Mopro Clinic Privacy Policy
Mopro Clinic (the “Clinic”) complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws and establishes and publishes this Privacy Policy to protect personal information safely.
This Policy applies to personal information processed in connection with general Website membership registration, access to members-only content, account management, and use of the Website.
Article 1 (Purposes, Items, and Retention Periods of Personal Information Processing)
| Category | Personal Information Processed | Purpose of Processing | Retention Period |
|---|---|---|---|
| Membership registration and management | Required: Email address and password The password is stored using a secure one-way hashing method. | Member identification, email login, password reset, access to members-only Before & After Photos and Patient Reviews, account management, membership-related notices, and prevention of improper use | Until termination of membership or loss of membership status |
| Website usage records | IP address, access date and time, login records, cookies and session information, browser and device information, and service usage records | Maintaining login sessions, Website security, prevention of abnormal use, error analysis, and service stability | Three months from collection |
| Privacy inquiries and exercise of data-subject rights | Email address, sender name, inquiry details, and information necessary to verify identity where required | Handling requests for access, correction, deletion, restriction of processing, and privacy complaints | Three years after completion of the matter |
Administrator accounts used for Website operation may use a separate username, but no separate username is collected during general membership registration.
The Clinic does not use membership-registration information for advertising or marketing.
Article 2 (Personal Information of Children Under 14)
The Website membership service is intended for persons aged 14 or older, and the Clinic does not intentionally collect personal information from children under 14 through the membership-registration process.
Article 3 (Provision of Personal Information to Third Parties)
The Clinic does not provide personal information to third parties. Exceptions may apply where the data subject has separately consented, where a law specifically authorizes or requires disclosure, or where otherwise permitted under the Personal Information Protection Act.
Article 4 (Outsourcing of Personal Information Processing)
The Clinic outsources the following personal information processing activities for the stable operation of the Website.
| Service Provider | Outsourced Services | Retention and Use Period |
|---|---|---|
| Cafe24 Corp. | Website hosting; operation and storage of the server and member-information database; backup; and incident response | Until termination of the outsourcing agreement or destruction of the personal information |
When entering into an outsourcing agreement, the Clinic specifies the matters required under applicable law in writing and supervises the service provider so that personal information is managed safely.
Article 5 (Procedures and Methods for Destruction)
1. The Clinic destroys personal information without undue delay when the retention period expires, the processing purpose has been achieved, or the information is otherwise no longer necessary.
2. If personal information must be retained for a certain period under another law, it will be stored separately from other personal information and destroyed after the statutory retention period expires.
3. Electronic files are deleted using a secure method that prevents recovery or reproduction, and paper documents are shredded or incinerated.
4. Upon termination of membership, membership information such as the email address and password will be deleted without undue delay. Information that must be retained under applicable law will be separately stored only to the extent necessary.
Article 6 (Rights and Obligations of Data Subjects and How to Exercise Them)
1. A data subject may request access to, correction or deletion of, restriction of processing of, or withdrawal of consent regarding the data subject’s personal information.
2. A member may review or modify membership information or request termination through My Page. If processing through My Page is unavailable, the member may submit a request to the Privacy Officer from the registered email address.
3. The Clinic may verify whether the requester is the data subject or a duly authorized representative and may restrict all or part of a request where permitted by applicable law.
4. If correction of inaccurate personal information is requested, the Clinic will not use or provide the relevant information until the correction is completed.
Article 7 (Cookies and Similar Automatic Collection Technologies)
1. The Clinic may use cookies or session information to maintain login status, authenticate members, improve Website convenience, and protect security.
2. Users may allow or block cookies through their web-browser settings.
3. Blocking essential cookies may limit login and access to members-only content.
Article 8 (Security Measures)
The Clinic implements the following safeguards to prevent loss, theft, leakage, alteration, or damage of personal information:
(1) Minimizing and training personnel who handle personal information;
(2) Managing access rights to personal-information processing systems;
(3) Secure one-way hashing of passwords and encryption of data in transit;
(4) Retaining and reviewing access logs and preventing abnormal access;
(5) Installing and updating security programs and operating backup and recovery procedures; and
(6) Controlling physical access to locations where personal information is stored.
Article 9 (Privacy Officer and Contact for Access Requests)
| Category | Privacy Officer and Contact for Access Requests |
|---|---|
| Name | Moon Geon-hak |
| Position Organization | Director, Mopro Clinic Mopro Clinic |
| Telephone | 02-546-5824 |
| hairdrmoon@gmail.com |
Data subjects may use the above contact details to submit privacy inquiries, complaints, requests for remedies, or requests to exercise their rights arising from use of the Website.
Article 10 (Remedies for Infringement of Rights)
For consultation or remedies concerning an infringement of personal information rights, data subjects may contact the following institutions in the Republic of Korea:
(1) Personal Information Infringement Report Center: 118;
(2) Personal Information Dispute Mediation Committee: 1833-6972;
(3) Supreme Prosecutors’ Office: 1301; and
(4) Korean National Police Agency Cybercrime Report and Consultation: 182.
Article 11 (Amendment of this Privacy Policy)
1. If this Policy is amended, the Clinic will announce the changes and effective date on the Website.
2. Changes that materially affect data-subject rights will, in principle, be announced at least 30 days before the effective date, and other changes will be announced at least seven days before the effective date.
Announcement Date: August 4, 2026
Effective Date: August 4, 2026







