ Installation/Operation of Automatic Personal Information Collection Devices and the Right to Refuse ❑ Personal Information Protection Officer ❑ Measures to Ensure the Security of Personal Information ❑ Duty to Notify of Policy Changes ❑ Categories of Personal Information Collected and Collection Methods The Clinic collects only the minimum personal information necessary to provide its services at the time of membership registration. To use the Clinic's services, membership registration includes both required and optional items; optional items, such as whether to receive email notifications, do not need to be entered and do not limit your use of the service. [Items Collected] Name, resident registration number, address, contact information, medical records ※ Under the Medical Service Act, unique identification information and medical records must be retained (no separate consent required) [Method of Collection] Website (membership registration, consultation board, online reservations, etc.) ❑ Purpose of Collection and Use of Personal Information The Clinic uses the personal information it collects for the following purposes. Information provided by users is not used for any purpose other than those stated below, and prior consent will be obtained if the purpose of use changes. [Medical Information] To provide medical services for diagnosis and treatment, and administrative services such as billing, payment, and refunds [Website Membership Information] In accordance with the Medical Service Act, content such as before-and-after treatment photos is accessible only to logged-in members. The ID, name, password, and contact information (email, mobile phone number) collected at website membership registration are used solely for member identity verification and customer service. This information is not used for marketing purposes such as email notifications of clinic news or health information, or surveys. ❑ Retention and Use Period of Personal Information The Clinic destroys your personal information without delay once the purpose of collection, or the purpose for which it was provided, has been achieved. [Medical Information] Retained in accordance with the medical record retention standards set forth under the Medical Service Act [Website Membership Information] Personal information collected at membership registration is retained until membership withdrawal, and is destroyed without delay upon withdrawal. However, even where the purpose of collection or provision has been achieved, the Clinic may retain your personal information where retention is required under applicable laws, such as the Commercial Act. - Records of consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce, Etc.) - Records of collection, processing, and use of credit information: 3 years (Credit Information Use and Protection Act) – Records of identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc.) – Records of website visits: 3 months (Protection of Communications Secrets Act) ❑ Procedures and Methods for Destruction of Personal Information The Clinic destroys personal information immediately once the [Purpose of Collection and Use of Personal Information] has been achieved. The destruction procedures and methods are as follows. [Destruction Procedure] Information entered by users for purposes such as membership registration is destroyed immediately, by the method described below, once its purpose has been achieved. [Destruction Method] Personal information stored in electronic file form is deleted using a technical method that prevents the records from being recovered. Personal information printed on paper is destroyed by shredding or incineration. ❑ Provision and Sharing of Personal Information Except where you have consented or as required under applicable laws and regulations, the Clinic does not use your personal information beyond the scope disclosed in [Purpose of Collection and Use of Personal Information], nor does it provide it to any other individual, company, or institution. -Submission of medical records to the Health Insurance Review and Assessment Service for claims relating to medical care benefit costs, under the National Health Insurance Act -Where necessary for statistical compilation or academic research, information is processed and provided in a form that does not identify any specific individual -Submission in response to a request from an investigative authority, in accordance with the procedures and methods prescribed by law ❑ Entrustment of Personal Information Handling The Clinic does not entrust the handling of personal information to any third party. ❑ Rights of Users and Legal Representatives and How to Exercise Them Membership registration for children under the age of 14 (hereinafter "children") is conducted through a separate form written in plain language that children can easily understand, and the consent of a legal representative is always obtained when collecting personal information. To obtain a legal representative's consent, the Clinic collects the minimum information necessary from the child, such as the legal representative's name and contact information, and obtains the legal representative's consent in accordance with the method set out in this Privacy Policy. A child's legal representative may request to view, correct, or delete the child's personal information. To view, correct, or delete a child's personal information, please click "Edit Member Information" and complete the legal representative verification process; the legal representative may then view, correct, or delete the child's personal information directly, or contact the Personal Information Protection Officer in writing, by phone, or by fax, and the necessary action will be taken. The Clinic does not provide or share information about children with any third party, and if a legal representative requests correction of an error in personal information collected from a child, the Clinic prohibits the use and provision of that personal information until the error is corrected. ※ Personal information that is legally required to be retained cannot be modified or deleted within the retention period, even upon request. ❑ Withdrawal of Consent / Membership Withdrawal Procedure Members may withdraw their consent to the collection and use of personal information at any time by logging in and withdrawing their membership through the "Edit Member Information" menu; personal information collected is destroyed without delay upon withdrawal. If you wish to have an internet inquiry deleted, please contact the Personal Information Protection Officer in writing or by email, and the necessary action, such as destruction of your personal information, will be taken. ❑ Installation/Operation of Automatic Personal Information Collection Devices and the Right to Refuse The Clinic operates "cookies" that periodically store and retrieve patients' information. A cookie is a very small text file that the server used to operate the Clinic's website sends to a patient's browser and that is stored on the patient's computer hard disk. The Clinic uses cookies for the following purposes. - To maintain member login status and provide the auto-login feature - To analyze users' website visit and usage patterns, access frequency, etc., in order to improve the service Patients have the option of whether or not to allow cookies to be installed. Accordingly, patients may set options in their web browser to allow all cookies, to be prompted for confirmation each time a cookie is stored, or to refuse the storage of all cookies. If you refuse the installation of cookies, you may experience difficulty using some services. ❑ Personal Information Protection Officer -Officer in Charge: Dr. Annabel Lee, Director -Department: Anyfilm Dental Clinic, Director's Office -Contact: 02-6954-2881 Patients may report any complaints related to personal information protection arising from their use of the Clinic's services to the Personal Information Protection Officer. The Clinic will provide a prompt and sufficient response to any such reports from users. If you need to report or consult on any other personal information infringement, please contact the organizations below. Personal Information Dispute Mediation Committee (http://www.1336.or.kr / 1336) Privacy Mark Certification Committee (http://www.eprivacy.or.kr / (02) 580-0533~4) Supreme Prosecutors' Office Cyber Crime Investigation Unit (http://www.spo.go.kr / (02) 3480-3573) National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr / (02) 392-0330) ❑ Measures to Ensure the Security of Personal Information The Clinic has established various security safeguards as a technical measure to protect users' personal information. All information you send is securely stored and managed within a security system protected by a firewall. In addition, as an administrative measure to protect users' personal information, the Clinic has established the procedures necessary for access to and management of users' personal information, and minimizes the number of personnel who handle users' personal information while providing ongoing security training. ❑ Duty to Notify of Policy Changes If there are any additions, deletions, or amendments to this Privacy Policy due to changes in laws, policies, or security technologies, the Clinic will announce the reason for and content of the change on the Clinic's website at least 7 days before the revised Privacy Policy takes effect. Date of Announcement: September 10, 2026 Effective Date: September 10, 2026

