Seoul Sleep Center (the “Clinic”) manages patient medical records in a separate clinical record system in accordance with Korea’s Medical Service Act and the Personal Information Protection Act (PIPA). This policy covers only the personal information processed on this website (seoul-sleep-center-en.saeroon.com).
1. Purposes of Processing
- Producing website visit statistics (pseudonymized data)
- Responding to appointment and consultation requests submitted through the inquiry form
- Answering questions sent by visitors
2. Items Processed
2.1 Visit statistics (collected automatically, pseudonymized)
- Visitor hash (SHA-256 of IP + User-Agent + site ID + a daily salt, rotated every 24 hours)
- Page path / referral source (referrer host name)
- Device, browser, and OS (parsed from the User-Agent)
- Country and city (derived from Cloudflare headers; the IP address itself is not stored)
- UTM parameters and dwell time (in seconds)
2.2 Consultation form (entered by the visitor)
- Required: name, phone number
- Optional: email, concern (category), message
The form is intended only for arranging a consultation and for brief questions. Please do not enter detailed clinical history in writing — such matters are discussed during the consultation itself. The Clinic does not seek sensitive health information (PIPA Article 23) through this website.
3. Retention Period
- Visit statistics: automatically deleted one year after collection
- Consultation submissions: destroyed one year after the consultation is completed (or kept for the period required where a retention obligation applies under applicable law)
4. Legal Basis
- Visit statistics: PIPA Article 28-2 (special provisions on processing pseudonymized data) — processing pseudonymized data for statistical purposes
- Consultation form: PIPA Article 15(1)(1) — consent of the data subject
5. Rights of the Data Subject
Visitors may request access to, correction or deletion of, or suspension of the processing of their personal information, and may withdraw consent at any time. Note that, because the visit-statistics hash rotates every 24 hours, identifying individual records may be technically impossible.
To exercise these rights or to ask a question, please call +82 2 543 0089.
6. Security Measures
- The original IP address and User-Agent are used only in memory and discarded immediately
- The hash rotates every 24 hours, so the same visitor cannot be identified the following day
- All communication is encrypted with TLS 1.2 or higher
- Consultation form data is accessible only to authorized Clinic staff
7. Provision to Third Parties
The Clinic does not provide personal information to third parties without consent, except where a lawful request is made by an investigative authority in accordance with due process.
8. Changes to this Policy
This policy may be amended in line with changes in law or services. Any changes will be announced in advance through a notice on the site.
9. Contact
Seoul Sleep Center · 34-21 Nonhyeon-dong, Gangnam-gu, Seoul, Republic of Korea · +82 2 543 0089
Personal Information Protection Commission of Korea: pipc.go.kr (call 182)
Revision History
- 2026-06-13: First effective