Privacy Policy

Data controller: ㈜케이플랫폼
Effective: 27 September 2026

This is a reference translation. In the event of a dispute, the Korean original prevails.

㈜케이플랫폼 (the "Company") establishes and discloses this Privacy Policy under Article 30 of the Personal Information Protection Act of Korea, to protect the personal data of data subjects and to handle related concerns. This policy applies to BEAUTRIP (the "Platform"), operated by the Company.

Article 1 Purposes of Processing

Bookings and orders — intermediating bookings for partner services such as clinics and spas, selling package products, issuing booking confirmations (QR codes), and providing booking history.
Pharmacy product sales — accepting orders for health functional foods and cosmetics, delivery, and handling returns and refunds.
Partner and agency applications — receiving partnership applications from clinics, businesses and agencies, verifying eligibility, and concluding and performing contracts.
Local Friend matching — matching and settling requests for interpretation and accompaniment support.
Customer enquiries — receiving enquiries, establishing the facts, and notifying the outcome.
Service improvement and statistics — analysing usage, processed in a form that cannot identify individuals.
Saving My Courses — to let members save travel courses they build and reopen them to keep editing.
Course inquiries to agencies — to let members send their course to one listed agency they choose themselves and receive a reply. The Company does not receive and forward inquiries on members’ behalf or choose agencies for them.
Agency account management — issuing and managing login accounts for staff of listed agencies.
[Added 2026-09-25] Personal nutrition design and pharmacist questions — to let a pharmacist design a nutrition combination from the member's survey, and to provide intake checks and replies to pharmacist questions.
[Added 2026-09-25] Genetic test applications, kits and results — to sell and ship test kits, confirm payment, request analysis of kits registered by the member (BGI Hong Kong), and provide the result report with a plain-language explanation. The Company distributes and sells the kits; the analysis is performed by BGI (Hong Kong).
[Added 2026-09-25] AI nutrition helper — only where the member consents, to answer the member's questions with reference to a summary of their design and results. The AI does not diagnose or prescribe.

Article 2 How Personal Data Is Collected

Entered directly by the user into forms on the Platform (bookings, applications, enquiries).
Generated automatically during use of the service (access logs, cookies).
The Company does not obtain personal data from third parties without the user's consent.
🔴 The Company does not require Korean mobile phone identity verification. It does not collect resident registration numbers, and no field exists in which such a number could be stored.

Article 3 Personal Data Collected

[Currently collected] The following items are actually collected and stored.
Bookings (guest, no account) — name, email, nationality, number of people, preferred language, and special requests (optional). A phone number is optional and is accepted only in international format.
⚠️ The special requests field may contain health-related information such as allergies. This constitutes sensitive data under the Personal Information Protection Act. It is passed only to the relevant partner for the safety of the procedure and is not used for any other purpose. Entering it is optional.
Clinic and business partnership applications — business name, representative's name, business registration number, contact details (phone and email), business address, opening hours, services offered, languages supported, and a record of consent to use materials (name of the person consenting and the time of consent).
Agency partnership applications — company name, representative's name, contact person's name, email, phone number, country, business registration number, primary customer nationalities, annual volume band, and packages of interest.
Administrator accounts — email and display name (Company staff only).
Collected automatically — IP address, access time, browser and device information, and cookies. This is the minimum required to provide the service and maintain security.
[Added 2026-09-25] Members — email, display name, password (stored encrypted by our authentication provider), sign-up time, preferred language, and whether and when you consented to sharing for agency course inquiries (optional).
[Added 2026-09-25] My Courses (members) — course name, region, length and interests, places in the course, clinics you chose yourself (information slots), and your own clinic appointment details you entered (date, time, place note; optional). ⚠️ Clinic-related items may be read as health information. All are optional, and the Company does not pass them to clinics.
[Added 2026-09-25] Course inquiries to agencies (members) — the receiving agency, the content of the course sent (place names, categories, order, clinic slots you chose), your messages and the agency’s replies, sent and read times, and your screen language. Clinic appointment notes you wrote are not included in the course sent.
[Added 2026-09-25] Agency accounts — staff email, display name, and account issue and link times.
[Added 2026-09-25] Nutrition design survey (members) — name, birth year, height, weight, sex, reason for using the service, health goals and priorities, answers to goal-specific questions, intake-check records. ⚠️ Answers may include health information (sensitive information) and are used only for the pharmacist's design.
[Added 2026-09-25] Pharmacist questions (members) — topic, subject, content, language used, time of consent to the notice, and the pharmacist's reply. ⚠️ Questions may include health information.
[Added 2026-09-25] Genetic test applications (members) — name, mobile number (format check only, no SMS verification), email, delivery address, requests, chosen plan and price, payment link and payment confirmation records, kit number, time of consent to collection.
[Added 2026-09-25] Kit registration and genetic results (members · sensitive information) — kit number, registration time, times of consent to processing sensitive information and to overseas transfer and the consent text version, sample analysis results (genetic information such as genotypes and trait ratings). 🔴 Genetic information is sensitive information under Article 23 of the Personal Information Protection Act and is processed only with separate consent.
[Added 2026-09-25] AI nutrition helper (members) — questions, AI answers, chat times, time of consent to AI processing and overseas transfer. Only the question, recent chat and a design summary are sent to the AI — never genotypes/rsids, names or contact details.
[Designed but not currently collected] For those of social sign-in, payment, subscription delivery and Local Friend registration that are not yet open, the items below are not collected. We will revise this policy and give advance notice when each feature opens.
Member details (social account identifier, preferred language), payment records, delivery addresses, and a Local Friend's visa type, university details and profile photograph.

Article 4 Retention and Use Periods

The Company processes and retains personal data within the period required by law or the period consented to by the data subject.
Records of bookings and payments — 5 years (Act on Consumer Protection in Electronic Commerce)
Records of payment and supply of goods — 5 years (same Act)
Records of contracts and withdrawal of subscription — 5 years (same Act)
Records of consumer complaints and dispute resolution — 3 years (same Act)
Member details — destroyed immediately on withdrawal. Transaction records subject to the statutory retention above are stored separately for the required period.
Clinic and agency partnership applications — 3 years after the contract ends. Applications that do not result in a contract are destroyed without delay once assessment is complete.
Consent forms for the use of materials — until consent is withdrawn. On withdrawal we destroy the record immediately and stop displaying the material.
Access logs — 3 months (Protection of Communications Secrets Act)
Translation sessions — duration in seconds only. See Article 5.
Location data — deleted immediately when an interpretation request ends. See Article 6.
My Courses — deleted immediately when you delete them or close your account.
Course inquiries to agencies — deleted one year after the last message. If you delete a conversation it disappears from your view immediately, and both sides’ records are deleted after one year.
Agency accounts — unlinked when the listing contract ends and deleted one year later.
[Added 2026-09-25] Genetic test applications and payment records — 5 years (E-Commerce Act). Applications cancelled before payment are destroyed 1 year after cancellation.
[Added 2026-09-25] Surveys, pharmacist designs, intake checks and pharmacist questions — destroyed without delay on withdrawal or on request.
[Added 2026-09-25] Genetic information (kit results) — destroyed without delay on withdrawal or on request. For the analysis laboratory's (BGI Hong Kong) retention period, see Article 8.
[Added 2026-09-25] AI nutrition helper chat records — destroyed after 1 year.

Article 5 Voice Data and Translation Records

🔴 The Company does not store audio files.
🔴 The Company does not store speech recognition (STT) text. It is discarded immediately after translation.
🔴 The Company does not record calls.
For the Travel Assistant, the only records kept are the duration in seconds, source language, target language and amount charged. These are used to calculate fees.
This is not merely a policy statement. The translation session table in the database has no column capable of holding audio or text. There is nowhere to store it even if one tried.
Phrase cards in the Travel Assistant are processed on the user's device and are not sent to the server.
Where speech recognition or translation connects to an external service, data is transmitted only within the scope of that purpose; those providers are listed in Article 8.

Article 6 Location Data

🔴 The Company does not track users' locations on an ongoing basis.
Location data is collected only at the moment the user taps [Request interpretation help]. If the button is not tapped, no location is collected.
It is used solely to find Local Friends near the point of request.
🔴 When the request ends, the coordinates are deleted immediately. Only a district-level label remains, for statistics. This is enforced by a database trigger, so deletion does not depend on the application behaving correctly.
Where the emergency screen sends a location to 119, the coordinates are composed into a text message on the user's device and are not sent to the Company's servers. The user decides whether to send it.
Users may refuse or withdraw location permission at any time in their browser settings. If refused, alternatives such as the 1330 tourist helpline are offered.
To manage records of when the location service was used and provided, the Company logs the time of use, the type of service, the location environment, the outcome, and a value distinguishing the user. Members are distinguished by the Company's internal member identifier; non-members by a random temporary identifier issued per browser.
🔴 These records do not store names, email addresses, phone numbers, actual coordinates, addresses, or IP addresses. A non-member's temporary identifier is a randomly generated value and does not by itself identify anyone.
🔴 These records are not used for marketing, advertising, or personalisation. They are limited to managing records of use and provision, and to submission to the relevant authorities.

Article 7 Provision to Third Parties

The Company processes personal data only within the purposes set out in Article 1, and provides it to third parties only with the data subject's consent or where specifically permitted by law.
To fulfil a booking — the minimum information needed to fulfil the booking (name, date and time, number of people, preferred language, special requests) is provided to the clinic, spa or other partner booked. Use beyond that purpose is prohibited by contract.
To match a Local Friend — the meeting place, time and preferred language are provided to the matched Local Friend. 🔴 Phone numbers are not disclosed to either party; contact is made through a privacy relay number.
Sharing for course inquiries to agencies — when you send an inquiry, we provide your display name, the content of the course you send, and your message to the one listed agency (a registered foreign-patient facilitator) that you chose yourself. The purpose is to answer that inquiry, and the retention period is one year from the last message. Consent is obtained at sign-up as a separate optional item, or when you first send an inquiry. Declining does not affect sign-up or use of other services. 🔴 Your email address and phone number are not provided; contact happens only inside the site’s inbox. The Company does not send to multiple agencies at once, does not choose agencies on your behalf, and passes nothing to clinics. Agencies are prohibited from using the information for other purposes or passing it on.
The Company does not sell personal data or provide it to third parties for advertising purposes.

Article 8 Transfer of Personal Data Abroad

🔴 The Company transfers personal data abroad as set out below in order to provide the service. Under Article 28-8 of the Personal Information Protection Act, the recipient, country, items, purpose and retention period are disclosed below.
Transfers are made by transmission over the network when the service is used.
Data subjects may refuse transfer abroad. However, these providers are essential infrastructure for the service, so refusal may limit use of the Platform. Please notify the Data Protection Officer if you wish to refuse.
🔴 Entries marked "not currently used" relate to features that are not yet enabled, so no transfer is actually taking place. This policy will be amended, with prior notice, when those features are enabled.

Recipient	Country	Items transferred	Purpose	Retention
Supabase, Inc.	United States	All items listed in Article 3	Database storage and administrator authentication	Same as the periods in Article 4
Vercel Inc.	United States	IP address, access time, browser and device information	Web hosting and service delivery	3 months
Resend, Inc.	United States · Japan (Tokyo)	Recipient email, name, application and booking details, course inquiry notifications (message bodies are not included)	Sending booking confirmations, application notices and course inquiry reply notices	Destroyed promptly after sending (delivery log 30 days)
DeepL SE	Germany	Sentences the user submits for translation	Machine translation	Not currently used (discarded immediately once enabled; not stored)
Google LLC	United States	Audio submitted for recognition, notification tokens, map query coordinates	Speech recognition and synthesis, push notifications, maps	Not currently used (discarded on processing once enabled)
BGI (Hong Kong)	Hong Kong	Kit serial number, sample and its analysis results — no identifying information such as name, date of birth or contact details is transferred (results are also returned by serial number only)	Genetic analysis and result report	Until the purpose of the analysis is fulfilled · separate consent at kit registration
Anthropic, PBC	USA	AI helper questions, recent chat, design summary (survey goals, pharmacist combination items, result-area summary) · if you choose AI auto-design, your survey answers (age range, gender, height, weight, goals, answers) — excluding genotypes/rsIDs, name and contact details	Generating AI answers and nutrition design drafts, and safety checks	A limited period under Anthropic's policy · separate consent on first use (AI helper) and at survey submission (AI auto-design)

Article 9 Outsourcing of Processing

The Company outsources personal data processing to the providers listed in Article 8 in order to deliver the service.
Under Article 26 of the Personal Information Protection Act, outsourcing contracts specify the prohibition on use beyond the stated purpose, technical and administrative safeguards, restrictions on sub-processing, and liability for damages.
Any change to the outsourced work or the processors will be disclosed through this policy.

Article 10 Rights of Data Subjects

Data subjects may at any time request access, correction, deletion or suspension of processing of their personal data.
Requests may be made to the Data Protection Officer by email or telephone, and the Company will act without delay.
Requests for access, correction or deletion are acted upon and the outcome notified within 10 days of receipt.
Data subject to a statutory retention obligation (Article 4) cannot be deleted on request; the reason will be explained.
A statutory representative or an authorised agent may act on the data subject's behalf, on production of a letter of authority.
The Company does not disadvantage data subjects for exercising these rights.

Article 11 Destruction of Personal Data

Personal data is destroyed without delay once the retention period has elapsed or the processing purpose has been achieved.
Where data must be retained under other legislation after the retention period, it is moved to a separate database or stored in a different location.
Electronic files are deleted by means that make recovery impossible; paper documents are shredded or incinerated.
🔴 The Company does not store original document files, such as consent forms, on its servers. At present only the file name is recorded and the original is kept separately.

Article 12 Security Measures

Access control — row level security is applied to every table in the database. The public key exposed in the browser cannot read a single row of booking, application or settlement data.
Administrator access — the administrator area requires separate authentication and is limited to accounts on the registered administrator list.
Encryption in transit — all communication is encrypted with HTTPS.
No payment data stored — the Company does not store card numbers or other payment credentials.
Minimal collection — not collecting is the most reliable protection, so no column exists for audio or STT text.
Access logging — access to systems processing personal data is logged and protected against alteration.

Article 13 Cookies

The Company uses cookies to maintain sign-in state and language preference.
Session cookies are used for administrator authentication and are limited to the administrator area.
Users may refuse cookies in their browser settings. Some functions, such as retaining the language preference, may then be limited.
The Company does not use third-party tracking cookies for advertising.
To distinguish non-members using the location service, the Company uses a cookie (loc_subject_token) holding a random temporary identifier. It is issued only when the user actually uses a location feature, cannot be read by scripts (HttpOnly), and expires after six months (180 days). This is an operational policy so that the same browser's temporary identifier stays consistent for as long as the location-use ledger is retained; it is not used for advertising or behavioural analytics.

Article 14 Children Under 14

The Company does not collect personal data from children under the age of 14.
Where a child under 14 needs to use the service, please book in the name of a statutory representative with that representative's consent.
If the Company becomes aware that personal data of a child under 14 has been collected without the consent of a statutory representative, it destroys the data without delay.

Article 15 Data Protection Officer

The Company designates the following Data Protection Officer, who has overall responsibility for personal data processing and for handling complaints and remedies from data subjects.
Data Protection Officer — Yu Eunjeong (Representative, ㈜케이플랫폼)
Contact — thenatureheal@gmail.com · 070-4130-5526 (weekdays 09:00–17:00 KST)
The 070 number may not be reachable from outside Korea. Email reaches the same person.
Data subjects may direct any privacy enquiry arising from use of the service to the Data Protection Officer, and the Company will respond and act without delay.

Article 16 Remedies for Infringement

Data subjects may apply to the following bodies for dispute resolution or advice regarding infringement of personal data.
Privacy Center, Korea Internet & Security Agency — privacy.kisa.or.kr · 118
Personal Information Dispute Mediation Committee — kopico.go.kr · 1833-6972
Cybercrime Investigation Division, Supreme Prosecutors' Office — spo.go.kr · 1301
National Office of Investigation, Korean National Police Agency — ecrm.police.go.kr · 182
A person whose rights or interests are infringed by a disposition or omission of the head of a public institution in relation to a request under Articles 35, 36 or 37 of the Personal Information Protection Act may seek administrative appeal under the Administrative Appeals Act.

Article 17 Changes to This Policy

This policy applies from the effective date.
Where content is added, deleted or amended due to changes in law, policy or security technology, the change is announced on the Platform at least 7 days before it takes effect.
🔴 Members agree to the version of this Policy in force when they sign up. Features added after sign-up that collect additional items or add an overseas recipient (e.g. genetic test applications, kit registration, the AI nutrition helper) ask for separate consent the first time the feature is used; members who do not consent can continue to use all other services.
Other changes are announced on the platform from 7 days before they take effect.

Data Protection Officer: 유은정 · thenatureheal@gmail.com · 070-4130-5526 (weekdays 09:00–17:00 KST). The 070 number may not be reachable from outside Korea, so please use email. Complaints about personal data may also be raised with the Korea Internet & Security Agency Privacy Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).