Privacy Policy (Partner)

This Privacy Policy applies to partners (hospitals, professionals, businesses, and other service providers) of the platform operated by LinkBee (hereinafter "Company"), and governs the collection, use, provision, and destruction of personal information.

________________

Article 1 (Items of Personal Information Collected and Legal Basis)

The Company collects and uses personal information as follows. The items collected are limited to the minimum information necessary for the stated purposes.

Category

Purpose

Items Collected

Legal Basis

Partner Registration & Management

Performance of contract, service provision, partner identification and qualification verification

Email, name, gender, mobile phone number, password

Personal Information Protection Act, Article 15(1)(4) (performance of contract)

Business Information Registration

Business verification, settlement processing, contract performance

Business registration number, business name, representative name, business address, business type/category, copy of business registration certificate

Personal Information Protection Act, Article 15(1)(4) (performance of contract) or (2) (compliance with legal obligation)

License/Credential Registration

Professional qualification verification and service credibility assurance

License/credential information and copies

Personal Information Protection Act, Article 15(1)(4) (performance of contract)

Settlement Processing

Revenue settlement and payment for services

Bank account number, account holder name, bank name

Personal Information Protection Act, Article 15(1)(4) (performance of contract)

Service Provision

Consultation booking management, video connection, charts, payments, settlements, etc.

Booking history, consultation records (charts, etc.), settlement history

Personal Information Protection Act, Article 15(1)(4) (performance of contract)

Automatically Collected Information

Service usage analysis and improvement, development of new features

Access IP, cookies, device, browser/OS information, service usage records, behavioral information

Personal Information Protection Act, Article 15(1)(4) (performance of contract)

1. Notice on Sensitive Information

The Company does not collect or process sensitive information as defined under Article 23 of the Personal Information Protection Act as part of its primary service scope. Partner license/credential information is processed solely for the purpose of qualification verification, and the Company manages its service operations to avoid processing sensitive health information related to medical or clinical acts.

2. Information Collected via Google Account Sign-Up and Login

The Company may provide sign-up and login functionality via Google accounts for partner convenience. In doing so, the following personal information may be received from Google:

a. Required Items

* Email address

* Google unique identifier (ID)

* Profile name

b. Optional Items

* Profile image (URL, if provided)

* Language settings

The Company does not collect any Google user data beyond the items listed above.

________________

Article 2 (Purposes of Use of Personal Information)

1. The Company processes personal information for the following purposes.

Personal information being processed will not be used for any purpose other than those stated below. If the purpose of use changes, the Company will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

* Partner Identification and Management: Sign-up/login, identity verification, business qualification verification, notifications, complaint handling.

* Service Provision: Consultation booking management, video connection, translation services, charts, payments, settlements, consultation records and chart management.

* Settlement Processing: Revenue settlement and payment processing for services rendered, issuance of tax invoices, and related tasks.

* Customer Support: Handling inquiries and complaints, delivery of notices, preservation of records related to contract performance.

* Marketing/Advertising (with consent): Notification of events and promotions, provision of personalized information using service access history and usage records.

* Statistical Analysis: Service improvement, development of new features, demographic analysis, and statistics compilation.

2. Purposes of Use of Google Account Information

The Company uses personal information collected via Google accounts solely for the following purposes:

* Partner identification and identity verification

* Provision of easy sign-up and login functionality

* Account management and service usage history management

* Prevention of unauthorized use and maintenance of service security

* Response to partner inquiries and service operation guidance

Information collected via Google accounts will not be used for any purpose other than those listed above.

________________

Article 3 (Principles for Access to Video Consultation Content)

The Company, in principle, does not access video consultation content (audio, video, chat messages, consultation records, charts, etc.) conducted between partners and users.

However, access or use of such content may be permitted on an exceptional basis for the following limited purposes:

* Legal Requirements and Public Safety: When necessary to comply with legal procedures such as court orders or lawful requests from investigative authorities, or when urgently required for public safety and welfare such as public health.

* Service Safety and Security: When necessary to enforce or investigate potential violations of service terms or policies, and to ensure platform safety (e.g., fraud, abuse, threats).

* Customer Support and Dispute Resolution: Only when explicitly approved or requested by the account holder (the partner themselves), such as for technical issue resolution or service quality-related complaint handling and dispute resolution, and only to the extent necessary for customer support purposes.

________________

Article 4 (Retention Period, Processing, and Destruction of Personal Information)

1. Retention and Processing Period

The Company retains and processes personal information within the retention/use period stipulated by law or the period agreed upon at the time of collection.

Purpose

Legal Basis and Period (Statutory Obligation)

Retention Period (Consent-Based)

Partner Registration & Management

None

Until partner withdrawal

Records on contracts or withdrawal of subscription

Act on the Consumer Protection in Electronic Commerce, Enforcement Decree, Article 6(1)(2)

5 years

Records on payment and supply of goods/services

Act on the Consumer Protection in Electronic Commerce, Enforcement Decree, Article 6(1)(3)

5 years

Records on consumer complaints or dispute resolution

Act on the Consumer Protection in Electronic Commerce, Enforcement Decree, Article 6(1)(4)

3 years

Settlement-related records

National Tax Basic Act and related tax laws

5 years

Consultation records (charts, etc.)

Personal Information Protection Act, Article 15(1)(1) (consent)

Until partner withdrawal or withdrawal of consent

2. Destruction Procedures and Methods

When personal information becomes unnecessary due to the expiration of the retention period or achievement of the processing purpose, the Company destroys it without delay.

* Destruction Procedure: Personal information subject to destruction is identified, and destroyed upon approval by the Company's Privacy Officer.

* Destruction Method: Personal information in electronic file format is permanently deleted (e.g., Low Level Format) so that it cannot be reproduced. Personal information recorded in paper documents is shredded or incinerated.

* Personal information collected via Google accounts is subject to the same retention and use periods set forth in this Article, and will be destroyed without delay upon partner withdrawal or achievement of the collection/use purpose.

3. Dormant Account Policy

Accounts with no access for an extended period (e.g., 1 year) will be stored and managed separately from other personal information in accordance with the Personal Information Protection Act and related notices, and may be subject to destruction or re-consent procedures.

________________

Article 5 (Provision of Personal Information to Third Parties)

The Company, in principle, does not provide partners' personal information to third parties without consent. Personal information collected via Google accounts will not be provided to third parties without the partner's prior consent.

Personal information will only be provided to third parties when the partner has given separate consent or when permitted by law.

Provision to Third Parties with the Consent of the Data Subject

Recipient

Purpose

Items Provided

Recipient's Retention Period

KG Inicis (PG)

Payment service provision

Electronic financial transaction records

5 years

Financial institutions

Settlement payment processing

Bank account number, account holder name, bank name

5 years after settlement completion

When providing personal information to third parties without consent pursuant to applicable laws, information may be provided to investigative authorities on an exceptional basis pursuant to Article 17(1)(2) and Article 15(1)(2) of the Personal Information Protection Act (special provisions in law or compliance with legal obligation).

________________

Article 6 (Measures to Ensure Safety of Personal Information)

The Company takes the following measures to ensure the safety of personal information:

* Administrative Measures: Establishment and implementation of internal management plans, regular employee training, operation of a dedicated personal information protection organization.

* Technical Measures: Access authority management for personal information processing systems, installation of access control systems and other protective measures, encrypted storage of passwords and settlement information, preservation and inspection of access records, installation and updating of security programs.

* Minimization of access rights

* Encrypted storage and transmission

* Access record management

* Personal information linked via external accounts (Google, etc.) is managed under the same protection standards.

* Physical Measures: Access control and installation of locking devices for locations where personal information is stored, such as server rooms and data storage rooms.

________________

Article 7 (Rights of Data Subjects and Legal Representatives and How to Exercise Them)

Partners may at any time request access, correction, deletion, suspension of processing, or withdrawal of consent regarding their personal information (hereinafter "exercise of rights"), and the Company will take action without delay.

For individuals under the age of 14, rights must be exercised directly by a legal representative, or through a legal representative.

Methods and Procedures for Exercising Rights

Rights may be exercised via written request, phone, email, fax, etc., in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will respond without delay.

Partners may directly access, correct, delete, or withdraw consent for their personal information at any time through 'My Info > Partner Information' on the website, and may request access through 'Contact Us'.

Right to Refuse Automated Decisions and Request Explanation

If automated decisions are made, data subjects may refuse such decisions and request explanations. Requests may be made by contacting the department referred to in Article 10, or through 'My Info > Partner Information > Contact Us' on the website.

________________

Article 8 (Installation, Operation, and Opt-Out of Automatic Personal Information Collection Devices)

Cookie Operation

The Company may use cookies to provide personalized services and optimized information.

* Purpose: Used to analyze partners' access frequency and visit times, and to understand service usage patterns in order to provide customized services and information.

* Partners may refuse or delete cookie collection through their web browser or mobile device settings. However, refusing cookies may restrict certain services such as automatic login.

* How to Refuse Cookie Settings: Cookies can be refused by blocking third-party cookies or all cookie storage in your web browser settings. (e.g., In Chrome: select '⋮' in the upper right > New Incognito Window or Settings > Block third-party cookies) Detailed instructions are provided in the appendix (separate link).

________________

Article 9 (Matters Concerning Automated Decision-Making)

The Company makes automated decisions by processing personal information through a fully automated AI-based system. In accordance with Article 37-2 of the Personal Information Protection Act, the following information is provided:

The Fact That Automated Decisions Are Made, Their Purpose, and the Scope of Data Subjects

* Purpose: Automated decisions are used to improve services, optimize partner operational experience, and provide personalized information and recommendations.

* Scope: All partners who have registered and are using the service.

Types of Personal Information Used in Automated Decisions and Their Relationship to Such Decisions

* Types Used: Service usage records, access IP, cookies, behavioral information, settlement/payment history, etc.

* Relationship to Decisions: Collected behavioral information and usage history are analyzed to infer partners' operational patterns, consultation types, and service preferences, and based on this inference, appropriate personalized information or features are provided to partners.

Considerations in the Automated Decision-Making Process and Procedures

* Considerations: The recommendation algorithm takes into account the type of services provided by partners (e.g., consultation topics, areas of expertise), access frequency, most recent service usage, etc., and the system is regularly inspected to ensure that partners' interests are not unfairly harmed.

* Regarding Sensitive Information: In accordance with the Company's service positioning (simple consultation/information provision), sensitive information is not processed in automated decision-making.

Rights of Data Subjects Regarding Automated Decisions and How to Exercise Them

Data subjects may refuse automated decisions and request explanations. Requests may be submitted to the Privacy Officer or the relevant department referred to in Article 10 via written request, phone, email, fax, etc.

The Company will respond within 10 days if the refusal is deemed applicable, and within 30 days if necessary measures are taken (with separate notice if extended).

________________

Article 10 (Privacy Officer and Responsible Department)

The Company designates a Privacy Officer to oversee all personal information processing operations and to handle complaints and remedy damages related to personal information processing.

▶ Privacy Officer

* Name: Eom Hyejin

* Position: Operations Manager

* Department: Operations Management Team

* Contact: Tel: 02-532-2880, Email: admin@faceweb.co.kr

▶ Personal Information Rights Exercise Request Reception

Data subjects may submit rights exercise requests to the Operations Management Team. The Company will respond within 10 days of receiving the request (or without delay for data portability requests).

________________

Article 11 (Remedies for Infringement of Data Subjects' Rights)

Data subjects may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency's Personal Information Infringement Report Center, etc. to receive remedies for personal information infringement.

* Personal Information Dispute Mediation Committee: 1833-6972 (no area code) (www.kopico.go.kr)

* Personal Information Infringement Report Center: 118 (no area code) (privacy.kisa.or.kr)

* National Police Agency: 182 (no area code) (ecrm.police.go.kr)

________________

Article 12 (Possibility of Disclosure of Sensitive Information and How to Choose Non-Disclosure)

This service is intended for simple consultation/information provision and not for medical acts, and does not process sensitive information such as health information as defined in Article 23 of the Personal Information Protection Act.

Therefore, this Article is not applicable. However, if a partner voluntarily enters sensitive information while using the service, such information will be strictly managed in accordance with Article 3 (Principles for Access to Video Consultation Content).

________________

Article 13 (Changes to the Privacy Policy)

When the Company makes changes to the Privacy Policy, it will announce the changes and effective date at least 7 days in advance (30 days in advance for important matters).

Partners who do not agree to the changes may withdraw by canceling their partner account. If no separate expression of intent is made within the notice period, the partner is deemed to have agreed to the changes.

The Company manages the history of changes to the Privacy Policy, and previous versions are made available through a separate page link.

________________

(Effective Date) This Privacy Policy is effective from December 8, 2025.

LinkBee Insights

외국인 고객 문의가 예약과 상담으로 이어지지 않는 5가지 이유

LinkBee Insights

외국인 고객 문의가 예약과 상담으로 이어지지 않는 5가지 이유