Privacy Policy

Privacy Policy for the M&D Good Morning Dental Lab Website
(hereinafter referred to as the “Company”)

A. Items of Personal Information Collected

The Company collects the following personal information for membership registration, inquiries, and service applications.

Name, user ID, password, e-mail address, contact number, mobile phone number, occupation

In addition, the following information may be generated and collected in the course of using services or during business processing:

Type of browser and OS used by the user, search keywords, IP address, date and time of visit, records of misuse, service usage records, access logs, cookies, access IP information, payment records, records of service suspension

B. Methods of Collecting Personal Information

The Company collects personal information through the following methods:

Membership registration and inquiries via the website, written forms, telephone, and fax
Provision of information from partner companies
Collection through information-generation tools

C. Purpose of Collection and Use of Personal Information

The Company uses the collected personal information for the following purposes:

1) Member Management

Identity verification required for using membership-based services and limited identity verification systems
Personal identification
Prevention of misuse by delinquent members and prevention of unauthorized use
Confirmation of membership intent and restrictions on duplicate or excessive registrations
Confirmation of consent from a legal guardian when collecting personal information of children under 14, and subsequent verification of the guardian’s identity
Retention of records for dispute resolution
Handling complaints and inquiries
Delivery of notices

2) Use for Marketing and Advertising

Development and provision of new services (products)
Provision of services and display of advertisements tailored to statistical characteristics
Verification of service effectiveness
Analysis of access frequency and compilation of service usage statistics
Delivery of event information and other promotional content

D. Provision of Personal Information to Third Parties

The Company uses users’ personal information only within the scope notified in “C. Purpose of Collection and Use of Personal Information,” and does not use it beyond this scope or disclose it to third parties without the user’s prior consent. However, exceptions are made in the following cases:

When the user has given prior consent
When required by law, or when investigative agencies request information in accordance with procedures and methods prescribed by law for investigative purposes

E. Outsourcing of Personal Information Processing

For the purpose of improving services, the Company may entrust the processing of users’ personal information to external specialized service providers. In such cases, the Company will notify users in advance.

When outsourcing the processing of personal information, the Company clearly stipulates, through a written or electronic contract, obligations related to personal information protection such as compliance with the Company’s instructions, confidentiality, prohibition on provision to third parties, and liability for incidents. The Company keeps such contracts on file to protect users’ rights and interests.

Entrusting party: The Company
Consignee: (To be designated)
Details of entrusted tasks: Personal information processing
Entrustment period: 1 January 2026 – 31 December 2026

F. Retention and Use Period of Personal Information

In principle, once the purpose of collection and use of personal information has been fulfilled, the Company promptly destroys the relevant information. However, the following information is retained for the periods specified below for the reasons stated.

1) Information Retained in Accordance with Internal Policies

Member ID

Reason for retention: To prevent confusion in service use
Retention period: 1 year

2) Information Retained in Accordance with Relevant Laws

Where retention is required under applicable laws such as the Commercial Act and the Act on the Consumer Protection in Electronic Commerce, etc., the Company retains member information for the period specified by the relevant laws. In such cases, the Company uses the retained information only for the purpose of retention, and the retention periods are as follows:

Records related to contracts or withdrawal of subscription

Reason: Act on the Consumer Protection in Electronic Commerce, etc.
Retention period: 5 years

Records related to identity verification

Reason: Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.
Retention period: 6 months

Records related to visits (access logs, etc.)

Reason: Protection of Communications Secrets Act
Retention period: 3 months

G. Procedures and Methods for Destruction of Personal Information

In principle, once the purpose of collection and use of personal information has been achieved, the Company promptly destroys the relevant information. The procedures and methods for destruction are as follows.

1) Destruction Procedures

Information entered by users for membership registration, etc., is retained for a certain period of time in accordance with internal policies and relevant laws (see “Retention and Use Period”) and is then destroyed.

Personal information retained in this manner is not used for any purposes other than those required by law.

2) Destruction Methods

Personal information printed on paper is shredded using a shredder or incinerated.
Personal information stored in electronic file format is deleted using technical methods that make the records irrecoverable.

H. Rights of Users and Legal Representatives and How to Exercise Them

Users may, at any time, view or modify their registered personal information, and may also request cancellation of their membership.

To view or modify personal information, users can access “Edit Personal Information” (or “Edit Member Information,” etc.), and to cancel membership (withdraw consent), they can click “Withdraw Membership” and complete the identity verification process to directly view, correct, or delete their information.

Alternatively, users may contact the Personal Information Manager in writing, by telephone, or by e-mail, and the Company will promptly take the necessary measures.

If a user requests correction of errors in their personal information, the Company will not use or provide the relevant personal information until the correction is completed. If erroneous personal information has already been provided to a third party, the Company will promptly notify the third party of the correction so that it can be made there as well.

Personal information that has been deleted or terminated at the request of the user is handled in accordance with the “Retention and Use Period of Personal Information” and is processed so that it cannot be viewed or used for any other purpose.

I. Installation, Operation, and Rejection of Automatic Personal Information Collection Devices (Cookies)

To provide users with customized and personalized services, the Company uses cookies, which store users’ information and retrieve it as needed. Cookies are small pieces of information sent by the server (HTTP) that operates the website to the user’s browser and may be stored on the user’s computer hard disk.

The Company uses cookies for the following purposes:

1) Purpose of Using Cookies

Analysis of access frequency and visit time by members and non-members
Identification of users’ preferences and interests and tracking of visit paths
Measurement of participation in various events and the number of visits
Provision of targeted marketing and personalized services based on this analysis

Users have the option to allow or refuse the installation of cookies. By setting options in their web browser, users can allow all cookies, require confirmation each time a cookie is saved, or refuse all cookies.

2) How to Refuse Cookie Settings

For example, users can set their web browser options to allow all cookies, to require confirmation whenever a cookie is stored, or to refuse all cookies.

Example (in Internet Explorer):
Tools > Internet Options > Privacy

However, if you refuse the installation of cookies, some services may not function properly or may be difficult to provide.

J. Personal Information Manager and Contact Information

To protect customers’ personal information and handle complaints related to personal information, the Company designates the following department and Personal Information Manager:

Personal Information Manager

Name: (To be designated)
Telephone: 000-000-0000
E-mail: r1264@hanmail.com

Users may report any personal information protection-related complaints that arise while using the Company’s services to the Personal Information Manager. The Company will provide prompt and sufficient responses to such reports.

If you need to report or consult regarding personal information infringement, you may also contact the following organizations:

Personal Information Dispute Mediation Committee (www.1336.or.kr / 1336)
Korea Association of ICT Promotion – ePrivacy Mark (www.eprivacy.or.kr / 02-580-0533~4)
Supreme Prosecutors’ Office Cyber Crime Investigation Center (http://icic.sppo.go.kr / 02-3480-3600)
National Police Agency Cyber Terror Response Center (www.ctrc.go.kr / 02-392-0330)

K. Miscellaneous

Please note that this Privacy Policy does not apply to personal information collection activities of websites linked to the Company’s website.