PRIVACY
Privacy Policy
Effective date [to be confirmed before publication]
Overview
FTH CO.,LTD (hereinafter "the Company") complies with the Personal Information Protection Act and related laws and processes users’ personal information as follows. The Company is not a medical institution and does not provide diagnosis, treatment, medical consultation, or referral or brokerage to medical institutions.
1. Personal information collected
A. General inquiries (website inquiry form) Required: name, email, inquiry type, inquiry Optional: phone General inquiries do not collect sensitive information such as diagnosis, stage, test results, or medical records, and users are asked not to include it in their inquiry. B. Medical document translation and delivery service (only with the patient’s written consent) Required: patient name, date of birth, phone, email, name of the Japanese medical institution to receive the documents Sensitive information: medical documents submitted by the patient, such as medical certificates, test results, imaging reports, and medical records If a legal representative applies: representative’s name, phone, relationship to the patient, and documents verifying it C. Automatically collected items Information generated while using the service, such as access logs, IP address, and cookies
2. Purposes of collection and use
A. General inquiries: confirming and replying to inquiries B. Translation and delivery service: translating medical documents submitted by the patient, delivering them to the Japanese medical institution the patient designates, and translating the institution’s reply for the patient C. Automatically collected items: ensuring service stability and preventing misuse
3. Processing of sensitive information
In accordance with Article 23 of the Personal Information Protection Act, the Company processes health information (sensitive information) only with the data subject’s separate written consent. Sensitive information is used only for translation and delivery and is not used for other purposes or marketing. You have the right to refuse consent; if you refuse, you cannot use the translation and delivery service, but general inquiries remain available.
4. Retention and use period
Collected personal information is retained for 5 years from collection and destroyed without delay thereafter. Even during the retention period, it is destroyed without delay if the data subject requests deletion or the purpose of processing has been achieved. Where retention is required by law, it is kept for the period specified by that law.
5. Procedure and method of destruction
Electronic files are permanently deleted by technical methods that prevent recovery, and paper documents are shredded or incinerated. Personal information for which a reason for destruction arises is destroyed after confirmation by the Chief Privacy Officer.
6. Provision to third parties
In principle, the Company does not provide users’ personal information to third parties. Only when a user applies for the translation and delivery service and gives separate written consent is it provided as follows. Recipient: the Japanese medical institution designated by the data subject Purpose: delivering the medical documents and inquiry requested by the data subject Items: patient name, date of birth, submitted medical documents and their translations Recipient’s retention period: according to the institution’s privacy policy and Japanese law You have the right to refuse consent; if you refuse, you cannot use the translation and delivery service.
7. Transfer of personal information abroad
When the translation and delivery service is used, personal information is transferred abroad, and the Company obtains separate consent in accordance with Article 28-8 of the Personal Information Protection Act. Recipient: the Japanese medical institution designated by the data subject Country: Japan Date and method: when the service proceeds after consent, [transfer method such as encrypted email to be confirmed] Items: same as the items in Section 6 Purpose and retention period: same as Section 6 You have the right to refuse consent; if you refuse, you cannot use the translation and delivery service.
8. Outsourcing of personal information processing
The Company currently does not outsource the processing of personal information. If processing is outsourced in the future to provide the service, the Company will disclose the contractor and the outsourced tasks in advance through this Privacy Policy. Outsourcing contracts will specify compliance with personal information protection laws, restrictions on re-outsourcing, and security measures, and the Company will manage and supervise the contractor.
9. Measures to ensure security
The Company takes the following measures for the safe processing of personal information, especially sensitive information. Administrative: internal management plan, minimizing handlers, and regular training Technical: access control, encryption of sensitive information and transmission, and retention of access logs Physical: access control for storage locations and devices
10. Rights of data subjects and how to exercise them
Users may at any time request access to, correction, deletion, or suspension of processing of their personal information, or withdraw consent, by writing, phone, or email to the Chief Privacy Officer below. The Company will act within 10 days of receiving the request and notify you of the result. Rights may also be exercised through a legal representative or an authorized person.
11. Personal information of children under 14
Personal information of children under 14 is processed only with the consent of a legal representative, and the translation and delivery service must be requested by the legal representative.
12. Installation, operation, and refusal of cookies
The Company may use cookies for convenience. Users can refuse cookie storage in their web browser settings; if refused, some features may be limited.
13. Chief Privacy Officer
Name/Title: Kim Myeong-hoe / CEO Email: 1004@109.co.kr Phone: +82-2-517-5117
14. Remedies for infringement of rights
If you need to report or consult about a personal information infringement, you may contact the following organizations (in Korea). Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr Personal Information Infringement Report Center: 118, privacy.kisa.or.kr
15. Changes to this policy
This Privacy Policy applies from its effective date, and any additions, deletions, or amendments will be announced on the website at least 7 days before they take effect.