Goryeo Medical Tour Development Inc. ("we") establishes and publishes this privacy policy under Article 30 of the Personal Information Protection Act of Korea, to protect the personal information of data subjects and to handle related complaints promptly.
We are a registered foreign patient attraction business (registration no. A-2010-02-01-0112) and not a medical institution. We do not diagnose or treat patients.
1. Why we process personal information
We process personal information only to:
- confirm and answer inquiries sent through the contact form on this website
- discuss partnership inquiries from hospitals and organizations
If the purpose ever changes, we will tell you in advance and ask for your separate consent.
2. What we collect
| Inquiry | Items |
|---|---|
| Patient inquiry (all language pages) | Name, e-mail, phone number (optional), office to contact, country of residence (country name if you choose Other), preferred messenger and account (optional), area of interest, message |
| Partnership inquiry (all language pages) | Organization, contact person, e-mail, phone, office, country of the organization (country name if Other), partnership type, message |
Created automatically: a value derived from your IP address with a secret key (the address itself is not stored) and your browser information, to prevent repeated submissions and spam. They are deleted together with the inquiry.
We do not collect medical records, test results or other health information through the contact form. If medical documents are needed to prepare treatment, we will ask for your separate consent during the consultation.
If a message still contains details about your health, we use them only to answer and delete them together with the inquiry.
3. How long we keep it
We keep inquiry information for one year after the inquiry is closed (the day the person in charge marks it complete) and then delete it. Inquiries automatically classified as spam are deleted 30 days after classification. Where a law sets a different retention period, we keep the information for that period.
4. Sharing with third parties
We do not share personal information without your consent. If we need to send information to a hospital to check whether treatment is possible, we will tell you the recipient, the items, the purpose and the retention period, and ask for your separate consent.
5. Processing entrusted to service providers
We entrust parts of the processing as follows.
| Provider | Work entrusted |
|---|---|
| Geodae Planning Inc. | Operation and maintenance of this website and its admin screen; sending notification e-mails when an inquiry arrives |
| Oracle Corporation (Oracle Cloud Infrastructure) | Cloud operation, including servers, the database and storage of uploaded files |
Each contract sets out instructions and prohibitions on handling personal information, limits on sub-contracting, security measures, inspection of practice and liability for damages, and we supervise whether the provider handles personal information safely. The entrustment lasts until the contract or the entrusted work ends. If a provider or the entrusted work changes, we will update this policy.
6. Transfers outside Korea
We keep offices in Seattle (USA) and Yakutsk (Russia) that handle inquiries in those languages. Staff of those offices may therefore view inquiries on the admin screen from outside Korea.
| Recipient | Country | Items | Purpose | When and how | Retention |
|---|---|---|---|---|---|
| Staff of our Seattle office | USA | The items listed in section 2 | To check and answer the inquiry | Viewed on the admin screen (HTTPS) after the inquiry arrives | Same as section 3 |
| Staff of our Yakutsk office | Russia | The items listed in section 2 | To check and answer the inquiry | Viewed on the admin screen (HTTPS) after the inquiry arrives | Same as section 3 |
How to refuse: if you do not want your personal information to be viewed outside Korea, please contact us by phone (+82-51-807-8200) or e-mail ([email protected]) instead of using the form. Your inquiry will then be handled only by staff in Korea.
7. Deletion
Personal information is deleted without delay when the retention period ends. Electronic files are deleted so that they cannot be recovered, and paper documents are shredded or incinerated.
8. Your rights
You may ask at any time to access, correct or delete your personal information, or to stop its processing. Contact the privacy officer below by e-mail or phone and we will act without delay and tell you the result. You may also act through a legal representative or an authorised person, who must submit a power of attorney in the form prescribed by the Enforcement Rule of the Personal Information Protection Act.
Personal information of children under 14 is processed with the consent of their legal representative.
9. Security
To keep personal information safe, we:
- limit access to the smallest possible number of staff and manage their rights
- store admin passwords converted in a way that cannot be reversed
- encrypt data in transit (HTTPS)
- keep and review logs of admin sign-ins, views and changes
- train the staff who handle personal information
10. Privacy officer
For questions, complaints or redress regarding the processing of personal information, please contact:
- Name: Jaehee Kim (Chief Executive Officer)
- Phone: +82-51-807-8200
- E-mail: [email protected]
11. Remedies for infringement
To seek redress for an infringement of your personal information, you may apply to the following bodies in Korea for dispute resolution or advice.
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Centre: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office, Cyber Investigation Division: 1301 (www.spo.go.kr)
- National Police Agency, cybercrime reporting: 182 (ecrm.police.go.kr)
If our action or inaction on a request under Articles 35 (access), 36 (correction or deletion) or 37 (suspension of processing) of the Personal Information Protection Act infringes your rights or interests, you may file an administrative appeal under the Administrative Appeals Act.
12. Changes to this policy
If we change this policy, we will announce the changes and their effective date on this website at least 7 days in advance. Changes that materially affect your rights — the items collected, the purpose, the retention period, sharing with third parties or transfers outside Korea — will be announced at least 30 days in advance, and we will ask for consent again where needed.
13. Effective date
This policy takes effect on 1 October 2026.