Privacy, Sensitive Information and Overseas Transfer Notice

1. Controller and privacy contact

Ruby Clinic Cheongdam (루비의원 청담점) is the controller. Privacy officer: Dr. Soeun Kim (김소은 원장).

Rights requests, withdrawal and complaints: 02-515-2005 / drsov@naver.com.

2. Required personal information — separate consent

• Required: name, phone number, email, preferred language, requested visit date/time and doctor.
• Optional: messenger ID.
• Automatically collected: submission time, IP address, user agent, referral code and limited attribution data.
• Purpose: consultation response, appointment coordination, duplicate prevention, security, audit and referral attribution.
• Retention: while the request is active; the original record is destroyed or anonymized 90 days after completion, cancellation or no-show. Legal exceptions are separated for the required statutory period.
• You may refuse, but the online reservation request cannot be submitted. You may contact the clinic by phone or email instead.

3. Sensitive information — separate consent

• Item: consultation text that may reveal desired procedures, medical history or health condition.
• Purpose: understand the inquiry and prepare an appropriate consultation response.
• Retention: the same active-request period and 90-day post-closure rule described above.
• You may refuse, but the online reservation request cannot be submitted because consultation details are required. This form does not provide a diagnosis.

4. Overseas transfer — separate consent

Data is transferred over encrypted HTTPS when you submit and is then processed for hosting, storage, security, backup and authenticated reservation operations.

• Vercel Inc. (privacy@vercel.com) — United States and countries where its subprocessors operate; the HTTPS request, IP/user-agent and service log data; hosting, API execution, security and incident response; provider log/backup periods and our 90-day original-record rule apply.
• Supabase Pte. Ltd (privacy@supabase.io) — Singapore (ap-southeast-1) and subprocessor locations; customer, reservation, consultation, consent, attribution and audit data; database storage, retrieval and backup; active-request period plus 90 days after closure, subject to limited provider backups.
• Authenticated CS Manager on Vercel — the same hosting regions; minimum reservation data needed by the Ruby operations team and executive office; reservation response and status management; active-request period plus 90 days after closure.
• Internal TX Office on Vercel — the same hosting regions; referral code, booking UUID, allowlisted UTM values, conversion time and tenant/category only; referral attribution and settlement; raw identifiers and attribution snapshots for 90 days, after which the booking UUID and raw attribution are removed and only non-identifying settlement records remain.
• Slack receives only a non-identifying “new RUBY request” signal and a general authenticated CS list link. No name, contact detail, consultation text, messenger ID or booking identifier is sent.
• You may refuse overseas transfer, but the online reservation request cannot be provided. Use the clinic phone or email above as an alternative.

5. Rights and destruction

You may request access, correction, deletion, suspension or withdrawal through the privacy contact. Browser form drafts are kept for up to 24 hours and removed after successful submission or reset. Closed reservation originals are automatically anonymized after 90 days; audit network identifiers are erased and only non-identifying operational evidence remains.