Article 1 (Purpose of Processing Personal Information)

The Clinic processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use is changed, necessary measures such as obtaining separate consent will be implemented.

• 1. Medical Appointment and Management: Identity verification, guidance on medical appointment schedules, processing of reservation changes and cancellations.
• 2. Provision of Medical Services: Verification of preliminary information (symptoms, areas of interest) for diagnosis and consultation, provision of customized medical services.
• 3. AI Chatbot Service Operation: Identification of consultation context and linkage of reservations based on chatbot conversation content.

Article 2 (Items of Personal Information Processed)

The Clinic collects the minimum personal information necessary to provide services.

• 1. Required Items: Name, contact information (mobile phone number), reservation date and time.
• 2. Optional Items (Collected when using AI chatbot):
  • Entire conversation history with the chatbot (symptoms, pain areas, procedures of interest, consultation details, etc.)
  • ※ The moment a user completes a reservation through the chatbot, the relevant conversation log is delivered to the medical staff for medical reference purposes.
• 3. Automatically Collected Items: IP address, cookies, service usage records, access logs.

Article 3 (Processing and Retention Period of Personal Information)

The Clinic processes and retains personal information within the personal information retention and use period according to statutes or the personal information retention and use period consented to by the data subject at the time of collection.

Article 4 (Third-Party Provision and Access Rights to Personal Information)

The Clinic provides personal information to third parties only when it falls under Articles 17 and 18 of the 「Personal Information Protection Act」, such as the consent of the data subject or special provisions of the law.

Article 5 (Entrustment of Personal Information Processing)

The Clinic entrusts personal information processing tasks as follows for smooth processing of personal information.

(※ If there is a separate website maintenance company, specify it; otherwise, mark it as 'Not Applicable' or management by internal staff.)

• Entrusted Party (Trustee): [Enter company name, e.g., Web Agency Co., Ltd.]
• Details of Entrusted Work: Maintenance of website and reservation system, database management, technical support for AI chatbot system.

Article 6 (Rights, Obligations, and Exercise Methods of Data Subjects)

Users can exercise rights such as requesting access, correction, deletion, and suspension of processing of their personal information at any time, and the Clinic will take action without delay. However, the deletion of medical records that are required to be preserved under relevant laws such as the Medical Service Act may be restricted.

Article 7 (Measures to Secure the Safety of Personal Information)

The Clinic takes the following measures to ensure the safety of personal information.

• 1. Administrative Measures: Establishment and implementation of internal management plans, regular employee training.
• 2. Technical Measures: Management of access rights to personal information processing systems (access only by authorized personnel such as medical staff and system administrators), installation of security programs, encryption of unique identification information.
• 3. Physical Measures: Access control to computer rooms, data storage rooms, etc.

Article 8 (Personal Information Protection Officer)

The Clinic is responsible for overall work related to personal information processing and designates a Personal Information Protection Officer as follows to handle complaints and provide remedies for damages related to personal information processing.