Privacy Policy
Effective Date: January 1, 2025 | Last Updated: June 1, 2025
MediTourKorea Co., Ltd.("Company") is committed to protecting your personal information in compliance with the Korean Personal Information Protection Act and applicable international regulations. This Privacy Policy explains how we collect, use, store, and share your data.
1. Information We Collect
| Purpose | Data Collected | Retention |
|---|---|---|
| Account registration | Name, email, profile picture (from social login) | Until account deletion |
| Booking & payment | Name, phone, email, payment info (via PG), passport no. (medical) | 5 years |
| Customer support | Name, email, inquiry content | 3 years |
| Analytics | IP address, cookies, device info, visit logs | 1 year |
2. How We Use Your Information
- Service delivery: Processing and confirming bookings for hospitals, hotels, transport, and interpretation.
- Account management: Identity verification, account security.
- Customer support: Responding to inquiries and resolving disputes.
- Service improvement: Analytics, product development, personalization.
- Marketing: Promotional communications (with your consent).
3. Data Sharing
We do not sell your personal data. We share information only when necessary:
- Booking partners (hospitals, hotels, transport, interpreters): Name, contact, booking details for service fulfillment.
- Medical institutions: Name, date of birth, passport number, treatment purpose (for medical bookings only).
- Legal requirements: When required by law or legitimate government requests.
4. Data Processors (Sub-processors)
- Google LLC – Social login, cloud infrastructure
- Kakao Corp. – Social login
- Supabase Inc. – Database & authentication (US servers)
- Vercel Inc. – Web hosting (US servers)
- Payment Gateway – Payment processing
5. Data Retention & Deletion
We retain your data for as long as necessary to provide the Service. Upon account deletion or request, data is permanently deleted within 30 days, except where retention is required by law (up to 5 years for transaction records).
6. Your Rights
Under applicable privacy law, you have the right to: access your data; correct inaccurate data; request deletion; object to or restrict processing; withdraw consent at any time.
To exercise these rights, contact us at contact@meditourkorea.com. We will respond within 10 business days.
7. Cookies
We use essential cookies (for login and functionality) and analytics cookies (e.g., Google Analytics). You can manage cookies in your browser settings; disabling cookies may limit functionality.
8. International Transfers
Your data may be stored and processed on servers located outside Korea (e.g., United States via Supabase and Vercel). These providers comply with applicable data protection standards.
9. Contact & DPO
Data Protection Officer
MediTourKorea Co., Ltd.
contact@meditourkorea.com
+82-10-7419-2470
327 Teheran-ro, Gangnam-gu, Seoul, Korea #1413
