Privacy Policy for International Patients
MOLIV Clinic ("the Clinic") is a medical institution located in Seoul, Republic of Korea. As a Korean entity, we are subject to the Korean Personal Information Protection Act (PIPA). This policy also reflects internationally recognized data protection principles, including those of the EU General Data Protection Regulation (GDPR), to ensure transparency for our international patients.
1. Data Controller
MOLIV Clinic is the data controller responsible for your personal data.
Location: Gangnam-gu, Seoul, Republic of Korea
Email: info@moliv.clinic
Phone: +82-2-000-0000
2. Personal Data We Collect
We collect the following categories of personal data to provide medical and consultation services:
Identity data: Name, date of birth, gender, nationality, passport number (for medical tourism coordination)
Contact data: Phone number, email, messaging platform ID (LINE, WeChat, WhatsApp, Telegram)
Health data: Medical history, diagnosis, prescriptions, treatment records, surgical records, clinical photographs
Payment data: Payment method, billing information
Travel data: Arrival/departure dates, accommodation details (for scheduling and follow-up)
Online consultation: Name, contact information, consultation details, photos (optional)
Collection methods: Website consultation form, messaging platforms (LINE, WeChat, WhatsApp, Telegram), email, in-person registration
3. Legal Basis for Processing
We process your personal data on the following legal bases:
Consent: You provide explicit consent when submitting a consultation request or booking an appointment.
Contract performance: Processing is necessary to provide the medical services you have requested.
Legal obligation: Korean medical law requires us to maintain certain medical records for specified periods.
Legitimate interest: Improving our services, ensuring safety, and communicating treatment follow-up information.
4. Purpose of Processing
Medical services: Consultation, diagnosis, treatment planning, surgery, and post-operative care
Appointment management: Scheduling, reminders, and travel coordination
Billing: Payment processing and invoicing
Follow-up: Remote post-operative monitoring and ongoing care communication
Service improvement: With your consent, anonymized data may be used to improve treatment outcomes
5. Cross-Border Data Transfer
Your personal data is collected, stored, and processed in the Republic of Korea. By submitting your data through our website or consultation channels, you acknowledge that your data will be transferred to and stored in Korea.
Data hosting: Our systems are hosted on cloud infrastructure with servers in Asia-Pacific regions.
Safeguards: We implement encryption in transit (TLS/SSL) and at rest, access controls, and regular security audits to protect your data during and after transfer.
If you are located in the EU/EEA, Japan, Thailand, China, or other jurisdictions with data transfer restrictions, your consent to this policy constitutes your authorization for this cross-border transfer. You may withdraw this consent at any time (see Section 8).
6. Data Retention
We retain your personal data for the following periods, as required by Korean medical law:
Medical records: 10 years (Korean Medical Service Act)
Surgical records: 10 years (Korean Medical Service Act)
Patient registry: 5 years (Korean Medical Service Act Enforcement Rules)
Prescriptions: 2 years (Korean Medical Service Act)
Online consultation records: 3 years, or until you request deletion (whichever is earlier, subject to legal retention requirements)
After the applicable retention period, data is securely deleted using technical measures (electronic files) or physical destruction (paper documents).
7. Your Rights
Regardless of your country of residence, you have the following rights regarding your personal data:
Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure: Request deletion of your data, subject to legal retention obligations (e.g., medical records required by Korean law).
Right to restrict processing: Request that we limit how we use your data.
Right to data portability: Receive your data in a structured, commonly used format.
Right to withdraw consent: Withdraw your consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
To exercise any of these rights, contact us at info@moliv.clinic. We will respond within 30 days.
EU/EEA residents: You also have the right to lodge a complaint with your local data protection authority.
8. How to Withdraw Consent
You may withdraw consent at any time by contacting us:
Email: info@moliv.clinic
Phone: +82-2-000-0000
Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal. Please note that certain medical records must be retained under Korean law even after consent is withdrawn.
9. Data Sharing
We do not sell or rent your personal data. We may share data only in the following circumstances:
Service providers: Website hosting and database management providers, under strict data processing agreements.
Medical necessity: Other healthcare providers involved in your care, with your consent.
Legal requirements: When required by Korean law or a valid court order.
10. Cookies
Our website uses cookies for functionality and analytics.
Essential cookies: Required for website functionality (language preference, session management).
Analytics cookies: Help us understand how visitors use our site (may be declined).
You may control cookies through your browser settings. Blocking essential cookies may affect website functionality.
11. Security Measures
We implement the following measures to protect your personal data:
- Encryption of data in transit (TLS/SSL) and at rest
- Access restricted to authorized medical and administrative personnel
- Regular security audits and vulnerability assessments
- Access log retention and tamper detection
12. Governing Law
This privacy policy is governed by the laws of the Republic of Korea. The Clinic is subject to the Korean Personal Information Protection Act (PIPA) and the Korean Medical Service Act. Where your local data protection laws provide additional rights (such as under the GDPR, APPI, PDPA, or PIPL), we will respect those rights to the extent applicable.
13. Policy Changes
We will notify you of material changes to this policy by posting an updated version on our website at least 7 days before the effective date.
Announcement date: March 28, 2026
Effective date: March 28, 2026